[kmariie]

Hi,
I have an advent Roma 2001 on windows 7
This is what happened, I ran hitman pro and to delete all the issues detected i had to reboot, so i did.
Ever since then the computer wont boot, it starts up then it shows a black screen and a blue screen and restarts, like an endless cycle.
Ive tried restoring and everything but i still have the same problem
any help would be much appreciated

[Advertisements]

Hi,

Lets give it a try.

We will need to view the system status from an external environment. You will need a USB drive and a CD to burn. There will be several steps to follow.

Download GETxPUD.exe to the desktop of your clean computer

• Run GETxPUD.exe
• A new folder will appear on the desktop.
• Open the GETxPUD folder and click on the get&burn.bat
• The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
• Click on Start and follow the prompts to burn the image to a CD.
• Next download driver.sh to your USB drive
• Also Download Query.exe to the USB drive. In your working computer, navigate to the USB drive and click on the Query.exe. A folder and a file, query.sh, will be extracted.
• Remove the USB & CD and insert them in the sick computer
• Boot the Sick computer with the CD you just burned
• The computer must be set to boot from the CD
• In some computers you need to tap F12 and choose to boot from the CD, in others is the Esc key. Please consult your computer's documentation.
• Follow the prompts
• A Welcome to xPUD screen will appear
• Press File
• Expand mnt
• sda1,2...usually corresponds to your HDD
• sdb1 is likely your USB
• Click on the folder that represents your USB drive (sdb1 ?)
• Confirm that you see driver.sh that you downloaded there
• Press Tool at the top
• Choose Open Terminal
• Type bash driver.sh
• Press Enter
• After it has finished a report will be located on your USB drive named report.txt
• Then type bash driver.sh -af
• Press Enter
• You will be prompted to input a filename.
• Type the following:
  
  

  Winlogon.exe

• Press Enter
• If successful, the script will search for this file.
• After it has completed the search enter the next file to be searched
• Type the following:
  
  

  explorer.exe

• Press Enter
• After it has completed the search enter the next file to be searched
• Type the following:
  
  

  Userinit.exe

• Press Enter
• After the search is completed type Exit and press Enter.
• After it has finished a report will be located in the USB drive as filefind.txt
• While still in the Open Terminal, type bash query.sh
• Press Enter
• After it has finished a report will be located in the USB drive as RegReport.txt
• Then type dd if=/dev/sda of=mbr.bin bs=512 count=1
  
  
  

  Leave a space among the following Statements:
  
  dd is the executable application used to create the backup
  if=/dev/sda is the device the backup is created from - the hard drive when only one HDD exists
  of=mbr.bin is the backup file to create - note the lack of a path - it will be created in the directory currently open in the Terminal
  bs=512 is the number of bytes in the backup
  count=1 says to backup just 1 sector
  
  
  It is extremely important that the if and of statements are correctly entered.

• Press Enter
• After it has finished a report will be located in the USB drive as mbr.bin
• Plug the USB back into the clean computer, zip the mbr.bin, and except for the mbr.bin zipped file, post the contents of the report.txt, filefind.txt and RegReport.txt in your next reply. The mbr.bin zipped file must be attached to your reply.

[JSntgRvr]

Hi,

Lets give it a try.

We will need to view the system status from an external environment. You will need a USB drive and a CD to burn. There will be several steps to follow.

Download GETxPUD.exe to the desktop of your clean computer

• Run GETxPUD.exe
• A new folder will appear on the desktop.
• Open the GETxPUD folder and click on the get&burn.bat
• The program will download xpud_0.9.2.iso, and upon finished will open BurnCDCC ready to burn the image.
• Click on Start and follow the prompts to burn the image to a CD.
• Next download driver.sh to your USB drive
• Also Download Query.exe to the USB drive. In your working computer, navigate to the USB drive and click on the Query.exe. A folder and a file, query.sh, will be extracted.
• Remove the USB & CD and insert them in the sick computer
• Boot the Sick computer with the CD you just burned
• The computer must be set to boot from the CD
• In some computers you need to tap F12 and choose to boot from the CD, in others is the Esc key. Please consult your computer's documentation.
• Follow the prompts
• A Welcome to xPUD screen will appear
• Press File
• Expand mnt
• sda1,2...usually corresponds to your HDD
• sdb1 is likely your USB
• Click on the folder that represents your USB drive (sdb1 ?)
• Confirm that you see driver.sh that you downloaded there
• Press Tool at the top
• Choose Open Terminal
• Type bash driver.sh
• Press Enter
• After it has finished a report will be located on your USB drive named report.txt
• Then type bash driver.sh -af
• Press Enter
• You will be prompted to input a filename.
• Type the following:
  
  

  Winlogon.exe

• Press Enter
• If successful, the script will search for this file.
• After it has completed the search enter the next file to be searched
• Type the following:
  
  

  explorer.exe

• Press Enter
• After it has completed the search enter the next file to be searched
• Type the following:
  
  

  Userinit.exe

• Press Enter
• After the search is completed type Exit and press Enter.
• After it has finished a report will be located in the USB drive as filefind.txt
• While still in the Open Terminal, type bash query.sh
• Press Enter
• After it has finished a report will be located in the USB drive as RegReport.txt
• Then type dd if=/dev/sda of=mbr.bin bs=512 count=1
  
  
  

  Leave a space among the following Statements:
  
  dd is the executable application used to create the backup
  if=/dev/sda is the device the backup is created from - the hard drive when only one HDD exists
  of=mbr.bin is the backup file to create - note the lack of a path - it will be created in the directory currently open in the Terminal
  bs=512 is the number of bytes in the backup
  count=1 says to backup just 1 sector
  
  
  It is extremely important that the if and of statements are correctly entered.

• Press Enter
• After it has finished a report will be located in the USB drive as mbr.bin
• Plug the USB back into the clean computer, zip the mbr.bin, and except for the mbr.bin zipped file, post the contents of the report.txt, filefind.txt and RegReport.txt in your next reply. The mbr.bin zipped file must be attached to your reply.

[kmariie]

hi thankyou for replying

Edited by kmariie, 12 April 2011 - 06:16 PM.

