BLUE SCREEN *&@$#*%!

Discussion in 'Trojan Defence Suite' started by Tired, Jul 13, 2004.

Thread Status:
Not open for further replies.
  1. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    BLUE SCREEN Now what? *&@$#*%!

    Well I have borrowed my neighbors computer to check here since I was afraid to restart my computer after it went blue and displayed a message that I couldn't read because the words were overlapping and and squirming (don't know how to describe it- some words were moving and shaking and the tops of the letters seemed to be cut off).
    Just like many others I received dozens of detections like have been described. before coming to the forum I read help files tried unsuccessfully to delete a few but then 2 files did delete - then I got nervous but tried one more. That did me in!! That's when I got the blue screen described above.
    After reading ALL the posts here about this mess I went back and tried to boot up with the intent of going to the link to load the correct update.
    I said a little prayer ;) and turned on the power....nope blue screen!!
    Oh Geeeeze! why me why now?
    Tried F8 -Last know Good configuration-NOPE blue screen!!
    F8- Safe Mode - Blue screen but now I can read the error message:
    STOP: c000021a {Fatal System Error}
    The windows Logon Process system process terminated unexpectedly with a status of 0xc0000034 (0x00000000 0x00000000).
    The system has been shut down.​
    Anymore ideas?
    PLEASE help ASAP :'(

    Tracy
     
    Last edited: Jul 13, 2004
  2. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Hi Tracy, sorry to read this.
    Bootdisk available, install cd-rom, are the files maybe on the HD in a special folder?
    Are you on XP?
    Can you get with the bootdisk to the c:\ prompt and maybe when you try to get to windows from there it will ask for files which you might be able to get back from the install cd-rom?
    Wishjed it were possible from c:\ to run SFC, as that would place back missing files.
    Are they maybe in the recyclebin if you can look via command mode (c:\ i mean)
     
  3. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    Hey there.
    You have your work cut out for you today , huh? ;)
    Thanks for your reply.
    I am not familiar with DOS and am not entirely sure about how to go about the rest. Could you be a bit more basic as in "walk me thru it"?
    This has really shaken me up. I am in the middle of a time sensitive contract I was working on...there was no time to back up:(.
    Gee that's how it always goes.
    Tracy
     
  4. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Tracy if the worst comes to the worst you can put your windows CD in the drive, boot up and follow the instructions for re-install, this will put back your system files but you will not lose any data you have created, unfortunately you will need to re-install your programs though :( before you can access your files.
    Also your user current account will be renamed- and a new one will be re-created without your current information in it so you will need to copy it into your new user account from the renamed /old one. a real PITA.

    Using a manufacturer's recovery disk will usually mean losing all your data :( as this uses an image file to put your hard drive back to how it was when you recieved your PG - All data will usually be lost.

    Maybe another XP user can give you a better way but as you are not familiar with the command prompt and recovery console (XP's DOS like interface), my way may be the easiest in the long run.

    Best of luck. Pilli
     
  5. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Wondering if it would be possible to run SFC from the cd-rom?
    Is there anyhow to get back via o_O ways to a former system restore? Most sad if not!
     
  6. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    Thanks Jooske but I tried F8 -Last known Good configuration and got a blue screen.
    I'm a little embarassed to ask but what do you mean by
    "possible to run SFC from the cd-rom?" what is SFC? :oops:
     
  7. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Before you try anything else do the F* again and try Safe Mode without networking if that does not work try the following:

    If you can boot from your windows CD rom you could use the command sfc /scannow this would check system files and allow you to replace missing or corrupted ones.
    This may work. When booted from your CD rom do the following:
    Type c:\ and press return
    Then type CD c:\windows\system32 press return
    You should then be in the folder that sfc.exe is in
    Type sfc /scannow press return and something may happen or you will get a prompt saying this can only be run from within windows.
    I have not tried it so it may be worth a go.
     
  8. tempnexus

    tempnexus Registered Member

    Joined:
    Apr 16, 2003
    Posts:
    280
    Were any of your folders encrypted via NTFS encryption? If so then when you reinstall windows via recovery you will LOOSE those files. The encryption is user specific and by "recovering" windows via the windows disk the previous users will be wiped. So you have to store the previous user accounts on a flopy or something before you peform the winxp bootup recovery procedure or you will loose the data in encrypted folders.
    BUT IF YOU DON"T HAVE ENCRYPTED FOLDERS then go right ahead peform the recovery.

    You might have killed winlogon.exe

    so just replace it c:\windows\system32

    I was trying to attach it but the file size limit on this board is 100kb and the file even after rar is 272kb. :)
     
  9. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Winlogon was one of the files i saw in the alerts people posted.
    Maybe you can PM each other your email address to attach it in an email -- if you have a way to get that to your pc
     
  10. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    Thanks for all the input.
    Pilli, I could not boot from windows CD rom; All F* options did not work either, I tried the sfc /scannow and it did not work because I was unable to get into DOS did some checking around and apparently it won't run from DOS. So I tried a chkdsk which replaced files but I still could not boot up - only blue screen! Argh!
    I then had to do a repair install. Yawn- PITA. It worked and so far seems like I have all my programs and data.

    ****However***** TDS is still showing all sorts of positives.
    I have tried to update from the auto update but nothing happens...what should I do?
    I am obviously a little nervous.
    THANKS,
    Tracy o_O
     
  11. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    Whew! All done.
    Now I have a few more questions but I will make another thread.
    Really thank you so much. It is always a good experience here at this forum.
    Tracy
     
  12. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Tracy! you did it! wonderful! and nothing lost? Congratulations!
    And does TDS say you're already up to date or even not that?
    In the TDS directory, if you press the update.exe, does that not work either?
    In that case grab the latest update at one of these:
    http://radius.turvamies.com/radius.td3
    http://diamondcs.fileburst.com/radius.td3
    and reload TDS.
    Please let us know if that helps!
    Are there more programs not functioning completely?
     
  13. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    Hey Jooske, I just dropped in at the thread "I have a Trojan dropper problem" threat and posted there.
    I used fileburst and diamondcs to download td3 but the re #'s were not what you had posted. What is it supposed to be?
    Cheers.
    Tracy

    PS. My other question that I will make a new thread on is I am not able to get the email or sound functions to work.

    I appreciate your hard work.
     
  14. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    [35777 references - 14016 primaries/9987 traces/11774 variants/other]
    Not right for you?
    And the turnamies site?
    You did reload TDS after the manual update?

    We all appreciate the whole team working hard, see how they posted their hearts out on all forums to help people back and happy with their systems!
     
  15. Tired

    Tired Registered Member

    Joined:
    Oct 18, 2002
    Posts:
    50
    Location:
    Boston
    Yes, I downloaded from turvamies but then I over wrote it with the other updates. Sorry I did not write down that number.
    What are the exact #'s we are supposed to have?
    Is what I posted correct?
     
  16. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    [35777 references - 14016 primaries/9987 traces/11774 variants/other]
    these which i just posted above are the current values.
     
Thread Status:
Not open for further replies.