XP won't start anymore

the link to dss.exe reports page not found.

I didn't think I'd have the computer past today, but looks like its mine for
another couple of days.

I'll post the log, but it will be from safe mode...

--Bill

I did those 4 steps with the repair CD (both sp2). No change.

I don't know what else I can do with the repair disk command prompt.

And what to clean up in safe mode? Setting msconfig for diagnostic startup
also results in the computer rebooting shortly after the desktop is
displayed. I thought I'd be smart and create a new user in safe mode and try
to log in under normal mode, but all I get is the default background image
and not a single icon. Have to hit reset to get out of that one.

I was thinking of running sfc in safe mode, but it won't run in safe mode.
:-(

--Bill

Thanks, Anna.

Latest:

I believe all traces of malware are now gone. Originally, there were
several, and winweb security remnants were impossible to get rid of until I
tried sdfix. Now I no longer have a winctrl32.dll in system32. :-)

I set to not auto restart, and got various stop msgs, previously posted.
Now, I mostly get a 0x0000007F, with all four following parameters
0x00000000. I also sometimes get PAGE_FAULT_IN_NONPAGED_AREA and
IRQL_NOT_LESS_OR_EQUAL.

I did a thorough hardware diag (Dell) and it found nothing wrong.

Tell me more about a repair install.

--Bill

"Anna" wrote in message
...

"Bill H." wrote in message
...
Yes, it's probably a virus or trojan, but how to find out which one and
get rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I can
get is safe mode. System restore has been turned off. Last known good
config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
--
Bill

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode, but not
for very long before it reboots.")


Bill:
Assuming your problem isn't hardware-related (which it might very well be
based on your latest statement about the system auto rebooting after the
system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of malware (what
makes you think "it's probably a virus or trojan"?...)

So that it's *not* a problem due to malware and the various anti-malware
recommendations suggested by other responders to your query won't correct
the problem...

It might be a good idea to undertake a Repair install of the XP OS on the
basis that the problem involves a not-too-terribly corrupted OS that is
not malware-caused so that (hopefully) the Repair install will return the
system to a bootable functional state without the loss of any present
data.

I don't know if you're familiar with the process of undertaking a Repair
install of the OS or even whether you wish to pursue this course of
action. So if you want or need more info on the subject so indicate.
Anna

Bill

Can you post a complete copy of the latest Stop Error report. Let's see
if anything has changed?


--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~



Bill H. wrote:
I did those 4 steps with the repair CD (both sp2). No change.

I don't know what else I can do with the repair disk command prompt.

And what to clean up in safe mode? Setting msconfig for diagnostic
startup also results in the computer rebooting shortly after the
desktop is displayed. I thought I'd be smart and create a new user in
safe mode and try to log in under normal mode, but all I get is the
default background image and not a single icon. Have to hit reset to
get out of that one.
I was thinking of running sfc in safe mode, but it won't run in safe
mode. :-(

--Bill

"Bill H." wrote in message
...
I did those 4 steps with the repair CD (both sp2). No change.

I don't know what else I can do with the repair disk command prompt.

And what to clean up in safe mode? Setting msconfig for diagnostic
startup also results in the computer rebooting shortly after the desktop
is displayed. I thought I'd be smart and create a new user in safe mode
and try to log in under normal mode, but all I get is the default
background image and not a single icon. Have to hit reset to get out of
that one.

I was thinking of running sfc in safe mode, but it won't run in safe mode.
:-(

--Bill


Bill:
Just out of curiosity...

Is there any reason you haven't undertaken a Repair install of the OS as has
been previously suggested to you? Or have you done so and that too didn't
"work"?
Anna

well, the next step would
be to do a repair installation
via your windows cd.

it is not too different from
an sfc, but the method
above would be initiated
via the cd.

boot again with your cd
and select install this time.

the cd will scan your disk
and eventually find an o.s.
already installed to it.

the repair installation will
compare your system files
on the disk with the genuine
ones on the cd.

if there are any missing or
corrupted system files on
the disk, the cd will replace
them.

here is the instructions:

http://www.microsoft.com/windowsxp/u...ps/doug92.mspx


be sure to make the proper
selection towards repairing
the o.s., because the other
options the cd will provide
after it scans your disk
will be to re-install the
whole o.s. from scratch and
you don't want this at this
time.

"Bill H." wrote in message
...
I did those 4 steps with the repair CD (both sp2). No change.

I don't know what else I can do with the repair disk command prompt.

And what to clean up in safe mode? Setting msconfig for diagnostic
startup also results in the computer rebooting shortly after the desktop
is displayed. I thought I'd be smart and create a new user in safe mode
and try to log in under normal mode, but all I get is the default
background image and not a single icon. Have to hit reset to get out of
that one.

I was thinking of running sfc in safe mode, but it won't run in safe mode.
:-(

--Bill

"Bill H." wrote in message
...
Yes, it's probably a virus or trojan, but how to find out which one and
get rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I can
get is safe mode. System restore has been turned off. Last known good
config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
--
Bill

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode, but not
for very long before it reboots.")


"Anna" wrote in message
...
Bill:
Assuming your problem isn't hardware-related (which it might very well be
based on your latest statement about the system auto rebooting after the
system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of malware
(what makes you think "it's probably a virus or trojan"?...)

So that it's *not* a problem due to malware and the various anti-malware
recommendations suggested by other responders to your query won't correct
the problem...

It might be a good idea to undertake a Repair install of the XP OS on the
basis that the problem involves a not-too-terribly corrupted OS that is
not malware-caused so that (hopefully) the Repair install will return the
system to a bootable functional state without the loss of any present
data.

I don't know if you're familiar with the process of undertaking a Repair
install of the OS or even whether you wish to pursue this course of
action. So if you want or need more info on the subject so indicate.
Anna


"Anna" wrote in message Bill:
Just out of curiosity...

Is there any reason you haven't undertaken a Repair install of the OS as
has been previously suggested to you? Or have you done so and that too
didn't "work"?
Anna


"Bill H." wrote in message
...
Thanks, Anna.
Latest:
I believe all traces of malware are now gone.
(SNIP)
I did a thorough hardware diag (Dell) and it found nothing wrong.
Tell me more about a repair install.
--Bill


Bill:
Assuming you have a non-OEM-branded XP OS installation CD at your disposal
and not merely an OEM recovery CD or recovery partition situation, you might
consider running a Repair install of the XP OS at this point in time in view
of your other futile attempts to get the system up & running. Unfortunately,
since you mentioned "Dell" in your last post it's conceivable that you do
*not* have such an XP OP installation CD that will allow you to undertake a
Repair install since all you might have is the so-called "Recovery" or
"Restore" disk that Dell generally provides with their machines. And that
media will ordinarily not provide for a Repair install of the OS. But
assuming you *do* have an XP OS installation CD that allows you to undertake
a Repair install, here's some info about it...

Undertaking a Repair install of the OS is a relatively straightforward
process. It would be roughly akin to making a fresh install of the OS, but
in nearly every case your existing programs & user-created data would be
retained. Notice I said "nearly". While it would be a rather rare situation
where data would be lost or corrupted as a result of a failed Repair
install, and as unlikely as it may be, it *could* happen.

So if there are any programs and/or other data on your present drive that
are absolutely crucial to you and you could not tolerate their loss, then I
would strongly suggest that before undertaking this Repair install operation
that you first either make a "clone" of your existing HDD (using a
disk-imaging or disk-cloning program) or, if that's not practical, install
the HDD in another machine as a secondary HDD so that you can pull off
whatever data you want onto some removable media, e.g., flash drive, CD,
etc.

Again, it's a relatively rare event that a loss or corruption of data will
occur even when the Repair install is unsuccessful, but it *can* happen. So
I want you to be aware of this.

There are a number of websites that contain step-by-step instructions for
undertaking a Repair install. As I've indicated it's not a difficult nor
terribly time-consuming process. Again, it's roughly similar to making a
fresh install of the XP OS. If you do a Google search on "XP repair
install", you'll be pointed to many of these sites. Here are a few...
http://www.michaelstevenstech.com/XP...install.htm#RI
http://www.webtree.ca/windowsxp/repair_xp.htm
http://www.geekstogo.com/forum/index.php?showtopic=138
http://www.windowsreinstall.com/winx...exfullpage.htm
http://support.microsoft.com/default...b;en-us;315341

Assuming the Repair install is successful, you should use your A-V program
to immediately check out your PC for any virus infestation. Hopefully you'll
undertake the Repair install with an XP OS installation CD that contains (a
slipstreamed) SP3 so that it won't be an onerous task to download/install
*all* the MS critical updates since SP3 was released. On the other hand if
you undertake the Repair install with a XP-SP2 installation CD you will have
to download/install *all* the MS critical updates since SP2 was released,
which *will* be an onerous task. Alternatively you could install SP3 after
the Repair install assuming the Repair install has been successful. Anyway,
give this some thought if you can't get your system back to a functional
state any other way and, of course you have the requisite XP OS installation
CD that allows you to undertake a Repair install of the OS.

Just one other thing...
It's conceivable (although it doesn't sound like it) that you're dealing
with some hardware-type problem here and not just a corruption of the OS.
Where a hardware-type problem is the culprit in cases like the one you
describe, it's usually the HDD that's defective although it's entirely
possible some other major component of your system may be at the root of the
problem you're experiencing. In any event, it's possible (although again
from your description of the problem, unlikely) that you may be dealing with
a defective HDD so it probably would be wise at this point to check out the
HDD with a HDD diagnostic utility you can (usually) download from the
website of the disk's manufacturer. It's very easy to use - the downloaded
program allows you to create either as a bootable floppy disk or bootable CD
containing the HDD diagnostic program. So give that some consideration as
well. On the other hand if the Dell hardware diagnostic program found no
problem with the HDD I suppose it's safe to assume there is no problem
there.
Anna

I'm leaning more on a incompatible or
corrupted driver, side since safe mode
functions and not normal mode.

it's reminiscent of having enable
battery backup in the power control
panel, whereas after a short while,
if not immediately the system shuts
down due to seeing zero battery charge.

however, there is no battery backup
connected.



"Anna" wrote in message
...

"Bill H." wrote in message
...
Yes, it's probably a virus or trojan, but how to find out which one and
get rid of it?

Windows xp pro starts to load, gets to the splash screen, and the the
computer reboots.

I've tried dianostic and selective startup, and neither work. All I
can get is safe mode. System restore has been turned off. Last known
good config doesn't help.

So far, the AV and/or malware tools I've tried (AVG free, Windows
Defender, Ad Aware) won't install and/or run in safe mode.

Suggestions, other than reformat and reinstall the OS?

Thx.
--
Bill

(Bill later adds, among other things...)
"I've been able to get the computer to run in full normal mode, but not
for very long before it reboots.")


"Anna" wrote in message
...
Bill:
Assuming your problem isn't hardware-related (which it might very well
be based on your latest statement about the system auto rebooting after
the system reaches the Desktop)...

So if your problem isn't due to some difficult-to-get-rid-of malware
(what makes you think "it's probably a virus or trojan"?...)

So that it's *not* a problem due to malware and the various anti-malware
recommendations suggested by other responders to your query won't
correct the problem...

It might be a good idea to undertake a Repair install of the XP OS on
the basis that the problem involves a not-too-terribly corrupted OS that
is not malware-caused so that (hopefully) the Repair install will return
the system to a bootable functional state without the loss of any
present data.

I don't know if you're familiar with the process of undertaking a Repair
install of the OS or even whether you wish to pursue this course of
action. So if you want or need more info on the subject so indicate.
Anna


"Anna" wrote in message Bill:
Just out of curiosity...

Is there any reason you haven't undertaken a Repair install of the OS as
has been previously suggested to you? Or have you done so and that too
didn't "work"?
Anna


"Bill H." wrote in message
...
Thanks, Anna.
Latest:
I believe all traces of malware are now gone.
(SNIP)
I did a thorough hardware diag (Dell) and it found nothing wrong.
Tell me more about a repair install.
--Bill


Bill:
Assuming you have a non-OEM-branded XP OS installation CD at your disposal
and not merely an OEM recovery CD or recovery partition situation, you
might consider running a Repair install of the XP OS at this point in time
in view of your other futile attempts to get the system up & running.
Unfortunately, since you mentioned "Dell" in your last post it's
conceivable that you do *not* have such an XP OP installation CD that will
allow you to undertake a Repair install since all you might have is the
so-called "Recovery" or "Restore" disk that Dell generally provides with
their machines. And that media will ordinarily not provide for a Repair
install of the OS. But assuming you *do* have an XP OS installation CD
that allows you to undertake a Repair install, here's some info about
it...

Undertaking a Repair install of the OS is a relatively straightforward
process. It would be roughly akin to making a fresh install of the OS, but
in nearly every case your existing programs & user-created data would be
retained. Notice I said "nearly". While it would be a rather rare
situation where data would be lost or corrupted as a result of a failed
Repair install, and as unlikely as it may be, it *could* happen.

So if there are any programs and/or other data on your present drive that
are absolutely crucial to you and you could not tolerate their loss, then
I would strongly suggest that before undertaking this Repair install
operation that you first either make a "clone" of your existing HDD (using
a disk-imaging or disk-cloning program) or, if that's not practical,
install the HDD in another machine as a secondary HDD so that you can pull
off whatever data you want onto some removable media, e.g., flash drive,
CD, etc.

Again, it's a relatively rare event that a loss or corruption of data will
occur even when the Repair install is unsuccessful, but it *can* happen.
So I want you to be aware of this.

There are a number of websites that contain step-by-step instructions for
undertaking a Repair install. As I've indicated it's not a difficult nor
terribly time-consuming process. Again, it's roughly similar to making a
fresh install of the XP OS. If you do a Google search on "XP repair
install", you'll be pointed to many of these sites. Here are a few...
http://www.michaelstevenstech.com/XP...install.htm#RI
http://www.webtree.ca/windowsxp/repair_xp.htm
http://www.geekstogo.com/forum/index.php?showtopic=138
http://www.windowsreinstall.com/winx...exfullpage.htm
http://support.microsoft.com/default...b;en-us;315341

Assuming the Repair install is successful, you should use your A-V program
to immediately check out your PC for any virus infestation. Hopefully
you'll undertake the Repair install with an XP OS installation CD that
contains (a slipstreamed) SP3 so that it won't be an onerous task to
download/install *all* the MS critical updates since SP3 was released. On
the other hand if you undertake the Repair install with a XP-SP2
installation CD you will have to download/install *all* the MS critical
updates since SP2 was released, which *will* be an onerous task.
Alternatively you could install SP3 after the Repair install assuming the
Repair install has been successful. Anyway, give this some thought if you
can't get your system back to a functional state any other way and, of
course you have the requisite XP OS installation CD that allows you to
undertake a Repair install of the OS.

Just one other thing...
It's conceivable (although it doesn't sound like it) that you're dealing
with some hardware-type problem here and not just a corruption of the OS.
Where a hardware-type problem is the culprit in cases like the one you
describe, it's usually the HDD that's defective although it's entirely
possible some other major component of your system may be at the root of
the problem you're experiencing. In any event, it's possible (although
again from your description of the problem, unlikely) that you may be
dealing with a defective HDD so it probably would be wise at this point to
check out the HDD with a HDD diagnostic utility you can (usually) download
from the website of the disk's manufacturer. It's very easy to use - the
downloaded program allows you to create either as a bootable floppy disk
or bootable CD containing the HDD diagnostic program. So give that some
consideration as well. On the other hand if the Dell hardware diagnostic
program found no problem with the HDD I suppose it's safe to assume there
is no problem there.
Anna

Well, some things have changed. :-)

For the moment (not to get too excited), it has been rebooting into normal
mode OK.

I now have an issue that I get an error about not being able to run
c:\windows\Kroduk.dll. I find an entry in the registry wanting to run
kroduk, with a key "Svelokara." I remove the key, reboot, and get the same
msg again and that reg entry has returned.

Spybot says I'm OK, I dl'ed and installed windows defender, which says I'm
ok, and ran AVG and deleted all the cookies it found and the zip files
containing malware found and removed by sdfix.

--Bill

"Bill H." wrote in message
...
Well, some things have changed. :-)

For the moment (not to get too excited), it has been rebooting into
normal mode OK.

I now have an issue that I get an error about not being able to run
c:\windows\Kroduk.dll. I find an entry in the registry wanting to run
kroduk, with a key "Svelokara." I remove the key, reboot, and get the
same msg again and that reg entry has returned.

Sounds like you still have a rootkit infection.

On Mon, 8 Dec 2008 19:34:38 -0800, "Bill H."
wrote:

Well, some things have changed. :-)

For the moment (not to get too excited), it has been rebooting into normal
mode OK.

I now have an issue that I get an error about not being able to run
c:\windows\Kroduk.dll. I find an entry in the registry wanting to run
kroduk, with a key "Svelokara." I remove the key, reboot, and get the same
msg again and that reg entry has returned.

Did you go through the ENTIRE registry, or did you stop after the key
deletion?

It the latter, go back and don't quit until regedit gets to the end.


Spybot says I'm OK, I dl'ed and installed windows defender, which says I'm
ok, and ran AVG and deleted all the cookies it found and the zip files
containing malware found and removed by sdfix.

--Bill



--
Mort D.

Oh, yeah, I searched through the entire registry. Just that one key.

It is under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

The Name is Svelokara
Type REG_SZ
Data is rundll32.exe "C:\WINDOWS\Kroduk.dll",e

--Bill

So how to fix? All the tools I've downloaded so far don't seem to do
anything with it, including sdfix. :-(

What is a "rootkit infection?"

--Bill

On Mon, 8 Dec 2008 23:29:29 -0800, "Bill H."
wrote:


So how to fix? All the tools I've downloaded so far don't seem to do
anything with it, including sdfix. :-(

Maybe something here will help... it's worth a look:

www.geocities.com/windowsfixes/tools.html

If that doesn't help, then it's time to wipe everything clean and
reinstall.

What is a "rootkit infection?"

Very persistent malware. Have you tried ALL the leading malware
scanners... including Malwarebytes?

perhaps, you might want
to search the disk and
also delete any files and
folders for those filenames.

also, you might want to
delete your prefetch folder.



"Bill H." wrote in message
...
Oh, yeah, I searched through the entire registry. Just that one key.

It is under
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run

The Name is Svelokara
Type REG_SZ
Data is rundll32.exe "C:\WINDOWS\Kroduk.dll",e

--Bill