[kmariie]

Wed Apr 13 00:38:39 UTC 2011
Driver report for /mnt/sda2/Windows/System32/drivers
30b90793a568281bef70fa57dde305a2 hitmanpro35.sys has NO Company Name!
58a6eb33ea17ccc8042771634097a32b LiveIO.sys has NO Company Name!

fbce2f43185104ae8bf4d32571b19203 1394bus.sys
Microsoft Corporation

6d2aca41739bfe8cb86ee8e85f29697d 1394ohci.sys
Microsoft Corporation

98d81ca942d19f7d9153b095162ac013 acpipmi.sys
Microsoft Corporation

f0e07d144c8685b8774bc32fc8da4df0 acpi.sys
Microsoft Corporation

21e785ebd7dc90a06391141aac7892fb adp94xx.sys
Adaptec

0c676bc278d5b59ff5abd57bbe9123f2 adpahci.sys
Adaptec

7c7b5ee4b7b822ec85321fe23a27db33 adpu320.sys
Adaptec

ddc040fdb01ef1712a6b13e52afb104c afd.sys
Microsoft Corporation

201044950d59cdc0a3f6c44352bb35e4 AfwCore.sys
?baStringFileInfoB:rCompanyNameAgnitumLtd.bFileDescriptionAgnitumFirewallCoreDriverv+FileVersion...forWLHxbuiltby:WinDDKbInternalNameafwcore.sysl$LegalCopyrightAgnitumLtd.Allrightsreserved.@bOriginalFilenameafwcore.sysBProductNameOutpostFirewall@ProductVersion...DVarFileInfo$Translationt*

d930305ae5dda4a95d659961303c7693 Afw.sys
?baStringFileInfoB:rCompanyNameAgnitumLtd.bFileDescriptionAgnitumFirewallNDISDriverv+FileVersion...forWLHxbuiltby:WinDDKbInternalNameafw.sysl$LegalCopyrightAgnitumLtd.Allrightsreserved.bOriginalFilenameafw.sysBProductNameOutpostFirewall@ProductVersion...DVarFileInfo$Translationt*

57ec4aef73660166074d8f7f31c0d4fd agilevpn.sys
Microsoft Corporation

507812c3054c21cef746b6ee3d04dd6e AGP440.sys
Microsoft Corporation

0d40bcf52ea90fc7df2aeab6503dea44 aliide.sys
Acer Laboratories

3c6600a0696e90a463771c7422e23ab5 AMDAGP.SYS
Microsoft Corporation

cd5914170297126b6266860198d1d4f0 amdide.sys
Microsoft Corporation

00dda200d71bac534bf56a9db5dfd666 amdk8.sys
Microsoft Corporation

3cbf30f5370fda40dd3e87df38ea53b6 amdppm.sys
Microsoft Corporation

2101a86c25c154f8314b24ef49d7fbc2 amdsata.sys
Advanced Micro Devices

ea43af0c423ff267355f74e7a53bdaba amdsbs.sys
AMD Technologies

b81c2b5616f6420a9941ea093a92b150 amdxata.sys
Advanced Micro Devices

feb834c02ce1e84b6a38f953ca067706 appid.sys
Microsoft Corporation

5d6f36c46fd283ae1b57bd2e9feb0bc7 arcsas.sys
Adaptec

2932004f49677bd84dbc72edb754ffb3 arc.sys
Adaptec

add2ade1c2b285ab8378d2daaf991481 asyncmac.sys
Microsoft Corporation

338c86357871c167a96ab976519bf59e atapi.sys
Microsoft Corporation

bca15585efdde7eba8568bdfb75983a3 ataport.sys
Microsoft Corporation

bd8869eb9cde6bbe4508d869929869ee b57nd60x.sys
Broadcom Corporation

2b8ee031fd700ab942ebe60665440e83 battc.sys
Microsoft Corporation

8c455a0b7bcd2bec2919a4da525d53bd BdFileSpy.sys
tH`VS_VERSION_INFO@?baStringFileInfopB>CompanyNameBullGuardLtd.bFileDescriptionBullGuardFileMonitor(x)VFileVersion...builtby:WinDDK<InternalNameBdFileSpy.sysLegalCopyright-,BullGuardLtd.Allrightsreserved.DOriginalFilenameBdFileSpy.sysnProductNameBullGuard$ProductVersionDVarFileInfo$Translationt*

505506526a9d467307b3c393dedaf858 beep.sys
Microsoft Corporation

2287078ed48fcfc477b05b20cf38f36f blbdrive.sys
Microsoft Corporation

fcafaef6798d7b51ff029f99a9898961 bowser.sys
Microsoft Corporation

9f9acc7f7ccde8a15c282d3f88b43309 BrFiltLo.sys
Brother Industries

56801ad62213a41f6497f96dee83755a BrFiltUp.sys
Brother Industries

77361d72a04f18809d0efb6cceb74d4b bridge.sys
Microsoft Corporation

845b8ce732e67f3b4133164868c666ea BrSerId.sys
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries
Brother Industries

203f0b1e73adadbbb7b7b1fabd901f6b BrSerWdm.sys
Brother Industries

bd456606156ba17e60a04e18016ae54b BrUsbMdm.sys
Brother Industries

af72ed54503f717a43268b3cc5faec2e BrUsbSer.sys
Brother Industries

ed3df7c56ce0084eb2034432fc56565a bthmodem.sys
Microsoft Corporation

4a34888e13224678dd062466afec4240 bthport.sys
Microsoft Corporation

fa04c63916fa221dbb91fce153d07a55 BTHUSB.SYS
Microsoft Corporation

1a231abec60fd316ec54c66715543cec bxvbdx.sys
Broadcom Corporation

77ea11b065e0a8ab902d78145ca51e10 cdfs.sys
Microsoft Corporation

9714b7c918c6543d69074ec101f86ac4 cdr4_xp.sys
Sonic Solutions

0d856d16c08440bfb566d6cdd9948d4e cdralw2k.sys
Sonic Solutions

ba6e70aa0e6091bc39de29477d866a77 cdrom.sys
Microsoft Corporation

3fe3fe94a34df6fb06e6418d0f6a0060 circlass.sys
Microsoft Corporation

a6388a5abf92c7927c085db0a958125f Classpnp.sys
Microsoft Corporation

8d4136847c6d647f70b54e1227e53c66 clwvd.sys
tH`KVS_VERSION_INFO?bStringFileInfoB^CompanyNameWindows®WinDDKproviderhFileDescriptionCyberLinkWebCamVirtualDriver`FileVersion..*

dea805815e587dad1dd2c502220b5616 CmBatt.sys
Microsoft Corporation

c537b1db64d495b9b4717b4d6d9edbf2 cmdide.sys
CMD Technology

1b675691ed940766149c93e8f4488d68 cng.sys
Microsoft Corporation

a6023d3823c37043986713f118a89bee compbatt.sys
Microsoft Corporation

f1724ba27e97d627f808fb0ba77a28a6 CompositeBus.sys
Microsoft Corporation

b7efef22ff426ec4158a177cb3b558d3 crashdmp.sys
Microsoft Corporation

2c4ebcfc84a9b44f209dff6c6e6c61d1 crcdisk.sys
Microsoft Corporation

8e09e52ee2e3ceb199ef3dd99cf9e3fb dfsc.sys
Microsoft Corporation

1a050b0274bfb3890703d490f330c0da discache.sys
Microsoft Corporation

3d8bdf695ba1569995027ad904f847e9 Diskdump.sys
Microsoft Corporation

565003f326f99802e68ca78f2a68e9ff disk.sys
Microsoft Corporation

8b30250d573a8f6b4bd23195160d8707 djsvs.sys
Adaptec

b918e7c5f9bf77202f89e1a9539f2eb4 drmkaud.sys
Microsoft Corporation

27f9288af019e6daca281ede51ff5928 drmk.sys
Microsoft Corporation

5428227d4730ebdfc842e9fb593f8c8a Dumpata.sys
Microsoft Corporation

62a63ef2f3053b461cb327e4d69aaa74 dumpfve.sys
Microsoft Corporation

5fcd3320aae71506b43f9e12e4e72172 dxapi.sys
Microsoft Corporation

1679a4669326cb1a67cc95658d273234 dxgkrnl.sys
Microsoft Corporation

feffa0efe5b593f4a3f4fcd739457ade dxgmms1.sys
Microsoft Corporation

1b6242b20cb56f85a158e67f09ee84fe dxg.sys
Microsoft Corporation

0ed67910c8c326796faa00b2bf6d9d3c elxstor.sys
Emulex

8fc3208352dd3912c94367a206ab3f11 errdev.sys
Microsoft Corporation

024e1b5cac09731e4d868e64dbfb4ab0 evbdx.sys
Broadcom Corporation

2dc9108d74081149cc8b651d3a26207f exfat.sys
Microsoft Corporation

7e0ab74553476622fb6ae36f73d97d35 fastfat.sys
Microsoft Corporation

e817a017f82df2a1f8cfdbda29388b29 fdc.sys
Microsoft Corporation

6cf00369c97f3cf563be99be983d13d8 fileinfo.sys
Microsoft Corporation

42c51dc94c91da21cb9196eb64c45db9 filetrace.sys
Microsoft Corporation

87907aa70cb3c56600f1c2fb8841579b flpydisk.sys
Microsoft Corporation

7520ec808e0c35e0ee6f841294316653 fltMgr.sys
Microsoft Corporation

1a16b57943853e598cff37fe2b8cbf1d fsdepends.sys
Microsoft Corporation

a574b4360e438977038aae4bf60d79a2 fs_rec.sys
Microsoft Corporation

dafbd9fe39197495aed6d51f3b85b5d2 fvevol.sys
Microsoft Corporation

5a50439aac7bb7763237a88f0f3a337f FWPKCLNT.SYS
Microsoft Corporation

65ee0c7a58b65e74ae05637418153938 GAGP30KX.SYS
Microsoft Corporation

8182ff89c65e4d38b2de4bb0fb18564e GEARAspiWDM.sys
GEAR Software

c44e3c2bab6837db337ddee7544736db hcw85cir.sys
Hauppauge Computer Works

717a2207fd6f13ad3e664c7d5a43c7bf hdaudbus.sys
Microsoft Corporation

3530cad25deba7dc7de8bb51632cbc5f HdAudio.sys
Microsoft Corporation

1d58a7f3e11a9731d0eaaaa8405acc36 hidbatt.sys
Microsoft Corporation

89448f40e6df260c206a193a4683ba78 hidbth.sys
Microsoft Corporation

b682e1cc0fdc7ac04b71d1fa9a07ef21 hidclass.sys
Microsoft Corporation

cf50b4cf4a4f229b9f3c08351f99ca5e hidir.sys
Microsoft Corporation

6c26122f1931d4d7810240f32ddce890 hidparse.sys
Microsoft Corporation

25072fb35ac90b25f9e4e3bacf774102 hidusb.sys
Microsoft Corporation

30b90793a568281bef70fa57dde305a2 hitmanpro35.sys

295fdc419039090eb8b49ffdbb374549 HpSAMD.sys
Hewlett-Packard

c531c7fd9e8b62021112787c4e2c5a5a http.sys
Microsoft Corporation

8305f33cde89ad6c7a0763ed0b5a8d42 hwpolicy.sys
Microsoft Corporation

f151f0bdc47f4a28b1b20a0818ea36d6 i8042prt.sys
Microsoft Corporation

d483687eace0c065ee772481a96e05f5 iaStor.sys
Intel Corporation

934af4d7c5f457b9f0743f4299b77b67 iaStorV.sys
Intel Corporation

8266ae06df974e5ba047b3e9e9e70b3f igdkmd32.sys
Intel Corporation

4173ff5708f3236cf25195fecd742915 iirsp.sys
Intel Corp

e63cd0d9aa8d406cabde5aa718936f40 IntcHdmi.sys
Intel Corporation

a0f12f2c9ba6c72f3987ce780e77c130 intelide.sys
Microsoft Corporation

3b514d27bfc4accb4037bc6685f766e0 intelppm.sys
Microsoft Corporation

709d1761d3b19a932ff0238ea6d50200 ipfltdrv.sys
Microsoft Corporation

e4454b6c37d7ffd5649611f6496308a7 IPMIDrv.sys
Microsoft Corporation

a5fa468d67abcdaa36264e463a7bb0cd ipnat.sys
Microsoft Corporation

9f7e491fb0ba0f9e370163834fc1fe31 irda.sys
Microsoft Corporation

42996cff20a3084a56017b7902307e9f irenum.sys
Microsoft Corporation

1f32bb6b38f62f7df1a7ab7292638a35 isapnp.sys
Microsoft Corporation

adef52ca1aeae82b50df86b56413107e kbdclass.sys
Microsoft Corporation

3d9f0ebf350edcfd6498057301455964 kbdhid.sys
Microsoft Corporation

e36a061ec11b373826905b21be10948f ksecdd.sys
Microsoft Corporation

365c6154bbbc5377173f1ca7bfb6cc59 ksecpkg.sys
Microsoft Corporation

9e79e2354301783d5e0d48411c2a7466 ks.sys
Microsoft Corporation

f93a8ae3fe12910cffa81f72fe34c6f2 LiveGpdKBFilter.sys
?baStringFileInfoB^CompanyNameWindows®WinDDKproviderbFileDescriptionKBFiltrXFileVersion...builtby:WinDDKbInternalNameKBFiltr.sys.LegalCopyrightMicrosoftCorporation.Allrightsreserved.@bOriginalFilenameKBFiltr.sysZProductNameWindows®WinDDKdriver:vProductVersion...DVarFileInfo$Translationt*

