Stop: 0x0000007E atapi.sys repair

[tjhess]

I am stuck in a boot loop with the BLUE SCREEN OF DEATH right after I see the Windows XP logo..

Stop: 0X0000007E (0X0000005, 0XB7F217C0, 0XB84CB528, 0XB84CB224)

atapi.sys - address B7F217C0 base at B7F0B000 datestamp 4802539d


It has to be some sort of virus or something as I can use EXPRESS GATE before the boot! I am so stumped! Any help.. I am forever grateful!

[miekiemoes]

Hi,

Looks like your atapi.sys may indeed be infected and you need to replace it. Unfortunately I don't know how Express Gate works and if you can access your main OS via express gate as well via a file manager. There should be a copy of atapi.sys in this folder: C:\windows\ServicePackFiles\i386\atapi.sys which you have to copy to the C:\Windows\system32\drivers folder
Do you have another computer? Do you have a boot disk?

[tjhess]

Hello, I thank you and you were correct. I figured this out about an hour after I posted this to your website. I actually have the same OS files on my laptop and used Hirem's Ulitmate Boot CD to lauch mini XP and then replace the old atapi.sys file with the one I copies from my system 32 folder from my laptop. I also rebuilt the boot sequence from a program I found on the Hirem's Boot CD. Thank You again though for the reply! It seems this is the ONLY source on the INTERNET for solving this issue. I found NOTHING of help and just went ahead on the logical front of replacing it. The MINI XP though was the lifesaver. COuld not access my computer without it thus replacing the atapi.sys file!

THANK YOU!

[miekiemoes]

Hi,

Yes, in case the pc won't boot anymore because of an infected atapi.sys, the hiren boot cd or BartPe is the ideal solution here. I've used/recommended/posted this method several times already, example here: http://forums.malwarebytes.org/index.php...t&p=193652
In that case, it was the iastor.sys that was infected.
However, in case the pc can still boot, then Combofix, Kaspersky TDSSKiller or Norman TDSS Cleaner can do the job for you as well.
But, it's always good people have a Hiren Bootcd, because in case something goes terribly wrong, you can always access your OS again with Hiren.

Anyway, glad to hear you solved it

Please read my Prevention page with lots of info and tips how to prevent this in the future.
And if you want to improve speed/system performance after malware removal, take a look here.
Extra note: Make sure your programs are up to date - because older versions may contain Security Leaks. To find out what programs need to be updated, please run the Secunia Software Inspector Scan.

Happy Surfing again!