Windows Boot Recovery won't solve issue StartRepairOffline

--------
EDIT:
I posted this here because it all started with a BSOD. User of the computer got the following error in Outlook: 0-8007000E (Your system needs more memory or system resources. Close some windows and try again)
--------

Hello Seven Forums,

I'm currently facing an issue with Windows. I got asked to repair this PC, but they ran into another issue than I did.
They couldn't get the PC to boot because it gave them a BSOD. Now, when I just started the PC, there's not a single BSOD and it runs fine, untill the "Windows Logon" screen. It doesn't load. There's a cursor and all, but the actual screen isn't popping up.

I had some heavy google sessions, with no result so far. I tried to press "Ctrl + Alt + Delete" to get the taskmanager opened, then starting "Explorer.exe", but the taskmanager didn't even load.
Now, after inserting my Windows 7 Home Premium disk (OEM), and tried to run a recovery, it took about 30 minutes to come up with this error:

Code:

Problemsignature:
Problem Event Name: StartupRepairOffline
Problemsignature 01: 6.1.7600.16385
Problemsignature 02: 6.1.7600.16385
Problemsignature 03: unknown
Problemsignature 04: 718
Problemsignature 05: ExternalMedia
Problemsignature 06: 1
Problemsignature 07: BadDriver
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1043

I have fixed these problems before, but only with wiping the whole disk and doing a clean install. But is there another way? It's not my own computer, I do not know what files are stored on it, and because of that I don't want to do a clean install.

Ruben

Capt.Jack Sparrow said:

Cyberuben said:

--------
EDIT:
I posted this here because it all started with a BSOD. User of the computer got the following error in Outlook: 0-8007000E (Your system needs more memory or system resources. Close some windows and try again)
--------

Hello Seven Forums,

I'm currently facing an issue with Windows. I got asked to repair this PC, but they ran into another issue than I did.
They couldn't get the PC to boot because it gave them a BSOD. Now, when I just started the PC, there's not a single BSOD and it runs fine, untill the "Windows Logon" screen. It doesn't load. There's a cursor and all, but the actual screen isn't popping up.

I had some heavy google sessions, with no result so far. I tried to press "Ctrl + Alt + Delete" to get the taskmanager opened, then starting "Explorer.exe", but the taskmanager didn't even load.
Now, after inserting my Windows 7 Home Premium disk (OEM), and tried to run a recovery, it took about 30 minutes to come up with this error:

Code:

Problemsignature:
Problem Event Name: StartupRepairOffline
Problemsignature 01: 6.1.7600.16385
Problemsignature 02: 6.1.7600.16385
Problemsignature 03: unknown
Problemsignature 04: 718
Problemsignature 05: ExternalMedia
Problemsignature 06: 1
Problemsignature 07: BadDriver
OS Version: 6.1.7600.2.0.0.256.1
Locale ID: 1043

I have fixed these problems before, but only with wiping the whole disk and doing a clean install. But is there another way? It's not my own computer, I do not know what files are stored on it, and because of that I don't want to do a clean install.

Ruben

Hello Ruben!

As the error log says it's "Problemsignature 07: BadDriver" unfortunately we won't know which driver it's talking about. Are you able to login under Safe Mode? If so check in Event Viewer so if you find anything specific.

Run a SFC Repair at Boot SFC /SCANNOW : Run in Command Prompt at Boot. Check this article Why is my screen black when I start Windows 7? and see if it helps.

Report us back with results :)

I just rebooted the machine. Instead of giving me boot options like the 3 other times I rebooted the machine, it went straight to the winlogon screen. I wanted to type in the password but before I was able to hit a single key, a BSOD popped up.

I read the .dmp file with NirSoft BlueScreenViewer and this is the outcome.
hal.dll hal.dll+102ec fffff800`039f3000 fffff800`03a3c000 0x00049000 0x4ce7c669 - Pastebin.com

The bluescreen mainly showed "NDIS.SYS - <a lot more code>", so I quick googled that. The first hit brought me to a website that said there was a possibility for a virus to settle within this file, so your virusscanner would remove it.

EDIT:
Is it smart to run a system upgrade, so it creates a windows.old folder, and a new windows folder? Then scan the whole disk, then copy all files to their original location?

EDIT2:
I'm doing the SFC /SCANNOW thing now. I already tried booting in safe mode, it works, but I can't even start the virusscanner because of internet connection (and no wired internet nearby).

Capt.Jack Sparrow said:

Hello there!

NDIS.SYS is not always a malware it's Network Layer Driver so it maybe the Network driver itself causing the problem.Then HAL it mostly means Hardware but it can very well false positive. It could be nice if you could upload the dump files here so we can take a lot at it.

The file is attached here. And for the NDIS.SYS, I understand it's a windows feature, but it could be that there is indeed a virus settled IN it.

EDIT: sfc /scannow keeps telling me that there's a recovery program running and therefor it can't do anything. Doesn't seem like any of the solutions you gave me are working. Is "upgrading" Windows a solution?

EDIT2:
There seems to be a system backup from only 3 days ago? Worth a try?

Capt.Jack Sparrow said:

Cyberuben said:

Capt.Jack Sparrow said:

Hello there!

NDIS.SYS is not always a malware it's Network Layer Driver so it maybe the Network driver itself causing the problem.Then HAL it mostly means Hardware but it can very well false positive. It could be nice if you could upload the dump files here so we can take a lot at it.

The file is attached here. And for the NDIS.SYS, I understand it's a windows feature, but it could be that there is indeed a virus settled IN it.

It's indeed Wireless Network driver that's causing the crash i.e. athrx.sys Atheros WLAN card according to the dump files.

BSOD BUGCHECK SUMMARY

Code:

Built by: 7601.17835.amd64fre.win7sp1_gdr.120503-2030
Debug session time: Tue Jul 24 18:55:46.813 2012 (GMT+5)
System Uptime: 0 days 0:00:30.249
BugCheck D1, {10, 2, 0, fffff880010fea26}
*** WARNING: Unable to verify timestamp for athrx.sys
*** ERROR: Module load completed but symbols could not be loaded for athrx.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by : athrx.sys ( athrx+2e297 )
BUGCHECK_STR:  0xD1
PROCESS_NAME:  System
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``

Is there a way to repair this? Is there an automated way of doing it, or removing it? I have no clue.

Capt.Jack Sparrow said:

Cyberuben said:

Is there a way to repair this? Is there an automated way of doing it, or removing it? I have no clue.

We need to go into Windows to remove it. See if you go into Safe Mode. If you can then you can remove the drivers from device manager.

Safemode works perfectly fine. Going to try to remove it.

EDIT:
Successfully removed and re-installed a new version of the driver. Everything works perfect now.
Thanks for helping me so far as you could!