XP won't start anymore

  • Thread starter Thread starter Bill H.
  • Start date Start date
B

Bill H.

Yes, it's probably a virus or trojan, but how to find out which one and get
rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I can get
is safe mode. System restore has been turned off. Last known good config
doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows Defender,
Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
 
Do this in Safe Mode with Networking. All info below.
If you have not managed to install AVG, and have no other AV on your
computer, install AVAST.
And also download, install, update and scan your system with Malwarebytes
and Spybot Search & destroy.

Avast Anti-Virus is XP and Vista compatible (32bit and 64bit Versions),
FREE, auto-updating, and a low resources user of your computer.
And, only have 1(one) Anti-Virus installed / running on your computer at any
one time..
Conflicts may occur if you have more than 1(one).

http://www.spybot.info/en/index.html

Spybot Search & Destroy 1.6 is a very good, FREE Anti-Spyware Program.
Download, install, update, and immunize your System with it.
Then SCAN with it.
Update it, and scan your System once a fortnight.

http://www.malwarebytes.org/mbam.php

Malwarebytes is as the name says, a Malware Remover!
For the Free version scroll down their page to either download from
Download.com, or Major Geeks.com

Download, install, and update.

Important re: Safe Mode
If you happen to find a problem that you can’t uninstall / delete, reboot
the computer, and go into Safe Mode.
To get into Safe mode, tap F8 right at Power On / Startup, and use UP arrow
key to get to Safe Mode from list of options, then hit ENTER.
RESCAN your computer with your Anti-Virus, Malwarebytes and Spybot S & D
while in Safe Mode.

If unable to install above Programs in Normal Mode:
Sometimes Trojans, Viruses, Malware, etc stop you installing and/or updating
Programs to remove them.
If that happens, reboot into Safe Mode with Networking, and install, update
and scan from there.
 
Some malware is intractable, and erasing your hard disk is the only way
out. Here are two other suggestions to consider before erasing your disk:

1- Download HijackThis from www.trendsecure.com. Run it, save a log, and
post the log at one of the many sites that support HJT, such as
spywarewarrior.com, bleepingcomputer.com, and temerc.com -- but not
here. Within a day, sometimes within an hour, you'll have one-on-one
step-by-step advice from a security expert on cleaning up any
infestations—or you'll have a clean bill of health from the volunteer
expert.

2- Put your hard disk in a computer with an effective, comprehensive and
up to date security suite. Use the good computer to scan your disk.

Good luck.
 
most of the time, rebooting
is not an indication of an
infection.

instead it may be that your
issue can be resolved with
a little file/disk tuning up.

boot up with your win
cd and log into the
repair/recovery console.

then run the following
commands at the disk
prompt>:

chkdsk
fixboot
bootcfg /rebuild
fixmbr

then "exit" and
remove the cd.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
 
When I restart in safe mode, programs won't install. They say that the MS
installer is missing/corrupt.

AVG likewise won't run in safe mode.

I've been able to get the computer to run in full normal mode, but not for
very long before it reboots.

I get msgs about WinWeb Security (and if I wait long enough, msg that are
misspelled and reference WInWeb Securite). I found info about WinWeb
Security 2008, but the manual removal instructions don't work in that what
it tells me to look for, is not there.

The computer is very slow, and I can't keep it running in normal mode long
enough to install Windows Defender. I did get Ad-Aware installed and can
run it in normal mode, but the computer will reboot before Ad-Aware can
finish even the quick (smart) scan.
 
Oh, and when I restart in safe mode with networking, AVG fails to start
"...because the application configuration is incorrect..."


--Bill
 
Bill

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Keep pressing the F8
key during Start-Up and select option - Disable automatic restart on
system failure. Do not re-enable automatic restart on system failure.
Check for variants of the Stop Error message.

However, have you tried an Online Scan?
http://housecall.trendmicro.com/uk/
http://www.kaspersky.com/virusscanner
http://www.ewido.net/en/onlinescan/

Trend also had software you could download and put on a floppy. I am
going out now so I haven't got to research this further now.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Bill H. said:
Yes, it's probably a virus or trojan, but how to find out which one and
get rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I can
get is safe mode. System restore has been turned off. Last known good
config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
Click to expand...

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode, but not for
very long before it reboots.")


Bill:
Assuming your problem isn't hardware-related (which it might very well be
based on your latest statement about the system auto rebooting after the
system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of malware (what
makes you think "it's probably a virus or trojan"?...)

So that it's *not* a problem due to malware and the various anti-malware
recommendations suggested by other responders to your query won't correct
the problem...

It might be a good idea to undertake a Repair install of the XP OS on the
basis that the problem involves a not-too-terribly corrupted OS that is not
malware-caused so that (hopefully) the Repair install will return the system
to a bootable functional state without the loss of any present data.

I don't know if you're familiar with the process of undertaking a Repair
install of the OS or even whether you wish to pursue this course of action.
So if you want or need more info on the subject so indicate.
Anna
 
Was able to get spybot and installed and ran in safe mode.

Found several items, and I removed them all. Rebooted again into safe mode,
ran again, and it found one more which I removed. Another safemode reboot
and scan, and nothing found.

Decided to do the Immunzie stuff.

Then rebooted into normal mode.

Still xtremelys slow, and then the "winweb security" appeared. I have kept
the computer off the internet during this time, using another computer to
download the scanners/checkers and burning to CD to make the transfer.

Still getting warning msgs, etc., that seem related to winweb security.

And it still spontaneously reboots (except in safe mode).

Thanks.

--Bill
 
Well, so far I seem to not find any viruses/malware.

However, the computer continues to reboot at whim, and AVG and/or spybot
finds a couple of infected files shortly after I reboot. I delete them, but
sometime later they are back.

Now how to get it to stop rebooting. And still can be slow after a reboot.

--Bill
 
Bill

Disable automatic restart on system failure. This should help by
allowing time to write down the STOP code properly. Keep pressing the F8
key during Start-Up and select option - Disable automatic restart on
system failure. Do not re-enable automatic restart on system failure.
Check for variants of the Stop Error message.

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
I got as far as the bootcfg /rebuild.

when it asked to do the rebuild, I said Yes, but then it asked about other
stuff I had no idea what that was, so I power-cycled the computer to get out
of it.

I'll try a restore session and finish up with the fixmbr, and hope I didn't
mess up anything with the aborted bootcfg.

Thx.


db.·.. > said:
most of the time, rebooting
is not an indication of an
infection.

instead it may be that your
issue can be resolved with
a little file/disk tuning up.

boot up with your win
cd and log into the
repair/recovery console.

then run the following
commands at the disk
prompt>:

chkdsk
fixboot
bootcfg /rebuild
fixmbr

then "exit" and
remove the cd.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces
Click to expand...
 
Thanks, Gerry.

So far, here's what I've gotten. Not every time, but sometimes...
IRQL_NOT_LESS_OR_EQUAL
BAD_POOL_CALLER
PAGE_FAULT_IN_NONPAGED_AREA

and a few
IRQL_NOT_LESS_OR_EQUAL

:-)

I also am now getting a window that starts out, "The system has recovered
from a serious error" and wanting me to tell MS about it. I sometimes get
several of these same msgs after a reboot.

I have gone ahead and downloaded 71mb of updates (skipped MSIE7 and SP3 at
this point), and am trying to get it to stay in normal mode for the updates
to be fully installed. Will now try safe mode...

--Bill
 
you likely didn't mess
anything up with that
command.

all it was asking was to
provide a menu line item
and a description to appear
on the boot menu.

but the questions are
intimidating.

------------

what i gathered from your
other responses was that
you could access safemode
but normal mode was not
stable.

the repair installation with
your win cd is a good idea.

keep in mind however, if your
o.s. on the disk is sp3 then
your sp2 cd cannot perform
a repair.

so keep us apprised.

because safemode was stable,
then it is likely that normal mode
needs to be cleaned up and
reconfigured.

you can use the environment in
safemode to do the cleaning up.

further, there are options like
clean booting as well.

--

db·´¯`·...¸><)))º>
DatabaseBen, Retired Professional
- Systems Analyst
- Database Developer
- Accountancy
- Veteran of the Armed Forces

Bill H. said:
I got as far as the bootcfg /rebuild.

when it asked to do the rebuild, I said Yes, but then it asked about other stuff I had no idea what that was, so I power-cycled
the computer to get out of it.

I'll try a restore session and finish up with the fixmbr, and hope I didn't mess up anything with the aborted bootcfg.

Thx.
Click to expand...
 
Bill

You should not update a malfuncting computer. It can make the situation
worse.

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793589.aspx

0x0000000A: IRQL_NOT_LESS_OR_EQUAL
Typically due to a bad driver, or faulty or incompatible hardware or
software. Use the General Troubleshooting of STOP Messages checklist
above. Technically, this error condition means that a kernel-mode
process or driver tried to access a memory location to which it did not
have permission, or at a kernel Interrupt ReQuest Level (IRQL) that was
too high. (A kernel-mode process can access only other processes that
have an IRQL lower than, or equal to, its own.)
Source: http://aumha.org/a/stop.htm

You receive a "Stop 0x0000000A" error message in Windows XP
http://support.microsoft.com/kb/314063/

There are a lot of practical suggestions in the Knowledge Base Article
314063

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms793437.aspx

0x00000050: PAGE_FAULT_IN_NONPAGED_AREA
(Click to consult the online MSDN article.)
Requested data was not in memory. An invalid system memory address was
referenced. Defective memory (including main memory, L2 RAM cache, video
RAM) or incompatible software (including remote control and antivirus
software) might cause this Stop message, as may other hardware problems
(e.g., incorrect SCSI termination or a flawed PCI card).
Source: http://aumha.org/a/stop.htm

Background information on Stop Error message
http://msdn2.microsoft.com/en-us/library/ms796120.aspx

0x000000C2: BAD_POOL_CALLER
(A kernel-mode process or driver incorrectly attempted to perform memory
operations. Typically, a faulty driver or buggy software causes this.
Source: http://aumha.org/a/stop.htm

STOP: 0x0000000A (0xc0000005, 0x85EE90BD, 0xECF62B4C, 0x00000000)
For each Stop Error what appears on the line below what is above?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~
 
Great stuff, Gerry!

I didn't write down all the info, but got some. I won't have the computer
after today, and since it is an older model, I've suggested he get a new
one.

for one of the IRQL:

0x00000101, 0x00000002, 0x00000001, 0x804E60C4


Bad pool caller:

0x00000007, 0x00000CD4, 0x02070004, 0x8320FBC0

another STOP 0x0000008E,0x0064006A, 0xF3E92CF0, 0x00000000


Thanks.
 
Back
Top