[WinXP] Installed updates, now bsod

Rosco-SS
03-22-2007, 03:58 PM
I have a fairly new computer with Win XP, and I think it has SP2. I have automatic updates turned on, and Im frequently downloading and updating my computer.

Well a few days ago, I had a few updates come through the pipe, so I downloaded them and installed them. As the installation went forward, I got the "Encountered and Error, and this program has been shutdown" blah blah screen, do you want to send an error report or not etc." The Windows Update was the program that causes the error, so I closed it down and restarted windows.

During startup, just after the Win XP screen had vanished and I could see my "Welcome to windows" I get the blue screen, saying critical error etc, about a Driver and that I must restart windows.

And of course, everytime I do start windows I get the same screen and my computer restarts.

So. I went into Windows safe mode to try and figure out what the heck is wrong, I started by trying to remove the latest updates I had downloaded through Windows Update. They uninstall fine but they dont get removed from the programs list, and they are still there after a restart (which I still get the bsod when I tried to go back to windows)

So, I tried to execute Windows backup because I had before this problem started. When I try to use it, it says that I do not have sufficient disk space to use windows restore and that I must free up space to use it.

Here's the catch that I read from Microsofts help pages.

I can't free up disk space in safe mode, I must do it in normal windows mode. I also cannot enable windows restore from safe mode because I cant enable the restore mode from safe mode, even though I now have disk space that I freed up safe mode I still cannot use my backup point I had saved in safe mode without first doing into windows standard startup mode and enabling it.

Yea, that doesnt make sense. Catch 22 by the looks of it. Ive tried to download programs to help me, but this computer I had made for me doesnt have a floppy drive. It also doesnt detect the CD drive in safe mode. This problem is so cruel its funny.

Any other time I would just wipe it and start over, but I got some important data on the comp and its SATA, and my other comps are IDE. So installing the drive into another computer and getting the info off it that way are out (I think?)

Man, I need some help here. Suggestions would be welcomed.

Ixiterra
03-22-2007, 04:08 PM
I can't free up disk space in safe mode
Unless, MS has made some drastic changes since I last used safe mode, I'm reasonably sure you can still select some files and hit (shift) DELETE to free up some HD space.

iNVAR
03-22-2007, 04:43 PM
disable automatic restarting in control panel->system->advanced->startup and recovery->system failure

then post what the error message is when you crash.

Rosco-SS
03-22-2007, 06:11 PM
Unless, MS has made some drastic changes since I last used safe mode, I'm reasonably sure you can still select some files and hit (shift) DELETE to free up some HD space.


Well yea of course I can, but it still says I need to remove files or perform disk cleanup to enable recovery mode. I have 5gigs free now, and it still says that it needs more free space. I believe it said it needs at least 200mb or 10% free disk space. I'll have to check when I get home.

Thats all and good, but it supposedly needs to run in normal windows mode to re-enable recover console. So im like wtf.

Rosco-SS
03-22-2007, 07:05 PM
Ok Invar, so heres the bsod message.

"A problem has been detected....etc"

DRIVER_IRQL_NOT_LESS_OR_E QUAL

etc

etc

Technical Information:

*** STOP: 0x000000D1 (0xA9543030, 0x000000002, 0z00000000, 0zA7F7E531)

*** afd.sys - Address A9543030 base at a9541000, DateStamp 41107eb5
*** LF30XP.sys - Address A7F7E531 base at A7F7D000, DateStamp 419DFE01

Beginning dump of physical memory etc....etc

iNVAR
03-22-2007, 07:19 PM
from google:
lf30xp.sys - At your option - Greatis Software (http://www.greatis.com/appdata/a/l/lf30xp.sys.htm)
LF30XP.SYS is related to Lock Folder XP software.
Manufacturer: Everstrike Software
Lock Folder XP (http://www.everstrike.com/lock_folder.htm)

also from google:
LF30XP.sys Windows process - What is it? (http://www.file.net/process/lf30xp.sys.html)
LF30XP.sys file information
The process belongs to the software Lock Folder XP by unknown.

Description: LF30XP.sys is located in a subfolder of "C:\Program Files". The file size on Windows XP is 101488 bytes.
The driver can be started or stopped from Services in the Control Panel or by other programs. The file is a file without information about the maker of this file. The program has no visible window. The process can be uninstalled in the Control Panel. There is no detailed description of this service. File LF30XP.sys is not a Windows core file. Therefore the technical security rating is 44% dangerous.


Important: Some malware camouflage themselves as LF30XP.sys, particularly if they are located in c:\windows or c:\windows\system32 folder. Thus check the LF30XP.sys process on your pc whether it is pest.
I recently had a similar problem with a friend's PC. I upgraded him to WinXP SP2 and BAM, his system kept freezing with a BSOD indicating a specific file. I googled for the file and discovered that his computer had been root kitted (http://en.wikipedia.org/wiki/Root_kit).

had to boot off the winxp cd and load up the recovery console, manually disable the hidden service, and kill the files.

Rosco-SS
03-22-2007, 07:28 PM
So I guess the first thing I should try is just to remove the lock folder softare huh?

So after that fails, throw the Xp disc in.. do recovery console.

Ive never used it, is it easy...hard? You happen to remember what and where the files are or do I just remove the .sys file.

Thx invar.

iNVAR
03-22-2007, 07:38 PM
do you have that lock folder software on your computer?

Rosco-SS
03-22-2007, 07:43 PM
yea, I do.

I tried to remove it, but for some reason in safe mode... it wont allow me to remove anything. :(

iNVAR
03-22-2007, 07:45 PM
well first off do you have anything that requires that software to access? i don't want to make any of your data inaccessible

Rosco-SS
03-22-2007, 08:02 PM
no, I used it for a bit... but im not anymore.

iNVAR
03-22-2007, 08:09 PM
look for the LF30XP.sys file on your hard drive and try to delete it in safe mode. if you can't, then boot into the recovery console and try to delete it. the recovery console is sort of like when you open a command console (start->run->cmd) so it won't be THAT new to you.

Rosco-SS
03-22-2007, 08:14 PM
ok, i dont think ive ever deleted a file in a dos-like enviroment.

is it like that?

iNVAR
03-22-2007, 08:15 PM
yes.
del <full path to filename>

without the < >. so like...

del c:\windows\system32\LF30X P.sys

etc.

Rosco-SS
03-22-2007, 09:03 PM
So erasing the file allowed me to start windows normally, thats a step.

But when I go into windows now, it asks me to re-activate my Win XP in 3 days because of "drastic hardware changes"

and when I go into windows, it acts like im still in safe mode.. but I get my background and resolution normal.

Cant connect to the internet, cant run system restore... and yes I re-checked the sysedit to make sure everything loads.


:( now what

Rosco-SS
03-23-2007, 07:22 PM
You dont know what could cause my cimputer to act like its still in safe mode iNVAR?

It has the right resolution, and desktop background.. but it still acts like safe mode.

Any ideas? :(

iNVAR
03-23-2007, 08:50 PM
try reactivating, assuming your xp is legit. :shrug:

Rosco-SS
03-24-2007, 12:16 AM
well hopefully it is legit, cause I ran windows update consantly and that requires a legit copy of windows XP to do that.

i got the computer built for me by a computer store in town here, so I guess the next course is go bug them about it cause there is no WinXP discs in the mobo box :/