Windows won't boot. Getting rdisk partition\windows message.

Question

Original Title: Can't Boot Windows XP

Hi there everyone,

The other day I un-installed some items that were clogging up my old Dell Inspiron 6000 (Norton, Nero etc).

When I restarted the computer it brings me to a screen that provides some options

-Safe Mode

-Safe Mode w/ Command Prompt

-Safe Mode w/ Networking

-Last Known Good Config

-Start Windows Normally

No matter which one I pick, the computer hangs.

If I pick any of the Safe Mode options some text appears at the bottom in relation to multi disk rdisk partition\windows... and then some .dll, .nls and .sys files.

I've tried booting from a backup disc but to no avail (I changed the BIOS settings to boot from the disc) but it still brings me to command prompt and nothing runs from there. I'm wondering if the Boot disc is funked up? I have XP on a home desktop so perhaps I should make another boot disk and try again?

I've tried working my way through some of KB articles on the site (sys restore through command prompt didn't work).

I hope I've provided enough information and I'd be very appreciative of any help.

Thanks

GM

Answer 1

That sounds good so far.

Now do this:

Once you are booted on the CD of your choice, navigate to the following folder (assuming XP is installed on your C volume):

c:\windows\system32\drivers

From the Recovery Console you would enter this command:

cd system32\drivers

Look for a file that ends with a .sys extension and is zero bytes in length.  The file may also have a curious name since it may have been generated at random.

If you are in the XP Recovery Console, issue the following command while in the c:\windows\system32\drivers folder:

dir  *.sys

The files will scroll by one screen at a time.  Look at the list of files with the .sys extensions and their lengths.  You don't need to worry about the Directories...  If you see a file(s) with a .sys extension that is zero bytes, that is the one to suspect.

If you are using the Mini XP Mode of a Hiren's boot CD (which operates just like the XP desktop), just navigate to the folder from the My Computer desktop icon and locates the suspicious file(s).

You will want to actually delete the suspicious file once you get running and have run some scans for malicious software, but if you are not sure what the suspicious file is or if it might be needed, just rename the suspicious file for the time being in case you are not sure.

For example, if you found that the zigxrtml.sys file had a length of zero bytes, rename it:

rename zigxrtml.sys   zigxrtml.bad

Renaming or deleting the suspicious file to get the system running is not fixing the problem.  It is fixing the symptom of the problem.

The problem is your system is infected with malicious software and you must still follow up with some scans to remove the infection.

Once your system is running, follow up with MBAM and SAS to be sure the affliction has really been removed.

Reduce the chances of malicious software by running some scans.

Download, install, update and do a full scan with these free malware detection programs then resolve any remaining issues:

Malwarebytes (MBAM):  http://malwarebytes.org/

SUPERAntiSpyware: (SAS):  http://www.superantispyware.com/

These can be uninstalled later if desired.

Answer 2

If you have no bootable XP media (or are not sure what you have) create a bootable XP Recovery Console CD and be sure.

This is not the same as any recovery disks that might have come with a store bought system.  

You can make a bootable Recovery Console CD by downloading an ISO file and burning it to a CD.

The bootable ISO image file you need to download is called:

xp_rec_con.iso 

Download the ISO file from here:

http://www.mediafire.com/?ueyyzfymmig

Use a new CD and this free and easy program to burn your ISO file and create your bootable CD:

http://www.imgburn.com/

Here are some instructions for ImgBurn:

http://forum.imgburn.com/index.php?showtopic=61

It would be a good idea to test your bootable CD on a computer that is working.

You may need to adjust the computer BIOS settings to use the CD ROM drive as the first boot device instead of the hard disk.  These adjustments are made before Windows tries to load.  If you miss it, you will have to reboot the system again.

When you boot on the CD, follow the prompts:

Press any key to boot from CD...

The Windows Setup... will proceed.

Press 'R' to enter the Recovery Console.

Select the installation you want to access (usually  1: C:\WINDOWS)

You may be asked to enter the Administrator password (usually empty).

You should be in the C:\WINDOWS folder.  This is the same as the 

C:\WINDOWS folder you see in explorer.

The Recovery Console allows basic file commands like: copy, rename, replace, delete, cd, chkdsk, fixboot, fixmbr, etc.

For a list of Recovery Console commands, enter help at the prompt or read about the XP Recovery Console here:

http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/recovery_console_cmds.mspx?mfr=true

A good idea before starting things is to first verify the integrity of your file system using the chkdsk command.

From the command prompt window run the chkdsk command on the drive where Windows is installed to try to repair any problems on the afflicted drive.

Running chkdsk is fine even if it doesn't find any problems.  It will not hurt anything to run it.

Assuming your boot drive is C, run the following command:

chkdsk C: /r

Let chkdsk finish and correct any problems it might find.  

It may take a long time for chkdsk to complete or it may appear to be 'stuck'.  Be patient.  If the HDD light is still flashing, chkdsk is doing something.  Keep an eye on the percentage amount to be sure it is still making progress.  It may even appear to go backwards sometimes.

You should run chkdsk /r again until it finds no errors to correct.

Answer 3

Just about everything is just a copy/paste to me...

Answer 4

I've run Chkdsk twice; the first time produced and rectified one error and then the second ran through without incident.

I'm then prompted with C:\WINDOWS>

I'm wondering if there is another task I should run from here?

I'm using the ISO Recovery Console to boot....

Answer 5

I've booted from Hiren's Boot CD after I found two files of 0 byte length

1. ucofxnmn.sys
2. xomjuqf.sys

I've renamed both files with a .bad extension.

I then re-booted using the internal HDD and am running a full system scan with Malwarebytes right now before SaS. At the risk of jinxing myself, everything seems to be coming along nicely. I'll update again once it is done.

Joselbarra, I really appreciate all your help with this. Thank you.