Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Antivirus programs, Malwarebytes, SpyBot, AVG, RKill, etc. will not st


  • This topic is locked This topic is locked

#76
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Please do the following. If any step looks different than how I describe or you have a question please stop and ask. Thank you.

 

Restore Registry Hives

1. At this point you should be at a command-prompt that will likely be X:\windows\system32>

2. Assuming the C: drive is your main windows drive (if you are not sure you can verify using notepad like you did previously), type c: and hit enter on the keyboard. That is the letter C and a colon.

3. You will now be at the C:\> prompt.

4. Type cd windows\erdnt\hiv-backup and hit enter on the keyboard. That is the letters cd followed by a space and then windows\erdnt\hiv-backup.

5. You should now be at c:\Windows\erdnt\Hiv-backup>

6. Type copy system c:\windows\system32\config\system and hit enter on the keyboard. You should get a message asking if you wish to overwrite. Type Yes and hit enter on the keyboard. It should say 1 file copied.

7. Type copy software c:\windows\system32\config\software and hit enter on the keyboard. Answer Yes to the overwrite message and hit enter. It should say 1 file copied.

8. Type exit and hit enter on the keyboard. Remove the USB drive and click the Restart button.

 

Let me know if your computer boots up.
 


  • 0

Advertisements


#77
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

Brian,

 

I cannot get to the window to choose the "command prompt".

 

After the screen "will attempt to locate your Windows 7 Installation" and selecting "next", it just loops through the "startup repair - checking your system for problems" endlessly...


Edited by carolinachris, 08 September 2015 - 10:42 AM.

  • 0

#78
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

??


  • 0

#79
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

??

Brian,

 

Okay, it FINALLY stopped and I am at the command prompt...

 

At the prompt C:\> when I type cd windows\erdnt\hiv-backup (C:\>cd windows\erdnt\hiv-backup) and hit enter, I received this output:

 

"The system cannot find the path specified."


Edited by carolinachris, 08 September 2015 - 11:11 AM.

  • 0

#80
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

That likely means that the C:\ drive isn't really your C:\drive when booted into Windows.

 

Type bcdedit | find “osdevice” and hit enter. That is bcdedit followed by a space followed by the pipe character (this is they key above the enter key...you likely have to hold down the Shift button while pressing it), followed by a space and then the word find followed by a space followed by quotation mark followed by osdevice followed by a quotation mark.

 

Which ever driver letter is returned is the one you need to be using.
 


  • 0

#81
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

That likely means that the C:\ drive isn't really your C:\drive when booted into Windows.

 

Type bcdedit | find “osdevice” and hit enter. That is bcdedit followed by a space followed by the pipe character (this is they key above the enter key...you likely have to hold down the Shift button while pressing it), followed by a space and then the word find followed by a space followed by quotation mark followed by osdevice followed by a quotation mark.

 

Which ever driver letter is returned is the one you need to be using.
 

Brian,

 

I typed -  C:\>bcdedit | find “osdevice” and received the output:

osdevice                                                            partition=D:

C:\>


  • 0

#82
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Excellent. You need to use the D:\ drive instead. Modified instructions are below.

 

Restore Registry Hives

1. At this point you should be at a command-prompt that will likely be X:\windows\system32>

2. Assuming the D: drive is your main windows drive (if you are not sure you can verify using notepad like you did previously), type d: and hit enter on the keyboard. That is the letter D and a colon.

3. You will now be at the D:\> prompt.

4. Type cd windows\erdnt\hiv-backup and hit enter on the keyboard. That is the letters cd followed by a space and then windows\erdnt\hiv-backup.

5. You should now be at d:\Windows\erdnt\Hiv-backup>

6. Type copy system d:\windows\system32\config\system and hit enter on the keyboard. You should get a message asking if you wish to overwrite. Type Yes and hit enter on the keyboard. It should say 1 file copied.

7. Type copy software d:\windows\system32\config\software and hit enter on the keyboard. Answer Yes to the overwrite message and hit enter. It should say 1 file copied.

8. Type exit and hit enter on the keyboard. Remove the USB drive and click the Restart button.

 

Let me know if your computer boots up.


  • 0

#83
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

Brian,

 

Restore Registry Hives steps #1 - #8 went perfectly.
 
But, upon clicking, "Restart", the computer does the same looping as before.
 
It just loops over and over from the the Samsung (F2 for setup and F4 for Recovery) screen, to a black screen, then it adds a blinking curser at the top left, then it goes back to the Samsung screen.
 
Do we need to reset the bios to boot from drive d?

  • 0

#84
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

Do we need to reset the bios to boot from drive d?

 

You can go ahead and reset the BIOS to the way it was and see if your computer boots. Let me know.


  • 0

#85
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

Brian,

 

Restored the boot sequence, but nothing has changed and F8 still doesn't work.

 

Boot priority starts with:

1. AHCI HDD : SAMSUNG HM500JI

 

Just keeps looping...


Edited by carolinachris, 08 September 2015 - 12:00 PM.

  • 0

Advertisements


#86
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

OK, let's restore a few other hives (one of them being your Boot Configuration Database). Again stop on any step that doesn't provide the expected outcome as described.

 

Restore Registry Hives

1. Boot back using the USB drive. At this point you should be at a command-prompt that will likely be X:\windows\system32>

2. Assuming the D: drive is your main windows drive (if you are not sure you can verify using notepad like you did previously), type d: and hit enter on the keyboard. That is the letter D and a colon.

3. You will now be at the D:\> prompt.

4. Type cd windows\erdnt\hiv-backup and hit enter on the keyboard. That is the letters cd followed by a space and then windows\erdnt\hiv-backup.

5. You should now be at d:\Windows\erdnt\Hiv-backup>

6. Type copy BCD c:\boot\bcd and hit enter on the keyboard. You should get a message asking if you wish to overwrite. Type Yes and hit enter on the keyboard. It should say 1 file copied.

7. Type copy security d:\windows\system32\config\security and hit enter on the keyboard. Answer Yes to the overwrite message and hit enter. It should say 1 file copied.

8. Type copy default d:\windows\system32\config\default and hit enter on the keyboard. Answer Yes to the overwrite message and hit enter. It should say 1 file copied.

9. Type copy SAM d:\windows\system32\config\SAM and hit enter on the keyboard. Answer Yes to the overwrite message and hit enter. It should say 1 file copied.

10. Type exit and hit enter on the keyboard. Remove the USB drive and click the Restart button.

 

Let me know if your computer boots up.


  • 0

#87
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

Brian,

 

Restore Registry Hives:

 

Steps #1 - #5 went fine.

 

Step #6:

D:\Windows\erdnt\HIV-backup>copy BCD c:\boot\bcd

Overwrite c:\boot\bcd? <Yes/No/All>: Yes

Access is denied.

             0 file(s) copied 


Edited by carolinachris, 08 September 2015 - 12:34 PM.

  • 0

#88
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

That's not normal. Type the following and hit enter and let me know what is returned.

attrib c:\boot\bcd

 

Mine returns

A             C:\boot\BCD


  • 0

#89
carolinachris

carolinachris

    Member

  • Topic Starter
  • Member
  • PipPip
  • 80 posts

Brian,

 

D:\Windows\erdnt\Hiv-backup>attrib c:\boot\bcd

A   SH              C:\boot\BCD


  • 0

#90
BrianDrab

BrianDrab

    Trusted Helper

  • Malware Removal
  • 3,591 posts

OK. Type the following then and hit enter.

 

attrib -s -h C:\Boot\BCD

 

Then type attrib c:\boot\bcd

 

Verify that it now shows as

 

A             C:\boot\BCD


  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP