Registry File Failure....please advise.

[2Ton]

A work computer today gave this error message after collegues tried to print from a flash drive infected with a virus or something nasty:

"STOPC0000218 {Registry File Failure}

The registry cannot load the hive (file):

\SystemRoot\System 32\Config\SOFTWARE

or its log or alternate.

It is corrupt, absent, or not writable."

Is there any hope for this computer? Is there a way we can salvage some files from it before it is sent to the shop? No backups have been made.

Thanks.

[AdvancedSetup]

Remove ALL external devices including USB devices and run an MB scan on the system to see if it finds anything.

Then click on START - RUN and type in CMD /K CHKDSK C: /F then press the Y key to allow it to run a Disk Check after a restart.

Then post a log in the HJT forum and we can continue on from there if you like.

[2Ton]

Then click on START - RUN and type in CMD /K CHKDSK C: /F then press the Y key to allow it to run a Disk Check after a restart.

I am sorry I was not very clear. It does not fully load Windows or start. From a cold boot, it starts and shows the black screen and then it gives the option to choose 'Safe Mode' or the 'Last Known good configuration'. But when you choose any of these choices it just reboots and gets stuck in the same place or just go to the blue screen with the error message mentioned in the post above.

That is the problem, if it were starting properly I would be able to attempt a clean up.

Thanks

[GT500]

Do you have a BartPE disk that you can run chkdsk from? Or at least another computer that you can hook the hard drive to and run a chkdsk on it?

[AdvancedSetup]

As GT says. You're going to need some bootable CD/DVD or another computer to connect the drive to in order to do repairs at this point.

If you have the original Windows XP CD you might be able to do a CHKDSK with the recovery console but if it's a Registry issue from Malware then it won't allow that you would need a better tool.

UBCD4Win is a bootable recovery CD that contains software used for repairing, restoring, or diagnosing almost any computer problem. ...

www.ubcd4win.com

Microsoft Diagnostics and Recovery Toolset

30 day evaluation of the Microsoft Diagnostics and Recovery Toolset. This product provides powerful, intuitive tools that help administrators recover PCs that have become unusable, and easily identify root causes of system issues.

.

[2Ton]

Do you have a BartPE disk that you can run chkdsk from?

I have a BartPE disk. I can try that when I get to the office.

another computer to connect the drive to in order to do repairs at this point.

I am afraid this is beyond my capabilities. If I start it with BartPE, can I connect a USB stick and copy information to it?

If you have the original Windows XP CD you might be able to do a CHKDSK with the recovery console

I am afraid we do not have Windows XP CDs. When we want software installed, our head office sends someone to install it. They bring the disks and install Windows and then leave with them. They usually take a long time to come. That is why we attempt recovery ourselves when we can. It would be nice if we could get our information from the pc, before getting them involved. Thanks, I will try BartPE.

[AdvancedSetup]

Well if you could build the disks at home and bring them in that would work as well.

[2Ton]

Well if you could build the disks at home and bring them in that would work as well.

Yes I have my own BartPE disks from home, I will bring them with me to work. I hope we will be able to save our information to USB sticks, if that is possible.

Thanks for all your advice very much appreciated.

[GT500]

... If I start it with BartPE, can I connect a USB stick and copy information to it?

Yes, but you must plug the USB stick in before the computer boots from the BartPE disk. BartPE does not seam to support hot swapping, and sometimes you even have to reboot once or twice to get it to recognise a USB drive.

[2Ton]

Yes, but you must plug the USB stick in before the computer boots from the BartPE disk.

Thanks. I will try this tomorrow. I did not go to work today.

[GT500]

Thanks. I will try this tomorrow. I did not go to work today.

Lucky.