My computer crashed a few days ago. I own a Lenovo T60 running Windows XP. The crash happened very suddenly, right in the middle of working on an AERA proposal. My battery gauge needs calibrating, so I probably just ran out of power. I plugged in, restarted, and was greeted by a blue screen saying,Stop: c0000218 {Registry File Failure}
The registry cannot load the hive (file):
SystemRootSystem32ConfigSOFTWARE
or its log or alternate.
This type of failure has been appropriately dubbed the “blue screen of death.”
Microsoft’s support page attributes the problem to corrupt registry files. Their solution requires a Windows XP startup disk, but Lenovo does not provide such a CD when you buy one of their computers. Lenovo instead supplies its Rescue and Recovery software, which allows the owner to restore the computer to its factory state or to a back up point if the owner has taken initiative to archive their operating system configuration. I regularly archive my files onto DVDs, but I had not archived my system. I didn’t want to restore my computer to its factory state because re-installing all of my software would take a very long time.
I successfully recovered my computer without the Windows XP startup disk, so there’s hope for those of you with running XP on a Lenovo (or another brand that provides a pre-installed rescue option in lieu of a startup CD). Here’s how, with a second, functioning computer nearby:
- I read Microsoft’s poorly written blue screen of death support page. The Guided Help option was no help at all… it kept stalling out on the second computer.
- I read this great entry posted by subtle on http://www.geekstogo.com/.
- I installed Avira NTFS4DOS Personal on the second computer and used it to create a DOS boot disk. (Note that if you do not have Lenovo Rescue and Recovery, then you can use the boot disk and DOS commands to follow the steps below, but it may be more difficult because the file names will appear truncated in DOS.)
- I used Lenovo Rescue and Recovery to copy the system, software, sam, security, and default files from c:windowsrepair to a USB flash drive.
- I also copied recent registry snapshots to the flash drive. Those files are located in c:system volume information_restore{***}RP##snapshot, where *** is a bunch of seemingly random letters and numbers and ## are numbers corresponding to the order of recent snapshots made. In DOS, the location will appear as c:system~1_restor~1rp##snapshot. The registry files corresponding with system, software, sam, security, and default are named _REGISTRY_MACHINE_SYSTEM, _REGISTRY_USER_SYSTEM, _REGISTRY_MACHINE_SAM, _REGISTRY_MACHINE_SECURITY, and _REGISTRY_USER_.DEFAULT. The DOS dir command will list the dates when the registry files were last saved, which can help you decide which snapshot number to use (i.e., how many days back to revert).
- I used DOS commands to overwrite the files named system, software, sam, security, and default in c:windowssystem32config with those from c:windowsrepair. (You may want to back up the config files first.) Then I re-started the computer and performed repairs with chkdsk and Rescue and Recovery, which resulted in another blue screen of death failure:
System error: Lsass.exe
When trying to update a password the return status indicates that the value provided as the current password is not correct.
I was happy to see that message because it occured much later in the boot up process than the original failure. In other words, I could tell I was making progress. - I renamed the snapshot registry files on the flash drive from _REGISTRY_MACHINE_SYSTEM and so forth to their respective config names: system, software, sam, security, and default.
- Returning to DOS, I overwrote (again) those files located in c:windowssystem32config with the just-renamed registry snapshots, thereby restoring the computer’s registry files to a point from a few days earlier.
It took many, many hours, but I was able to recover my computer using the steps above. I’m thankful for the DOS I learned in high school and for the tips and shareware provided freely on the internet. I could have avoided a lot of headache if I had just used Rescue and Recovery to perodically archive my system configuration. I will from now on.