Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: billkwando on March 08, 2010, 06:51:05 PM
-
Hello!
I'm hoping some of you kind folk will be able to assist me with my problem. I had a really nasty trojan/virus/malware infection that I fixed, using the Avira Recovery disk, Malwarebytes, and Avast! Free.
Avast is the only antivirus installed on my system.
I got everything almost back to normal, but I had a browser hijacker that I couldn't get rid of. I decided just to be safe, I'd run a boot scan. When it found the first bad file, I chose "3" which I believed was the option to "move to the chest" for this one item. It appeared to continue to apply that choice to later infected files. This was first thing in the morning, and I needed to get to work. I left the boot scan running, thinking it would take most of the day.
When I get home, my computer is in a reboot loop (with a brief bluescreen after the windows XP logo screen....too fast to read).
Clearly some vital system files were infected, but I didn't realize that when I started the scan. Over the weekend, I tried doing Recovery Console (have an HP with a recovery drive, a m7690n Media Center PC http://reviews.cnet.com/desktops/hp-pavilion-media-center/1707-3118_7-32165927.html) and "bootcfg /Rebuild", but that seems to have messed it up worse, perhaps because I didn't type the OS name correct? I typed XP instead of "Microsoft Windows XP Media Center Edition". Now when I choose (windows) Recovery Console, that causes it to bluescreen too, with a STOP error.
I definitely want to save this installation of windows, not reformat or do a destructive recovery. I've read about using a XP disk to do a repair install, but my PC did not come with a disc, plus I'm updated through SP3. I've also read about BartPE, but again, unfortunately the only XP disk I own is a vanilla "no SP" copy, which you cannot slipstream SP3 with (or so I've read).
Is there some kind of boot disc or other way to get into Avast's "chest" and restore these files that were removed? I was so close to getting my PC exactly how I wanted it and I totally jacked myself by using a tool I didn't fully understand. I could bootscan myself in the buttocks!
Edit: I should point out that I already couldn't get into Safe Mode, because it hangs at "Mup.sys"........ and that System Restore was turned off, because (they say) trojans can hide in there and not be removed.
-
http://www.aitechsolutions.net/mupdotsysXPhang.html (http://www.aitechsolutions.net/mupdotsysXPhang.html) gives some information on Mup.sys. It also seems to blame overclocking or power supply, etc. for sometimes being the problem. I don't know exactly what validity to place on the article. Perhaps others can comment. Please wait for responses from others.
AFAIK, Avast must be running to access it's chest, which means running Windows in Safe Mode won't help you there.
-
http://www.aitechsolutions.net/mupdotsysXPhang.html (http://www.aitechsolutions.net/mupdotsysXPhang.html) gives some information on Mup.sys. It also seems to blame overclocking or power supply, etc. for sometimes being the problem. I don't know exactly what validity to place on the article. Perhaps others can comment. Please wait for responses from others.
AFAIK, Avast must be running to access it's chest, which means running Windows in Safe Mode won't help you there.
Well Safe Mode is one less thing to worry about then. Mup.sys is like the loch ness monster.....everybody has a different version of the story. That was the least of my concerns, I just wanted to mention it in case somebody told me to go there. :)
-
You will need a XP CD Rom to repair windows if you cannot access safe mode on your computer. Best to get hold of a XP CD rom disk to reformat as you are in a constant reboot loop as you are having a parity stop error due to your virus attack ruined critical system files within windows sys folder.
-
You will need a XP CD Rom to repair windows if you cannot access safe mode on your computer. Best to get hold of a XP CD rom disk to reformat as you are in a constant reboot loop as you are having a parity stop error due to your virus attack ruined critical system files within windows sys folder.
So you're saying there's no way to restore/fix them? Windows WAS running, even when I couldn't get into safe mode.
Any idea how to fix the issue of the (extra) accidentally rebuilt boot? Or will an XP repair take care of that too?
If I'd chosen fix instead of quarantine, what would Avast have done if it couldn't fix those files? Lastly, can you repair an XP Pro machine with a Home disc? Dumb question, I'm sure.
-
You will need the XP Pro disk i think XP Home is built slightly differrent and the same service pack level. My original disk is sp1 & You can download the SP3 from microsoft and jump to that level without going to sp2 and so on.
Again if the virus has destroyed critical windows sys files you will need to either repair or re-format as i find that XP over time gets slow and sluggish and windows systems have WIN ROT! (google it?) Known as degradation of system performance over time. I Format once every 2 years or so & and the speed difference is amasing!
-
Can anyone offer a logical explanation as to why Avast reported my system to be clean prior to the boot scan, but then went nuts on my OS? Does the boot scan have different virus/malware definitions?
Why wouldn't I have been informed that my vital system files were infected during the standard full scan?
-
Have you tried to boot into Last known good configuration rather than Safe Mode?
-
Hi lets see if we can get you back up and running
OK this file is big about 276.7Mb, print these instruction out so that you know what you are doing
File details
Bytes - 290,236,416
MB - 276.7
MD5 - 3BD19DB0ADB880A39DD80C704CB907D0
Two programmes to download
First
ISOBurner (http://www.ntfs.com/iso-burning.htm) this will allow you to burn OTLPE.iso to a CD and make it bootable. Just install the programme, from there on in it is fairly automatic. Instructions (http://www.ntfs.com/iso_burner_free.htm)
Second
- Download OTLPE.iso (http://oldtimer.geekstogo.com/OTLPE.iso) and burn to a CD using ISO Burner. NOTE: This file is 276.7Mb in size so it may take some time to download.
- When downloaded double click and this will then open ISOBurner to burn the file to CD
- Reboot your system using the boot CD you just created.
Note : If you do not know how to set your computer to boot from CD follow the steps here (http://www.hiren.info/pages/bios-boot-cdrom)
- As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads :)
- Your system should now display a Reatogo desktop.
Note : as you are running from CD it is not exactly speedy
- Double-click on the OTLPE icon.
- Select the Windows folder of the infected drive if it asks for a location
- When asked "Do you wish to load the remote registry", select Yes
- When asked "Do you wish to load remote user profile(s) for scanning", select Yes
- Ensure the box "Automatically Load All Remaining Users" is checked and press OK
- OTL should now start.
- Under the Custom Scan box paste this in
/md5start
iaStor.sys
nvstor.sys
atapi.sys
/md5stop
- Press Run Scan to start the scan.
- When finished, the file will be saved in drive C:\OTL.txt
- Copy this file to your USB drive if you do not have internet connection on this system.
- Right click the file and select send to : select the USB drive.
- Confirm that it has copied to the USB drive by selecting it
- You can backup any files that you wish from this OS
- Please post the contents of the C:\OTL.txt file in your reply.
-
Have you tried to boot into Last known good configuration rather than Safe Mode?
Alas it doesn't do anything. I meant to mention that I did try that. Thanks for the suggestion! :)
-
Hi lets see if we can get you back up and running
OK this file is big about 276.7Mb, print these instruction out so that you know what you are doing
File details
Bytes - 290,236,416
MB - 276.7
MD5 - 3BD19DB0ADB880A39DD80C704CB907D0
Two programmes to download
First
ISOBurner (http://www.ntfs.com/iso-burning.htm) this will allow you to burn OTLPE.iso to a CD and make it bootable. Just install the programme, from there on in it is fairly automatic. Instructions (http://www.ntfs.com/iso_burner_free.htm)
Second
- Download OTLPE.iso (http://oldtimer.geekstogo.com/OTLPE.iso) and burn to a CD using ISO Burner. NOTE: This file is 276.7Mb in size so it may take some time to download.
