Solved BSOD after virus clean up, STOP:c0000135 file %hs is missing

[highelf1]

Hi this is my first post in a fourm so be nice

My troubles started about a week ago, I was browsing the web when I was locked out of my browser. A program called Win 7 internet security came up, said my computer had heaps of problems and wanted me to pay them money to "save" the system, this "program" locked my out of almost everything important and even the computer belived it was an anti virus program. I shortly realised that this was probley a virus, and after a quick google (on another computer) it confirmed this. I then used malwarebytes anti-malware to do a scan and clean up any issues, after this scan it stopped the program/virus from popping up. I then installed and scaned using Microsoft security essentials (after uninstalling Nortan as its "free" period was almost up anyway) and after Microsoft security essentials ran the scan it asked to restart the computer, which I did. When the computer went to re-boot it would come up with the Windows loading screen then go to the BSOD with the following message:

STOP: c0000135 The program cant start because file %hs is missing from your computer. Try reinstalling the program to fix this problem.

I tried starting it up a few times and starting normally and in safe mode I got the same result. Since I have found no way to boot up my computer and can only get the BSOD or run the windows 7 install disk (OEM) to access repair features. I cannot restore, I have no system image. I have a live USB of ubuntu, and I can boot into that fine, and have no troubles running programs through it, making me belive it is not a driver issue. I have run a memory test and it comes back with no problems, but I cant see the test results as when it restart it goes back to the BSOD. I have run scans of the registry, the MBR and a checkdisk through the comand prompt they have all said that nothing was found missing, broken etc. The thing is when I run startup repair (which we all know does nothing in windows 7 ) it finds a problem but cannot repair it when I check the test results for this all the tests say nothing is wrong (with the error code 0x0) but around the middle of the log it says:

Root cause found: unspecified changes to system configuration might have caused the problem
Repair action: System files integrity check and repair
Result: Failed. Error code = 0x490
Time taken = 728291 ms

I have no idea what this could hint at. I really dont want to do a clean install of windows 7 and to be honest I kind of take this as a learning experience. Any input would be very helpful and I would be grateful for. Thanks.

P.S. I run windows 7 professional OEM
it is the only OS to be installed on the system
I built the computer mid last year (so the system is about 6 months old)
I obviously installed the OS at this time so that is also 6 months old
If you need any more info just ask

P.S.S I have learnt almost all I know about computers over the last year and that was through my own exploration, but I do love computers. I will understand some things and in other aspects I will have no idea but I learn quickly.

thanks for any help in this matter I am very active on this computer so if you reply I will prob try in out or respond straight away (unless I am sleeping )

your sincerly,
Highelf1

 

[zigzag3143]

No worries Highelf, we dont bite {grin}



We do need the DMP file as it contains the only record of the sequence of events leading up to the crash, what drivers were loaded, and what was responsible.

If you are overclocking STOP

You may be able to get the DMP files without crashing by booting into safe mode (F8) with networking.

To enable us to assist you with your computer's BSOD symptoms, upload the contents of your "\Windows\Minidump" folder.

The procedure:

* Copy the contents of \Windows\Minidump to another (temporary) location somewhere on your machine.
* Zip up the copy.
* Attach the ZIP archive to your post using the "paperclip" (file attachments) button.
*If the files are too large please upload them to a file sharing service like "Rapidshare" and put a link to them in your reply.

To ensure minidumps are enabled:

* Go to Start, in the Search Box type: sysdm.cpl, press Enter.
* Under the Advanced tab, click on the Startup and Recovery Settings... button.
* Ensure that Automatically restart is unchecked.
* Under the Write Debugging Information header select Small memory dump (256 kB) in the dropdown box (the 256kb varies).
* Ensure that the Small Dump Directory is listed as %systemroot%\Minidump.
* OK your way out.
* Reboot if changes have been made.

 

[highelf1]

Thanks for the reply, nice to know you dont bite :S

I have tried booting with safe mode before, but just tried it then. Booting with safe mode or safe mode with networking enabled gives the same result, the BSOD with the error seen above.

btw I dont overclock, and have not messed about in many of those settings relating to hardware performance.

Any other ideas?

sincerly,
Highelf1

 

[highelf1]

sorry something I forgot to mention is that when I start in safe mode, that is just safe mode (no networking and such) the BSOD only flashes on screen and then the computer re-boots

also when I go through safe mode it shows a list of file names (as they load I guess) the last one to come on to the bottom of the list before the BSOD is as follows:

Loaded: \windows\system32\DRIVERS\CLASSPNP.SYS

this is the same with safe mode with networking only that the computer doesnt reset when I hit the BSOD.

hope this helps as I know can be hard when the computer refuses to boot.

sincerly,
Highelf1

 

[zigzag3143]

BCC 135 means there is a missing "DLL" file. If you have the win 7 dvd you can do a repair install to replace it.

 

[highelf1]

sorry but BCC 135?

also to do a repair install I have to boot (a rather stupid addition to windows 7 if you ask me ), otherwise I would have done that much sooner. Seeing as I cant boot I cant repair install ;( saying that I do have the windows 7 installation disk.

any other ideas?

Sincerly,
Highelf1

 

[zigzag3143]

sorry but BCC 135?

also to do a repair install I have to boot (a rather stupid addition to windows 7 if you ask me ), otherwise I would have done that much sooner. Seeing as I cant boot I cant repair install ;( saying that I do have the windows 7 installation disk.

any other ideas?

Sincerly,
Highelf1

Sorry BCC=Bug Check Code (from your earlier post). It suggests there is a missing dll file. This link suggests installing a second OS into a different partition.

http://support.microsoft.com/kb/173309

If you cant boot or repair you options are limited. That leaves a re-install.

If the computer isnt under warranty (and this is a long shot- to be done only if comfortable) you might want to pull all but one ram stick.

UGH!

 

[highelf1]

the link to install a second OS to repair the registry of the first looks like a have to be able to boot as I cant do this it will have to be considered at a later date if I can get my computer to boot (if i can I will prob try a repair install first)

as I built my computer I have no worrys about removing my ram till I have only one stick installed as I have the neccessary equipment, but first I would like to know why, what this might achive and what to excpect, also it one stick doesnt do it should I try the other (I have 2 sticks 2GB each)?

Sincerly,
Highelf

 

[highelf1]

P.S. is there a way that I can get the DMP file by using a live USB of Ubuntu?

I will do a quick google to find out if it can be done aswell

 

[zigzag3143]

P.S. is there a way that I can get the DMP file by using a live USB of Ubuntu?

I will do a quick google to find out if it can be done aswell

Sure. dmp files are located on C:\windows\minidump. In your case from an extenal os the drive letter will be different. Copy the file to the external OS and upload it to us.

 

[highelf1]

I cant seem to find the file "minidump" would it be in another location or called something different?

sincerly,
Highelf

 

[highelf1]

ok so I think its official I cant get the minidump files through ubuntu, either there not there I am am doing something stupid....

will try removing the ram.... only take me a sec

sincerly,
Highelf1

 

[highelf1]

I tried your RAM idea and it didnt work, still got the BSOD with the same message.
Any more ideas? Any more help I would be grateful for
Will keep trying, will keep you posted, any more ideas throw them my way...

Sincerly,
Highelf1

 

[zigzag3143]

I cant seem to find the file "minidump" would it be in another location or called something different?

sincerly,
Highelf

You arent looking for a file called "minidmp" but rather one with a DMP extension (*.dmp)

It could also be located in C:\windows and be called memory.dmp.

I am still thinking but right now I need to catch some sleep. back in 6 hours.

 

[highelf1]

sure we all need to sleep
I will continue to work, have a good night hopefully I can find that file

Sincerly,
Highelf1

 

[zigzag3143]

sure we all need to sleep
I will continue to work, have a good night hopefully I can find that file

Sincerly,
Highelf1

We will find out hopefully sooner rather than later.

 

[highelf1]

ok, so I couldn't find a file ending in .dmp in the windows folder straight away so I did a scan on Ubuntu for all files on the C: drive that ended in .dmp needless to say a got quite a list.... unfortunatly none of these were directly in the windows folder, but about half of these were within foulders that were within the windows folder. I have no idea which of these are the ones we are looking for so I will give you a rough guide as to the location of each ( I cannot go through the exact location of each one as there are 105 files found, I am sure you dont want to go through that many ) all of these locations are on the C: drive.

the first 8 files are located around the area of (note that the part underlined changes slightly for each file):

ProgramData/Microsoft/Windows/WER/ReportQueue/Kernal_0_0_cab_0b41ed6a

the next 14 are as follows (all the same location):

Windows/LiveKernalReports/WATCHDOG

the next 1 is as follows:

Windows/SysWOW64/config/systemprofile/AppData/Local/CrashDumps

the next 2 are as follows:

Windows/Temp/AtherosAppDump

The rest are not in the windows folder and are concerning the steam app, Firefox crash reports, a few games and a few relating to my admin user account, if you need me to list these aswell just say the word, i wont because they are on a completly diffrent section of the C: drive and I assume have nothing to do with this.

I hope this helps, if what we are looking for is not here then its either invisible to ubuntu or doesnt exist (or something else )

I don't know what else to do at this point so hope this helps. Might get a few hours shut eye

Sincerly,
Highelf1

 

[GianniDPC]

Well lol try to zip al those .dmp files and upload them here

 

[highelf1]

um... lol thats alot to go through.... did you want me to include all the steam, firefox and user files?

this is kinda mental

sincerly,
Highelf

 

[GianniDPC]

um... lol thats alot to go through.... did you want me to include all the steam, firefox and user files?

this is kinda mental

sincerly,
Highelf

No the .dmp files you found.