Member Avatar for billylondon

I am using a compaq laptop, with multiple OS-- win xp pro and ubuntu.

My laptop has recently been sabotaged. And now when I boot it and choose win xp OS, this following error message come up:

"Windows could not start because the following file is missing or corrupt:
\WINDOWS\SYSTEM32\CONFIG\SYSTEM
You can attempt to repair this file by starting Windows Setup using the original Setup CD-Rom. Select 'r' at the first screen to start repair."

When I reboot it with my xp boot CD, after loading the installation file, it does not go to the selection screen. Instead, an error message appears, saying the system shut to prevent further damage, and there might be a virus, and suggesting me to run chkdsk.....
And the system stop, I need to manually turn it off.

Since I cannot use boot disk to do any repair from windows, I get stuck here.

If I go to ubuntu (I have multiple OS), I can see the system file in c drive. But the c drive folder does not show on ubuntu desktop, I need to use 'System Monitor' to see them.

So i know my c drive is still there, but I can reach them and there is probably a virus.

Is there a way to clean the virus and fix it from the ubuntu?

Any advise will be appreciated.

bill

  • 2 Contributors
  • 3 Replies
  • 265 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by hungry_for_info

Dani AI

Generated

Quick expert summary and precautions. The missing/corrupt Windows registry hive is recoverable in many cases from a working Linux environment, but first do not make random writes to the Windows partition. can see the files from Ubuntu and tried the Windows media — since that path is failing, use Ubuntu to image and perform offline repairs and scans before attempting any in-place fixes.

Create a safe backup and inspect offline. Boot Ubuntu (Live USB preferred), mount the NTFS partition read-only and copy the entire registry folder and any repair/RegBack copies to external media so you have an image to fall back on:

sudo mkdir -p /mnt/windows
sudo mount -t ntfs-3g -o ro /dev/sda1 /mnt/windows    # replace /dev/sda1 as appropriate
mkdir -p ~/win-backup
sudo cp -a /mnt/windows/WINDOWS/system32/config ~/win-backup/
ls -l /mnt/windows/WINDOWS/system32/config/RegBack

If RegBack or C:\WINDOWS\repair contains non-empty hive files, keep a copy and consider restoring them only after you have a full backup. Remount read-write with ntfs-3g before any replacement and always keep originals.

Use Linux tools for basic fixes and malware checks. Install ntfs-3g, testdisk and clamav, run ntfsfix to clear simple NTFS inconsistencies (it is not a full Windows disk-repair), then update ClamAV and scan the mounted tree:

sudo apt-get update
sudo apt-get install ntfs-3g testdisk clamav
sudo ntfsfix /dev/sda1
sudo freshclam
sudo clamscan -r -i /mnt/windows

If offline hive restore and scans don’t revive Windows, boot a trusted antivirus rescue ISO to scan and try repair, or copy personal data off and perform a clean reinstall. When in doubt, image the whole disk first and get hands-on help — editing registry hives can make recovery harder if done carelessly.

Recommended Answers

All 3 Replies

Member Avatar for billylondon

Tks for the advise. Unfortunately I can't even run recovery console. When I run the boot disk, after loading the installation files, it does not go to the Setup screen; instead, this message appears:

A problem has been detected and Windows has been shut down to prevent damage to your computer.
Check for viruses on your computer. Remove any newly installed hard drives or hard drive controllers. Check your hard drive to make sure it is properly configured and terminated. Run CHKDSK /F to check for hard drive corruption, and then restart your computer.
Technical Information:
XXX STOP: 0x0000007B (0xF78D2524, 0xC0000034,0x00000000, 0x00000000)

And my computer stops.
So I can't run Windows and I can't reboot to repair.

Is there other possible solution?

Bill

Member Avatar for hungry_for_info

are you having problems with Linux too? also when you load the windows xp dsik after the main fills are loaded you want to hit r to goto the recovery console. do you have an oringinal windows xp disk?

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.