1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive Multiple Infections; Cannot boot- Critical Stop 0X0000007B

Discussion in 'Malware and Virus Removal Archive' started by kspaulding, 2009/07/26.

Page 2 of 2
  1. 2009/07/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You've been doing fine.
    I don't remember what options are offered by Seagate tool, so let's see what it's gonna find.
     
    broni,
    #21
  2. 2009/07/27
    kspaulding Lifetime Subscription

    kspaulding Well-Known Member Thread Starter

    Joined:
    2005/08/07
    Messages:
    77
    Likes Received:
    0
    Okay Seagate's SeaTools diagnostic tools (running the long test that checked every LBA sector on the 120 GB HDD lists 39 LBA Block Numbers that had errors detected during the test.

    The options at this point are:
    Skip this one only
    Repair this one only
    Skip this one and all remaining
    Repair this one and all remaining

    I vote for the last option of Repair this one and all remaining ".

    ...and I await your ballott (don't worry it will not add to the long term federal deficit!
     
    kspaulding,
    #22


  3. to hide this advert.

  4. 2009/07/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good choice :)
     
    broni,
    #23
  5. 2009/07/27
    kspaulding Lifetime Subscription

    kspaulding Well-Known Member Thread Starter

    Joined:
    2005/08/07
    Messages:
    77
    Likes Received:
    0
    Okay, so far so good. All indocated LBA Block Numbers repaired successfully. Test Results shows "PASSED After Repair "

    Next step?
     
    kspaulding,
    #24
  6. 2009/07/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good :)
    Try to re-run steps from my reply #13.
     
    broni,
    #25
  7. 2009/07/27
    kspaulding Lifetime Subscription

    kspaulding Well-Known Member Thread Starter

    Joined:
    2005/08/07
    Messages:
    77
    Likes Received:
    0
    Ran the steps in your Post #13. Same error message as before. Didn't bother running CHKDSK as the message said like before also. Attempted a boot from the HDD to see if I got the same missing file message as before when trying to eject the CD. I did and here it is:

    "Windows could not start because the following file is missing or corrupt:
    <Windows root>\system32\hal.dll.
    Please re-install a copy of the above file. "
     
    kspaulding,
    #26
  8. 2009/07/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Let's try some new magic :)

    We will have to create a small 'fix CD' to solve this problem.
    Please download RC.ISO and save it somewhere you can find it.
    Also download MagicISO and install it.

    Start MagicISO. You should see a window informing you about the full version of MagicISO.
    In the bottom right select Try It! and the program will open.
    Click on File and then on Open and navigate to the RC.ISO file you downloaded. Select it, and click Open.

    First, we'll need to add a clean version of hal.dll to the current RC.ISO
    • In the upper right pane, double click on the i386 folder.
    • Right click in the upper right pane and select Add Files...
    • Navigate to C:\Windows\System32 and select hal.dll
    • Then click Open to add hal.dll to the CD image.
    • Click File and select Save As...
    • Name the file RCplus and save it somewhere you can find it.
    Next, we'll need to burn the newly created image to a disk that we can use to fix the problem.
    • Put a blank CD-R disk in your CD burner and close the tray. If an AutoPlay window opens, close it.
    • Click on Tools and select Burn CD/DVD with ISO.... A window will appear.
    • Click on the little folder to the right of CD/DVD Image File then navigate to the newly created RCplus.iso Image file and click Open.
    • In the CD/DVD Writing Speed drop-down menu choose the 8X setting.
    • Under Format make sure that Mode 1 is selected.
    • And finally, click on the Burn it! button to burn RCplus.iso to disk.
    Once the disk is burned, put it in the machine you want to fix and restart it.
    Boot to the CD just as you would with a Windows XP disk.
    At the Welcome to Setup screen, press R to enter the Recovery Console.
    Choose the installation to be repaired by number (usually 1) and press Enter.
    When you are asked for the Administrator password, enter the password or leave it blank (default) and press Enter.

    At the C:\Windows> prompt, type the following commands pressing Enter after each one. Note: Watch the spaces.
    • D:
      cd i386
      copy hal.dll c:\windows\system32
      exit
    After putting in the third command, you should receive the message 1 file copied which will indicate that the operation succeeded.
    Now take out the CD and reboot your computer to normal mode. Try to log in and it should let you back in.
     
    broni,
    #27
  9. 2009/07/27
    kspaulding Lifetime Subscription

    kspaulding Well-Known Member Thread Starter

    Joined:
    2005/08/07
    Messages:
    77
    Likes Received:
    0
    I know this sounds crazy but I loaded the hal.dll file successfully via the RCplus.iso image but I still get the same error message on boot attemp saying Windows cannot load because that file is missing or corrupt.
     
    kspaulding,
    #28
  10. 2009/07/27
    kspaulding Lifetime Subscription

    kspaulding Well-Known Member Thread Starter

    Joined:
    2005/08/07
    Messages:
    77
    Likes Received:
    0
    I have to go to bed now and have to work a 24 hour shift tomorrow so it will be Wed. sometime before iget back to check this out.

    Thanks so much Broni for taking the time to help. I thought for sure that last one would do it! oh, well the hunt continues....

    Goodnight!
     
    kspaulding,
    #29
  11. 2009/07/27
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Good Night.
    I think, your best option would be to re-post your booting problem under Windows section.
    The access to HJT section is very limited.
    You'll get more attention, and I'm running out of options.
    Make sure to include link to this thread.
     
    broni,
    #30
  12. 2009/07/29
    kspaulding Lifetime Subscription

    kspaulding Well-Known Member Thread Starter

    Joined:
    2005/08/07
    Messages:
    77
    Likes Received:
    0
    Okay, I habe done so.
    Thank you very much Broni for your time, patience and assistance!

    Look for me again. When I get this one finished I'll be posting on one of my PC's about an inability to start & run SuperAS & Malwarebytes.

    Thanks again!
     
    kspaulding,
    #31
  13. 2009/07/29
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome :)
     
    broni,
    #32
Page 2 of 2

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...