- When downloaded double click and this will then open ISOBurner to burn the file to CD
- Reboot your system using the boot CD you just created.
Note : If you do not know how to set your computer to boot from CD follow the steps here (http://www.hiren.info/pages/bios-boot-cdrom)
- As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads :)
- Your system should now display a Reatogo desktop.
Note : as you are running from CD it is not exactly speedy
- Double-click on the OTLPE icon.
- Select the Windows folder of the infected drive if it asks for a location
- When asked "Do you wish to load the remote registry", select Yes
- When asked "Do you wish to load remote user profile(s) for scanning", select Yes
- Ensure the box "Automatically Load All Remaining Users" is checked and press OK
- OTL should now start.
- Under the Custom Scan box paste this in
/md5start
iaStor.sys
nvstor.sys
atapi.sys
/md5stop
- Press Run Scan to start the scan.
- When finished, the file will be saved in drive C:\OTL.txt
- Copy this file to your USB drive if you do not have internet connection on this system.
- Right click the file and select send to : select the USB drive.
- Confirm that it has copied to the USB drive by selecting it
- You can backup any files that you wish from this OS
- Please post the contents of the C:\OTL.txt file in your reply.
Thanks so much!!! I'll try this tonight!! ;D
If I already have a prog like ImageBurn, do I still need ISOBurner? I'll use it if that's what I need to use, just trying to avoid being redundant. ;)
-
No Imgburn will do just as well - it is just that not everyone has a programme to burn ISO's
-
Hi lets see if we can get you back up and running
OK this file is big about 276.7Mb, print these instruction out so that you know what you are doing
File details
Bytes - 290,236,416
MB - 276.7
MD5 - 3BD19DB0ADB880A39DD80C704CB907D0
Two programmes to download
First
ISOBurner (http://www.ntfs.com/iso-burning.htm) this will allow you to burn OTLPE.iso to a CD and make it bootable. Just install the programme, from there on in it is fairly automatic. Instructions (http://www.ntfs.com/iso_burner_free.htm)
Second
- Download OTLPE.iso (http://oldtimer.geekstogo.com/OTLPE.iso) and burn to a CD using ISO Burner. NOTE: This file is 276.7Mb in size so it may take some time to download.
- When downloaded double click and this will then open ISOBurner to burn the file to CD
- Reboot your system using the boot CD you just created.
Note : If you do not know how to set your computer to boot from CD follow the steps here (http://www.hiren.info/pages/bios-boot-cdrom)
- As the CD needs to detect your hardware and load the operating system, I would recommend a nice cup of tea whilst it loads :)
- Your system should now display a Reatogo desktop.
Note : as you are running from CD it is not exactly speedy
- Double-click on the OTLPE icon.
- Select the Windows folder of the infected drive if it asks for a location
- When asked "Do you wish to load the remote registry", select Yes
- When asked "Do you wish to load remote user profile(s) for scanning", select Yes
- Ensure the box "Automatically Load All Remaining Users" is checked and press OK
- OTL should now start.
- Under the Custom Scan box paste this in
/md5start
iaStor.sys
nvstor.sys
atapi.sys
/md5stop
- Press Run Scan to start the scan.
- When finished, the file will be saved in drive C:\OTL.txt
- Copy this file to your USB drive if you do not have internet connection on this system.
- Right click the file and select send to : select the USB drive.
- Confirm that it has copied to the USB drive by selecting it
- You can backup any files that you wish from this OS
- Please post the contents of the C:\OTL.txt file in your reply.
Apparently that bootcfg /repair REALLY jacked it up. The OTLPE prog can't access C and says it's "invalid or corrupt". None of the various tools on there could access C. It could access the other drives (which are really partitions). Anybody have any idea what happened? (taking into account my explanation of what happened above)
I was afraid to do fixmbr because it talks about how it will change the other partitions as well.
I'm gonna try a program called TestDisk: http://www.cgsecurity.org/wiki/TestDisk
Hopefully I can run it from a USB drive with the boot disc you suggested. If I can get the drive to read, I'll continue with your steps and let you know what happens. If anybody else wants to suggest any recovery/repair programs, I'm all ears.
-
Why not run Bootcng again - but with some instructions this time - it might work
Insert the Windows XP CD-ROM into your CD-ROM or DVD-ROM drive, and then restart your computer.
- When you receive the "Press any key to boot from CD" message, press a key to start your computer from the Windows XP CD-ROM.
- When you receive the "Welcome to Setup" message, press R to start the Recovery Console.
- If you have a dual-boot or multiple-boot computer, select the installation that you have to use from the Recovery Console.
- When you are prompted, type the administrator password, and then press ENTER. (generally for XP this is blank)
- At the command prompt, type bootcfg /list, and then press ENTER. The entries in your current Boot.ini file appear on the screen.
- At the command prompt, type bootcfg /rebuild, and then press ENTER. This command scans the hard disks of the computer for Windows XP, Microsoft Windows 2000, or Microsoft Windows NT installations, and then displays the results.
- Follow the instructions that appear on the screen to add the Windows installations to the Boot.ini file. For example, follow these steps to add a Windows XP installation to the Boot.ini file:
- When you receive a message that is similar to the following message, press Y:
Total Identified Windows Installs: 1
[1] C:\Windows
Add installation to boot list? (Yes/No/All)
- You receive a message that is similar to the following message:
Enter Load Identifier
This is the name of the operating system. When you receive this message, type the name of your operating system, and then press ENTER.
This is either Microsoft Windows XP Professional or Microsoft Windows XP Home Edition.
- You receive a message that is similar to the following:
Enter OS Load options
When you receive this message, type /fastdetect, and then press ENTER. [/i]
Note The instructions that appear on your screen may be different, depending on the configuration of your computer.
Type exit, and then press ENTER to quit Recovery Console. Your computer restarts, and the updated boot list appears when you receive the "Please select the operating system to start" message
[/list]
-
I am sure that Essexboys programe utilitys will work. But can you be certain that the hard drive would be clean & free of viruses afterwards?. Best thing would be is to eventually del the partition & re-format is the only way to ensure that you are free of viruses and trojans and spyware etc in the first place. This is my normal procedure when fixing persons troublesome computers, allways start afresh!
-
Why not run Bootcng again - but with some instructions this time - it might work
Insert the Windows XP CD-ROM into your CD-ROM or DVD-ROM drive, and then restart your computer.
- When you receive the "Press any key to boot from CD" message, press a key to start your computer from the Windows XP CD-ROM.
- When you receive the "Welcome to Setup" message, press R to start the Recovery Console.
- If you have a dual-boot or multiple-boot computer, select the installation that you have to use from the Recovery Console.
- When you are prompted, type the administrator password, and then press ENTER. (generally for XP this is blank)
- At the command prompt, type bootcfg /list, and then press ENTER. The entries in your current Boot.ini file appear on the screen.
- At the command prompt, type bootcfg /rebuild, and then press ENTER. This command scans the hard disks of the computer for Windows XP, Microsoft Windows 2000, or Microsoft Windows NT installations, and then displays the results.
- Follow the instructions that appear on the screen to add the Windows installations to the Boot.ini file. For example, follow these steps to add a Windows XP installation to the Boot.ini file:
- When you receive a message that is similar to the following message, press Y:
Total Identified Windows Installs: 1
[1] C:\Windows
Add installation to boot list? (Yes/No/All)
- You receive a message that is similar to the following message:
Enter Load Identifier
This is the name of the operating system. When you receive this message, type the name of your operating system, and then press ENTER.
This is either Microsoft Windows XP Professional or Microsoft Windows XP Home Edition.
- You receive a message that is similar to the following:
Enter OS Load options
When you receive this message, type /fastdetect, and then press ENTER. [/i]
Note The instructions that appear on your screen may be different, depending on the configuration of your computer.
Type exit, and then press ENTER to quit Recovery Console. Your computer restarts, and the updated boot list appears when you receive the "Please select the operating system to start" message
[/list]
Ok, this means I have to find an XP Pro disc now, lol.........and it needs to be slipstreamed with SP3, right? I assume I can't use my regular Home disc for this.
Also, my OS was originally Microsoft Windows XP Media Center Edition.....shouldn't I type that? FYI MWXPMCE is based on Pro (it's actually pro with some update rollup thingies)
Also, I wonder if it will get rid of the 2 extra "OSes" I made (upon booting....where you have select one) when I mistyped the OS name while doing bootcfg (twice!)
-
bilkwando
the only time I had issue like yours - even though I know it commonly happens - I went straight to boot into Last known good configuration as i posted above. This worked so obviously averted worsening of situation. I cannot say the following is best solution because I've never tried it before, Someone here may help out.
from this website you can get dr web cure-it rescue disk http://www.freedrweb.com/livecd/?lng=en
I dont even know if this is best site to download from.
download to disk obviously using a clean computer, or burn to disk, whatever you are directed to do.
and give it a go as last resort rather than reformat.
But first wait to see if essexboy has more to offer because he knows about these things.
-
bilkwando
the only time I had issue like yours - even though I know it commonly happens - I went straight to boot into Last known good configuration as i posted above. This worked so obviously averted worsening of situation. I cannot say the following is best solution because I've never tried it before, Someone here may help out.
from this website you can get dr web cure-it rescue disk http://www.freedrweb.com/livecd/?lng=en
I dont even know if this is best site to download from.
download to disk obviously using a clean computer, or burn to disk, whatever you are directed to do.
and give it a go as last resort rather than reformat.
But first wait to see if essexboy has more to offer because he knows about these things.
Thanks for the suggestions! I'll check that program out. With TestDisk, I'm able to see the D: partition but still not the C: one. However, I am able to see the files from C: inside of D:. Will a windows bootcfg /rebuild fix the damaged boot/partition.......stuff?
I'm willing to try the windows thing first, but I'm just worried about it overwriting or altering C: in a way that makes it harder to recover. It shows as RAW in My Computer, w/ no size shown.
-
billkwando, I'm not sure whether I can help much at the moment but someone should be along shortly.
using TestDisk, can you transfer files to the C: that you can see inside yr D: ?
I am not familiar with TestDisk.
I will look it up, but perhaps if you could explain for the forum support what functionality you have with TestDisk. Or is that it, you just have what you have outlined? I guess you stuck wit Read Only as well.
However you say bootcfg /rebuild. Does that mean you can bring up a command-line and run commands.
If so, there are some extra boot options available thru running msconfig
-
@billkwando,
Stick with essexboy, and follow his instructions strictly. Provide all the feedback he requests. He's led others on this forum to a solution after their malware infections.
-
billkwando, I'm not sure whether I can help much at the moment but someone should be along shortly.
using TestDisk, can you transfer files to the C: that you can see inside yr D: ?
I am not familiar with TestDisk.
I will look it up, but perhaps if you could explain for the forum support what functionality you have with TestDisk. Or is that it, you just have what you have outlined? I guess you stuck wit Read Only as well.
However you say bootcfg /rebuild. Does that mean you can bring up a command-line and run commands.
If so, there are some extra boot options available thru running msconfig
Teskdisk lets you search for, examine, and fix missing/corrupt partitions. I can see the missing files, and it even says I can copy them.
As I mentioned, I could previously do bootcfg, but doing it wrong messed that up so I can't get into the recovery console (BSOD). Depending on what EB says, I'm going to try it again with an actual XP disk instead. Before I was doing it with my HP's recovery drive.
@billkwando,
Stick with essexboy, and follow his instructions strictly. Provide all the feedback he requests. He's led others on this forum to a solution after their malware infections.
Trust me, I plan to!
-
That is good - if you have backups of all your data and licence keys, alas not everyone does that
-
That is good - if you have backups of all your data and licence keys, alas not everyone does that
Exactly.
I had some questions for you above. :)
-
Ooops missed that
Ok, this means I have to find an XP Pro disc now, lol.........and it needs to be slipstreamed with SP3, right? I assume I can't use my regular Home disc for this.
Any disc will do as you are accessing the recovery console only
Also, my OS was originally Microsoft Windows XP Media Center Edition.....shouldn't I type that? FYI MWXPMCE is based on Pro (it's actually pro with some update rollup thingies)
You will need to use the Microsoft Windows XP Professional designation
Also, I wonder if it will get rid of the 2 extra "OSes" I made (upon booting....where you have select one) when I mistyped the OS name while doing bootcfg (twice!)
Yes you can put it all right in one go
Reatogo will also give you the option to copy files from the missing (?) installation to disc
-
Ooops missed that
Ok, this means I have to find an XP Pro disc now, lol.........and it needs to be slipstreamed with SP3, right? I assume I can't use my regular Home disc for this.
Any disc will do as you are accessing the recovery console only
Also, my OS was originally Microsoft Windows XP Media Center Edition.....shouldn't I type that? FYI MWXPMCE is based on Pro (it's actually pro with some update rollup thingies)
You will need to use the Microsoft Windows XP Professional designation
Also, I wonder if it will get rid of the 2 extra "OSes" I made (upon booting....where you have select one) when I mistyped the OS name while doing bootcfg (twice!)
Yes you can put it all right in one go
Reatogo will also give you the option to copy files from the missing (?) installation to disc
Ok, so I booted from my XP disc and after XP finishes all of its preparatory steps, it goes to start XP and *pow!*, the infamous 7B STOP error (BSOD). Suggestions? Or should I break down and try to fix it with TestDisk? I've attached my TestDisk log in case you wanted to take a look at it. Like I said, it sees all the files from C: (dr-xr-xr-x), but doesn't seem to see the C: partition. D: partition (the one that works) is the -r--r--r-- files. Maybe if you're like Joe Pantoliano in The Matrix, you can see my pr0n! :P :P :P
I noticed some graphical corruption on the XP disc's startup blue screen, as well as misspellings while booting up, so it seems that Avast didn't get rid of my boot sector virus while it was getting rid of my OS. ;)
Any suggestions to remedy the BSOD, or other suggestions? I aint giving up! :D
I guess I should count my lucky stars that Reatogo boots. Too bad I can't get on the internet with it. I'd like to get my C: drive accessible so I can burn some backups with IMG Burn, at least.....but if I can completely fix Windows, that would be fine too. ;)
-
From a look at the Test data it appears that part of the HDD is corrupted
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable
At this stage I would suggest a data recovery programme from the running drive
Have a look at this http://www.partition-tool.com/partition-recovery-wizard/
-
That's what I thought it might be. actual bad sectors with the virus reaming the hard disk like in the old days. You can use a floppy boot disk 98SE/Me that to get independent surface scan. Its a graphic scan and if you get red spots then thats it, choose repair might save for while, but not really.
if you've got a floppy drive and want to try, here goes
Get bootdisk http://bootdisk.com
Make sure floppy set first device to boot - then boot into windows and when command prompt comes up type scandisk and go thru scan until it asks if you want to do surface scan and do that. The scan is done in DOS and its a pretty good indication - well, final anyway.
-
Yes best use a dos startup disk win 98 disk will do but this will only scan FAT32 partitions only max size 32000MBs on scandisk.
If you are using NTFS partition then your are out of luck!.
Still best to reformat your troublesome computer with viruses the easy way to ensure that you are clean! Windows xp will load in 43mins EASY! if you boot from CD Rom & do remove del partition create new partition FAT 32 or NTFS and do full format. If format fails then you have a US hard drive with bad sectors, But you can play about with the partition size depending where the bad sectors are ie. If the bad sectors are in the middle of the drive then if the drive size is 40 GB then create a main partition of 18GB to start with! Good luck!
-
From a look at the Test data it appears that part of the HDD is corrupted
Maybe not, actually.
Man.....it just keeps getting better and better. Went out and bought a brand new WD 500gb SATA drive today. Get home, open the case and discover there's not one but TWO hard drives, aaaaaand no room for a new one!
Ladies and gentlemen, we have.....a RAID! Geez louise.
I'm wondering if that's why it looked like my HDD was corrupted. Because there are two and you were looking at the report from only one of them. I'm soooooo screwed. Aren't I? I should've gotten suspicious when I saw the same HDD listed twice. The good news is that you can see into the 2nd one also with Testdisk.
I was going to back up my data to the new HDD and then do a nondestructive recovery from my recovery drive. This reinstalls Windows, but doesn't delete any other files (supposedly) so you have to reinstall your apps, but everything stays where it was. My concern is that since the C: partition (oh LOL what a euphemism THAT turned out to be!) is unreadable, that the "non-destructive recovery" wil overwrite everying, or otherwise corrupt C: worse than it already is.
Taking into account that all my data is most likely fine, other than my boot sector......and that I have no ability to backup, what do you recommend?
-
As that is a RAID drive it is way beyond my knowledge........ However, I know some people who do have the knowledge and skill. ;D
If you could go here and start a new topic, then send me a PM there (same username) I will get one of the Techs to give you a hand
http://www.geekstogo.com/forum/Hardware-Components-Peripherals-f9.html
-
As that is a RAID drive it is way beyond my knowledge........ However, I know some people who do have the knowledge and skill. ;D
If you could go here and start a new topic, then send me a PM there (same username) I will get one of the Techs to give you a hand
http://www.geekstogo.com/forum/Hardware-Components-Peripherals-f9.html
Ok, I can do that.... but what do think would happen if I tried to do the windows recovery with C: in the state it's currently in? You had the impression before that bootcfg would be able to "see" into C, so would that be the same for recovery as well?
-
It depends on whether the initial set up was for RAID and what type, or was it set to RAID when some upgrades were done ?
-
It depends on whether the initial set up was for RAID and what type, or was it set to RAID when some upgrades were done ?
A review I read said it was "RAID 0". It came that way. Fancy is not always good. It does say "Raid Volumes: None Defined." when it boots up, but it said that before when I had the viruses, and it still worked just fine.....until the whole boot scan fiasco.
Oh I started that thread like you suggested. I hope I did ok:
http://www.geekstogo.com/forum/Reboot-loop-after-AVAST-boot-scan-t271285.html
-
OK I have put out the call to the Techs - they usually reply to me quite fast
-
You lucky Billkwando. You should be home safe now. But I won't interrupt just yet except to reply to this post that I noticed on the previous page. I missed it at the time.
Yes best use a dos startup disk win 98 disk will do but this will only scan FAT32 partitions only max size 32000MBs on scandisk.
If you are using NTFS partition then your are out of luck!.
When you use 98SE bootdisk, you boot into DOS - that is yr Windows OS.
When you use scandisk in DOS you are scanning the hard disk (hardware) not the operating system (software).
in the screenshot I am scanning my hard disk with a 98SE bootdisk - my operating system is XP.
-
OK I have put out the call to the Techs - they usually reply to me quite fast
Thanks a bunch!!!! ;D
You lucky Billkwando. You should be home safe now. But I won't interrupt just yet except to reply to this post that I noticed on the previous page. I missed it at the time.
Yes best use a dos startup disk win 98 disk will do but this will only scan FAT32 partitions only max size 32000MBs on scandisk.
If you are using NTFS partition then your are out of luck!.
When you use 98SE bootdisk, you boot into DOS - that is yr Windows OS.
When you use scandisk in DOS you are scanning the hard disk (hardware) not the operating system (software).
in the screenshot I am scanning my hard disk with a 98SE bootdisk - my operating system is XP.
How am I lucky again? :P
My PC has no floppy drive and everything but the recovery partition is NTFS
Edit: Oh and I forgot to mention that the broken PC is the only one with SATA in the house, so no partition recovery whatsits (above) for me....... that prog, unlike TestDisk, has to be installed and write to the sys32 folder and all that, which of course you can't do with Reatogo.
-
Test disk log with both drives scanned attached below.
-
Re: scandsk using floppy -
in the screenshot I am scanning my hard disk with a 98SE bootdisk - my operating system is XP.
sorry I should of said my XP is NTFS - I forgot about those early XPs circa 2003/04 that had FAT.
I also said this back in my post - "if you've got a floppy drive and want to try, here goes"
No big deal - I dont see everthing myself (as will be revealed, if you check some my previous posts)
btw - the HDD that is being scandsk in the screenshot is a SATA hard disk (160GB) and there is another SATA on computer as second HDD (500GB for multimedia files) which I can also scandsk by simply changing directory from C: to E: (on the floppy) and in not distant future there will be RAID array running to a third HDD (200GB I hope), which will be there to differential backup for the first HDD, which will be system drive and control center for my internet usage. I dont use Linux systems so this best Windows setup I can devise on my limited expense account (for a standalone machine - I also have networked computers setup as well, which I don't use yet because I'm wait until I change my ISP contract later this year).
Scandisk was in common usage 10 years ago and IMHO is the prefect way to check hard disks for errors as you do yr scan in MS-DOS and the test results are final - even small bad must show up in the test. I have always felt this was not the case with chkdsk, which simply verifies files, indexes and security descriptors.
I used scandsk a lot in old days when hard disks were usual small - 8GB, 10GB, 20Gb etc
- often you had to throw the HDD out after the computer had a virus - I used to do this, red spots was final
But Billkwando, you now find that you have RAID array - which almost certain will not be turned on (I wont say go to setup and check because I'm nearly outta this thread) - so you probably simply have two HDD storage devices running on yr computer
Are they both IDE? - I guess they must be as you havent said they were SATA.
Are they set up master and slave or are they both master disks? - because it is often the case that you also have an OS on yr second hard disk (but not necessarily). But careful because even if second HDD has an OS on it, it may not be configured to run on that particular motherboard.
But you should be right over at geeks to go anyways.
Alternative option before I bail out - un-hook yr hard disks and just set up yr new 500GB with its operating system and bring it up to date through Microsoft update service (I assume you going to run Windows). Then one at a time you can run yr old hard disks underneath yr new setup either as secondary drive or as slave drive, and you can simply copy what content you want from old HDDs across to the new 500GB SATA drive. (you may have password problems, reply post back here if that is problem).
You will also have to re-install all yr programs, devices and drivers onto the new 500GB HDD. Then once you good to go wit new system, just copy yr content across. If you can see all yr old drives on yr TestDisk, then there should be no problem. You should also be able to see them from yr new SATA system.
Edit - oh I see, broken PC is SATA - check if that is that both HDDs on the PC
-
Re: scandsk using floppy -
in the screenshot I am scanning my hard disk with a 98SE bootdisk - my operating system is XP.
sorry I should of said my XP is NTFS - I forgot about those early XPs circa 2003/04 that had FAT.
I also said this back in my post - "if you've got a floppy drive and want to try, here goes"
No big deal - I dont see everthing myself (as will be revealed, if you check some my previous posts)
btw - the HDD that is being scandsk in the screenshot is a SATA hard disk (160GB) and there is another SATA on computer as second HDD (500GB for multimedia files) which I can also scandsk by simply changing directory from C: to E: (on the floppy) and in not distant future there will be RAID array running to a third HDD (200GB I hope), which will be there to differential backup for the first HDD, which will be system drive and control center for my internet usage. I dont use Linux systems so this best Windows setup I can devise on my limited expense account (for a standalone machine - I also have networked computers setup as well, which I don't use yet because I'm wait until I change my ISP contract later this year).
Scandisk was in common usage 10 years ago and IMHO is the prefect way to check hard disks for errors as you do yr scan in MS-DOS and the test results are final - even small bad must show up in the test. I have always felt this was not the case with chkdsk, which simply verifies files, indexes and security descriptors.
I used scandsk a lot in old days when hard disks were usual small - 8GB, 10GB, 20Gb etc
- often you had to throw the HDD out after the computer had a virus - I used to do this, red spots was final
But Billkwando, you now find that you have RAID array - which almost certain will not be turned on (I wont say go to setup and check because I'm nearly outta this thread) - so you probably simply have two HDD storage devices running on yr computer
Are they both IDE? - I guess they must be as you havent said they were SATA.
Are they set up master and slave or are they both master disks? - because it is often the case that you also have an OS on yr second hard disk (but not necessarily). But careful because even if second HDD has an OS on it, it may not be configured to run on that particular motherboard.
But you should be right over at geeks to go anyways.
Alternative option before I bail out - un-hook yr hard disks and just set up yr new 500GB with its operating system and bring it up to date through Microsoft update service (I assume you going to run Windows). Then one at a time you can run yr old hard disks underneath yr new setup either as secondary drive or as slave drive, and you can simply copy what content you want from old HDDs across to the new 500GB SATA drive. (you may have password problems, reply post back here if that is problem).
You will also have to re-install all yr programs, devices and drivers onto the new 500GB HDD. Then once you good to go wit new system, just copy yr content across. If you can see all yr old drives on yr TestDisk, then there should be no problem. You should also be able to see them from yr new SATA system.
Edit - oh I see, broken PC is SATA - check if that is that both HDDs on the PC
(http://blogcopter.de/wordpress/wp-content/uploads/2008/09/ide-this-is-sata.jpg)
Sorry, I had to...
I do wonder how I might combine both drives on the one 500gb one. I don't think I can just copy both halves, and then scream "By the power of Greyskull!!!". I don't think that would be quite enough to unite them. Also, there's not enough room or hookups to run 3 HDDS, as far as I can tell (HP takes a HUGE space in the case for the bay for their optional "Personal Media Drive"). So that would make it all the more tricky.
I still really wonder what would happen if I ran the nondestructive recovery from my recovery partition..
-
Hi Billkwando
I can run 8 hard disks on the old battler (ecs 760GX-M) that I'm sending this post from
- 4 x IDE and 4 x SATA - fairly basic stuff really. (2 x SATA ???)
What you can do?
Alternative option before I bail out - un-hook yr hard disks and just set up yr new 500GB with its operating system and bring it up to date through Microsoft update service (I assume you going to run Windows). Then one at a time you can run yr old hard disks underneath yr new setup either as secondary drive or as slave drive, and you can simply copy what content you want from old HDDs across to the new 500GB SATA drive. (you may have password problems, reply post back here if that is problem).
If you can see all yr old drives on yr TestDisk, then there should be no problem. You should also be able to see them from yr new SATA system.
-
Hi Billkwando
I can run 8 hard disks on the old battler (ecs 760GX-M) that I'm sending this post from
- 4 x IDE and 4 x SATA - fairly basic stuff really.
What you can do?
Alternative option before I bail out - un-hook yr hard disks and just set up yr new 500GB with its operating system and bring it up to date through Microsoft update service (I assume you going to run Windows). Then one at a time you can run yr old hard disks underneath yr new setup either as secondary drive or as slave drive, and you can simply copy what content you want from old HDDs across to the new 500GB SATA drive. (you may have password problems, reply post back here if that is problem).
If you can see all yr old drives on yr TestDisk, then there should be no problem. You should also be able to see them from yr new SATA system.
So what should you run?
You should run down the road and look for a computer tech because you sure as hell gonna wreck yr system worse if you stick yr bimbo mitts inside the case. Sorry, just had to give to you straight. :)
Edit - I'm serious, don't go there. Have you got a CD for install of an operating system on yr new 500GB hard disk? I spose not. You may not have IDE capacity on yr board (but more likely will be there). And but you bought the system new? Right. Regardless, this system is well beyond yr capability, and you might find geeks-to-go avoiding you like a plague as well.
non-destructive recovery? you may not be such a bimbo after all. Do you want me to look it up for you? I'll have to go to HP website, but I have a look cos I will probably run into one of these Media Center TV again sometime or other.
Sure! Any advice is helpful. I think essexboy is gonna have to tie a steak around my neck to get anybody to reply to me over there. :P
-
okay give me a little while
You don't have an install disk to put an operating system on yr new hard disk?
Last word for now -
these are hot systems, man. What I'd do to get my hands on it. sorry but without going back through the thread, is it run XP or Vista. I think the first ones came out just before Vista, so most likely XP (Media center)
-
okay Billkwando, I include a couple of screenshots and let me know if they look like they fit the purpose.
The one with system not responding and F10 key looks like the one for you.
Im not sure where you get 'non-destructive' from but no problem we can likely work around anything.
just give me a minute while I read back through the thread in case I've overlooked something.
btw yr hard disks will likely be too recent, the technology too advanced, to be damaged.
Back in a minute. Check if the F10 Recovery is the one. If so, you should be good to go.
-
oh yes I recall a few bits and pieces from the other day that I had forgotten. Never mind. It happens.
I think that, if F10 key is there when Invent comes on screen at Start, press it and off you go.
You can see that you have to be quick. And once you are away follow instructions carefully.
This will restore yr PC to Factory settings. So only important programs will remain after restore and you may lose a driver or two, and few other things that you can replace, but all yr documents, pictures, etc should still be in place.
-
OK 'tis I - I have been talking with an engineer at the local college. When I said raid0 his first words were "that is a bad configuration"
From my understanding of what he was saying to me, the files are put half on one drive and half on the other to take advantage of the full sata speed - Now when he says half a file he was being literal. He reckons he could recover a raid0 that has failed if given 24 hours and a decent drive image to start with. Basically the same as they are saying over at G2G as they are still discussing a way forward. What this means is that there are bits of a file on drive a and bits on drive b, if one of the sectors becomes bad then the whole of that file is useless as it cannot be recovered
His final word was reset it all and don't use raid0 he recommends raid1 which uses two drives and one is mirrored onto the other, so if one drive goes bad the other can pick it up. This is not the case with raid0 where if one drive goes bad you have nothing left
-
yes. I think it comes out of factory with raid0 or was meant to. But I kind of doubt if they would distribute it like that and probably had it off by default and leave it up to user, because that is what they did with the Personal Media drive (they left it off the system).
Nice to see you back essexboy
-
Hi essexboy
I found the troubleshoot guide for the PC before. But I now have the link for all the manuals.
http://h10025.www1.hp.com/ewfrf/wc/manualCategory?lc=en&dlc=en&cc=us&product=3271568&#
I haven't checked the RAID setup in these, just went from the RAID guidelines for my PC at home.
Also, I think maybe I was wrong, and Billkwando's unit may have come out with everthing hooked up.
-
Ta I will have a browse - and I guess it is time for me to start learning about raid ;D
-
Nobody bothers with RAID anymore unless they running servers, not really favored for personal computers (bit like SCSI) and there are now other less tech ways to backup / restore. More for enthusiasts when used on client/server setups, and the value, of course, is once they are set up there are virtually no costs running the array.
I wouldn't bother going to the HP site - that is total over the top for I don't know who's benefit.
Here's the link for my manual - the second download - SiS 964/SiS 180 SATA RAID User manual
http://www.ecs.com.tw/ECSWebSite/Products/ProductsDetail.aspx?detailid=504&CategoryID=1&DetailName=Manual&MenuID=1&LanID=0
ECS - Elite systems - Taiwanese company specialises in motherboards, especially for personal computers.
-
Aye the engineer I was talking stated that the only reason for a home user to have a raid system is if the are doing very intensive video work - another link to read
-
Fyi: I didn't get eaten by wolves or give up. I was just taking a couple days off from pulling my hair out.
Update: Apparently C being "corrupted" removed my ability to do a nondetructive recovery. I hadn't been back into the recovery tool since before the whole bootcf typo fiasco to see that.
Edit: Oh and I found some helpful links on Raid recovery:
http://forums.extremeoverclocking.com/showthread.php?t=312831
http://spench.net/drupal/resources/raid0
http://www.techsupportforum.com/microsoft-support/windows-xp-support/57811-windows-restarting-partition-corrupt.html
The first one seemed the most promising, and actually mentions TestDisk, but doesn't actually explain how to make it work with a RAID. I've checked their site but couldn't figure it out.
-
Ooops double post
-
Oh bu&%@r. That's the F10 recovery that you are talking about I guess.
If not, let me know. I've got to do some other things but will be back.
I know yr system a bit better now and I imagine it was quite something when first released.
Did you buy it new and has it got the personal media drive installed in the special bay provided?
And also do you know how to boot into setup - that is 'entering setup...'
-
Oh bu&%@r. That's the F10 recovery that you are talking about I guess.
If not, let me know. I've got to do some other things but will be back.
I know yr system a bit better now and I imagine it was quite something when first released.
Did you buy it new and has it got the personal media drive installed in the special bay provided?
And also do you know how to boot into setup - that is 'entering setup...'
That is the F10 recovery indeed. I did buy it new and I didn't get the optional drive. The special bay is one of the reason I can't fit anything else in there. LOL
I do know how to get into setup. It tells you about all three options on the blue HP screen when you power on. :)
-
I think I will be a bystander now as mkis is light years ahead of me on this
-
okay I go see if I can find the BIOS in one of their copious manuals at HP ??? Just kidding. I love this system you got. All up and running Dr Dre would probably be happy to have it set up in his lounge.
we may yet squeeze through this problem by using in setup. Otherwise we got to look saving yr personal files. We may need a Linux tech on board for that - to run a distro or something that can access yr hard disk. Nor really my field as I do Windows - but someone here might popup and help us out there - to save yr personal files.
other things - how do you know 'corrupted'? and do you know if system came with the RAID array connected?
sorry x-posted
Edit - I may be a little while - sorry, I fall a bit short of Dre class - but at least things are on track
-
okay I go see if I can find the BIOS in one of their copious manuals at HP ??? Just kidding. I love this system you got. All up and running Dr Dre would probably be happy to have it set up in his lounge.
we may yet squeeze through this problem by using in setup. Otherwise we got to look saving yr personal files. We may need a Linux tech on board for that - to run a distro or something that can access yr hard disk. Nor really my field as I do Windows - but someone here might popup and help us out there - to save yr personal files.
other things - how do you know 'corrupted'? and do you know if system came with the RAID array connected?
sorry x-posted
I can get to my C: files with TestDisk. I already moved all my L'Arc~en~Ciel & Maximum The Hormone videos I downloaded off of YouTube, cos they just barely fit on one DVD. They all work fine (as far as I know) but one vid.
I say "corrupted" because Reatogo can't access C. The files are in there, it's just something with the partition.
I'm not sure what you mean about the raid array being connected. I bought this computer at Best Buy, and never opened it or modded it prior to this disaster. Opened once, looked inside, said "F%#k that!"...and came back here and told you guys about it.
I do know that it says Raid Volumes None Defined, but it has said that since my virus outbreak. It was still working even though it said that, and had "non-raid volume" listed next to both hard drives in the bootup screen.
Everything worked until the Avast boot scan......... and recovery console and the HDDs were fine until I tried to do bootcfg, mistyped the OS (2x) and restarted. That's when I could no longer access windows recovery console.
If you wanna scan the thread again, I'm sure I went into much more detail before.
I can even make you a video and put it up on youtube if you like, of the bootup process.
-
to enter setup should be one of yr three options
To open the BIOS Setup screen:
Turn off the computer and wait five seconds.
Turn on the computer.
When the first screen displays
(1) immediately press the F10 key if your computer was built in 2006 or later (came with Vista).
(2) Press the F1 key if your computer was built before 2006 (XP or earlier).
Press the key once every second until a BIOS Setup utility screen opens.
Use the keyboard to move through the menus
Note - BIOS setup utility for you may not be same as the HP one I have from the manual
(i can post screenshots later but lest try a quick fix - if you haven't tried this already
Reloading the BIOS default settings
To reload the factory BIOS settings to the setup default:
Press the F5 function key.
Select Yes or OK .
Press the Enter key.
Press the F10 function key.
Select Yes or OK to save the defaults.
You can also complete the following steps to reload the factory BIOS settings using the menu:
In the BIOS Setup utility, select the Exit tab.
Select Load Setup Defaults .
The system prompts you to load the optimized setup defaults. Select Yes or OK and press the Enter key.
Select Exit Saving Changes .
Press Esc and then press Enter to exit Setup.
The only qualification I can make if this doesn't work is to perhaps forget about the F10 key
and try just run the first part with the F5 key
Looks like the system didn't come with RAID connected - probably have to had ask for that feature
So we will go from there if not successful - meanwhile I will read back through the thread
- anything could have happened with yr bootcfg but really the PC should have ignored it and returned some kind of message to you that it was non-valid
On yr BOOT menu in Setup you should have a an entry Boot-time Diagnostic Screen (disabled)
- you could enable that as well prior to exiting setup - dont forget to save changes
otherwise all yr other ideas are good (like video of boot process, etc...)
but lets hope quick fix
-
to enter setup should be one of yr three options
To open the BIOS Setup screen:
Turn off the computer and wait five seconds.
Turn on the computer.
When the first screen displays
(1) immediately press the F10 key if your computer was built in 2006 or later (came with Vista).
(2) Press the F1 key if your computer was built before 2006 (XP or earlier).
Press the key once every second until a BIOS Setup utility screen opens.
Use the keyboard to move through the menus
Note - BIOS setup utility for you may not be same as the HP one I have from the manual
(i can post screenshots later but lest try a quick fix - if you haven't tried this already
Reloading the BIOS default settings
To reload the factory BIOS settings to the setup default:
Press the F5 function key.
Select Yes or OK .
Press the Enter key.
Press the F10 function key.
Select Yes or OK to save the defaults.
You can also complete the following steps to reload the factory BIOS settings using the menu:
In the BIOS Setup utility, select the Exit tab.
Select Load Setup Defaults .
The system prompts you to load the optimized setup defaults. Select Yes or OK and press the Enter key.
Select Exit Saving Changes .
Press Esc and then press Enter to exit Setup.
The only qualification I can make if this doesn't work is to perhaps forget about the F10 key
and try just run the first part with the F5 key
Looks like the system didn't come with RAID connected - probably have to had ask for that feature
So we will go from there if not successful - meanwhile I will read back through the thread
- anything could have happened with yr bootcfg but really the PC should have ignored it and returned some kind of message to you that it was non-valid
On yr BOOT menu in Setup you should have a an entry Boot-time Diagnostic Screen (disabled)
- you could enable that as well prior to exiting setup - dont forget to save changes
otherwise all yr other ideas are good (like video of boot process, etc...)
but lets hope quick fix
Done, no change. What do you mean when you say RAID enabled/disabled?
http://www.youtube.com/watch?v=pYQ4Htsq72I
BTW it didn't used to say that about the raid volumes.
-
Done, no change. What do you mean when you say RAID enabled/disabled?
I didn't say - 'RAID enabled/disabled'
I said - In BOOT menu in Setup you should have a an entry 'Boot-time Diagnostic Screen (disabled)'
It looks almost for certain like the RAID array was never connected up - not such a bad thing
http://www.youtube.com/watch?v=pYQ4Htsq72I
BTW it didn't used to say that about the raid volumes.
I watched video
- you can see when you come to the Invent screen
- well hit the F10 key straight away - what happens? you should go to setup utility
My previous post there is a screen shot - that is the setup utility
When in setup utility - select Boot from Menu across top of screen
In Boot menu you see - Boot-time Diagnostic Screen (disabled) - like in screenshot below
- well, change the entry from disabled to enabled
-
I didn't say - 'RAID enabled/disabled'
I said - In BOOT menu in Setup you should have a an entry 'Boot-time Diagnostic Screen (disabled)'
It looks almost for certain like the RAID array was never connected up - not such a bad thing
I understood about the boot time diagnostic. I'd tried it before because it sounded promising, but all it did was hide the HP screen and show the motherboard maker. IIRC it appeared to boot up normally. I can definitely make a video of that too though.
What I meant to ask was what you meant by "connected/not connected". The partitions definitely seem to be spread across both drives, as my TestDisk data indicated.....right?
When I say it didn't used to say "Raid volumes: None defined.", I mean it used to list something else there. I just can't remember if it was the name of the raid driver thingy or the name of the hard drive(s).
I watched video
- you can see when you come to the Invent screen
- well hit the F10 key straight away - what happens? you should go to setup utility
My previous post there is a screen shot - that is the setup utility
When in setup utility - select Boot from Menu across top of screen
In Boot menu you see - Boot-time Diagnostic Screen (disabled) - like in screenshot below
- well, change the entry from disabled to enabled
Yep, I will enable it again and make a video tonight.
Edit: Notice the spots and graphical corruption on the HP screen? I'm pretty sure that's my boot virus. Wait till you see the BIOS....colored blocks and misspellings everywhere! :D
-
Those spots on your screen are most likely yr graphics adaptor. Do you have a graphics card?
okay you can get into setup and the quick fixes - return to defaults - dont work? okay
I havent had time to read the thread - does Safe Mode work?
Tap F8 key lightly when powering up and follow the directions into Safe Mode.
disonnected/connrcted - the RAID array is not connected but yr hard drives still connected up like mine (SATA).
If you still got malware, then it is a whole different thing
-
Those spots on your screen are most likely yr graphics adaptor. Do you have a graphics card?
okay you can get into setup and the quick fixes - return to defaults - dont work? okay
I havent had time to read the thread - does Safe Mode work?
Tap F8 key lightly when powering up and follow the directions into Safe Mode.
disonnected/connrcted - the RAID array is not connected but yr hard drives still connected up like mine (SATA).
If you still got malware, then it is a whole different thing
The thread title may be a hint. ;)
I may or may not have malware, after all, that's why I was running Avast in the first place for this to happen. Again, it wasn't malware that broke my system. It was Avast, and later a bootcfg that went wrong.
-
hahahahaha I see what you mean. Sorry I was in a rush.
I just came back on a little while ago, and I was checking the code on some urls in case amlware
but I have to go out again.
avast doesnt do that - what about yr screen and yr graphics adaptor?
what happens when you try safe mode - can you run a video anyway - someone will be here.
-
hahahahaha I see what you mean. Sorry I was in a rush.
I just came back on a little while ago, and I was checking the code on some urls in case amlware
but I have to go out again.
avast doesnt do that - what about yr screen and yr graphics adaptor?
what happens when you try safe mode - can you run a video anyway - someone will be here.
It could be my adaptor....it started with my big trojan infection. No biggie for now. Safe mode hangs at Mup.sys....which I also mentioned earlier in the thread. :P
-
I'm at a mates, on his PC for a few minutes, sorry bout my oversight with Safe Mode, I was pasting from a checklist that aimed to cover all scenarios. And to tell you the truth, I still get feeling this is a hardware issue - and that the boot goes as far as mup.sys suggests that the HDD is not causing the crash (only suggests). Next file to load is ndis I if I recall correctly. That's good you noted that down, forum members may recall issues to do with either of these two file not loading.
Okay next step is to disconnect yr second HDD so that you are left with just the system drive
- its not going to hurt anything these tests with either of yr HDDsD
Turn computer off - take AC cord from wall to ensure complete shutdown
- you will see the cables leading to the two HDDS - one a power supply cable, the other from the hard disk to the motherboard.
Work out which is yr system drive - tho doesn't matter if you get wrong one, you just stop computer and try the other one
- unhook the secondary HDD and do the test boot in Safe Mode
Oh also make sure that you have no peripherals plugged in including yr network - so that is yr modem or router, etc...
- only the bare minimum so to give yr system drive a good clear run
Make sure the cables to remaining HDD are securely connected, plug back in yr AC cord, and turn yr computer back on, booting it into Safe Mode (hopefully) - if doesnt work we move on
I should note that bad ram can also cause the screen to go like yours but perhaps a bit worse than that
- do you know to how take ram out and put it back in, in case you need to try that a bit later on
- but really if ram was to cause it, probably would crash nearer to start of boot process (- but not always)
and finally the graphics adaptor - do you have a graphics card or is yr graphics device built into motherboard?
See how we go with these steps - this is what I meant when I said you are as good as home, but lets hope you still have a system drive good enough for yr HDD to run. Anyway, enough for now. I should be finished here soon, and on my way home.
-
No dice w/ safe mode, alas.
-
you running only one HDD - system drive - now, you have to do this
It is the next thing to do - the other HDD can be reconnected later
I have to go out now but in a few hours time we can troubleshoot this in a chat type session if you want.