58a6eb33ea17ccc8042771634097a32b LiveIO.sys

7fb4274918f694c0153472b094c9aff8 Livekbc.sys
tHv,,VS_VERSION_INFO?aStringFileInfofBDCompanyNameSystemsInternalsl"FileDescriptionWindowsNTCaps-lockCtrlSwapperLFileVersion.builtby:WinDDK:rInternalNamectrlcap.sysp&LegalCopyrightCopyright©M.Russinovich-BrOriginalFilenamectrlcap.SystProductNameCtrlcap.ProductVersion.DVarFileInfo$Translationt*

3b20d5249084a9b0d87ecc1c1d59d9a6 Livemouclass.sys
tH`v,,VS_VERSION_INFO?aStringFileInfofBDCompanyNameSystemsInternalsl"FileDescriptionWindowsNTCaps-lockCtrlSwapperLFileVersion.builtby:WinDDK:rInternalNamectrlcap.sysp&LegalCopyrightCopyright©M.Russinovich-BrOriginalFilenamectrlcap.SystProductNameCtrlcap.ProductVersion.DVarFileInfo$Translationt*

f7611ec07349979da9b0ae1f18ccc7a6 lltdio.sys
Microsoft Corporation

eb119a53ccf2acc000ac71b065b78fef lsi_fc.sys
LSI Corporation

dc9dc3d3daa0e276fd2ec262e38b11e9 lsi_sas2.sys
LSI Corporation

8ade1c877256a22e49b75d1cc9161f9c lsi_sas.sys
LSI Corporation

0a036c7d7cab643a7f07135ac47e0524 lsi_scsi.sys
LSI Corporation

6703e366cc18d3b6e534f5cf7df39cee luafv.sys
Microsoft Corporation

ef08d2ebe3eabba43cc57eee001027b6 mcd.sys
Microsoft Corporation

0fff5b045293002ab38eb1fd1fc2fb74 megasas.sys
LSI Corporation

dcbab2920c75f390caf1d29f675d03d6 MegaSR.sys
LSI Corporation

f001861e5700ee84e2d4e52c712f4964 modem.sys
Microsoft Corporation

79d10964de86b292320e9dfe02282a23 monitor.sys
Microsoft Corporation

fb18cc1d4c2e716b6b903b0ac0cc0609 mouclass.sys
Microsoft Corporation

2c388d2cd01c9042596cf3c8f3c7b24d mouhid.sys
Microsoft Corporation

921c18727c5920d6c0300736646931c2 mountmgr.sys
Microsoft Corporation

2af5997438c55fb79d33d015c30e1974 mpio.sys
Microsoft Corporation

ad2723a7b53dd1aacae6ad8c0bfbf4d0 mpsdrv.sys
Microsoft Corporation

b1be47008d20e43da3adc37c24cdb89d mrxdav.sys
Microsoft Corporation

5613358b4050f46f5a9832da8050d6e4 mrxsmb10.sys
Microsoft Corporation

25c9792778d80feb4c8201e62281bfdf mrxsmb20.sys
Microsoft Corporation

f1b6aa08497ea86ca6ef6f7a08b0bfb8 mrxsmb.sys
Microsoft Corporation

4326d168944123f38dd3b2d9c37a0b12 msahci.sys
Microsoft Corporation

455029c7174a2dbb03dba8a0d8bddd9a msdsm.sys
Microsoft Corporation

daefb28e3af5a76abcc2c3078c07327f msfs.sys
Microsoft Corporation

3e1e5767043c5af9367f0056295e9f84 mshidkmdf.sys
Microsoft Corporation

0a4e5757ae09fa9622e3158cc1aef114 msisadrv.sys
Microsoft Corporation

ed46c223ae46c6866ab77cdc41c404b7 msiscsi.sys
Microsoft Corporation

8c0860d6366aaffb6c5bb9df9448e631 mskssrv.sys
Microsoft Corporation

3ea8b949f963562cedbb549eac0c11ce mspclock.sys
Microsoft Corporation

f456e973590d663b1073e9c463b40932 mspqm.sys
Microsoft Corporation

0e008fc4819d238c51d7c93e7b41e560 msrpc.sys
Microsoft Corporation

fc6b9ff600cc585ea38b12589bd4e246 mssmbios.sys
Microsoft Corporation

b42c6b921f61a6e55159b8be6cd54a36 mstee.sys
Microsoft Corporation

33599130f44e1f34631cea241de8ac84 MTConfig.sys
Microsoft Corporation

159fad02f64e6381758c990f753bcc80 mup.sys
Microsoft Corporation

0e1787aa6c9191d3d319e8bafe86f80c ndiscap.sys
Microsoft Corporation

23759d175a0a9baaf04d05047bc135a8 ndis.sys
Microsoft Corporation

e4a8aec125a2e43a9e32afeea7c9c888 ndistapi.sys
Microsoft Corporation

b30ae7f2b6d7e343b0df32e6c08fce75 ndisuio.sys
Microsoft Corporation

