kwick
asked on
XP Boot Loop
Computer with XP Home was infected with several viruses. After trying to remove them when we rebooted we kept getting the screen that said "windows unable to boot - click here to select safe mode...etc..
Regardless of what we selected it came right back to same screen. We ran repair, tried fixboot - all with no success.
We then decided to just upgrade the pc to XP Pro. Loaded fine. We went through the Windows update and rebooted. Guess what? Back in the same loop.
Tried repair / fixboot.. No success. We then ran Kaspersky Rescue Disk 10 Boot CD. Found some viruses, and removed.
Still loops as described above. Short of reformatting the drive and starting all over - any fixes to this?
Regardless of what we selected it came right back to same screen. We ran repair, tried fixboot - all with no success.
We then decided to just upgrade the pc to XP Pro. Loaded fine. We went through the Windows update and rebooted. Guess what? Back in the same loop.
Tried repair / fixboot.. No success. We then ran Kaspersky Rescue Disk 10 Boot CD. Found some viruses, and removed.
Still loops as described above. Short of reformatting the drive and starting all over - any fixes to this?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Agreed, you might have a deep root kit that is now corrupt, but you cannot trust the machine again unless you wipe it.
It could be a resident virus that infect program when they load on memory or a combination of viruses like a retro virus can by pass or attack intivirus software. Also, it could be the drive is faulty do you hear any clicking noise on the hard drive? If there's clicking noise on the hard drive more than likely the hard drive is bad and needs to be replace.
I agree. I usually make sure I have an image of the OS of any machine that I use regularly so that I can restore to a known state.
I hope this helps !
I hope this helps !
More likely that the malware added a bad subkey or value in the registry and it's still there.
For example if malware added "Userinit.exe" subkey in the IFEO key with a bad Debugger value, and when the bad file was removed the reg entry was left behind.
HKEY_LOCAL_MACHINE\SOFTWAR E\Microsof t\Windows NT\CurrentVersion\Image File Execution Options\userinit.exe
You could try doing a repair of corrupted registry.
Using Recovery Console:
Windows XP - Repairing a corrupted registry hive.
http://web.mit.edu/ist/products/winxp/advanced/registry-corruption.html
For example if malware added "Userinit.exe" subkey in the IFEO key with a bad Debugger value, and when the bad file was removed the reg entry was left behind.
HKEY_LOCAL_MACHINE\SOFTWAR
You could try doing a repair of corrupted registry.
Using Recovery Console:
Windows XP - Repairing a corrupted registry hive.
http://web.mit.edu/ist/products/winxp/advanced/registry-corruption.html
Hi,
Press F8 before the Win Xp loads and choose Do not disable automatic restart and check what is causing the issue in the blue screen, suspect for the fault hardware driver
if there is a virus scan the system with Windows Live OneCare safety scanner http://onecare.live.com/site/en-us/default.htm (Connected as a secondary to another drive)
Regards
Arun Kumar V
Press F8 before the Win Xp loads and choose Do not disable automatic restart and check what is causing the issue in the blue screen, suspect for the fault hardware driver
if there is a virus scan the system with Windows Live OneCare safety scanner http://onecare.live.com/site/en-us/default.htm (Connected as a secondary to another drive)
Regards
Arun Kumar V
ASKER
Reformatted, reinstalled, problem went away