Worm caused shutdown during Service Pack Install - System now corrupted - Suggestions?

Posted: 08-14-2003, 07:28 PM

Mike Mills

Guest
Posts: n/a

Hello,

A co-worker was in the process of downloading WinXP SP1, when the
"msblast.exe" worm caused her machine to shutdown. This seems to have
corrupted her Windows installation, as her machine will no longer boot up -
it goes into a "boot loop". None of the safe mode options work, not even
safe mode with command prompt - it just ends up going back into the boot
loop.

Complicating things is that her machine only has a "recovery" CD - which
means that she has to reformat the hard drive completely, rather than just
re-install over the corrupt version of Windows.

I took her hard drive out and mounted it to a Linux machine; I'm currently
backing up her files. Its an NTFS partition, and the Linux driver just
supports read-only. Once the backup is complete, I figured that I would try
mounting it to a working WinXP machine, and try to access the files (with
read/write capability) that way. I would like to fix this corruption
problem, if possible, rather than forcing a complete reformat.

Any suggestions on how to determine exactly _what_ is corrupted, and how to
fix it?

Thanks,

Mike

Reply With Quote

Responses to "Worm caused shutdown during Service Pack Install - System now corrupted - Suggestions?"

Mike Mills

Guest
Posts: n/a

Re: Worm caused shutdown during Service Pack Install - System now corrupted - Suggestions?

Posted: 08-15-2003, 04:19 PM

Just "pinging" this message...still looking for any suggestions, if anyone
can help.

One other question - Could she re-install WinXP using someone else's CD, but
then use the product key from her own copy? Again, she only has a
"recovery" CD, which forces a full format.

Thanks,

Mike

"Mike Mills" <mikem@ctis.com> wrote in message
news:eQlStHpYDHA.1580@tk2msftngp13.phx.gbl...

> Hello,
>
> A co-worker was in the process of downloading WinXP SP1, when the
> "msblast.exe" worm caused her machine to shutdown. This seems to have
> corrupted her Windows installation, as her machine will no longer boot

up -

> it goes into a "boot loop". None of the safe mode options work, not even
> safe mode with command prompt - it just ends up going back into the boot
> loop.
>
> Complicating things is that her machine only has a "recovery" CD - which
> means that she has to reformat the hard drive completely, rather than just
> re-install over the corrupt version of Windows.
>
> I took her hard drive out and mounted it to a Linux machine; I'm currently
> backing up her files. Its an NTFS partition, and the Linux driver just
> supports read-only. Once the backup is complete, I figured that I would

try

> mounting it to a working WinXP machine, and try to access the files (with
> read/write capability) that way. I would like to fix this corruption
> problem, if possible, rather than forcing a complete reformat.
>
> Any suggestions on how to determine exactly _what_ is corrupted, and how

to

> fix it?
>
> Thanks,
>
> Mike
>
>

Reply With Quote

Curt

Guest
Posts: n/a

Re: Worm caused shutdown during Service Pack Install - System now corrupted - Suggestions?

Posted: 08-15-2003, 08:51 PM

"Mike Mills" <mikem@ctis.com> wrote in message
news:upxHjC0YDHA.2352@TK2MSFTNGP12.phx.gbl...

> Just "pinging" this message...still looking for any suggestions, if anyone
> can help.
>
> One other question - Could she re-install WinXP using someone else's CD,

but

> then use the product key from her own copy? Again, she only has a
> "recovery" CD, which forces a full format.
>
> Thanks,
>
> Mike

-------------------------
No Mike.....she cannot.
--
Curt.

Reply With Quote

GSV Three Minds in a Can

Guest
Posts: n/a

Re: Worm caused shutdown during Service Pack Install - System now corrupted - Suggestions?

Posted: 08-15-2003, 09:07 PM

Bitstring <upxHjC0YDHA.2352@TK2MSFTNGP12.phx.gbl>, from the wonderful
person Mike Mills <mikem@ctis.com> said

>Just "pinging" this message...still looking for any suggestions, if anyone
>can help.
>
>One other question - Could she re-install WinXP using someone else's CD, but
>then use the product key from her own copy? Again, she only has a
>"recovery" CD, which forces a full format.

<snip>

Another CD might not work with her product key .. the versions and
languages are encoded in there somewhere. However you should be able to
boot the recovery console off another WinXP CD, logon (as Administrator)
and run sfc, restore backup copy(ies) of the registry(ies), run chkdsk,
and those sorts of things.

You might want to point out to her what a PITA this 'recovery disk' cr&p
is, so net time she goes shopping for a system she doesn't buy one
without a proper CD.

--
GSV Three Minds in a Can
Outgoing Msgs are Turing Tested,and indistinguishable from human typing.

Reply With Quote

Reply

« XP Freezes - have to start up with pnp enabled everytime | Compaq EVO N1015V »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may post replies You may not post attachments You may not edit your posts BB code is On Smilies are On [IMG] code is On HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
System Shut Down, Repeatedly: NT AUTHORITY/SYSTEM -Caused by Remote Procedure Call service	Clarence	Windows XP Help & Support	1	12-20-2003 04:26 AM
SP4 Service Pack caused severe PC problems	Diane McVeay	Windows XP Performance & Maintenance	4	11-26-2003 04:21 AM
system shutdown caused by internet connection	ian	Windows XP Network & Web	2	10-18-2003 07:01 AM
Worm caused shutdown during Service Pack Install - System now corrupted - Suggestions?	Mike Mills	Windows XP Help & Support	3	08-15-2003 09:07 PM
Blaster Worm Download install corrupted Windows Explorer	JD	Windows XP Security & Administration	0	08-13-2003 06:55 PM

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90