Swatkat's rants

  • Subscribe to our RSS feed.
  • Twitter
  • StumbleUpon
  • Reddit
  • Facebook
  • Digg

Thursday, 17 November 2005

"Windows could not start because the following file is missing or corrupt: \WINDOWS\SYSTEM32\CONFIG\SYSTEM"

Posted on 09:44 by Unknown
This error arises when the System registry hive is either deleted or corrupt. System registry hive contains configuration information necessary for the system to boot.

Option 1: The first thing to try is to run chkdsk command from the Recovery Console and then reboot the system.

Note: If you don't have Windows installation disk to access Recovery Console, then this ISO image can be used to create a Windows Recovery Console CD. Download the ISO image and burn it to a CD/DVD (ImgBurn can be used to burn ISO images to CD/DVD). Boot the PC using this disk to access Recovery Console.

If chkdsk does not solve the problem, then the System file should be restored from backups. There are two places to look for the backups, one is the System Restore folder and the other is \Windows\Repair folder.

Option 2 (Using backups from System Restore feature): From the Recovery Console, navigate to the folder \System Volume Information\ folder of the root drive, using the command:
cd "C:\System Volume Information"

Here, locate and navigate to the folder whose name begins with _restore using the command:
cd _resto~1

This folder contains many subfolders which have names of the form RPxxx, where xxx is a number indicating the restore point. Locate an RPxxx folder which has the highest number as its suffix (highest xxx) using the command dir command. Then navigate into that folder using the command:
cd RPxxx (don't forget to replace xxx with the corresponding number!)

Now, there will be a folder named snapshot. Navigate to this folder using the command:
cd snapshot

There should be a file named _REGISTRY_MACHINE_SYSTEM, copy this file to the \Windows\System32\Config folder with the name System using the command:
copy _REGISTRY_MACHINE_SYSTEM C:\Windows\System32\Config\System

Reboot the system and check whether Windows loads properly.

Note: Option 2 works only if System Restore feature of Windows XP is enabled. If System Restore was disabled or if option 2 did not work for some reason, then try the next option.


Option 3: While installing Windows, the setup backs up the System registry hive in Repair folder. If the System Restore feature is turned off, then this backup can be used to restore the System hive. From the Recovery Console, navigate to folder \Windows\Repair, using the command:
cd C:\Windows\Repair

Copy the System file to its original location using the command:
copy System C:\Windows\System32\Config\System

Reboot the system and check whether Windows loads properly.

Note: There is a disadvantage in this method! Since this backup is created during the installation of Windows; system configuration and driver installations (made after fresh installation) will be lost after restoring this backup Registry hive file.

More resources can be found here and here.
Read More
Posted in | No comments

Saturday, 12 November 2005

Deleted files don’t go to Recycle Bin

Posted on 10:14 by Unknown
Due to some changes in the Windows settings or Registry changes, it can happen that the deleted files or folders do not go to Recycle Bin but they are permanently deleted. These are some of the steps which can be tried to rectify the problem.

Empty Recycle Bin: This may sound simple, but it solves the problem sometimes, so there’s no harm in trying it. Right click on the Recycle Bin icon and click “Empty Recycle Bin” even if it is empty.

Recycle Bin Properties: Right click on the Recycle Bin icon and click "Properties" option. Here, under "Global" tab make sure that option "Use one setting for all drives" is selected and the option "Do not move files to Recycle Bin" is unchecked.

Registry fix: Download this Registry file and save it with the default filename (which has a .REG extension). Double click on it and click "Yes" to agree to merge it to Registry. Restart the PC to make the changes take effect.

Delete the "Recycled" folder: Go to Start > Run and type the command cmd and press Enter key to go to Command Prompt. Here, at the command prompt, type rd /s /q C:\recycled and press Enter key. Repeat this command for all the drives by changing the drive letter in the above command. Reboot the system and check whether the Recycle Bin works correctly or not. For NTFS systems, replace recycled by recycler.
Read More
Posted in | No comments
Newer Posts Older Posts Home
Subscribe to: Posts (Atom)

Popular Posts

  • Ax Video Plugin
    Ax Video Plugin is one of the latest fake codec/plugin in the block. The site http://axvideodownload.com/ uses the same old fake "Vide...
  • Spyware Guard 2008
    Spyware Guard 2008 is a new rogue application. Does that name sound familiar? Well, yes, there is a legitimate application named SpywareGuar...
  • Javacool EULAlyzer!
    Have you ever read those ultra-long EULA (End User License Agreement) pages while you are installing any software? I think no one will read ...
  • Zlob brings back fake MP3s!
    Last August, I had blogged about Zlob gang using fake MP3 download sites to push their malware (link here ). Afterwards, we started to see m...
  • Myphonegames.co.uk hacked?!
    It seems that some pages of a mobile-phone games website www.myphonegames.co.uk have been hacked to execute malicious looking Javascript. A...
  • twitcurl - C++ twitter API library
    twitcurl is an open-source pure C++ library for twitter REST APIs. Currently, it has support for most of the twitter APIs and it will be upd...
  • DomPlayer - Rogue Multimedia Player
    DomPlayer is a new rogue multimedia player on the loose. The gang behind DomPlayer is making use of fake video files (available as torrents)...
  • Some new malware - a.exe, gop.exe etc
    We have some "new" malware this time, ranging from trojans to rootkits. One of them is a trojan which detected by some of the AVs ...
  • ThinkPoint rogue antivirus
    ThinkPoint is a new addition to the long list of rogue antivirus programs. ThinkPoint uses fake codec download tricks for its distribution. ...
  • Removing Mailbot.AZ (aka Rustok.A) Rootkit
    Mailbot.AZ (also known as PE386 or Rustock.A) is a kernel mode rootkit backdoor virus. It contains only one file-its driver-and it is stored...

Categories

  • a.exe
  • Autohotkey
  • C++
  • fake mp3 downloads
  • gop.exe
  • NewMediaCodec
  • OAuth
  • Orkut hating virus
  • Privacy Protector
  • rootkit
  • SysProt AntiRootkit
  • TDSServ rootkit removal
  • twitCurl
  • twitter
  • Udefender
  • Ultimate Cleaner
  • vdo_
  • Zlob
  • Zlob rootkit

Blog Archive

  • ►  2013 (1)
    • ►  June (1)
  • ►  2010 (6)
    • ►  October (2)
    • ►  September (2)
    • ►  July (1)
    • ►  April (1)
  • ►  2009 (12)
    • ►  September (1)
    • ►  May (1)
    • ►  April (1)
    • ►  March (4)
    • ►  January (5)
  • ►  2008 (44)
    • ►  December (6)
    • ►  November (6)
    • ►  October (4)
    • ►  September (15)
    • ►  August (2)
    • ►  June (2)
    • ►  May (1)
    • ►  April (1)
    • ►  March (6)
    • ►  January (1)
  • ►  2007 (38)
    • ►  December (1)
    • ►  November (2)
    • ►  October (9)
    • ►  September (2)
    • ►  August (8)
    • ►  July (11)
    • ►  June (3)
    • ►  March (2)
  • ►  2006 (6)
    • ►  September (1)
    • ►  August (2)
    • ►  May (1)
    • ►  February (2)
  • ▼  2005 (30)
    • ►  December (2)
    • ▼  November (2)
      • "Windows could not start because the following fil...
      • Deleted files don’t go to Recycle Bin
    • ►  October (4)
    • ►  September (5)
    • ►  August (11)
    • ►  July (6)
Powered by Blogger.

About Me

Unknown
View my complete profile