mkl Posted June 11, 2009 Share Posted June 11, 2009 Nothing happens when I try to boot, black screen. When doing F8 > Safe Mode I get the following (XP SP3):multi(0)disk(0)rdisk(0)partition(1)\WINDOWS\system32\ntoskrnl.exemulti(0)disk(0)rdisk(0)partition(1)\WINDOWS\system32\hal.dllmulti(0)disk(0)rdisk(0)partition(1)\WINDOWS\system32\KDCOM.DLLmulti(0)disk(0)rdisk(0)partition(1)\WINDOWS\system32\BOOTVID.dllI've tried fixboot, fixmbr and chkdsk /r. No luck. Any ideas? Link to comment Share on other sites More sharing options...
Mordac85 Posted June 15, 2009 Share Posted June 15, 2009 What did you do immediately before this happened? I normally see something like this when I'm loading an incorrect HAL. Link to comment Share on other sites More sharing options...
Guest Posted June 16, 2009 Share Posted June 16, 2009 Does the recovery console have the ability to edit boot.ini? I think I've tried and failed but not sure...was too long ago.Maybe load some type of rescue disk that will let you edit it? Link to comment Share on other sites More sharing options...
Geej Posted June 19, 2009 Share Posted June 19, 2009 Not sure if this guide works. Maybe worth a try if run out of solution. (How To Repair or Replace Boot.ini in Windows XP) Link to comment Share on other sites More sharing options...
mkl Posted June 20, 2009 Author Share Posted June 20, 2009 What did you do immediately before this happened? I normally see something like this when I'm loading an incorrect HAL.I had trouble deleting a folder (the dreaded "cannot delete folder" explorer message). I suspect it had something to do with the files being in a too deep folder/file structure. SyncBack couldn't back them up either.So I decided to install Unlocker. Even Unlocker couldn't delete them and asked to do it at the next restart of XP. I chose to do so and rebooted.I saw the BIOS screen but then everything goes black. When trying to boot into safe mode I get the message in the code snippet of my first post in this thread.Not sure if this guide works. Maybe worth a try if run out of solution. (How To Repair or Replace Boot.ini in Windows XP) I have tried peeking in the boot.ini, but there's nothing weird. I ran bootcfg /rebuild just to be shure too. Still the same problem. Link to comment Share on other sites More sharing options...
Geej Posted June 20, 2009 Share Posted June 20, 2009 Try booting into recovery console, replace the below 4 files that you deleted back to its original location (WINDOWS\system32) from your XP CDntoskrnl.ex_hal.dl_KDCOM.DL_BOOTVID.dl_While you are in recovery console, use expand command to restore those 4 files. Expand guide Link to comment Share on other sites More sharing options...
mkl Posted June 21, 2009 Author Share Posted June 21, 2009 Try booting into recovery console, replace the below 4 files that you deleted back to its original location (WINDOWS\system32) from your XP CDntoskrnl.ex_hal.dl_KDCOM.DL_BOOTVID.dl_While you are in recovery console, use expand command to restore those 4 files. Expand guideTo be honest, I didn't think that would work. But it did! Booting as usual. THANK YOU! Link to comment Share on other sites More sharing options...
Richhs Posted November 22, 2010 Share Posted November 22, 2010 Try booting into recovery console, replace the below 4 files that you deleted back to its original location (WINDOWS\system32) from your XP CDntoskrnl.ex_hal.dl_KDCOM.DL_BOOTVID.dl_While you are in recovery console, use expand command to restore those 4 files. Expand guideThanks for this tip !I wasn't able to get past the KDCOM.DLL line in safe mode, so I expanded the files you mentioned above and at least I've gotten past that issue.I still have some work to do, because all I have now is the Windows XP default desktop wallpaper.I believe that this issue was created by a rogue anti-virus / anti-malware scanner that was installed by a "drive-by" malware from an advertisement.Thanks again ! Link to comment Share on other sites More sharing options...
Richhs Posted November 22, 2010 Share Posted November 22, 2010 (edited) OK, It was the rogue anti-virus application Antivirus 8 that corrupted the files mentioned above and disabled the task manager.After I got into safe mode, I navigated to the C:\Program Files\AV8\ directory and renamed the file av8.exe to av8.RID.The process was still running in the memory so the bogus pop-ups kept occurring, but it's easy to work around that.I then deleted the registry values :HKEY_CURRENT_USER\Software\A88547 (or something similar might be listed)HKEY_CURRENT_USER\Software\WinAE (or something similar might be listed)HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run "AV8"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exeHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\User Agent\Post Platform "WinNT-A8I 23.09.2010"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe "Debugger" = "C:\Program Files\AV8\av8.exe -d" Then I deleted directories :C:\Program Files\AV8\C:\Documents and Settings\All Users\Start Menu\AV8\Then I took care of the task manager problem :To re-enable the Task Manager I did this : 1. Click Start 2. Click Run 3. Type REGEDIT 4. Click OK The Registry Editor will now open 5. Browse to the following key: HKEY_CURRENT_USER\Software\Microsoft\Windows\ CurrentVersion\Policies\system 6. In the right pane, look for the value: DisableTaskMgr 7. Right click DisableTaskMgr and select Delete. (When prompted with "Are you sure you want to delete this value", select Yes. 8. Now browse to the following key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ CurrentVersion\policies\system 9. In the right pane, look for the value: DisableTaskMgr 10. Right click DisableTaskMgr and select Delete. (When prompted with "Are you sure you want to delete this value", select Yes. 11. Close the Registry by choosing File | Exit 12. You should now be able to access Task Manager. If not, reboot into Safe Mode and repeat the steps outlined above. http://antivirus.about.com/od/windowsbasics/ht/taskmanager.htmAfter that I rebooted into the normal mode of windows and everything started as normal. Now to install anti-malware apps and finish the job.I'm new here, and I'm not sure if I should copy this post and make a new thread entitled :Remove Antivirus 8Just let me know, and I'll be happy to take care of that. Edited November 22, 2010 by Richhs Link to comment Share on other sites More sharing options...
jaclaz Posted November 22, 2010 Share Posted November 22, 2010 I'm new here, and I'm not sure if I should copy this post and make a new thread entitled :Remove Antivirus 8Just let me know, and I'll be happy to take care of that.It would be nice. Also you could "merge" in it some of the info here:http://www.freeremovalofspyware.org/remove-antivirus-8http://www.2-viruses.com/remove-antivirus-8(at first sight they appear to list more files/keys to delete/fix )jaclaz Link to comment Share on other sites More sharing options...
Richhs Posted November 23, 2010 Share Posted November 23, 2010 I'm new here, and I'm not sure if I should copy this post and make a new thread entitled :Remove Antivirus 8Just let me know, and I'll be happy to take care of that.It would be nice. Also you could "merge" in it some of the info here:http://www.freeremovalofspyware.org/remove-antivirus-8http://www.2-viruses.com/remove-antivirus-8(at first sight they appear to list more files/keys to delete/fix )jaclazOK... done : Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now