That sounds good so far.
Now do this:
Once you are booted on the CD of your choice, navigate to the following folder (assuming XP is installed on your C volume):
c:\windows\system32\drivers
From the Recovery Console you would enter this command:
cd system32\drivers
Look for a file that ends with a .sys extension and is zero bytes in length. The file may also have a curious name since it may have been generated at random.
If you are in the XP Recovery Console, issue the following command while in the c:\windows\system32\drivers folder:
dir *.sys
The files will scroll by one screen at a time. Look at the list of files with the .sys extensions and their lengths. You don't need to worry about the Directories... If you see a file(s) with a .sys extension that is zero bytes, that is the one to suspect.
If you are using the Mini XP Mode of a Hiren's boot CD (which operates just like the XP desktop), just navigate to the folder from the My Computer desktop icon and locates the suspicious file(s).
You will want to actually delete the suspicious file once you get running and have run some scans for malicious software, but if you are not sure what the suspicious file is or if it might be needed, just rename the suspicious file for the time being in case you are not sure.
For example, if you found that the zigxrtml.sys file had a length of zero bytes, rename it:
rename zigxrtml.sys zigxrtml.bad
Renaming or deleting the suspicious file to get the system running is not fixing the problem. It is fixing the symptom of the problem.
The problem is your system is infected with malicious software and you must still follow up with some scans to remove the infection.
Once your system is running, follow up with MBAM and SAS to be sure the affliction has really been removed.
Reduce the chances of malicious software by running some scans.
Download, install, update and do a full scan with these free malware detection programs then resolve any remaining issues:
Malwarebytes (MBAM): http://malwarebytes.org/
SUPERAntiSpyware: (SAS): http://www.superantispyware.com/
These can be uninstalled later if desired.