Choose UEFI: General UDisk 5.00
Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
MBR:backboot-j
Started by
Warlix
, Aug 24 2023 10:09 AM
75 replies to this topic
#31
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Back to top
#32
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 15 September 2023 - 02:08 PM
I'm going offline now, I'll be available tomorrow early in the morning again.
Kind regards,
Axe0
Axe0
#33
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
Posted 15 September 2023 - 02:30 PM
Ok. The first screen is in the first picture in the attached files, then if I press f8, it shows me the second blue picture. And if I press escape it shows me the 3rd picture.
Attached Files
-
IMG20230915212347.jpg 40.17KB
0 downloads
-
IMG20230915212400.jpg 48.96KB
0 downloads
-
IMG20230915212407.jpg 71.83KB
0 downloads
#34
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 16 September 2023 - 04:19 AM
Unfortunately, it appears the situation is worse than I expected.
Before we go any further, we need to make sure you have a backup of your files if you don't have it yet.
What do you see when you choose the USB option from the boot menu?
Kind regards,
Axe0
Axe0
#35
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
Posted 16 September 2023 - 04:34 AM
Here's what I see in the attached files.
Correct me if I'm wrong but I think this blue screen already appeared in the past for me, and I think if I boot windows in safe mode and I do a command like SFC/scannow I can launch windows and do a back up of my files.
Correct me if I'm wrong but I think this blue screen already appeared in the past for me, and I think if I boot windows in safe mode and I do a command like SFC/scannow I can launch windows and do a back up of my files.
Attached Files
-
IMG20230915195625.jpg 40.58KB
0 downloads
#36
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 16 September 2023 - 04:44 AM
I think the situation may be a little more complex than that.
That error you see suggests that the ntoskrnl.exe file is corrupt, this file is part of the Windows kernel necessary for Windows to run. You can try to boot into safe mode, but there's a chance your computer won't be able to boot in safe mode.
This is for reference on the error code so I don't have to look it up again
0: kd> !error 0xc000a004 Error code: (NTSTATUS) 0xc000a004 (3221266436) - The supplied kernel information version is invalid.
Kind regards,
Axe0
Axe0
#37
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
#38
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 16 September 2023 - 05:54 AM
You might be able to make SFC working, but that would need to be done from a recovery environment that has more options.
You can use installation media since you would need an offline source SFC can use, from which you can also boot into.
https://www.tenforums.com/tutorials/2376-create-bootable-usb-flash-drive-install-windows-10-a.html
Kind regards,
Axe0
Axe0
#39
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
Posted 16 September 2023 - 09:33 AM
I launched UEFI. Screen in the attached files.
I also translated it in English:
It looks like you initiated an upgrade and booted from the installation media. If you want to continue with the upgrade, remove the media from your PC and click Yes. If you prefer to perform a clean installation, click No.
I also translated it in English:
It looks like you initiated an upgrade and booted from the installation media. If you want to continue with the upgrade, remove the media from your PC and click Yes. If you prefer to perform a clean installation, click No.
Attached Files
-
IMG20230916162708.jpg 32.6KB
0 downloads
#40
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 16 September 2023 - 10:34 AM
Continuing the upgrade will likely cause your computer to crash again.
Before you get to this screen, is there any option to do something else beside doing an upgrade or clean installation? If I remember correctly, in the left or right corner below on any of the screens prior to that message of your screen, there should be an option that leads to troubleshooting the computer.
Kind regards,
Axe0
Axe0
#41
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
Posted 16 September 2023 - 10:40 AM
No, I have nothing else. It goes to this screen immediately.
#42
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 16 September 2023 - 11:11 AM
I will create installation media and try it myself, this will take a bit of time for me to fully set it up.
You do have to go through a couple of steps before the actual installation process will start, so you should be able to continue with the installation media still connected and search for an option to troubleshoot the computer. Do NOT go past the step for indicating where you want to install Windows, after that step Windows will start the process and there's no going back then.
Kind regards,
Axe0
Axe0
#43
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
Posted 16 September 2023 - 11:20 AM
I think I found the right thing:
Attached Files
-
IMG20230916181926.jpg 44.98KB
0 downloads
#44
axe0
-
- Malware Response Team
- 1,948 posts
- OFFLINE
- Gender:Male
- Location:Netherlands
- Local time:03:23 AM
Posted 16 September 2023 - 11:35 AM
Yes!
In the command prompt you can run the SFC command, I suggest reading up a little on the options SFC provides to get the exact command right for this situation, you can find the details in the link below.
Run SFC Command in Windows 10 | Tutorials (tenforums.com)
Kind regards,
Axe0
Axe0
#45
Warlix
- Topic Starter
-
- Members
- 41 posts
- OFFLINE
- Local time:03:23 AM
Posted 16 September 2023 - 11:43 AM
I did the scan but it was weirdly fast and it said: "The Windows resources protection didn't perform the asked operation"
3 user(s) are reading this topic
0 members, 3 guests, 0 anonymous users