267c415eadcbe53c9ca873dee39cf3a4 ndiswan.sys
Microsoft Corporation

af7e7c63dcef3f8772726f86039d6eb4 ndproxy.sys
Microsoft Corporation

7afd0e39ab15cb355487b7cc19f4e2c5 netaapl.sys
Apple

80b275b1ce3b0e79909db7b39af74d51 netbios.sys
Microsoft Corporation

dd52a733bf4ca5af84562a5e2f963b91 netbt.sys
Microsoft Corporation

e87fe6daf5a1b0845a0e376f4269f75b netio.sys
Microsoft Corporation

1d85c4b390b0ee09c7a46b91efb2c097 nfrd960.sys
IBM Corp

1db262a9f8c087e8153d89bef3d2235f npfs.sys
Microsoft Corporation

e9a0a4d07e53d8fea2bb8387a3293c58 nsiproxy.sys
Microsoft Corporation

3795dcd21f740ee799fb7223234215af ntfs.sys
Microsoft Corporation

f9756a98d69098dca8945d62858a812c null.sys
Microsoft Corporation

5a0983915f02bae73267cc2a041f717d NV_AGP.SYS
Microsoft Corporation

3f3d04b1d08d43c16ea7963954ec768d nvraid.sys
NVIDIA Corporation

c99f251a5de63c6f129cf71933aced0f nvstor.sys
NVIDIA Corporation

26384429fcd85d83746f63e798ab1480 nwifi.sys
Microsoft Corporation

08a70a1f2cdde9bb49b885cb817a66eb ohci1394.sys
Microsoft Corporation

6270ccae2a86de6d146529fe55b3246a pacer.sys
Microsoft Corporation

2ea877ed5dd9713c5ac74e8ea7348d14 parport.sys
Microsoft Corporation

ff4218952b51de44fe910953a3e686b9 partmgr.sys
Microsoft Corporation

eb0a59f29c19b86479d36b35983daadc parvdm.sys
Microsoft Corporation

afe86f419014db4e5593f69ffe26ce0a pciide.sys
Microsoft Corporation

ede040d666ff81bf1978d0f19f799e7a pciidex.sys
Microsoft Corporation

c858cb77c577780ecc456a892e7e7d0f pci.sys
Microsoft Corporation

f396431b31693e71e8a80687ef523506 pcmcia.sys
Microsoft Corporation

250f6b43d2b613172035c6747aeeb19f pcw.sys
Microsoft Corporation

9e0104ba49f4e6973749a02bf41344ed PEAuth.sys
Microsoft Corporation

d72708c9f49500c13d7d067e169b7715 portcls.sys
Microsoft Corporation

85b1e3a0c7585bc4aae6899ec6fcf011 processr.sys
Microsoft Corporation

153d02480a0a2f45785522e814c634b6 pxhelp20.sys
Sonic Solutions

ab95ecf1f6659a60ddc166d8315b0751 ql2300.sys
QLogic Corporation

b4dd51dd25182244b86737dc51af2270 ql40xx.sys
QLogic Corporation

584078ca1b95ca72df2a27c336f9719d qwavedrv.sys
Microsoft Corporation

30a81b53c766d0133bb86d234e5556ab rasacd.sys
Microsoft Corporation

d9f91eafec2815365cbe6d167e4e332a rasl2tp.sys
Microsoft Corporation

0fe8b15916307a6ac12bfb6a63e45507 raspppoe.sys
Microsoft Corporation

631e3e205ad6d86f2aed6a4a8e69f2db raspptp.sys
Microsoft Corporation

44101f495a83ea6401d886e7fd70096b rassstp.sys
Microsoft Corporation

835d7e81bf517a3b72384bdcc85e1ce6 rdbss.sys
Microsoft Corporation

0d8f05481cb76e70e1da06ee9f0da9df rdpbus.sys
Microsoft Corporation

1e016846895b15a99f9a176a05029075 RDPCDD.sys
Microsoft Corporation

5a53ca1598dd4156d44196d200c94b8a RDPENCDD.sys
Microsoft Corporation

44b0a53cd4f27d50ed461dae0c0b4e1f RDPREFMP.sys
Microsoft Corporation

801371ba9782282892d00aadb08ee367 rdpwd.sys
Microsoft Corporation

4ea225bf1cf05e158853f30a99ca29a7 rdyboost.sys
Microsoft Corporation

b4090006a82eeb608c358ab5d37de85a rmcast.sys
Microsoft Corporation

7400cfab5cf36f2294e80b3f3bda3ebc RNDISMP.sys
Microsoft Corporation

564297827d213f52c7a3a2ff749568ca rootmdm.sys
Microsoft Corporation

032b0d36ad92b582d869879f5af5b928 rspndr.sys
Microsoft Corporation

26a9d6227d12b9d9da5a81bb9b55d810 Rt86win7.sys
?bStringFileInfoBCompanyNameRealtek*

2c314284938e308da50d49e50404d9fc RTKVHDA.sys
Realtek Semiconductor

1117352dd3f1f457d6b2d0bcab9611be rtl8187Se.sys
Realtek Semiconductor

f9541f3b59da30423f2f76ef443c07fc RtsUStor.sys
Realtek Semiconductor

34ee0c44b724e3e4ce2eff29126de5b5 sbp2port.sys
Microsoft Corporation

a95c54b2ac3cc9c73fcdf9e51a1d6b51 scfilter.sys
Microsoft Corporation

f9882099e58ecf8b0e1c7afa5d2cc56d scsiport.sys
Microsoft Corporation

90a3935d05b494a5a39d37e71f09a677 secdrv.sys
Macrovision Corporation

9ad8b8b515e3df6acd4212ef465de2d1 serenum.sys
Microsoft Corporation

5fb7fcea0490d821f26f39cc5ea3d1e2 serial.sys
Microsoft Corporation

79bffb520327ff916a582dfea17aa813 sermouse.sys
Microsoft Corporation

9f976e1eb233df46fce808d9dea3eb9c sffdisk.sys
Microsoft Corporation

932a68ee27833cfd57c1639d375f2731 sffp_mmc.sys
Microsoft Corporation

4f1e5b0fe7c8050668dbfade8999aefb sffp_sd.sys
Microsoft Corporation

db96666cc8312ebc45032f30b007a547 sfloppy.sys
Microsoft Corporation

2565cac0dc9fe0371bdce60832582b2e SISAGP.SYS
Microsoft Corporation

a9f0486851becb6dda1d89d381e71055 sisraid2.sys
Silicon Integrated Systems

3727097b55738e2f554972c3be5bc1aa sisraid4.sys
Silicon Integrated Systems

3e21c083b8a01cb70ba1f09303010fce smb.sys
Microsoft Corporation

2e467e6ca8e0a140c08011844c0d3936 smclib.sys
Microsoft Corporation

95cf1ae7527fb70f7816563cbc09d942 spldr.sys
Microsoft Corporation

d16d818e9930a6e5b4f6476dd0998d1a spsys.sys
Microsoft Corporation

db37131d1027c50ea7ee21c8bb4536aa srv2.sys
Microsoft Corporation

f5980b74124db9233b33f86fc5ebbb4f srvnet.sys
Microsoft Corporation

2dbedfb1853f06110ec2aa7f3213c89f srv.sys
Microsoft Corporation

db32d325c192b801df274bfd12a7e72b stexstor.sys
Promise Technology

55dca8693ed545fd7f2f93776e294ae2 storport.sys
Microsoft Corporation

45b44fc9e5ac0db02b19d515ee809de5 stream.sys
Microsoft Corporation

e58c78a848add9610a4db6d214af5224 swenum.sys
Microsoft Corporation

292307a8e0ddce66e8d5dfa2635f72a5 SynTP.sys
Synaptics

949c35bf4ae6c110a924ab5e2175dda7 tape.sys
Microsoft Corporation

e64444523add154f86567c469bc0b17f tcpipreg.sys
Microsoft Corporation

bb7f39c31c4a4417fd318e7cd184e225 tcpip.sys
Microsoft Corporation

52639c994fe3cd975bfe7428b939b320 tdi.sys
Microsoft Corporation

1875c1490d99e70e449e3afae9fcbadf tdpipe.sys
Microsoft Corporation

7551e91ea999ee9a8e9c331d5a9c31f3 tdtcp.sys
Microsoft Corporation

cb39e896a2a83702d1737bfd402b3542 tdx.sys
Microsoft Corporation

c36f41ee20e6999dbf4b0425963268a5 termdd.sys
Microsoft Corporation

98ae6fa07d12cb4ec5cf4a9bfa5f4242 tssecsrv.sys
Microsoft Corporation

3e461d890a97f9d4c168f5fda36e1d00 tunnel.sys
Microsoft Corporation

750fbcb269f4d7dd2e420c56b795db6d UAGP35.SYS
Microsoft Corporation

09cc3e16f8e5ee7168e01cf8fcbe061a udfs.sys
Microsoft Corporation

44e8048ace47befbfdc2e9be4cbc8880 ULIAGPKX.SYS
Microsoft Corporation

049b3a50b3d646baeeee9eec9b0668dc umbus.sys
Microsoft Corporation

7550ad0c6998ba1cb4843e920ee0feac umpass.sys
Microsoft Corporation

b71da871254d96d0349639d03e4c1cc1 usb8023.sys
Microsoft Corporation

5c2bdc152bbab34f36473deaf7713f22 usbaapl.sys
Apple

2190f65ec7e9ae7a301e01e4261acef8 USBCAMD2.sys
Microsoft Corporation

47d88f155eb4e4be60ebd76ac8d17db7 USBCAMD.sys
Microsoft Corporation

8455c4ed038efd09e99327f9d2d48ffa usbccgp.sys
Microsoft Corporation

04ec7cec62ec3b6d9354eee93327fc82 usbcir.sys
Microsoft Corporation

18e71ea0e063037a5c3c8272a5262b7c usbd.sys
Microsoft Corporation

1c333bfd60f2fed2c7ad5daf533cb742 usbehci.sys
Microsoft Corporation

ee6ef93ccfa94fae8c6ab298273d8ae2 usbhub.sys
Microsoft Corporation

a6fb7957ea7afb1165991e54ce934b74 usbohci.sys
Microsoft Corporation

f6d1c957c5bf4f274aad1da7059916e4 usbport.sys
Microsoft Corporation

797d862fe0875e75c7cc4c1ad7b30252 usbprint.sys
Microsoft Corporation

fb9f340ecacdaeb939372cc543e72c6d usbrpm.sys
Microsoft Corporation

d8889d56e0d27e57ed4591837fe71d27 USBSTOR.SYS
Microsoft Corporation

78780c3ebce17405b1ccd07a3a8a7d72 usbuhci.sys
Microsoft Corporation

b5f6a992d996282b7fae7048e50af83a usbvideo.sys
Microsoft Corporation

a059c4c3edb09e07d21a8e5c0aabd3cb vdrvroot.sys
Microsoft Corporation

17c408214ea61696cec9c66e388b14f3 vgapnp.sys
Microsoft Corporation

8e38096ad5c8570a6f1570a61e251561 vga.sys
Microsoft Corporation

3be6e1f3a4f1afec8cee0d7883f93583 vhdmp.sys
Microsoft Corporation

c829317a37b4bea8f39735d4b076e923 VIAAGP.SYS
Microsoft Corporation

e02f079a6aa107f06b16549c6e5c7b74 viac7.sys
Microsoft Corporation

e43574f6a56a0ee11809b48c09e4fd3c viaide.sys
VIA Technologies

15c126d1b55814b9e5cab10a9c1f4c67 videoprt.sys
Microsoft Corporation

384e5a2aa49934295171e499f86ba6f3 volmgr.sys
Microsoft Corporation

b5bb72067ddddbbfb04b2f89ff8c3c87 volmgrx.sys
Microsoft Corporation

58df9d2481a56edde167e51b334d44fd volsnap.sys
Microsoft Corporation

9dfa0cc2f8855a04816729651175b631 vsmraid.sys
VIA Technologies

90567b1e658001e79d7c8bbd3dde5aa6 vwifibus.sys
Microsoft Corporation

7090d3436eeb4e7da3373090a23448f7 vwififlt.sys
Microsoft Corporation

a3f04cbea6c2a10e6cb01f8b47611882 vwifimp.sys
Microsoft Corporation

de3721e89c653aa281428c8a69745d90 wacompen.sys
Microsoft Corporation

692a712062146e96d28ba0b7d75de31b wanarp.sys
Microsoft Corporation

cb45a417c8ef7ba6bac67edcdded8700 watchdog.sys
Microsoft Corporation

9950e3d0f08141c7e89e64456ae7dc73 Wdf01000.sys
Microsoft Corporation

fe7a7675c26fe936226641ef32ae9bb5 WdfLdr.sys
Microsoft Corporation

1112a9badacb47b7c0bb0392e3158dff wd.sys
Microsoft Corporation

8b9a943f3b53861f2bfaf6c186168f79 wfplwf.sys
Microsoft Corporation

5cf95b35e59e2a38023836fff31be64c wimmount.sys
Microsoft Corporation

30fc6e5448d0cbaaa95280eeef7fedae winusb.sys
Microsoft Corporation

0217679b8fca58714c3bf2726d2ca84e wmiacpi.sys
Microsoft Corporation

9a5b1059fe015db5269fbb25acbf841d wmilib.sys
Microsoft Corporation

6db3276587b853bf886b69528fdb048c ws2ifsl.sys
Microsoft Corporation

6f9b6c0c93232cff47d0f72d6db1d21e WUDFPf.sys
Microsoft Corporation

f91ff1e51fca30b3c3981db7d5924252 WUDFRd.sys
Microsoft Corporation




Search results for Winlogon.exe

37cdb7e72eb66ba85a87cbe37e7f03fd /mnt/sda2/Windows/System32/winlogon.exe
279.0K Oct 28 2009

