Infinite Startup repair

Hi,

My computer boots into the startup repair program and runs endlessly. When I try system restore it does not give me any options. I have browsed these and other forums and run a few of the programs recommended from a USB boot disk (wintobootic), specifically I have run FRST64 and Hitmanpro_64 (from command line). After running HitmanPro (without internet) it found no problems. I will attach the FRST and HitmanPro files that I got, hopefully they will help.

I have tried the other programs listed in this forums readme (MGtools, Roguekiller and MB, but they all give me an error saying "The subsystem needed to support the image type is not present").

I am not sure what the cause of this condition is, but it sounds similar to other peoples problems who have posted in malware forums for help, so I thought I would try too.

Thanks so much for your help!

 

Forgot to mention, my computer is a Fujitsu Lifebook T4130 running Windows 7 64bit.

Thanks!

 

Welcome to MajorGeeks, maker4444

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Attached is fixlist.txt

• Save fixlist.txt to your flash drive.
• You should now have both fixlist.txt and FRST64.exe on your flash drive.

Now re-enter System Recovery Options.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt).
Please attach this to your next message. (How to attach)

Now attempt to boot normally.

 

Thanks thisisu!

I ran the fixlist you posted and here is the log. When I restart windows it looks like it might start normally and briefly shows the windows startup screen, but then it goes back into the endless startup repair cycle again. Should I run the FRST.exe program again?

 

Yes, Scan with FRST again.

 

Hi,

Herer are the results from FRST after the second scan.

 

New fixlist attached.
Try rebooting into Safe Mode too. See: How to start your computer in Safe mode
If you cannot get into Safe Mode or Normal Mode, rescan with FRST

 

Hi,

I have run the new fixlist. Attached are the Fixlog and FRST after I ran another FRST scan. I cannot boot into safemode through either of the methods mentioned in the link you provided.
The Fixlog may be after running the fixlist you gave me twice, I couldn't remember if I had run it so I ran it again.:-o

Thanks!

 

I may have missed some malware, try this fixlist and if it does not work, describe to the best of your ability exactly what happens when you attempt to boot. Also remember to attach the Fixlog.

 

Hi thisisus,

Thanks for the patience. I tried the last fixlist you gave me and when I restarted it booted to a 'starting windows' page and hung there for several seconds before switching into the 'windows is loading files' screen and then launching the repair system screen which goes forever.
I attached the fixlog as well as the FRST files from a scan I ran right after the fix.

Thanks!

 

I want you to use these instructions, do not use any customizable boot CD or the 14GB flash drive like you have used in the past.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

You should now be at the screen below:

http://cdn.overclock.net/b/b7/b70c0a8d_Repair-Windows-7-boot-and-create-dual-boot.jpeg

• Then from here, select Startup Repair
• Let me know what exactly what messages appear after you have done this.

 

When I do as you requested in the previous post, at the point when i select start up repair it says "start up repair is checking your system for problems..." for about 10 seconds, then it shows "Start up repair could not detect a problem".

I restarted my computer and didn't press anything and it went through what I described before ie. shows 'starting windows' for about 10 seconds (without any graphics, just text) and then switches to the startup repair screen. This time however, it does not run endlessly! It ran for about a minute then stopped and said "startup repair cannot repair this computer automatically".

I'm not too sure if this is a good thing, but at least it doesn't run forever

 

Try running FRST again using one of these methods.

http://img827.imageshack.us/img827/1263/frst.gif Please download Farbar Recovery Scan Tool and save it to a flash drive.

Plug the flashdrive into the infected PC.

Enter System Recovery Options.

To enter System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Use the arrow keys to select the Repair your computer menu item.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

To enter System Recovery Options by using Windows installation disc:

• Insert the installation disc.
• Restart your computer.
• If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
• Click Repair your computer.
• Choose your language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account an click Next.

On the System Recovery Options menu you will get the following options:

• Select Command Prompt
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\frst.exe (for x64 bit version type e:\frst64) and press Enter
• Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) on the flash drive. Please attach this log to your next reply. (How to attach)

 

I did as you requested. I redownloaded FRST64.exe and ran it again. Attached is the FRST file as requested.
However, this time when I push f8 to enter the advanced boot options, 'repair your computer' is not an option. I selected 'safe mode' and booted into that. It spat out a crazy list in DOS then showed the 'windows safe mode' environment (safe mode written in the corners) and then after a few seconds launched into the repair your computer dialogue and I was able to continue with your instructions from there, entering into command prompt etc. and getting the FRST information.

 

It did this on its own? Can you retry going into Safe Mode and just try to stay in it for a few minutes. Let me know if this is possible or not. Give it at least 2 or 3 tries.

If possible, try to uninstall Daemon Tools from Programs and Features if you can stay in Safe Mode long enough. Let me know if you were successful or not.

 

hmmm I tried to reboot into windows safe mode several times and it won't get past the DOS flurry before going into repair computer mode ie. it didn't show the safe mode screen as before. Also when I start the computer now and press f8 it gives me the option to 'repair your computer' now, which I also mentioned it did not give me before.

 

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

Attached is fixlist.txt

• Save fixlist.txt to your flash drive.
• You should now have both fixlist.txt and FRST64.exe on your flash drive.

Now re-enter System Recovery Options using the F8 method.
Run FRST64 and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt).
Please attach this to your next message. (How to attach)

Now attempt to boot normally.

__

Computer has been unable to boot for quite some time now. What started this? Any more background information that you can share with me?

 

It has been a little while since I last was able to boot my computer. I just recently installed some bit torrent software and had downloaded some videos. They seem to have been ok, but the last thing I downloaded was a training video that was in the form of an executable. It would load a screen that gave you options to run certain sections of the video. I think it was this one:

http://isohunt.com/torrent_details/116592189/mastercam?tab=summary

The video seemed to work fine and I don't remember there being any immediate effects on my system during or immediately after watching. I think that at least a week went by after I watched the video before my system went down.

The last thing I was doing on my computer was some data processing using excel and some other programs that have been on my computer for a long time and have never given me any trouble. I just remember that it suddenly started acting strange ie. getting really slow and not responding well to input. I thought I would just restart the computer to see if it would clear up the problems and that is when it started with the problem we are now trying to solve.

I have run the fixlist attached and attached are the fixlog and FRST scan. When I booted it again after the fixlist it went to the starting windows screen for several seconds (without graphic) before switching to the repair windows screen. It ran for a little while and then said that it could not repair the problem, so I turned it off.

 

Thanks. Give this fixlist a try.

 

Hmmm Almost thought it would work! It hung on the starting windows page for a while (maybe it was just my imagination ) then went back into the Windows repair screen and once again said that it couldn't repair the problem.

Attached is the Fixlog and the FRST scan after fixing.

Thanks!

 

• Download ListParts64 to a USB flash drive.
• Plug the USB drive into the infected machine.

Boot your computer into Recovery Environment

• Restart the computer and press F8 repeatedly until the Advanced Options Menu appears.
• Select Repair your computer.
• Select Language and click Next
• Enter password (if necessary) and click OK, you should now see the screen below ...

http://i1090.photobucket.com/albums/i366/garyr56/W7InstallDisk2.png

• Select the Command Prompt option.
• A command window will open.
  • Type notepad then hit Enter.
  • Notepad will open.
    • Click File > Open then select Computer.
    • Note down the drive letter for your USB Drive.
    • Close Notepad.
• Back in the command window ....
  • Type e:\listparts64.exe and hit Enter (where e: is replaced by the drive letter for your USB drive)
  • ListParts will start to run.
    • Press the Scan button.
    • When finished scanning it will make a log Result.txt on the flash drive.
• Close the command window.
• Boot back into normal mode and post me the Result.txt log please.

 

Hi,

I have downloaded and run listparts64 as requested. The results are attached. Thanks!

 

NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

http://img707.imageshack.us/img707/9956/listparts.gif Attached is fix.txt

• Save fix.txt to your flash drive.
• You should now have both fix.txt and Listparts64.exe on your flash drive.

Boot your computer into Recovery Environment

• Restart the computer and press F8 repeatedly until the Advanced Options Menu appears.
• Select Repair your computer.
• Select Language and click Next
• Enter password (if necessary) and click OK, you should now see the screen below ...

http://i1090.photobucket.com/albums/i366/garyr56/W7InstallDisk2.png

• Select the Command Prompt option.
• A command window will open.
  • Type notepad then hit Enter.
  • Notepad will open.
    • Click File > Open then select Computer.
    • Note down the drive letter for your USB Drive.
    • Close Notepad.
• Back in the command window ....
  • Type e:\listparts64.exe and hit Enter (where e: is replaced by the drive letter for your USB drive)
  • ListParts will start to run.
    • Press the Fix button.
    • ListParts will process the script in Fix.txt
    • When finished please press the Scan button.
    • A log Result.txt will be saved to the flash drive.
• Close the command window.
• Now attempt to boot into Normal Mode.
• If Normal Mode does not work, try Safe Mode.
• If Safe Mode does not work, then use the F8 boot options to enter System Recovery Options, and choose Startup Repair from here.
• Windows SHOULD be able to make the computer bootable, however, you may need to enter Startup Repair (using the F8 method) a couple of times.
• Use F8 -> System Recovery Options -> Startup Repair two or three times. Remember to let me know if Windows found startup problems and was able to fix them automatically or not.
• Remember to attach your Result.txt log please.

 

Hi,

I ran the fix you provided and attached the log and ran another scan with the output attached as well. When I start my computer now it just goes to a black DOS screen and says "BOOTMGR is missing press Ctrl+Alt+Del to restart"

 

Hi,

You receive this message ""BOOTMGR is missing press Ctrl+Alt+Del to restart" even though your flash drive is not plugged in, correct?

Also do you by chance have a windows 7 installation DVD or Recovery Console CD/DVD?

 

Yes, this is with the usb key unplugged. I do not have any windows cds of any kind, my did computer did not come with any.

 

Use another computer to download and burn this as an image to a blank CD. --> gparted-live-0.13.1-2.iso
Then boot from this newly created boot CD. Let me know when you have done so.

 

Hello,

I have created the CD and successfully launched it on the infected computer.

 

When you are booted into GParted, you should see a screen similar to the below:

http://img822.imageshack.us/img822/3624/gpartedgeneralboot.jpg

Look for the partition of yours that is 200.00GiB and choose Manage Flags => boot (put a checkmark in it).

Then click the Apply button (See below picture)

http://img233.imageshack.us/img233/1533/gpartedsteps.png

Once the actions have been applied, press the http://img715.imageshack.us/img715/641/gpartedexit.png button.

You should receive a small pop-up menu like this:

http://img88.imageshack.us/img88/8986/gpartedexitreboot.png

Choose Reboot and press OK.

__

Let me know how you progress with these above instructions before we go further.

 

Do you mean 200MiB? The sizes I have showing are:

16GiB - /dev/sda1
200.00MiB - /dev/sda2
129.00GiB - /dev/sda3 (this one already had boot written beside it, but I unchecked it)
161.89 GiB - /dev/sda4
1.314MiB - unallocated

 

Yes, sorry I meant 200MiB. Thank you for bringing that to my attention.

 

I reset the boot partition to the 200MiB partition and rebooted my computer. It did the same thing as last time ie. It hung on the starting windows page for a while then went back into the Windows repair screen and said that it couldn't repair the problem.

 

Can you find a picture on the internet of what screen you get to last, and then share it with me?

 

This is the last screen before shutting it down (attached).

 

What about the screen you get before the system begins booting into Startup Repair?

For example, see attached:

 

That's the one! The picture you just attached is the screen that starts and hangs for about 10-20 seconds before it goes into repair mode. The only difference is that the widows picture does not appear, only the text is displayed on the screen (see attached).

 

Please attach a new FRST scan log.

 

Here is the new FRST scan.

 

Whoops

 

Hmmm, doesn't seem to like uploading from Ubuntu...

 

New fixlist attached. Rerun FRST if this fails and also try Startup Repair using the F8 method.

 

I ran the fix and it got me to the same place as last time. ie windows starting then startup repair. Attached is the fixlog and the frst scan.

 

New fixlist attached.

How did Startup Repair go, still no problems detected?

 

Hi,

The start up is saying that windows cannot repair this computer (the first screenshot I posted).

 

Can you reboot into GParted and find the 129.00GiB partition and mark that one with the Boot flag?

Apply changes, and try to reboot.

 

Hi,

When I run gparted the 120GiB partition has a yellow triangle with an exclamation mark beside the /dev/sda3 text. I still managed to change the boot to this partition though.
After rebooting it says 'BOOTMGR is missing Press Ctrl+Alt+Del to restart'

 

sorry this should have read 120.00 instead of 129.00 GiB

 

No problem.

Unfortunately the rest of my ideas require a Windows 7 DVD or System Repair Disc.

Do you have another Windows 7 Computer? If so, you can try the following guide: Create a System Repair Disc in Windows 7

 

Hi,

I just managed to find another computer with Windows 7 on it and I created the system recovery disc as per the link you posted. I'm game to keep going if you are!

 

• First, boot from the newly created DVD (make sure you aren't booting from the harddrive!)
• When you get to this screen:
  http://i1090.photobucket.com/albums/i366/garyr56/W7InstallDisk2.png
• Choose Startup Repair.
• Startup problems should be detected this time (BOOTMGR is missing)
• Allow Windows to fix these automatically and reboot the computer.
• Try rebooting normally
• If the computer still does not boot, enter Startup Repair again (using the CD/DVD like before!) and try it again.
• Usually two Startup Repair attempts does the trick.
• Let me know your results.