Blue screen after XP loading screen

Discussion in 'Software' started by SWario, Oct 11, 2009.

  1. SWario

    SWario Sergeant

    A coworker asked me to take a look at his daughter's laptop, so I did. Unfortunately, this laptop gets to the XP loading screen and then hits a blue screen error every time. On Normal Boots or "Last Known Good Configuration" it is an error pointing to the Windows Logon Process:
    If I attempt to boot into Safe Mode I get another blue screen, with Windows\System32\Mup.sys being the last file loaded (or last attempted load):
    Code:
    [... generic crash message ...]
    Technical Information:
    
    *** STOP: 0x0000007B (0xF7973528, 0xC0000034, 0x00000000, 0x00000000)
    I did manage to load a Console at one point (off of a Vista Recovery Disc) and perused the files on the hard drive. There were signs of various infections (autochk.dll, braviax.exe, f3PSSavr.scr, intel64.exe, kbiwk*, wisdstr.exe, ~.exe), so I deleted what I felt safe deleting and renamed what I wasn't 100% sure about, but the blue screen error hasn't changed. I can't run your usual instructions due to being unable to boot into Windows at all, I was told that the PC didn't come with any discs (or that they were lost), there is no recovery partition, and my only XP boot disc is for a Dell with a different SP version... So I figured I would post asking "Where do I go from here?"

    Make/Model: Toshiba Satellite L35-S2171
    OS: Windows XP Home (service pack unknown because I don't know a way to check it from a boot CD console)


    So... Where do I go from here? :confused
     
  2. TimW

    TimW MajorGeeks Administrator - Jedi Malware Expert Staff Member

    I have moved your thread to the software section. You will need to be able to boot your system before we can assist you removing any malware. Once you are able to do that, start a new thread in the malware forum.
     
  3. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

    If there is a sticker on the bottom of the laptop with the XP serial, the owner could purchase an XP Home SP3 OEM
    http://www.newegg.com/Product/Product.aspx?Item=N82E16832116511
    for $90 and do a clean install.

    Another option, try a linux distro.

    Or, if you can borrow an XP Home disk (I'm not sure if the SP matters) and try to repair it
    http://michaelstevenstech.com/XPrepairinstall.htm
    Note: if the repair route is chosen, keep it off the internet. It is probably still infected.

    Download the tools in the read and run section to a clean PC and the move over and run them on the suspect PC, being aware that malware might move from the infected computer to any USB thumb drives you plug in.
     
  4. SWario

    SWario Sergeant

    Yes, there is a sticker on the bottom with a printed Product Key, but neither the owner nor myself wants to spend money on an OEM disc since they already have a valid Product Key (just doesn't seem to make sense to buy something you already have, right?). I have heard/read conflicting reports on whether or not the SP version matters for Repairs, mostly that you may end up with the replaced system files being different versions than the rest.

    I got an XPSP2 disc from my cousin that I'm probably going to use to format and reinstall at this point, because the owner doesn't care about the data on the laptop. Their product key doesn't have "OEM" in the title, but "Toshiba" is on the sticker, so the key may or may not work right off the bat.

    Yeah, I've had a computer infect one of my thumb drives before. That was a surprise. I try to use thumb drives with nothing important on them so I can wipe them when done, or I burn tools to disc.

    By the way, has anyone considered putting together a recommend Boot Disc or Linux Live Disc list for cases like this? Or has anyone thought of putting together your own MajorGeeks Live Disc to run tools on an infected hard drive? Just a thought.

    Anyway, I'll let you know how this turns out. Thanks for the help!
     
  5. SWario

    SWario Sergeant

    Ugh. Now I remember why I hate formatting unknown computers: finding drivers without knowing what hardware is in it. It's an interesting guessing game.

    I did try to do an XP Repair Install, but it resulted in a black screen instead of a blue screen.

    Anyway, it's up and running with XP Home SP3, updated BIOS, Symantec Endpoint Protection 11MR4 (it's free for this particular user), Firefox 3.5.3, the latest Java Runtime Environment, Spybot, and Spyware Blaster. Now it just needs to get to an Internet connection and run all sorts of other updates before handing it back to the owner. Oh, and attach a big note that says not to ever reinstall Limewire.
     
  6. SWario

    SWario Sergeant


    Soooo... Any thoughts or comments on making a MajorGeeks boot disc, bootable USB image, or custom Linux live disc for cases where booting into Windows is impossible? I'm not offering because I'm not skilled enough with that area to help, but I'm wondering if anyone has considered the idea before. If not, why not?
     
  7. plodr

    plodr MajorGeek Super Extraordinaire Moderator Staff Member

  8. SWario

    SWario Sergeant

    I'm well aware that Live CDs that can run on a wide variety of hardware exist. Besides that UBCD's AntiVirus tools are outdated by years, and can't update their definitions because it can't connect to the Internet (at least my copy didn't). UBCD, as far as I understand, is better at hardware diagnostics than software diagnostics.

    What I am talking about is a custom Live CD with tools already on it for troubleshooting OR a list of troubleshooting tools that can be run WITHIN A LIVE CD ENVIRONMENT to get a Windows installation back on its feet. Sometimes CHKDSK, SFC, Repair Install, or a complete reinstall of the OS are not available options. In the case mentioned previously, I almost didn't have those as options. The tools that the Malware Fighters use can only be run from Windows, which is what is driving my inquiry.

    Perhaps something like suggesting a Live CD that can run Windows application via an emulator? That way one could boot into the Live CD and run the tools that the Malware Fighters rely on. I'm not sure if it would work, but it's an interesting thought for discussion, I think.
    OR
    If you know of a FREE bootable (Windows or not) environment that you could run such tools from, instead of simply saying, "Here's a bunch of options, go get em." Find one that enables a user to run said tools, recommend it, provide a link, write up a guide, or something.

    Keep in mind, again, users do not always have a Windows install disc lying around or even available to borrow. My comments above are on the assumption that they don't have one, which means they can't build their own bootable Windows Environment. Please correct me on anything if I've misspoken, or ask if I said something unclear (I think this post may be a bit rambling). I'm not infallible, and I'm still learning. ;)
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds