Tweaking.com Support Forums
Main Forum => General Computer Support => Topic started by: Gamezertruth on August 19, 2012, 03:45:53 pm
-
Today I've run this tool but overrun with each of the four steps successfully and try to start repair option then came a message that says, >(you haven’t created a restore point>..) however, I clicked on Yes but nothing happens except and this is something strange happening on my system or on this tool?
So I can not take a backup copy of the system and hope to be here answer..
-
Use the tweaking.com registry backup in the program if system restore isnt working :wink:
My program doesnt replace any files, so a registry backup is only the thing really needed.
Shane
-
I've downloaded the registry backup program and extract the zip files and run the program and click on "Backup Now" and my system keep restarting the system Each time click on "Backup Now"?
What really hell is going on? :angry:
-
The volume shadow copy service on your system is corrupt. SO when the program starts the VSS it is causing the system to reboot.
So instead lets force my program to do the fallback backup :-)
In the folder with the backup program is a files dir, go inside there and delete any file with "vss" in the name of it.
Now run the backup. The program will default to the fallback backup since VSS will fail for it now. :wink:
Shane
-
I Followed your instructions and this thing working ok . :smiley:
Thank you for your help Shane.
-
No problem :-D
Shane
-
After forcing the program to take a backup for the first time seems like everything was okay but after taking a backup for the second time looks like a failed this time and after all this my system down - (this time after clicking on the "Backup Now" Get the blue screen of death .???
-
Did the backup try using the VSS again? If so there is something diffidently wrong with the VSS.
Before the system was set to reboot on a BSOD, but now it is set to not reboot so you see the blue screen.
Have you checked you drive for any bad sectors yet?
Shane
-
As you said, I've I delete these files, which you mentioned, so I do not know what happened but I have checked the bad sector already
-
Lets find out what cased the blue screen :-)
Run this program, it will tell you what file on the system caused the blue screen. :wink:
http://www.resplendence.com/whocrashed
Shane
-
here you go.
Crash Dump Analysis
--------------------------------------------------------------------------------
Crash dump directory: C:\WINDOWS\Minidump
Crash dumps are enabled on your computer.
On Tue 8/21/2012 12:22:14 AM GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini082112-01.dmp
This was probably caused by the following module: ntoskrnl.exe (nt+0x21925)
Bugcheck code: 0xC000021A (0xFFFFFFFFE18AAB38, 0xFFFFFFFFC0000005, 0x7C9106C3, 0x129DD88)
Error: STATUS_SYSTEM_PROCESS_TERMINATED
file path: C:\WINDOWS\system32\ntoskrnl.exe
product: Microsoft® Windows® Operating System
company: Microsoft Corporation
description: NT Kernel & System
Bug check description: This means that an error has occurred in a crucial user-mode subsystem.
There is a possibility this problem was caused by a virus or other malware.
The crash took place in the Windows kernel. Possibly this problem is caused by another driver which cannot be identified at this time.
-
OK so ntoskrnl.exe caused the blue screen.
I did some google searches on it and found that a lot of times it is either caused by a bad sector on the drive or a bad driver on the system
http://www.techsupportforum.com/forums/f299/solved-ntoskrnl-exe-bsod-479380.html
My program only access the Windows API and some of it services. It doesnt do anything out of the norm. So the fact that it is blue screening when you run the backup means it is triggering something.
Also since you did a chkdsk on the drive and did the flag to have it check for bad secotrs, can you post the log from it? It will bei n the event viewer.
Also when you ran the check for bad secotrs it should have take a while to finish. Did it take an hour or more or did it finish in only a few min?
Shane
-
Yes, this thing took about an hour and a half, but where can I find this log?
-
Here you go :-)
http://www.sevenforums.com/general-discussion/96932-location-chkdsk-log-file-after-scan.html
Shane
-
hoping that the correct logs files.
And I have another error message blue screen.
Crash Dump Analysis
--------------------------------------------------------------------------------
Crash dump directory: C:\WINDOWS\Minidump
Crash dumps are enabled on your computer.
On Sat 8/25/2012 8:02:43 PM GMT your computer crashed
crash dump file: C:\WINDOWS\Minidump\Mini082512-01.dmp
This was probably caused by the following module: aamw_regfilt.sys (Unloaded_AAMW_Regfilt+0x1630)
Bugcheck code: 0x100000CE (0xFFFFFFFF9EE21630, 0x8, 0xFFFFFFFF9EE21630, 0x0)
Error: CUSTOM_ERROR
A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: aamw_regfilt.sys .
Google query: aamw_regfilt.sys CUSTOM_ERROR
-
OK chkdsk found a few errors and fixed them but no bad sectors.
Also I googled aamw_regfilt.sys and found nothing.
Have you ran tdsskiller.exe and combofix.exe yet by any chance?
Shane
-
yep, i run both tools but no chance yet.
http://support.emsisoft.com/topic/9077-some-win-problem/#entry56498
-
and look like a Trojan.Win32.Cosmu.aamw
http://www.securelist.com/en/descriptions/15157668/Trojan.Win32.Cosmu.aamw
and have this http://www.pc1news.com/files/1252301-aamw-guard-exe.html
http://www.threatexpert.com/report.aspx?md5=f226c8d14f7e5ea82b9a57fc86105ef3
more here http://file.feelcool.org/files/aamw_service.exe/111.html
-
OK so the blue screens look like they are caused by a virus. Where you able to get it cleaned out?
Shane
-
I have used many of the anti-malware / anti-spyware software, but most of these programs are unable to detect anything 'However I'm still trying to clean up my system using some other programs as you can see I'm trying to clean up my system with other Forum'
-
What version of windows are you on?
Shane
-
I'm using window xp pro.
-
Have you done a repair install yet?
Shane
-
yes.
-
A fresh install can be a lot of work, with drivers and reinstalling all programs.
What I would like to do is if you are able make a full backup image of it currently and save that image to an external drive.
The you wipe xp and install fresh. See if everything is fixed. If not we put back the image and the system to what it was before the reinstall.
If it fixes it then we know the virus was too deep and this was the only way (Or at least easiest way) to fix it. If it still have blue screen problems then we know it is hardware related :wink:
If you are not able to do this we can keep digging and see what we can do :-)
Shane
-
I've formate my system a few days ago, however, I do not know if I need to re-format my system or not, however, I want to learn how to formate Windows systems, so here's my problem I do not know yet how to formate my system.However, really need to transfer all my files from the current system to an external disk, so I need to learn more about Windows systems, so let's start and what would you suggest for me to do right now?
-
First thing is to get anything you dont want to lose backed up to an external hard drive.
Once done make sure you have your Windows XP disk ready.
Once the system is backed up you will unhookt he external drive.
Then boot off the xp cd and start the setup. When it gets to asking what drive to install to you will delete the partitions it shows and then format it.
Then the system will start to install. Before you do all this make sure you download the network card drivers and save them to the external drive.
Once Windows is reinstalled you can hook the drive backup and install the network card drivers. You can now get online and get the rest of the drivers you need and do Windows updates.
You now have a fresh installed system. Time to start reinstalling your programs :wink:
I did a quick google search and this vid shows what to do when you boot off the xp cd.
http://www.youtube.com/watch?v=n0cop_am1WM
Shane
-
I will give a try, and will come back to you tomorrow. :smiley:
Best Regards
-
I tried to boot from Windows CD, but to boot from the CD does not start booting never
And when I check my Windows CD get this error message
setup cannot continue because the version of windows on you computer is newer then the version on the cd
http://answers.microsoft.com/en-us/windows/forum/windows_xp-windows_install/setup-cannot-continue-because-the-version-of/a7f99d4c-6f43-e011-9bac-78e7d160ad4e
-
You get that error because your trying to run the setup from with in Windows.
You need to boot off the CD. Your computer may not be set to boot off the cd before the hard drive.
Most systems have a key you can hit to bring up the boot menu when you turn the system on. Or you can set the cd to boot before the hard drive in the bios. :wink:
Shane
-
How do I do that?Can you help me in both things to make it work ... :smiley:
-
Not really since you wont be in Windows when you do it, so no way for me to help.
What computer do you have? I can look up what keys you need to hit when you turn it on. :wink:
Shane
-
Hp 530. :smiley:
-
For HP it is normally the F12 key.
SO turn the computer off, and when you turn it on start hitting the F12 key repeatedly.
(The system goes so fast that sometimes the screen doesnt come up in time)
When the boot menu screen comes up you can choose to boot off the CD :wink:
Shane
-
turn off my computer and turn it on back and hitting F12 key but Nothing happened..
-
Does anything show on the screen before Windows starts loading?
Shane
-
yes, i have this f10= CD rom based setup.
-
What about hitting esc or f9?
Shane
-
That’s work After hitting f9 ,but my "windows CD" doesn't booting up.
-
Is your Windows cd a normal Windows cd? Or is it a burned copy?
Shane
-
is it a burned copy.
-
Was in an ISO? if so it should have had the boot sectors needed to boot off of it on it.
If it isnt booting off the cd then it sounds like it doesnt.
Shane
-
I think the Windows CD has been burned in the normal way using the Windows system to burn these files and probably is not ISO one.
-
Ah thats why. You need to get a proper iso image of the xp setup.
Shane
-
can you help with that?
-
Afraid not. You will need to find an iso off the net.
You dont need any cracked one or anything since you own Windows. Just a standard ISO image of the cd. Should be easy to find :wink:
Shane
-
Does this mean that should find a program to burn CD and supports ISO image files ? :cheesy:
-
http://www.imgburn.com/
Shane
-
how to use it?
-
It shows on the site.
But what I like about it is when it is installed you can just right click on an iso file have have the option to burn it with imgburn right from the right click menu :wink:
Shane
-
This seems to me something complicated and did not even know how to use this program