TechSpot

Windows won't boot, trying to get in safe mode

Inactive-A
By Reckoning
Jun 30, 2013
  1. When I boot I get:
    Windows Error Recovery
    Windows failed to start, A recent hardware or software change might be the cause.

    If Windows files have been damaged or configured incorrectly, Startup Repair can help diagnose and fix the problem. If power was interrupted during start, choose Start Windows Normally.
    My 2 options are Launch Startup Repair and Start Windows Normally.

    Either one just tries to boot and comes right back to the same screen.
    My next step was going to be to log on with safe mode and make sure it is software. While booting I've tried a firm hold and "taps" on f5 and f8 separately and I cannot get it to boot into safe mode.

    f2 will get me into bios.

    Any suggestions?
     
  2. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    When I go to boot options in BIOS the only 2 options are:
    1) P:2 Slimtype DVD A DS8A8SH
    2) Windows Boot Manager (P0:0 Hitachi HTS547575A9E384)

    Why am I not seeing hard drive as an option? Will it not display if 1 is not recognized? To my understanding BIOS doesn't look to have anything recognized as far as setting options. If you select hard drive as option 1 and there is no hard drive then it simply moves to step 2. Am I incorrect? Will it not display it as an option if 1 is not recognized?
     
  3. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    ================================

    What Windows version is it?
     
  4. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    Windows 7
     
  5. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    For x32 (x86) bit systems download Farbar Recovery Scan Tool 32-Bit and save it to a flash drive.
    For x64 bit systems download Farbar Recovery Scan Tool 64-Bit and save it to a flash drive.

    Plug the flashdrive into the infected PC.

    If you are using Windows 8 consult How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.

    If you are using Vista or Windows 7 enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    On the System Recovery Options menu you will get the following options:

    • Startup Repair
    • System Restore
    • Windows Complete PC Restore
    • Windows Memory Diagnostic Tool
    • Command Prompt
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • When the tool opens click Yes to disclaimer.
    • Press Scan button.
    • It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.
     
  6. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 02-07-2013
    Ran by SYSTEM on 01-07-2013 19:50:22
    Running from Y:\
    WIN_7 (X86) OS Language: English(US)
    Boot Mode: Recovery
    Attention: Could not load system hive.
    Attention: System hive is missing.

    ==================== Registry (Whitelisted) ==================

    Attention: Software hive is missing.

    ATTENTION: Software hive is not loaded.

    BootExecute:

    ========================== Services (Whitelisted) =================


    ==================== Drivers (Whitelisted) ====================


    ==================== NetSvcs (Whitelisted) ===================


    ==================== One Month Created Files and Folders ========


    ==================== One Month Modified Files and Folders ========


    ==================== Known DLLs (Whitelisted) ============


    ==================== Bamital & volsnap Check =================

    C:\Windows\explorer.exe IS MISSING <==== ATTENTION!.
    C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION!.
    C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION!.
    C:\Windows\System32\services.exe IS MISSING <==== ATTENTION!.
    C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION!.
    C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION!.
    C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.
    C:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION!.
    C:\Windows\System32\winsrv.dll IS MISSING <==== ATTENTION!.

    ==================== EXE ASSOCIATION =====================

    HKLM\...\.exe: <===== ATTENTION!
    HKLM\...\exefile\DefaultIcon: <===== ATTENTION!
    HKLM\...\exefile\open\command: <===== ATTENTION!

    ==================== Restore Points =========================


    ==================== Memory info ===========================

    Percentage of memory in use: 7%
    Total physical RAM: 6027.91 MB
    Available physical RAM: 5565.68 MB
    Total Pagefile: 6026.18 MB
    Available Pagefile: 5571.82 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1914.31 MB

    ==================== Drives ================================

    Drive d: (CD_ROM) (CDROM) (Total:3.73 GB) (Free:0 GB) CDFS
    Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
    Drive y: (OCZ RALLY2) (Removable) (Total:7.39 GB) (Free:4.26 GB) FAT32

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (Size: 699 GB) (Disk ID: A415C259)
    Partition 00: (Active) - (Size=0) - (Type=00) ATTENTION ===> 0 byte partition bootkit.

    Partition: GPT Partition Type
    ========================================================
    Disk: 1 (Size: 7 GB) (Disk ID: 6F20736B)
    Partition 1: (Not Active) - (Size=544 GB) - (Type=72)
    Partition 2: (Not Active) - (Size=923 GB) - (Type=65)
    Partition 3: (Not Active) - (Size=923 GB) - (Type=79)
    Partition 4: (Not Active) - (Size=27 MB) - (Type=0D)

    ==================== End Of Log ============================
     
  7. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    This is our issue:
    Partition 00: (Active) - (Size=0) - (Type=00) ATTENTION ===> 0 byte partition bootkit.

    ====================================================

    • For x32 (x86) bit systems download ListParts to a USB flash drive.
    • For x64 bit systems download ListParts64 to a USB flash drive.
    • Plug the USB drive into the infected machine.

    Enter System Recovery Options.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    On the System Recovery Options menu you will get the following options:

      • Startup Repair
        System Restore
        Windows Complete PC Restore
        Windows Memory Diagnostic Tool
        Command Prompt
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\listparts (for x64 bit version type e:\listparts64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • Press Scan button.
    • It will make a log (Result.txt) on the flash drive. Please copy and paste it to your reply.
     
  8. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    ListParts by Farbar Version: 10-05-2013
    Ran by SYSTEM (administrator) on 02-07-2013 at 18:59:12
    Windows 7 (X86)
    Running From: C:\
    Language: 0409
    ************************************************************

    ========================= Memory info ======================

    Percentage of memory in use: 6%
    Total physical RAM: 6027.91 MB
    Available physical RAM: 5613.06 MB
    Total Pagefile: 6026.18 MB
    Available Pagefile: 5604.89 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1971.54 MB

    ======================= Partitions =========================

    1 Drive c: (OCZ RALLY2) (Removable) (Total:7.39 GB) (Free:2.89 GB) FAT32
    2 Drive d: (CD_ROM) (CDROM) (Total:3.73 GB) (Free:0 GB) CDFS
    3 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

    Disk ### Status Size Free Dyn Gpt
    -------- ------------- ------- ------- --- ---
    Disk 0 Online 698 GB 0 B
    Disk 1 Online 7580 MB 0 B

    Partitions of Disk 0:
    ===============

    Disk ID: A415C259

    Partition ### Type Size Offset
    ------------- ---------------- ------- -------
    Partition 1 Primary 698 GB 512 B

    ======================================================================================================

    Disk: 0
    Partition 1
    Type : EE
    Hidden: Yes
    Active: No

    There is no volume associated with this partition.

    ======================================================================================================

    Partitions of Disk 1:
    ===============

    Disk ID: 00000001

    Partition ### Type Size Offset
    ------------- ---------------- ------- -------
    * Partition 1 Primary 7580 MB 0 B

    ======================================================================================================

    Disk: 1
    There is no partition selected.

    There is no partition selected.
    Please select a partition and try again.

    ======================================================================================================
    ============================== MBR Partition Table ==================

    ==============================
    Partitions of Disk 0:
    ===============
    Disk ID: A415C259
    Partition 00: (Active) - (Size=0) - (Type=00 ATTENTION ===> 0 byte partition bootkit.

    Partition : GPT Partition Type
    ==============================
    Partitions of Disk 1:
    ===============
    Disk ID: 6F20736B
    Partition 1: (Not Active) - (Size=544 GB) - (Type=72)
    Partition 2: (Not Active) - (Size=923 GB) - (Type=65)
    Partition 3: (Not Active) - (Size=923 GB) - (Type=79)
    Partition 4: (Not Active) - (Size=27 MB) - (Type=0D)


    ****** End Of Log ******
     
  9. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    • Click Start and in the Search Programs and files box type Notepad.exe then hit Enter.
    • An empty Notepad file will open.
    • Copy and paste the contents of the code box below into Notepad.

