Black belts on Computer Repairs
Call 818 262 5621
|Home Services ContactFirst Aid Password Recover Remote Support|
XP won't boot? - Performing a manual restore of the Windows XP registry
Source: XP won't boot? Try manual registry restore (Sorry for copyrights - I must keep this in case your page will not be available. Thanks.)
Is your safe mode boot frozen at mup.sys?
The last driver that loaded may be mup.sys. To solve that issue on a number of systems, I performed this manual restore procedure for the windows XP registry. On a few occasions I have also seen this related to a USB device. To find out about other possible causes of the windows XP boot hang at mup.sys see the following link. How to recover from the dreaded mup.sys hang.
If your system won't boot successfully, you may have a corrupted registry. The following is the first step in the restoring your windows xp registry procedure that will enable you to boot your system with generic registry information. Note: The following assumes you are using the NTFS filesystem and that your windows directory is C:\WINDOWS. If your are using the FAT32 filesystem, some instructions may not apply or be slightly different. I'll try and note where the differences exist. If your windows directory is different than C:\WINDOWS then substitute the correct value in the following instructions. Also! It is important you type all instructions exactly as shown! Commands you need to type in will be displayed in lower case, a larger font, and a different color. FYI, Windows doesn't really care about case but I will use this convention for clarity. I will prefix commands with the command prompt that includes the current working directory. The Command Prompts will be in upper case as this is how they are displayed. Yours should look the same and we can use this verify you are in the correct directory. Be sure to pay attention to this as working with the command line is not at all forgiving! If for some reason your command prompt doesn't reflect the current working directory, you can try executing this command at the prompt. set prompt $p$g As a FYI, There are ways to automate some of this process and/or read the commands from a text file using the recovery console. I'll leave those options to your imagination or possibly a future article. Let's get started!
You should now be at a C:\WINDOWS> prompt.
First we will make a new directory to use for backup and as a scratch area.
At the C:\WINDOWS> prompt enter:
Now we'll back up your current configuration(registry). We should not need those files anymore but it's good
just to be safe and it's free CYA.
Change your current working directory from C:\WINDOWS to C:\WINDOWS\SYSTEM32\CONFIG.
Your command prompt should now be: C:\WINDOWS\SYSTEM32\CONFIG>.
Now we will copy the folowing 5 regestry files.
Now these files are backed up to \MYTMP. Execute the following dir command to check.
You should see the five files listed: default.bak sam.bak security.bak software.bak system.bak It wouldn't be a bad idea to compare the file sizes with the originals, that's your choice. To show the file sizes of the originals just execute the dir command.
Now we will replace the registry with the base files created\saved during the initial windows XP installation. This will enable us to boot the system normally and access the system restore files. BTW, I know there are some Windows gurus out there that can restore the registry from your last checkpoint using the recovery console without booting Windows XP itself but that is an even more tedious procedure and we want to make this as painless as possible. Besides, If you already know how to do that you are probably not reading this article anyway. Enough digression. Back to business. Your current directory should still be C:\WINDOWS\SYSTEM32\CONFIG. If not make it so! Copy these five files. Make sure you are in the C:\WINDOWS\SYSTEM32\CONFIG Directory and check your spelling! Please, DO Not overwrite any files or folders in the C:\WINDOWS\REPAIR Directory! Also note the single space between the filenames at the end of the following commands. When you get the warning about overwriting the destination file, Press Y to allow it.
Now we should have good (albeit somewhat generic) registry files back in place.
Don't boot the Windows CD. Do a normal non-safe mode boot from the hard drive. Depending on your system you may need to take out the CD from your optical drive. If you followed along precisely, Your previous registry was corrupted, The repair files from you previous windows XP install were in good shape, and of course, there is no other show stoppers here, you should be greeted by something you havn't seen in a while! A Windows XP Welcome screen! You will notice your user ID(s) are not one of the selections. This is because of the generic registry that is loaded. Note: System Restore is turned on by default. The following procedure assumes you have NOT turned off System Restore.
Next we need to change some options so we can access hidden and system files created by System Restore.
We'll change these all back later when we're done.
Help! I get a security error whenI try to open the System Volume Information folder
Skip the next section on XP Pro and continue from the "Now open the System Volume Information folder" step further down the page. If you are running XP Pro follow closely.
Be sure you select a user and not a group. For example, if your user id is administrator, Make sure you select the administrator user (Icon with one head). Do not select the administrators group (Has an icon with two heads).
- For those continuing from the previous section - This is where the changed date in the BIOS comes into play. When we booted Windows with the generic registry it created a folder here which would normally be the newest folder. What it did was create a folder with the older date you specified. Since we don't want the restore data from that folder, it is now easy to identify the folder we want to use.
You should now see a number of folders named RP##. These are Restore Points.
For example: _REGISTRY_MACHINE_SAM becomes just SAM Also, don't forget to remove the dot in the name for the default file!
We are going back to the recovery console so we can copy in the extracted registry files to the current active configuration. This needs to be done when windows is not running otherwise they are locked and therefore can't be replaced.
Now back at the C:\WINDOWS prompt: Change your current working directory from C:\WINDOWS to C:\WINDOWS\SYSTEM32\CONFIG
Your command prompt should now be: C:\WINDOWS\SYSTEM32\CONFIG> Make Sure! Enter each command below and Type Y when prompted to overwrite. Also note the single space between the filenames at the end of the command lines!
This Is IT! The moment we have been waiting for!
You can remove the XP CD from your optical drive and put it away for safe keeping. Note that during this particular startup Windows needs to rebuild itself and it will take some time so be patient. It is best to wait until most of the major HD activity is finished before you logon. I've seen a non-responsive keyboard issue occur when trying to enter your password. If that happens to you, just give it a minute and try again. Now you should be back at your original configuration with all the applications, settings and updates that were in effect at the time reflected by the selected Restore Point. Congratulations! Great Job! If this somehow is not the configuration you want you can always go back to System Restore in the normal fashion and load a different restore point. You can get there by START>ACCESSORIES>SYSTEM TOOLS>SYSTEM RESTORE and selecting another restore point using the wizard.
Now, If you have not done so already there are a few items you need to address once you feel all is stable and have restarted a few times. Logon to your system as a user with administration privleges To enhance security: Bring up Explorer (Right Click START), Click on tools, Click Folder Options, Click the View tab 1. Under hidden files and folders, Set the "Do not show hidden files and folders" radio button 2. Make sure there is a check in the "Hide protected operating system files" item 3. (XP Home) While you are still in explorer navigate to the C:\System Volume Information folder, Right click, select Sharing and Security..., In the Sharing, Network and Security section deselect the two checkboxes, Click Apply and OK. or 3. (XP Pro) Navigate to the C:\System Volume Information folder, Right click, select Sharing and Security..., Open the Security tab, Highlight (ONLY) the user (One headed Icon) that was added previously and click the remove button. Please Do Not remove the SYSTEM or Everyone Groups! When you are sure click Apply and OK 4. (XP Pro) Click on tools, Click Folder Options, Click the View tab, Scroll to the bottom and make sure there is a check in the "Use simple file sharing" item
Will make your computer behave!
Copyright (C) Tal Bahir, Inc 2008