Start-up / Safemode problem

Guys,

I am running a HP Compaq dc7100 CMT desktop, P4 3GHz, 1GB ram, Bios 786C1 v01.05, WinXPsp2.

I have been cleaning a simple pop-up problem as detailed here, I had follwed thru all the advice and the system seemed pretty much clear and most of the steps weren't actually needed as I had already installed AVG and Zonealarm. AVG DID detect 4 files and vault them, I think Klone related.

Anyway, I was in the process of rebooting when I realised I'd missed safe mode and fooooooolishly held the power button to reset, since then I am unable to get a good boot into windows. I get the warning screen, windows did not start correctly..... if I choose to continue and start windows normally, I get the windows start up screen for 10seconds, then the system reboots back to the warning screen. Last known working config does the same. Any Safe mode option (safe, networking, cmd prmpt) shows me the list of loading drivers, but then hangs on mup.sys and needs a reset.

I have managed to get into normal safe mode a couple of times, once trying a system shutdown correctly then powering back on, once trying a system restore to before AVG install, but both options give the same results. I now can't get into the OS at all, I get hangs on mup.sys, with lots of HDisk activity, but I have left this for upto 15mins with no change.

Help !!! I dont have any restore/backup disks, although I do have the data I need off the system. Last resort I will rebuild from my WinXP disk, but I really want to try to save the system first.

I am an experienced user but not that comfortable with BIOS changes, which I have a feeling are needed here ?

Advice please.
Thanks
Bob

PS - I had left the PC on the hanging driver load page (safe mode) whilst typing this. It was hung for around 10mins with lots of HDisk activity and has now just rebooted, which has not happened before ! Arghhhhhh

 

Thanks Tim,

Having managed to again get into safe mode, not sure how or why, is there anything I should do here before I try the instructions on the link ?

(Currently burning a WinXPSP2 bootable cd from my ISO backup !)

Thanks
Bob

 

Application events show a Userenv event around the time the issue started. No code, but the description is "Windows saved user USERNAME registry while an application or service was still using the registry during log off. The memory uese by the users registry has not been freed. The registry will be unloaded when it ....."

Systen event show lots of DCOM and Service Control Manager errors, but I believe these are down to the fact I was in safe mode ? I also have some WinDefend warnings around the time things went tits up too.... not much detail but Path found is...
driverROCEXP100 and a reg key that ends with progfiles/Java/jre1.5.0_09/bin/ssv.dll

No apparent problems in device manager.

Trying a restore to first Windows Defender checkpoint now.

 

The restore went through and rebooted, now loading up windows and have the System error - lsass.exe "An I/O operation initiated by the Registry failed unrecoverably. The registry could not read in, or write out, or flush, one of the files that contain the system's image of the registry."

Clicking OK causes the originally mentioned double reboot into safe mode selection screen, then hangs on driver loading, mup.sys. Again.

 

Sorry Tim, should have mentioned, I did finish it, almost. I was doing this reboot when I missed safe mode...

Once I had sorted the java issue, I followed all the steps through but none of the required actions applied, the files were not there.

 

Reread your OP.

I'd boot via, F8 and choose, "Disable automatic reboot on error". Worded similiar to that. Then we can see what BSOD you are getting.


I'd highly recommend posting this issue in the malware thread you created, btw.

 

Thanks for the responses guys.

I have tried the 8step recovery using the boot cd - still the same problem.
I managed to get back into safe mode again, did a system restore from over a week ago before I started cleaning, same problem on reboot.

I have booted via F8 using the Disable reboot option, and am now seeing a BSOD stop error...

Tech info:
STOP: 0x0000007E (0xC0000005,0xF73D39D8,0xF7AEB57C,0xF7AEB278)

Can you tell me anything for this or should I whip the disk out, drop it into an external caddy, take what data I need off it as a slave on my other system, then rebuild from scratch ??? Really didn't want to go that route, but looks more likely...

Bob

 

Do you have any USB devices attached? (even the keyboard) I would remove those and see if it boots.

Steve

 

You could also try a safe re-install of XP 'over the top' of itself. That will replace any potentially corrupt system file w/ new, clean versions and your data should (98% of the time) remain intact. Worse case: back up your data, wipe HD, and reload

hopperdave2000

 

Steve, thanks for the heads-up. I should really learn to follow instructions to the letter, which I thought I had done, but not enough.

"-Physically unplug your cable to the internet (even if you have dial-up, unplug modem)"

I have a NetgearWG111v2 Wireless USB adapter, rather than unplugging the USB cable from the PC, I unplugged the Adapter from the other end of the cable. (Because it meant me not having to get offav my lazy a**) Unplugging the empty cable solved all of the strange Boot / start-up problems.

Thanks for all the responses, I am now back up and running but still infected with Klone and a downloader trojan..... so back to the cleaning procedure and malware thread, I'll repeat all of the standard cleaning steps and repost.


Thanks
Bob

 

Glad you got it going my friend.

Steve