Screen goes black after bootup splash sreen. Why?

[fsjcp2]

I'm working on a friends computer that was infected with the Klez virus. It was working for her the other day, but now won't boot up past the splash screen.

My first task was to innoculate the virus. I took out the HD, and slaved it in my isolated computer. I then ran NAV on it, and got most of the infected files innoculated, or quarenteened. After running the Symantec Fixklez removal program, I didn't turn up any sign of klez (I'm guessing that NAV did a thorough job).

So after placing the HD back into the original computer, which is an HP, I started to boot it up. I would get to the MS Windows ME splash screen, but then the screen would go black. The computer is on, and the HD is accessing files, but the screen is black. The monitor is still receiving a signal too.

When I rebooted into safe mode, I was able to start in Safe Mode. I then deleted all of the monitor drivers. After a second reboot, I still went to a black screen. Another reboot into Safe Mode showed that I had the generic monitor driver, which should be good enough, right?

I'm guessing that because I can still access files on the computer, that the FAT hadn't been corrupted, but it might be a startup file. Since I'm not that familiar with ME, I'm hoping someone would know which system file I'll need to replace.

 

[fsjcp2]

I've narrowed the problem down to my system.ini file. Can someone tell me which part I don't need? I've got it posted below:


[boot]
system.drv=system.drv
drivers=mmsystem.dll
user.exe=user.exe
gdi.exe=gdi.exe
sound.drv=mmsound.drv
dibeng.drv=dibeng.dll
comm.drv=comm.drv
mouse.drv=mouse.drv
keyboard.drv=keyboard.drv
shell=Explorer.exe
*DisplayFallback=0

[386Enh]
ebios=*ebios
device=*vshare
device=*dynapage
mouse=*vmouse, msmouse.vxd
device=*vcd
device=*vpd
device=*int13
woafont=dosapp.fon
keyboard=*vkd
display=*vdd,*vflatd

[drivers]
wavemapper=*.drv
MSACM.imaadpcm=*.acm
MSACM.msadpcm=*.acm
wave=mmsystem.dll
midi=mmsystem.dll

[mci]
cdaudio=mcicda.drv
sequencer=mciseq.drv
waveaudio=mciwave.drv
avivideo=mciavi.drv
videodisc=mcipionr.drv
vcr=mcivisca.drv

[drivers32]
MSACM.imaadpcm=imaadp32.acm
MSACM.msadpcm=msadp32.acm
MSACM.msgsm610=msgsm32.acm
MSACM.msg711=msg711.acm
MSACM.trspch=tssoft32.acm
vidc.CVID=iccvid.dll
VIDC.IV31=ir32_32.dll
VIDC.IV32=ir32_32.dll
vidc.MSVC=msvidc32.dll
VIDC.MRLE=msrle32.dll
msacm.lhacm=lhacm.acm

[Password Lists]
HP AUTHORIZED CUSTOM=C:\WINDOWS\HPAUT013.PWL

 

[fsjcp2]

I've found the answer. It was something in the boot section of the system.ini file. More specifically, it was a line that didn't show up in my copy 'n paste of the system.ini file at all. It was, display.drv=pnpdrvr.drv, which is the display driver of course. Derr! Now that I've got that figured out, now I can commence with an OS upgrade.

 

[grez]

Glad to see you found the answer. However, I have read that the only real way to successfully remove Klex is to reformat the HDD. I use Norton too, but with a virus like Klez, you may want to back up all your pertinent files and redo the HDD. Just some thoughts. Good luck.

 

[fsjcp2]

After scanning your drive with NAV, were you still getting reports on Klez? I've run an anti-virus check three times now, and it seems to be free of viruses. Once I do the OS upgrade to XP Pro, I'll update SystemWorks, and do another virus check.

 

[grez]

I actually didn't have to encounter Klez, had just read about it on the net. Good luck!

 

[bygeek]

Grez,
It is rarely necessary to format the hdd due to a klez infection. And not a good idea for you to advise people to do that.

 

[johns28394]

I am having this same problem after my battery died and ME closed unexpectedly.

What did you change in system.ini?

Here is what I have:

[boot]
shell=Explorer.exe
drivers=mmsystem.dll
user.exe=user.exe
gdi.exe=gdi.exe
sound.drv=mmsound.drv
comm.drv=comm.drv
mouse.drv=mouse.drv
keyboard.drv=keyboard.drv
display.drv=pnpdrvr.drv
*DisplayFallback=0
fonts.fon=vgasys.fon
fixedfon.fon=vgafix.fon
oemfonts.fon=vgaoem.fon
386Grabber=vgafull.3gr
SCRNSAVE.EXE=C:\WINDOWS\SYSTEM\3DFLOW~1.SCR

Thanks,
Michael

 

[Alcom]

Your battery? Laptop battery, I presume? Maybe your HD got a error when you shutdown improperly. Can you get into same mode? If you can, try a scandisk. If you have a boot disk, can also do it from DOS.

Did you have the same Klez problem, or is the similarity only in the blank screen at boot? Because you have the line "displaydrv=pnpdrvr.drv", which fsjcp was missing.

 

[johns28394]

I did not have Klez.
My Laptop Battery died.
I thought maybe the driver was corrupt, so I went to Dell and downloaded the latest (ATI MOBILITY 128 AGP and Mobility 3)
Once Installed the system booted into the black screen after the splash.
I reboot and it went into safe mode.
I than reboot and the system boots into normal mode, but I can not increase the screen size or resolution beyond the 16 colors and 640X480. It allows me to change it to higher resolutions and screen size, but when I hit reply I can see it change back to the 16 and 640X480, than it asks me to reboot. I reboot and I get the same black screen. I have tried this with the driver from Dell and the default Standard VGA with the same results.

Notes:

I do not have a LCD driver, I only have the default PNP driver.

I have run and updated virus definitions for Norton.

Like right now I am using the computer fine, but the screen size is small unless I enlarge it with a FN+F7 Key sequence that dell has provided on this laptop that stretches the screen to cover it fine. However, I want my resolution and screen size?

Any Ideas?

Dell Inspiron / 4000 /

 

[Alcom]

If you have an ATI mobile graphics processing unit, go to ATI to get the latest drivers. If the old buggy drivers set shows up in the Add/Remove programs, remove them before you install newer ones. Dell is an unnecessary intermediary, skip them and go to the source.

 

[johns28394]

I did try ATI:

1. They point to the laptop manuf. for all mobility drivers

2. I attempted similar files, with no avail.

Do I just need to keep plugging away at a variety of files?

Thanks,
Michael

 

[fsjcp2]

Like I had stated, it was a setting that didn't appear in my system.ini file. Click Start - Run. In the run field, type msconfig. From there, you'll see the selections for each of your ini files. That was where I unchecked the display.drv=pnpdrvr.drv entry.

 

[johns28394]

fsjcp2 - I can do that successfully and my driver works fine Except for when I go to change the colors from 16 to 256 or 16bit and the resolution from 640X480 up to 1024X768. What happens is that it moves, but when I hit apply it goes back to the old settings as if it doesn't save my changes.

Could it be my monitor? I have a Dell/Inspiron/4000 Laptop and the drivers that are loading are PNP and Default in the drivers. (Standard, but I don't think made for laptops.)

Any suggestions on where I might find a generic LCD Driver?

Providing that

 

[fsjcp2]

When you are unable to choose your color depth and resolution combination, you'll have to do the following. First, verify that the video card is properly identified in Windows and that the card's memory is working properly. Using diagnostic software provided by the video card or chipset maker to test the card's memory. If the hardware is working properly, check for new drivers. Which video card do you have in there? Is it the Rage Mobility 128 AGP graphics card? If so, go to

http://www.ati.com,

and see if they got the diagnostic tool, or drivers.

 

[fsjcp2]

Here is the link directly to the driver download page on ATI's site:

http://mirror.ati.com/support/drivers/powered.html

 

[johns28394]

The diagnostic tool from ATI shows that I have:

ATI MOBILITY 128 AGP

No RAGE, however, I will try to install that file.

Let me ask this. When I go to install a new driver and choose ATI from the Driver List. The list shows many of the drivers with jibberish (*&%*) in parenthesis where the language is. I am assuming they are corrupt files.

Is there a way to delete all ATI references on my computer and start with a new driver install. I am afraid when I am installing these new drivers it doesn't overwrite all of the necessary files?

Currently I switch between doing two things:
1. I am deleting the file in Device Manager
or
2. Updating driver in Display Properties.

Thanks,

 

[fsjcp2]

I think that you do have a corrupt driver. That would explain the VGA standard that you're getting. I've never deleted a driver before. Normally, you would get into the device manager, and delete whichever hardware you want drivers to be re-installed for. On reboot, the PNP would reinstall the appropriate driver. But you've tried this before, right? Anyway, I wouldn't mess with that. I would suggest the following. Download the correct driver from ATI, and execute the executable that you receive from them. That should clear things up for you.