8ec6a4ab12b8f3759e21f8e3a388f2cf /mnt/sda2/Windows/winsxs/x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16385_none_6f99573a36451166/winlogon.exe
279.0K Jul 14 2009

37cdb7e72eb66ba85a87cbe37e7f03fd /mnt/sda2/Windows/winsxs/x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.16447_none_6fc699643622d177/winlogon.exe
279.0K Oct 28 2009

3babe6767c78fbf5fb8435feed187f30 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-winlogon_31bf3856ad364e35_6.1.7600.20560_none_703394514f56f7c2/winlogon.exe
279.0K Oct 28 2009


Search results for explorer.exe

2626fc9755be22f805d3cfa0ce3ee727 /mnt/sda2/Windows/explorer.exe
2.5M Oct 31 2009

b95eeb0f4e5efbf1038a35b3351cf047 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16404_none_51e07e31dad00878/explorer.exe
2.5M Nov 6 2009

2626fc9755be22f805d3cfa0ce3ee727 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1/explorer.exe
2.5M Oct 31 2009

9ff6c4c91a3711c0a3b18f87b08b518d /mnt/sda2/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20500_none_526619d4f3f142e6/explorer.exe
2.5M Nov 6 2009

c76153c7eca00fa852bb0c193378f917 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.20563_none_52283b2af41f3691/explorer.exe
2.5M Oct 31 2009

15bc38a7492befe831966adb477cf76f /mnt/sda2/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16385_none_518afd35db100430/explorer.exe
2.5M Jul 14 2009


Search results for Userinit.exe

6de80f60d7de9ce6b8c2ddfdf79ef175 /mnt/sda2/Windows/System32/userinit.exe
25.5K Jul 14 2009

6de80f60d7de9ce6b8c2ddfdf79ef175 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-userinit_31bf3856ad364e35_6.1.7600.16385_none_dbff103933038d7c/userinit.exe
25.5K Jul 14 2009


Search results for Exit





Remote Registry Report

Hive </mnt/sda2/Windows/System32/config/software>
(...)\Microsoft\Windows NT\CurrentVersion> Value <ProductName> of type REG_SZ, data length 46 [0x2e]
Windows 7 Home Premium
(...)\Microsoft\Windows NT\CurrentVersion> cat_vk: No such value <CSDVersion>
(...)\Microsoft\Windows NT\CurrentVersion> Value <SystemRoot> of type REG_SZ, data length 22 [0x16]
C:\Windows
(...)\Microsoft\Windows NT\CurrentVersion\Windows> Value <AppInit_DLLs> of type REG_SZ, data length 6 [0x6]

(...)\Windows NT\CurrentVersion\Winlogon> Value <Shell> of type REG_SZ, data length 26 [0x1a]
explorer.exe
(...)\Windows NT\CurrentVersion\Winlogon> Value <Userinit> of type REG_SZ, data length 68 [0x44]
C:\Windows\system32\userinit.exe,
(...)\Windows NT\CurrentVersion\Winlogon\Notify> Node has 1 subkeys and 0 values
<igfxcui>
(...)\Microsoft\Windows\CurrentVersion\Run> Node has 1 subkeys and 21 values
<OptionalComponents>
size type value name [value if type DWORD]
102 REG_SZ <RtHDVCpl>
130 REG_SZ <IAAnotif>
88 REG_EXPAND_SZ <SynTPEnh>
126 REG_SZ <BullGuard>
100 REG_SZ <YouCam Mirage>
100 REG_SZ <YouCam Tray>
158 REG_SZ <AdobeAAMUpdater-1.0>
160 REG_SZ <AppleSyncNotifier>
104 REG_SZ <QuickTime Task>
114 REG_SZ <Adobe Reader Speed Launcher>
118 REG_SZ <Adobe ARM>
122 REG_SZ <DivXUpdate>
86 REG_SZ <iTunesHelper>
122 REG_SZ <SunJavaUpdateSched>
128 REG_SZ <SwitchBoard>
190 REG_SZ <AdobeCS5ServiceManager>
66 REG_SZ <IgfxTray>
60 REG_SZ <HotKeysCmds>
66 REG_SZ <Persistence>
2 REG_SZ <>
148 REG_SZ <SearchSettings>
(...)\Windows\CurrentVersion\Policies\System> Node has 1 subkeys and 16 values
<UIPI>
4 REG_DWORD <ConsentPromptBehaviorAdmin> 2 [0x2]
4 REG_DWORD <ConsentPromptBehaviorUser> 3 [0x3]
4 REG_DWORD <EnableInstallerDetection> 1 [0x1]
4 REG_DWORD <EnableLUA> 1 [0x1]
4 REG_DWORD <EnableSecureUIAPaths> 1 [0x1]
4 REG_DWORD <EnableUIADesktopToggle> 0 [0x0]
4 REG_DWORD <EnableVirtualization> 1 [0x1]
4 REG_DWORD <PromptOnSecureDesktop> 1 [0x1]
4 REG_DWORD <ValidateAdminCodeSignatures> 0 [0x0]
4 REG_DWORD <dontdisplaylastusername> 0 [0x0]
2 REG_SZ <legalnoticecaption>
4 REG_SZ <legalnoticetext>
4 REG_DWORD <scforceoption> 0 [0x0]
4 REG_DWORD <shutdownwithoutlogon> 1 [0x1]
4 REG_DWORD <undockwithoutlogon> 1 [0x1]
4 REG_DWORD <FilterAdministratorToken> 0 [0x0]


Hive </mnt/sda2/Users/Administrator/ntuser.dat>
(...)\Microsoft\Windows\CurrentVersion\Run> Node has 0 subkeys and 3 values
size type value name [value if type DWORD]
114 REG_SZ <BullGuard>
82 REG_SZ <uTorrent>
132 REG_SZ <msnmsgr>
(...)\Windows\CurrentVersion\Policies\Explorer> Node has 0 subkeys and 1 values
4 REG_DWORD <NoDriveTypeAutoRun> 145 [0x91]


Hive </mnt/sda2/Users/Guest/ntuser.dat>
(...)\Microsoft\Windows\CurrentVersion\Run> Node has 0 subkeys and 3 values
size type value name [value if type DWORD]
114 REG_SZ <BullGuard>
148 REG_SZ <swg>
132 REG_SZ <msnmsgr>


Hive </mnt/sda2/Users/Nikkola/ntuser.dat>
(...)\Microsoft\Windows\CurrentVersion\Run> Node has 0 subkeys and 8 values
size type value name [value if type DWORD]
86 REG_SZ <Reminder>
114 REG_SZ <BullGuard>
132 REG_SZ <msnmsgr>
82 REG_SZ <uTorrent>
124 REG_SZ <Skype>
134 REG_SZ <Google Update>
116 REG_SZ <Speech Recognition>
156 REG_SZ <InstallIQUpdater>

Attached Files

•  mbr.zip   561bytes   387 downloads

[JSntgRvr]

The results of these scans are clear.

Do you have the Installation CD?

In xPUD, browse to the /mnt/sda2/Windows folder and look for a minidump folder within. If present, copy that folder to the USB, zip it and attach it to a reply.

[kmariie]

Ok i dont think i have the cd.
Here is the zipped file

Attached Files

•  Minidump.zip   251.94KB   374 downloads

[JSntgRvr]

The minidumps identify two files as the cause of the crash. Lets take a look at these. Remove the filefind.txt file from the USB and follow these steps:

• Boot the computer to xPUD again.
• Click on File
• Expand mnt
• Expand your USB (sdb1)
• Confirm that you see driver.sh.
• Press Tool at the top
• Choose Open Terminal
• Type bash driver.sh -af
• Press Enter
• You will be prompted to input a filename.
• Type the following:
  
  

  iastor.sys

• Press Enter
• If successful, the script will search for this file.
• After it has completed the search enter the next file to be searched
• Type the following:
  
  

  ntkrnlpa.exe

• Press Enter
• After the search is completed type Exit and press Enter.
• After it has finished a report will be located in the USB drive as filefind.txt
• Please post it for my review

[kmariie]

ive posted it below

Edited by kmariie, 13 April 2011 - 11:43 AM.

[kmariie]

Search results for iastor.sys

d483687eace0c065ee772481a96e05f5 /mnt/sda2/Program Files/Intel/Intel Matrix Storage Manager/driver/IaStor.sys
322.5K Jun 4 2009

1d004cb1da6323b1f55caef7f94b61d9 /mnt/sda2/Program Files/Intel/Intel Matrix Storage Manager/driver64/IaStor.sys
399.0K Jun 4 2009

d483687eace0c065ee772481a96e05f5 /mnt/sda2/Windows/System32/drivers/iaStor.sys
322.5K Jun 4 2009

d483687eace0c065ee772481a96e05f5 /mnt/sda2/Windows/System32/DriverStore/FileRepository/iaahci.inf_x86_neutral_4f144d6467fc7c22/iaStor.sys
322.5K Jun 4 2009


Search results for ntkrnlpa.exe

[JSntgRvr]

Unless you did not allow the command to finish, seems that the ntkrnlpa.exe is missing. Lets confirm.

Remove the filefind.txt file from the USB and follow these steps:

• Boot the computer to xPUD again.
• Click on File
• Expand mnt
• Expand your USB (sdb1)
• Confirm that you see driver.sh.
• Press Tool at the top
• Choose Open Terminal
• Type bash driver.sh -af
• Press Enter
• You will be prompted to input a filename.
• Type the following:
  
  

  ntkrnlpa.exe

• Press Enter
• After the search is completed type Exit and press Enter.
• After it has finished a report will be located in the USB drive as filefind.txt
• Please post it for my review

[kmariie]

Search results for ntkrnlpa.exe

05288b088c0dfac60d6bcf878fc32b60 /mnt/sda2/Windows/System32/ntkrnlpa.exe
3.8M Jun 19 2010

e2a8596576873bc5d509031decd8c95d /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16385_none_6c06b7c41576a7d9/ntkrnlpa.exe
3.8M Jul 14 2009

92345529a07f31547d73ff6e32e1afe9 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16481_none_6c02b882157a3fa4/ntkrnlpa.exe
3.8M Dec 8 2009

20926a3f64bffcd92baa5ece9d65cc4a /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16539_none_6c40cc54154a7bce/ntkrnlpa.exe
3.8M Feb 27 2010

05288b088c0dfac60d6bcf878fc32b60 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.16617_none_6c546d7e153c0e65/ntkrnlpa.exe
3.8M Jun 19 2010

9961859237c15878493ade2119991614 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20591_none_6c8185612e9ffb5f/ntkrnlpa.exe
3.8M Dec 8 2009

fc781d4359b553d62cbad9f658e68784 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20655_none_6cb0c81f2e7bee1e/ntkrnlpa.exe
3.8M Feb 27 2010

2a37766f5121e98271ecd811a60d9420 /mnt/sda2/Windows/winsxs/x86_microsoft-windows-os-kernel_31bf3856ad364e35_6.1.7600.20738_none_6cc96abb2e68ff68/ntkrnlpa.exe
3.8M Jun 19 2010

[JSntgRvr]

These reports are also clear.

Remove the xPUD CD. Boot the computer and tap on F8 during the process until you get to the Advanced menu. Select "Disable automatic restart on system failure" and attempt to boot in Normal Mode. Please post the contents of the Blue Screen message.

Is there a chance you may be able to obtain a Vista or Win 7 install DVD?

[kmariie]

A problem has been detected and windows has been shut down to pevent damage to your computer.
If this is the first time you've seen this stop error screen, restart your computer.If this screen appears again, follow these steps:

Check for viruses on your computer. Remove any newly installed hard drives or hard drive controllers. Check your hard drive to make sure it is properly configured and terminated.
Run CHKDSK /F to check for hard drive corrupton, and then restart your comptr.

Technical infmation:
*** STOP: 0x0000007B (0x80786B58, 0xC000000D, 0x00000000, 0x00000000)

Edited by kmariie, 13 April 2011 - 01:04 PM.

[kmariie]

yes i may be able to obtain one, thankyou for the help so far

[JSntgRvr]

Hi,
I have an advent Roma 2001 on windows 7
This is what happened, I ran hitman pro and to delete all the issues detected i had to reboot, so i did.
Ever since then the computer wont boot, it starts up then it shows a black screen and a blue screen and restarts, like an endless cycle.
Ive tried restoring and everything but i still have the same problem
any help would be much appreciated

When you indicate "Ive tried restoring and everything but i still have the same problem", what exactly did you do? Have you tried to use any of the options in the Repair Console?

Here is a view of the Repair Console similar to Windows 7: