So I've been fixing a friend's sister's computer and thought I had everything under control but something went wrong. First she had a good many trojan viruses, malware, spyware, etc. and I installed and ran adaware 2007, PC tools antivirus, and spybot search and destroy (she had Mcaffee installed originally but didn't seem to be very helpful). I deleted everything that these programs turned up. Something weird started to happen then. Everytime I cut her computer on, her desktop background would show up then dissappear and be replaced by a plain blue desktop background. I think another time her desktop background showed up but there were no icons. Well I figured maybe I didn't get rid of all the malware so I tried restarting the computer in safe mode several times (to run those programs again) but I couldn't get it to work (when the OS finished loading it was just a black screen with no toolbar or icons). After cutting it off and restarting it several times I got another error message which it keeps giving me everytime I reboot. This is the message (white text on a blue screen):

Quote :

"STOP: c0000218 {Registry File Failure} The Registry cannot load the hive (file): \SystemRoot\System32\Config\SOFTWARE or its log or alternate. It is corrupt, absent, or not writable. Beginning dump of physical memory Physical memor dump complete. Contact your system administrator or tech support group for further assistance"

Well I kind of consider you tech talking wolfwebbers my tech support group, so what do ya'll think?
What can I do to fix this situation?

11/16/2007 4:55:29 PM

Is your friend's sister hot?

its either a harware problem or the registry is corrupt. If you have a system restore point to go back to that might work. Also you can try doing a repair install. If those fail back it up and flatten it.

11/16/2007 5:00:59 PM

Well, technically this how you solve that problem:
http://support.microsoft.com/Default.aspx?kbid=307545

HOWEVER ...

If you have access to a WindowsXP CD, you should boot to it and tell it to Install Windows -over top of- the current installation of Windows. Don't delete any partitions, don't install to a different directory than C:\Windows. Follow the prompts carefully.

This will not overwrite any data in the "Documents and Settings" or any other part of your hard drive if done correctly.

The idea here is that Windows is entirely too borked right now to fix it within any amount of time worth spending. Reinstall and move on with life. Look for her old Documents, Desktop, etc inside her previous directory under D&S.

[Edited on November 16, 2007 at 5:03 PM. Reason : +link]

11/16/2007 5:02:56 PM

well not really, recovery console or repair should be your first attempt.

i'd never recommend someone to reinstall over-top their current install, too many problems can occur

follow the instructions here:
http://support.microsoft.com/Default.aspx?kbid=307545

if that doesn't get you anywhere you should really get some tech support to help, don't try to reinstall overtop unless you are ok with the 'possibility' of losing it all

[Edited on November 16, 2007 at 5:13 PM. Reason : .]

11/16/2007 5:09:44 PM

I've done it multiple times, but yes, I actually do know what I'm doing ... so, sure it could be easy for him to mess up.

This is by far the fastest method to getting back up and running ... but not the most preferred.

Ideally you should use a KNOPPIX Live CD, boot up, then backup all your data to DVDs or across the network to another drive. Format your hard drive and fresh install Windows.

[Edited on November 16, 2007 at 5:19 PM. Reason : ok further explained]

11/16/2007 5:16:42 PM

Quote :

"don't try to reinstall overtop unless you are ok with the 'possibility' of losing it all"

a repair install replaces all system files with whats on the cd including the system registry. It wont delete ur filez.

11/16/2007 5:22:27 PM

Quote :

"Well I kind of consider you tech talking wolfwebbers my tech support group"

Well there's your first mistake

Anyway, if you feel comfortable doing those steps that microsoft suggested, try them. If not, put the XP cd in, boot to it, and attempt to REPAIR the windows installation, not the Recovery Console either. Don't re-install over the top, it can work but more often than not, it doesn't end well. If the repair works, I would probably back the stuff up and re-format anyway just cause the virus could have screwed some other stuff up too that you don't realize.

11/16/2007 5:23:16 PM

Quote :

"This is by far the fastest method to getting back up and running ... but not the most preferred."

What?

Prospero and your original link have the right solution. It takes 5-10 minutes max to copy those files and doesn't require you to reinstall Windows. Once again: http://support.microsoft.com/Default.aspx?kbid=307545

11/16/2007 5:26:17 PM

Quote :

""don't try to reinstall overtop unless you are ok with the 'possibility' of losing it all""

Quote :

"a repair install replaces all system files with whats on the cd including the system registry. It wont delete ur filez."

exactly why i started my post with:

Quote :

"recovery console or repair should be your first attempt."

i'm not saying gs7's method won't work, i'm just saying it should be the very last thing you try because of the risk involved

[Edited on November 16, 2007 at 5:45 PM. Reason : .]

11/16/2007 5:44:29 PM

Yea, but depending on the technical comfort level of the person doing it, the suggest fix by Microsoft is potentially daunting. I'd do it, but just saying not everyone might want to.

My comment on fastest method was in regard to doing a Repair or Reinstall, not the posted registry solution.

11/16/2007 5:49:30 PM

will any copy of Windows XP work? I think I have mine lying around somewhere but she probably doesn't have it anymore or its at her parents house.

11/16/2007 6:38:29 PM

There's 4 different CD's:

XP Home Retail
XP Home OEM
XP Professional Retail
XP Professional OEM

It has to be the same CD as the OS

11/16/2007 8:41:26 PM

Back-up your files, take off, and nuke the system from orbit.

Its the only way to be sure.

11/16/2007 8:45:27 PM

I also agree with nuking the system and starting fresh.. with the amount of viruses, etc you talked about.. who knows what state the registry is in.. if the software hive is corrupt, then you may have programs crashing on you all the time if you get XP to start back up again.. and any recovery won't bring the registry back to 100% working order.

It's best to find a way to pull off the girl's documents, etc. then start fresh.

11/17/2007 9:49:33 AM