Computer won't go past "Loading Windows XP"

Hi

I have recently tried to disinfect a computer of various malware/spyware issues. But now I think my motherboard has had it. Its either infected with something or was a coincidence that it packed up when it did.

When I boot up the computer, it goes as far as the "Loading Windows XP" and then beeps once and goes back to trying to boot up again. It then displays the option to start in safe mode (with/without network support, Last known good configuration or Start normally). It then counts down from 30 and reboots itself

My mouse and keyboard no longer work

I have tried to swap the hard drive for one that I know works, in case the hard drive was knackered, but get the same result

Am I right in thinking that my motherboard has had it?

 

Did you try in safe mode and Last known good configuration ???

 

Hi Clark_Kent

Yes I tried all the options but with the same result. As soon as it reaches "loading windowsw XP" it goes back to rebooting and displays the "Couldn't load properly" page (Safe Mode, Last Known god configuration and Boot normally).

At the post check it says "checking nvram", the screen goes black and then tries to load windows

What is "nvram"

 

I suggest your Windows cd is inserted, and run CHKDSK /R. You could have inadvertidly remove necessary files, when getting rid of virus/malware.

 

How did you attempt access to safe mode then?

Wnen your pc gets to the 'checking NVRAM' start tapping F8.
You will see a new option
'Disable automatic reboot on windows failure'
Choose this
The system will halt at the 'blue screen of death' and display an error message.

Post the exact words of this message here.

 

Hi Studiot,

Ref your query "How did you attempt access to safe mode then?".

It was a case of operator error. I had plugged in a different keyboard but pressing the keys on the old one. OOps!


Anyway, Ive done as you suggested and disabled automatic reboot on windows failure.
The following message was displayed on the blue screen:

STOP: c0000218 {registry file failure}

Registry cannot load the hive(file) \system\system32\config\system or its log or alternate

It is corrupt, absent or not writable

Beginning dump of physical memory (then it counts up from 0-100)

After completion it displays the following message:

Physical memory dump completed
Contact your system administrator or technical support group.

On manually rebooting it shows the post check, beeps once when checking nvram and tries to boot up win xp.

Then the cycle begins again

Incidentally, I ran the CHKDSK /r from the XP CD Rom as advised by BAKLOGIC and arrived at the same dialogue and same results on reboot

JT

 

Microsoft
http://support.microsoft.com/kb/104203

Possibility of dodgy ribbon/cable, or hard drive issue ?

 

OK I'll first recap the situation as I understand it.

You took some pretty aggressive malware removal measures.
The malware and subsequent removal not only affected your current registry but also the system restore saved points. (Old copies of the registry are stored by SR)
As a result windows no longer has a workable registry software hive to load.

An error message relating to old NT systems is produced on startup. This suggests that later service packs have been stripped out, if they were ever present.

You have a valid XP cd capable of booting the system.

Please confirm that the hard drive is not a SCSI drive as it changes matters.

You have a working keyboard and mouse.

Do you also have a driver disk for the hardware or can you identify the hardware to source drivers?

My analysis is this

There is a procedure to restore earlier versions of the registry, right back to the first one ever for your pc, using the recovery console.
However I would advise against this for two reasons. Some at least of your stored versions have been deleted. Some may still contain the malware. Whichever one you restore to you will have some catch up work to follow reinstalling windows patches and programs.

So you might as well do a new installation. A repair installation may work but will certainly preserve any malware left.

If you have no data you wish to recover you can simply start over with a clean install. Delete the existing partition, create a new one, format it and install to it.

If you wish to recover some data then do a new install but when prompted choose no to format and set the windows install folder to another name eg windows2.
This will install a second copy of Windows and make the boot to it. You can then copy off your data and remove the original offending one, complete with its malware.

 

I can confirm that I do not have a SCSI drive installed.

I'm not sure what you mean about a driver disk. Do you mean the disc that came with the motherboard?

If so, I cannot find that cd but am downloading the drivers from the internet

I think I shall go for a clean install. Anything else might be a disaster waiting to happen!

 

I think you have it figured out. After installing Windows you will need to load at least some hardware drivers. These are typically for
the graphics
interface chips on the motherboard
audio
Lan
modem

Load them in that order

Rather than installing the latest service patches from Microsoft, get autopatcher form Major Geeks (full). It is a large download but if you put is much more reliable than M$ in my experience.

 

Just follow Studiots advice through, and keep us posted.

 

Hi Studiot and Baklogic.

Right! Followed your advice and re-installed XP.

I managed to connect to the internet again and downloaded the Autoinstaller programme and installed all updates.

Drivers have been installed in the order you mentioned and it looks like the computer is working sweet!

I am going to spend the next few hours protecting my system from malware and other nasty stuff using the guide found elsewhere on this site.

Thanks again for all your help

JT

 

Glad it worked out well for you.

Remember to create your normal user account as limited so you don't surf the net as an administrator.
Also if you do any internet banking or shopping then
In internet Explorer
Tools>advanced tab>select 'DO NOT save encrypted pages to disk'
In outlook express
Tols>options
Read tab >tick 'read all messages in plain text'
Security tab>tick 'do not allow attachments to be saved or opened that could potentially be a virus'

you can easily alter these for specific emails you trust.
Set