Windows fails to boot

Discussion in 'malware problems & news' started by SimonK, Dec 16, 2005.

Thread Status:
Not open for further replies.
  1. SimonK

    SimonK Registered Member

    Joined:
    Dec 16, 2005
    Posts:
    3
    Hello,

    I am helping someone to fix his computer. At the moment he has one of those barebone PCs that fail to boot. I suspect a virus of some sort. It's like this:

    The computer starts to boot Windows XP Home edition fine, the loading screen appears, then the screen goes black as to load the desktop, a mouse appears, a minute passes, and the computer reboots.

    My first thought was hardware, but the hardware seems in order.

    My second thought was bootsector, but I loaded the fail safe options and it didn't work.

    Third option was to start Windows in safe mode, which I tried, it loaded the same black screen but with the usual safe modus words in the corners, then I get an error. lsass.exe tells me I don't have enough qouta to start the computer. Or I get an error API doesnt have enough memory or something along those lines (I am translating the dutch output).

    So I cannot even get to anything in windows, I am sorta worried here because I am running out of options and we don't want a reinstall on that computer. We could boot with something like Knoppix but that won't fix the Windows issue.

    Any ideas?
     
  2. BlueZannetti

    BlueZannetti Administrator

    Joined:
    Oct 19, 2003
    Posts:
    6,590
    SimonK,

    "Could" as in yes I've tried it and it boots or "could" as in I can do this but haven't yet? Just trying to verify that major hardware issues have been unambiguously excluded.

    Blue
     
  3. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    While this will give you the all too-familiar Blue Screen of Death....perhaps the info provided might show the hardware problem if there is one ?

    1. Right-click My Computer and select Properties.
    2. Click the Advanced tab
    3. In the Startup and Recovery section, click the Settings button
    4. In the System Failure section, uncheck the Automatically Restart check box.
     
  4. SimonK

    SimonK Registered Member

    Joined:
    Dec 16, 2005
    Posts:
    3
    Yeah I have used Knoppix, I have also used a command prompt when you input the windows CD and ran a chckdsk, It gave good returns, no errors.

    I cannot do anything Bubba said though, because the computer wont give me the desktop only the mouse.

    It says something about insufficient virtual memory to load the API as well, I have figgled with it some more.
     
  5. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Do you see the same results if you attempt to boot into SafeMode ?

    1) Restart your computer
    2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
    3) Instead of Windows loading as normal, a menu should appear
    4) Select the first option, to run Windows in Safe Mode.
     
  6. SimonK

    SimonK Registered Member

    Joined:
    Dec 16, 2005
    Posts:
    3
    Yes I do, I think I detailed that in the first post as well. That is the strange bit I cannot even enter safe mode.
     
  7. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
    Yes you did indeed....my over-sight :(
     
  8. ettu

    ettu Registered Member

    Joined:
    Dec 17, 2005
    Posts:
    18
    Location:
    Featherston, New Zealand
    Black startup screen is briefly displayed and your computer restarts repeatedly when you try to start Windows XP
    View products that this article applies to.
    Article ID : 314466
    Last Review : January 3, 2005
    Revision : 2.0
    This article was previously published under Q314466
    IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
    256986 (http://support.microsoft.com/kb/256986/EN-US/) Description of the Microsoft Windows Registry
    For a Microsoft Windows 2000 version of this article, see 174630 (http://support.microsoft.com/kb/174630/EN-US/).

    On This Page
    SYMPTOMS
    CAUSE
    RESOLUTION
    Method 1
    Method 2
    Method 3
    Method 4
    MORE INFORMATION
    APPLIES TO

    SYMPTOMS
    When you attempt to start Microsoft Windows XP, the black startup screen may be briefly displayed, and then your computer restarts repeatedly.
    Back to the top

    CAUSE
    This behavior can occur if the following conditions exist:

    • A fatal system error (STOP error) causes the computer to stop.
    • The Automatically restart option is selected under System failure in the Startup and Recovery dialog box in System Properties.
    • The Windows XP paging file is smaller than the amount of physical memory that is installed on the computer, or there is insufficient free space on the hard disk to write the error dump file (Memory.dmp).
    Windows XP may encounter a problem during startup that results in a STOP error message. Depending on the system configuration, the blue screen may not be displayed long enough for you to record the error information.
    Back to the top

    RESOLUTION
    To work around this issue, alter the startup process so that you can gather important information about the STOP error message. To do this, use the following methods in the order in which they are presented.

    NOTE: Before you attempt these workarounds, try to restart your computer in safe mode. This may allow you to troubleshoot the STOP error message.
    Back to the top

    Method 1
    1. Try to replace the registry hives from the repair directory by using the Recovery Console, and then restore the system to a current state with System Restore.