    Code:
    Disk=1 partition=4 inactive
    Disk=1 partition=4 active
    Disk=1 partition=4 inactive
    Disk=1 partition=4 active
    custom
    
    • Click Format and ensure Wordwrap is unchecked.
    • Save as Fix.txt to the flash drive where ListParts is located.

    Enter System Recovery Options again.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.

    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.

    On the System Recovery Options menu you will get the following options:

      • Startup Repair
        System Restore
        Windows Complete PC Restore
        Windows Memory Diagnostic Tool
        Command Prompt
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\listparts (for x64 bit version type e:\listparts64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • Press Fix button.
    • ListParts will process the script in Fix.txt
    • When finished please press the Scan button.
    • It will make a log (Result.txt) on the flash drive. Please copy and paste it to your reply.
    See if you can boot normally.
     
  10. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    When booting after running fix.txt I get:
    "Reboot and Select proper Boot device or Insert Boot Media in selected Boot device and press a key"


    _____________________________________________________
    ListParts by Farbar Version: 10-05-2013
    Ran by SYSTEM (administrator) on 05-07-2013 at 14:26:02
    Windows 7 (X86)
    Running From: C:\
    Language: 0409
    ************************************************************

    ========================= Memory info ======================

    Percentage of memory in use: 7%
    Total physical RAM: 6027.91 MB
    Available physical RAM: 5574.84 MB
    Total Pagefile: 6026.18 MB
    Available Pagefile: 5576.54 MB
    Total Virtual: 2047.88 MB
    Available Virtual: 1967.54 MB

    ======================= Partitions =========================

    1 Drive c: (OCZ RALLY2) (Removable) (Total:7.39 GB) (Free:2.89 GB) FAT32
    2 Drive d: (CD_ROM) (CDROM) (Total:3.73 GB) (Free:0 GB) CDFS
    3 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

    Disk ### Status Size Free Dyn Gpt
    -------- ------------- ------- ------- --- ---
    Disk 0 Online 698 GB 0 B
    Disk 1 Online 7580 MB 0 B

    Partitions of Disk 0:
    ===============

    Disk ID: A415C259

    Partition ### Type Size Offset
    ------------- ---------------- ------- -------
    Partition 1 Primary 698 GB 512 B

    ======================================================================================================

    Disk: 0
    Partition 1
    Type : EE
    Hidden: Yes
    Active: No

    There is no volume associated with this partition.

    ======================================================================================================

    Partitions of Disk 1:
    ===============

    Disk ID: 00000001

    Partition ### Type Size Offset
    ------------- ---------------- ------- -------
    * Partition 1 Primary 7580 MB 0 B

    ======================================================================================================

    Disk: 1
    There is no partition selected.

    There is no partition selected.
    Please select a partition and try again.

    ======================================================================================================
    ============================== MBR Partition Table ==================

    ==============================
    Partitions of Disk 0:
    ===============
    Disk ID: A415C259
    Partition 00: (Active) - (Size=0) - (Type=00 ATTENTION ===> 0 byte partition bootkit.

    Partition : GPT Partition Type
    ==============================
    Partitions of Disk 1:
    ===============
    Disk ID: 6F20736B
    Partition 1: (Not Active) - (Size=544 GB) - (Type=72)
    Partition 2: (Not Active) - (Size=923 GB) - (Type=65)
    Partition 3: (Not Active) - (Size=923 GB) - (Type=79)
    Partition 4: (Not Active) - (Size=27 MB) - (Type=0D)


    ****** End Of Log ******
     
  11. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    I just contacted my colleague regarding this.
    I'll reply as soon as possible.
     
     
  12. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    Very kind of you, thank you sir.
     
  13. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    • Click Start and in the Search Programs and files box type Notepad.exe then hit Enter.
    • An empty Notepad file will open.
    • Copy and paste the contents of the code box below into Notepad.

    Code:
    Disk=0 partition=1 inactive
    Disk=0 partition=1 active
    Disk=0 partition=1 inactive
    Disk=0 partition=1 active
    custom
    
    • Click Format and ensure Wordwrap is unchecked.
    • Save as Fix.txt to the flash drive where ListParts is located.
    Enter System Recovery Options again.

    To enter System Recovery Options from the Advanced Boot Options:
    • Restart the computer.
    • As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
    • Use the arrow keys to select the Repair your computer menu item.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account an click Next.
    To enter System Recovery Options by using Windows installation disc:
    • Insert the installation disc.
    • Restart your computer.
    • If prompted, press any key to start Windows from the installation disc. If your computer is not configured to start from a CD or DVD, check your BIOS settings.
    • Click Repair your computer.
    • Select US as the keyboard language settings, and then click Next.
    • Select the operating system you want to repair, and then click Next.
    • Select your user account and click Next.
    On the System Recovery Options menu you will get the following options:

      • Startup Repair
        System Restore
        Windows Complete PC Restore
        Windows Memory Diagnostic Tool
        Command Prompt
    • Select Command Prompt
    • In the command window type in notepad and press Enter.
    • The notepad opens. Under File menu select Open.
    • Select "Computer" and find your flash drive letter and close the notepad.
    • In the command window type e:\listparts (for x64 bit version type e:\listparts64) and press Enter
      Note: Replace letter e with the drive letter of your flash drive.
    • The tool will start to run.
    • Press Fix button.
    • ListParts will process the script in Fix.txt
    • When finished please press the Scan button.
    • It will make a log (Result.txt) on the flash drive. Please copy and paste it to your reply.
    See if you can boot normally.

    In any case post fresh ListParts log as well.
     
  14. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    After running it I still get
    "Reboot and Select proper Boot device or Insert Boot Media in selected Boot device and press a key"

    I forgot to run the scan after the "fix" - I was thinking the fix made a results log.

    Now when I try to get into the system recovery options I get an error message

    "This version of System Recovery Options is not compatible with the version of Windows you are trying to repair. Try using a recovery disc that is compatible with this version of Windows."
     
  15. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    Let me forward this message to my colleague.
     
  16. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    See if you can use 2nd option to post fresh ListParts log:
    To enter System Recovery Options by using Windows installation disc:

    IMPORTANT! While running new scan make sure "List BCD" is also checked
     
  17. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    I have been using that second option because f8 does nothing on bootup.

    Since running that fix however, I get the message:
    "This version of System Recovery Options is not compatible with the version of Windows you are trying to repair. Try using a recovery disc that is compatible with this version of Windows."
     
  18. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    Are you using 32-bit Windows 7 DVD?
     
  19. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

  20. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    Your Windows is 32-bit so you must use 32-bit CD.
     
  21. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    Just out of curiosity.

    Being that this CD worked as we were doing all the other scans/fix's - does this mean we are possibly making progress since Window's is now being recognized and rejecting 64-bit CD's?
     
  22. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    I'm not sure.
    All logs indicate you have 32-bit Windows.
     
  23. Reckoning

    Reckoning TS Enthusiast Topic Starter Posts: 132

    Right, and it is.

    This whole time you've been helping me though, I've been getting to the command prompt from this 64-bit CD.

    Whatever your last fix did - now it is rejecting the 64-bit CD.

    Either way, I will find a 32-bit Windows 7 CD and use it as soon as possible and thank you for the help so far.
     
  24. Broni

    Broni Malware Annihilator Posts: 47,022   +255

  25. Broni

    Broni Malware Annihilator Posts: 47,022   +255

    Still with me?
     
Topic Status:
Not open for further replies.


Add New Comment

TechSpot Members
Login or sign up for free,
it takes about 30 seconds.
You may also...


Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.