Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

XP Pro - Recovery Console


  • Please log in to reply

#1
HelBel65

HelBel65

    Member

  • Member
  • PipPip
  • 34 posts
Hi

Following a malware infection which has been cleaned up with the help of one of your colleagues

http://www.geekstogo...ck-t262176.html

I am now up and running again but unable to load the Recovery Console. It tries to load but then goes to a BSoD with the following code

STOP: 0x0000007B (0xF7CAF524, 0xC0000034, 0x00000000, 0x00000000)

Your colleague CatByte suggested I post on here. The RC was installed by ComboFix.

Thanks

Helen
  • 0

Advertisements


#2
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Hello HelBel65.... Welcome to GeeksToGo,,
What model is your Dell?
Have you gotten the original drivers reinstalled?
What is the reasoning for needing the RC?





.
  • 0

#3
HelBel65

HelBel65

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Hi

It's a Dimension 8400 P4

It might be easier if you glance through the thread to see what has happened, I'm not sure I can describe it all that clearly! So I'm not sure whether they are the original drivers, or even to which drivers you refer.

The reason for needing the RC was that the very first offer of help from your colleague CatByte involved launching the RC, at which point we realised that it wasn't there. I installed RC using ComboFix (after the infection had been cleared up, previously it stopped ComboFix from loading) but have had this BSoD every time I have tried to use it.

Many thanks for your help

Helen
  • 0

#4
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
You probably are getting a BSOD trying to use it because it seems the removal of ComboFix may have removed it also.
Try this and see if it will work.

Download Windows Recovery Console HERE
Download, and install free Imgburn
Using Imgburn, burn rc.iso to a CD.
Boot to the CD...let it finish loading.
When the "Welcome to Setup" screen appears, press R to start the Recovery Console.


Let me know if you can access it this way.
  • 0

#5
CatByte

CatByte

    GeekU Teacher

  • GeekU Moderator
  • 2,636 posts
  • MVP
Hi,

If I could just interject here

You probably are getting a BSOD trying to use it because it seems the removal of ComboFix may have removed it also.

That isn't the case:

The RC was manually installed initially, but could not be accessed.

RC was uninstalled totally and reinstalled using CF

The computer still fails to boot into RC

I thought there may be a reason some dell's don't boot from RC if installed possibly due to no Raid/Sata drivers.

But may boot from an installation disk.

She had a disk controller hijack.



I suggested she post here so you could check if her drivers are up to date etc.
  • 0

#6
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Thanks Catbyte , that is why I suggested getting the standalone RC to see if she could get to RC that way.
Go to the Dell Dimension 8400 drivers page and there you will find all the original drivers for your system.
Can you do the following and this will tell me if your drivers are all installed and working correctly.

Please Go to
1: STARTand the click on RUN
2: Type in devmgmt.msc
3: Click Enter

To do a screenshot please have click on your Print Screen on your keyboard. It is normally the key above your number pad between the F12 key and the Scroll Lock key
Now go to Start and then to All Programs
Scroll to Accessories and then click on Paint
In the Empty White Area click and hold the CTRL key and then click the V
Go to the File option at the top and click on Save as
Save as file type JPEG and save it to your Desktop


Attach it to your next reply
  • 0

#7
HelBel65

HelBel65

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Thank you CatByte

At first when trying to access RC, and before I knew if it was there or not, I got a black screen with a flashing cursor, which didn't respond to anything.

Following CatByte's instructions I installed RC using CFix, uninstalled and reinstalled to be sure following the clean up of the infection, but have only ever had a blue screen when trying to access it. As I mentioned before, I know it is there because it tries to load...but then fails.

One thing I haven't tried is respond to RC when it says, before crashing (something like) "Press F6 if you want to install 3rd party RAID/SATA drivers" - mainly because I don't know what it means!

Helen
  • 0

#8
HelBel65

HelBel65

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Sorry rshaffer, think we were replying to CatByte at the same moment!

I can't get Print screen to work. Nothing happens when I try to paste into the Paint (or Notepad) document. If you were looking for yellow exclamation marks next to anything in Device Manager however, there are none.