    For additional information about how to restore the registry, click the article number below to view the article in the Microsoft Knowledge Base:
    307545 (http://support.microsoft.com/kb/307545/EN-US/) How to Recover from a Corrupted Registry that Prevents Windows XP from Starting

    Back to the top

    Method 2
    WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
    1. Install Windows XP to a different folder.
    2. Click Start, and then click Run.
    3. In the Open box, type regedit, and then click OK.
    4. Browse to the following registry subkey:
    HKEY_LOCAL_MACHINE
    5. On the File menu, click Load Hive.
    6. Navigate to the System file in the original Windows XP installation location.

    By default, the System file is stored in the following location:
    %SystemRoot%\System32\Config\System
    7. Type an arbitrary name when you are prompted for a key name in the Load Hive dialog box.

    The original HKEY_LOCAL_MACHINE hive is loaded as a subkey of the current key.
    8. In the arbitrary name key (where arbitrary name is the name that you assigned the HKEY_LOCAL_MACHINE registry key from the original Windows installation), browse to the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CrashControl
    9. In the right pane of the Registry Editor window, double-click AutoReboot.
    10. In the Value data box, type 0 (zero), and then click OK.
    11. Click the minus sign to collapse the HKEY_LOCAL_MACHINE registry subkey.
    12. On the File menu, click Unload Hive.
    13. On the File menu, click Exit.
    This disables the Automatically restart option in the original Windows XP installation. After you follow these steps, you may be able to gather information from the STOP error message and resolve the problem that prevents the computer from starting.
    Back to the top

    Method 3
    Another workaround may be necessary if the minimum size of the paging file is set to a value less than the amount of physical memory. Windows XP requires a paging file on the system drive large enough to hold all physical memory plus 1 megabyte (MB), in order to write debugging information. You can modify the PagingFiles value of the original installation so that the dump file can be created by the STOP error message. Enough free disk space must be available on the system drive for the paging file.

    To change the PagingFiles value in the System file in the original Windows XP installation location, follow these steps: 1. Click Start, and then click Run.
    2. In the Open box, type regedit, and then click OK.
    3. Browse to the following registry subkey:
    HKEY_LOCAL_MACHINE
    4. On the File menu, click Load Hive.
    5. Navigate to the System file in the original Windows XP installation location. By default, this is stored in the following location:
    %SystemRoot%\System32\Config\System
    6. Type an arbitrary name when you are prompted for a key name in the Load Hive dialog box.

    This loads the original HKEY_LOCAL_MACHINE hive as a subkey of the current key.
    7. In the arbitrary name key (where arbitrary name is the name that you assigned the HKEY_LOCAL_MACHINE registry key from the original Windows installation), browse to the following registry subkey:
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management
    8. In the right pane of the Registry Editor window, double-click PagingFiles.
    9. In the Value data box, edit the first numeric value after c:\pagefile.sys (where c: is the drive on which the pagefile is stored) to increase it to a number that is at least 1 MB greater than the amount of physical memory in the computer.

    NOTE: Do not type a number that is greater than the amount of free hard disk space on the computer.

    For example, the following value displays a minimum paging file size of 130 MB and a maximum paging file size of 256 MB.
    c:\pagefile.sys 130 256
    10. Click OK.
    11. Browse to the following location in the registry hive that you loaded from the original Windows installation:
    HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\CrashControl
    12. In the right pane of the Registry Editor window, double-click CrashDumpEnabled.
    13. Type 1 (one) in the Value data box if it is not already present, and then click OK.
    14. Click the minus sign to collapse the HKEY_LOCAL_MACHINE registry subkey.
    15. On the File menu, click Unload Hive.
    16. On the File menu, click Exit.
    17. Attempt to start the original Windows XP installation. When the STOP error occurs, the memory dump information will be stored in the paging file.
    18. Restart the computer and select the parallel installation of Windows XP. This allows the dump file to be created and you may be able to use the information to resolve the problem that causes the STOP error message in the original installation.

    NOTE: The dump file is saved in the %SystemRoot%\Memory.dmp file, where %SystemRoot% is the parallel installation system folder.
    19. Click Start, right click My Computer, and then click Properties.
    20. Click the Advanced tab, click Settings under Startup and Recovery.
    21. Click to clear the Automatically restart check box, click OK, and then click OK again.
    22. Restart the computer. When you attempt to shut down the computer, the exact message should be displayed.

    Back to the top

    Method 4
    Upon restart, use the new boot option Disable automatic restart on system failure. If this option is selected, you can get the STOP error codes and then continue accordingly
     
  9. ettu

    ettu Registered Member

    Joined:
    Dec 17, 2005
    Posts:
    18
    Location:
    Featherston, New Zealand
    Heres hoping size isn't an issue ......
     
  10. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,695
    Hi,
    You could ask someone to create for you a BartPE bootable Windows disk. Then you can log on, save the user data, check the disk and even scan for viruses and spyware. The extended Ultimate Boot CD for Windows based on BartPE includes disk diagnostics, backup, parititon, and imaging tools, cd burner software, anti-virus, spybot, ad-aware etc.
    Ask for links if you need.
    Ask someone to create one for you.
    It's the most handsome Windows tool you can have.
    Mrk
     
Loading...
Thread Status:
Not open for further replies.