If we keep drawing unsuccessful outcomes I'm going to suggest you buy a Windows 7 install and start again
You did say your got all yr wanted files and picture / video off the drive?
And Windows 7 means that you can gain a bit of new ground to make up for the troubles you have had.
I'll be back soon
-
I took the SATA drive back to bestbuy and got a 1TB USB drive and I'm backing up now.
I'll be able to mess around and maybe try to rebuild the booty part with TeskDisk or something. I still wish I could remember what the RAID stuff said at boot.
If I can't make it boot, I'll use F10 to recover windows XP. Is there a way to un-raid it so when I recover I can have an actual C and D drive?
-
so it worked when you ran the drive by itself / or a few days back when you used the F10 key
I doubt if RAID was ever hooked up. What you have got is a standard - well not standard because SATA - but the common configuration - what you say you want - C drive and D drive
problem solved - yr system drive needed to run by itself first probably because like you said you altered the boot config. The system could almost get there, but with the added requirement of D plugged into the motherboard. Sometimes this can happen even without changes in configuration. I've seen it happen.
If the second HDD has been unhooked and is not hooked back up, then check your manual and see
http://h10025.www1.hp.com/ewfrf/wc/manualCategory?lc=en&dlc=en&cc=us&product=3271568&#
-
Dude, I have no idea what you're talking about. What "worked"?
I'm just backing up my stuff now...something I've always had the ability to do, but didn't a drive to copy to til today.
Nothing has changed. When I say "F10", I mean a destructive recovery. A total reformat. That has always been an option.....just one I'm still trying to avoid.
-
What did you say you booted into to do yr backup?
destructive recovery - no such thing, but I think you mean what the old hats call a total recall
total reformat - you need an installation disk and product key
- if it comes down to this, someone will help you with upgrade to Windows 7, if that's what you want
I really thought this computer would run by now. The F10 key is something that HP picked up of Compaq when they bought the company. the F10 key is the Rompaq in their technology. HP utilized the F10 as a recovery feature in yr computer. I've recovered a computer with Rompaq, its a bit different with yr system. With yr bootcfg thing, you cant do any damage if you spell things wrong, only if you spell them right and action something. And the graphic adaptor. Can you take some photos of the back of the computer, anyway? Um...you have to unhook all the peripherals and just have the system drive running. You can run the CD player, thats okay. If any damage has been done, and must have to be for XP not to boot by now, you could hardly have caused it.
Once yr XP boots and we see whats there. And be easier to check what trojans and stuff.
There will be bit work to building the system back anyway - has the system drive got avast running
so when did you first notice this funny things happening to yr computer?
Are you there billkwando. I want you to run some tests?
Have you seen the screenshot? Have you had this box on the screen - should recognise it if it came up
-
What did you say you booted into to do yr backup?
destructive recovery - no such thing, but I think you mean what the old hats call a total recall
total reformat - you need an installation disk and product key
- if it comes down to this, someone will help you with upgrade to Windows 7, if that's what you want
I really thought this computer would run by now. The F10 key is something that HP picked up of Compaq when they bought the company. the F10 key is the Rompaq in their technology. HP utilized the F10 as a recovery feature in yr computer. I've recovered a computer with Rompaq, its a bit different with yr system. With yr bootcfg thing, you cant do any damage if you spell things wrong, only if you spell them right and action something. And the graphic adaptor. Can you take some photos of the back of the computer, anyway? Um...you have to unhook all the peripherals and just have the system drive running. You can run the CD player, thats okay. If any damage has been done, and must have to be for XP not to boot by now, you could hardly have caused it.
Once yr XP boots and we see whats there. And be easier to check what trojans and stuff.
There will be bit work to building the system back anyway - has the system drive got avast running
so when did you first notice this funny things happening to yr computer?
Are you there billkwando. I want you to run some tests?
Have you seen the screenshot? Have you had this box on the screen - should recognise it if it came up
Dude.....you're still making next to no sense at all. Why would you think the computer would run by now when all you've done is ask me questions I've already answered, and tell me to do things I've already done?
Except for the part about opening my computer and unhooking the drive, which one of 100 ways to "fix" the mup.sys error.
Don't get me wrong. I appreciate that you're trying to help, but how helpful can you be if you can't even bothered to read back through the thread?
What's this about a disk and a key? I read the same manual you did. It explains how the system recovery works. It refers to the destructive and non-destructive recovery. Maybe not in those terms, but I'm pretty sure that's what HP calls it. The option to reinstall windows without formatting is gone after the bootcfg fiasco....so the only option I have is to restore it to factory spec....which formats the PC.
Please read the thread before you ask me anymore questions, because your helping isn't helping.
Edit: The F10 program is called PC Doctor, and I'm getting my files with TestDisk and Reatogo, thanks to essexboy's help. You'd know that by now if you were paying attention.
-
well no you run the thing around and dont answer questions straight like I got all the time in the day.
it doesn't matter now, the things I said to do are checked off, I prefer not here.
Could of saved a lot of time - I'm not reading back through yr posts when I can just ask you something
anyway, it has been a long haul cos XP usually boots with quick run through basic
How long ago did these funny things start happening anyway
You better get essexboy to have a look at this, just in case.
Its a recent boot worm called Zimuse
Eset pretty much got in first - here is their utility
http://www.eset.eu/download/ezimuse-remover
Malware city are other with a utility
http://www.zimuse.com/?cid=MalwareCity
Small files that fit on a floppy disk
Heres Eset report
http://www.eset.eu/encyclopaedia/win32-zimuse-a-trojan-startpage-g-generic-1729691-threat-sysvenfakp-based-maximus
Post this anyway for the benefit of the forum
-
Read the first post to learn how it happened. You've done nothing but treat me like an idiot, and I'm tired of it.
It's customary to read a thread before replying to it. I'm typing on a phone here, and almost every one of my replies to you has been written from a phone. I've repeated myself enough.
It would be different if anything you've said had helped. Like I said, I don't mean to be rude, but you continue to offer half-assed suggestions and refuse to scan through the information that I painstakingly laid out to make it as easy as possible to help.
-
oh come on
look back through the forum, seem long time getting the basics done
and now you tell me you're typing on a phone? dont think bit late.
that boot worm - maybe
-
oh come on
look back through the forum, seem long time getting the basics done
and now you tell me you're typing on a phone? dont think bit late.
that boot worm - maybe
Sorry, I couldn't quite follow what you were saying there.
I've reformatted via F10. D partition actually kept all the files that were there before. I'll look back at that post with the links.
I still have the spots on the screen (and the monitor flashing on & off . I've run Malwarebytes & avast (but no boot scan.....I learned my lesson). After I finish installing xp updates, I'll download the nvidia driver and see what happens.
Will mention if I find anything wormy.
-
yea could a been. the reports for zimuse were around 26 jan.
yr first post on mar 9.
but what counts is more is how you think the system is running
hook all yr peripherals up as you want to.
1Tb USB and a good running system would to come out of this with
essexboy is good with all those malware sorts of things
Getting through that update thing with xp after recovery is an ordeal, just bit by bit I guess
If you've got an nVidia graphics card, that could be cause yr screen
oh the monitor too - that could be the screen
-
Just a quick update... I got everything running and almost reinstalled all my progs. Got Avast back on and I'm staying away from the booty scan.
Big thanks to essexboy and co. Now if I can figure out how to un-raid my computer, all will be well.