XP BOOT ISSUE. Can pay a few bucks for success.

[huxleyb]

Setup: Thinkpad T42 w/ Windows XP, no floppy.

Issues:
1) Cannot boot XP. I get the POST screen then it goes blank and stalls.
2) When booted to Safe Mode I see a black screen with "Safe Mode" in all 4 corners. It stalls there.
3) The IBM stripe is trashed. All files are there but ACCESS IBM does not load. I have no restore points or backups.
4) I know how to re-install ACCESS IBM but I have avoided this because:
A) I need to recover EFS encrypted files and I fear erasing needed key/data.
B) The XP install also has a SecureDrive folder that is encrypted and I fear losing the key by reinstalling service stripe. Besides, IBM Access was no help in this recovery attempt before it got trashed.


Already Tried:
1) I did a repair XP install.
2) Performed fixmbr and fixboot.
3) Ran chkdsk, all is fine.
4) Currently trying to access ntbtlog.txt to get insight but Repair Console DOS has no text editor (edit). USB not working. Ulitmate BootCD takes forever (hour) to load simple software. How do I get a DOS prompt quickly, besides using Repair Console?

Needed:
1) PRIMARY GOAL: Boot Windows XP. Perhaps then I can enter my encryption password and recover files.
2) Is there a way to manually (DOS or separate XP install) open these two encrypted folders (one SecureDrive and one Windows EFS) without booting Windows? (I already tried EFS recovery on another computer, attaching the T42 drive externally - no luck).
3) Where are the EFS keys stored? Can I make copies?

Thanks Very Much!

[Marin85]

How about booting from some recent Linux LiveCD (or alternatively, from some XP Live CD if you have access to such, Acronis Disk Director boot media could also do) and physically copying the files in question onto another media where you would be able to read them

BTW, what is that about "paying a few bucks for success"??? I have some ethical concerns here... If you want to pay for success, then please feel free to donate to the forum!

[huxleyb]

I'm all for ethics! My previous posts never got replies so I was hoping to motivate an expert. I can also pay nothing , but a forum donation is fine too. After all, we would not be here without the kindness of the creator. This forum helps many!
________________________________________________________________________________________

As for copying: I have copied all non-encrypted files that I need but I cannot copy encrypted files.

I successfully installed WinXP Live(Bart's PE).
1) After an attempt to boot to Safe Mode the ntbtlog.txt file shows successfully loaded drivers. The last successful one is Mup.sys. After that, several hundred drivers do not load (starting with Microsoft Tun miniport adapter). The last one listed in the series, which does not load, is "Intel Processor". After that, the log alternates between successfully loaded drivers and failed-to-load drivers. To many to list. The last driver in the list, SM Bios service, did not load.

[sktn77a]

How are the files encrypted? Does the HDD have to be in the thinkpad to access them or can you take out the drive and simply copy them to another computer with an IDE cable or ultrabay adapter? If this works, you could then do a destructive recovery.

[Marin85]

I guess, in such a situation Linux Live CD won´t manage copying the files either, because it also has to handle the NTFS system, but it would be worth a try. Also, I bet you didn´t try performing EFS recovery. There are also other tools for EFS recovery like EFS recovery key. So, here is what you can do: put the HD in the ultrabay and use a working installation of XP in the main bay. From the working XP you should be then able to see the whole NTFS on the ultrabay drive and perform the recovery using either the M$ agent or some other tool of your choice.

[Marin85]

I´m wondering what happened to this thread... I´m just curious whether the last two suggestions would work out or not

[huxleyb]

I guess, in such a situation Linux Live CD won´t manage copying the files either, because it also has to handle the NTFS system, but it would be worth a try. Also, I bet you didn´t try performing EFS recovery. There are also other tools for EFS recovery like EFS recovery key. So, here is what you can do: put the HD in the ultrabay and use a working installation of XP in the main bay. From the working XP you should be then able to see the whole NTFS on the ultrabay drive and perform the recovery using either the M$ agent or some other tool of your choice.

Thanks to everyone for the suggestions. I has previously tried Microsoft EFS recovery with no luck. I just tried the EFSKey solution but after I enter the correct password (certain), the response is that the password is incorrect. I can see the locked files just fine, but not the contents.

Also, when the laptop worked I could see the .vol file that represents the SecureDrive 'partition' (folder). Using the ultrabay drive there is no sign of it. IS this because of the Thinkpad on-board chip? Either way, I'm still trying to recover both the Windows EFS encrypted files and the SecureDrive partition.

Thanks Again.

[huxleyb]

Anyone have ideas on recovering Windows XP, which in Safe Mode appears to hang at MUP.sys?
I have searched but had no luck.

[killer]

@huxleyb,
If you search for mup.sys in google it comes up with loads of hits, e.g. http://www.aitechsolutions.net/mup-sys-resolved.html

Try wading through to see if it helps you out.

[huxleyb]

Anyone have ideas on recovering Windows XP, which in Safe Mode appears to hang at MUP.sys?
I have SEARCHED but had no luck.

Thanks Anyway. Close thread.

[davidspalding]

The lesson to be learned here ... always make backups.