Helen
  • 0

#9
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
If there are none then the drivers are all working correctly.
After the stop error code is there any other information like
inaccessible boot device?
  • 0

#10
HelBel65

HelBel65

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
No...just what I quoted.
Helen
  • 0

Advertisements


#11
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Thanks HelBel65 and have you tried what I suggested in post # 4 to see if you can egt to Recovery Console that way?
  • 0

#12
HelBel65

HelBel65

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Hi

Yes I did try that before when I was originally trying to install RC without an XP cd.

Just tried it again to be sure, and I got the same message

'Setup did not find any hard disk drives installed in your computer'

This is odd as I'm posting this from the same computer! It now works perfectly normally apart from the RC problem.

Helen
  • 0

#13
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
Go to
Start and then to Run
Type in Chkdsk /r Note the space between k and /
Click Enter ...It will probably ask if you want to do this on the next reboot...click Y
If the window doesn't shutdown on its own then reboot the system manually. On reboot the system will start the chkdsk operation
This one will take longer then chkdsk /f

Note... there are 5 stages...
It may appear to hang at a certain percent for a hour or more or even back up and go over the same area...this is normal...
DO NOT SHUT YOUR COMPUTER DOWN WHILE CHKDSK IS RUNNING OR YOU CAN HAVE SEVERE PROBLEMS
This can take several hours to complete.
When completed it will boot the system back into windows.

Let me know if this fixes the problem
  • 0

#14
HelBel65

HelBel65

    Member

  • Topic Starter
  • Member
  • PipPip
  • 34 posts
Hi

If you read the thread I linked you to you'll see that I have tried this twice already.

Many thanks anyway

Helen
  • 0

#15
rshaffer61

rshaffer61

    Moderator

  • Moderator
  • 34,114 posts
I have read the malware topic and what you tried there is to run the chkdsk /r from a command prompt.
I have suggested running it from the start menu and not running it form the command window.
Second of all the RC I asked about is a standalone program and does not depend on the OS to run. If you burned it to a cd as a ISO or Image then it is self booting.
Since this does not work then I take what you have is the recovery disk for your system and not a full Genuine Microsoft XP Installation disk?
A recovery disk will not work for certain commands.
Please try the following and again it may not work since it seems you have a recovery disk and not a full version of xp. Included are direction with and without a disk.

Go Start and then to Run ("Start Search" in Vista),
Type in: sfc /scannow
Click OK (Enter in Vista).
Have Windows CD/DVD handy.
If System File Checker (sfc) finds any errors, it may ask you for the CD/DVD.
If sfc does not find any errors in Windows XP, it will simply quit, without any message.
In Vista you will receive the following message: "Windows resource protection did not find any integrity violations".

For Vista users ONLY: Navigate to C:\Windows\Logs\CBS folder. You'll see CBS.log file.
Usually, it's pretty big file, so upload it to Flyupload, and post download link.


If you don't have Windows CD....
This applies mostly to Windows XP, since Vista rarely requires use of its DVD while running "sfc"
Note This method will not necessarily work as well, as when using Windows CD, because not always ALL system files are backed up on your hard drive. Also, backed up files may be corrupted as well.

Go Start and then Run
type in regedit and click OK


Navigate to the following key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup

You will see various entries Values on the right hand side.

The one we want is called: SourcePath

It probably has an entry pointing to your CD-ROM drive, usually D and that is why it is asking for the XP CD.
All we need to do is change it to: C:
Now, double click the SourcePatch setting and a new box will pop up.
Change the drive letter from your CD drive to your root drive, usually C:
Close Registry Editor.

Now restart your computer and try sfc /scannow again!


Thanks to Broni for the instructions



Revised and Simplified:


Do you have a valid XP CD?

If so, place it in your CD ROM drive and follow the instructions below:
  • Click on Start and select Run... type sfc /scannow (note the space) (Let this run undisturbed until the window with the blue progress bar goes away)

SFC
- Which stands for System File Checker,
retrieves the correct version of the file from %Systemroot%\System32\Dllcache or the Windows installation source files, and then replaces the incorrect file.
If you want to see what was replaced, right-click My Computer and click on Manage. In the new window that appears, expand the Event Viewer (by clicking on the + symbol next to it) and then click on System.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP