XP loads to black screen with mouse, but no keyboard

Post your techical queries on any product in our range of AntiVirus, AntiSpam, Content Security and Firewall Solutions sold under the brand names of eScan, MailScan, eConceal and X-Spam here. Your queries will be responded to by our expert technical team directly.

Moderators: Divesh, Gurdip Singh

XP loads to black screen with mouse, but no keyboard

Postby Gurdip Singh » Wed Oct 21, 2009 8:17 pm

In few PC's (XP OS) found one system was working, and then froze. Once a hard boot was done they all come up to a black screen with only a mouse cursor. Keyboard works fine in the bios screens, but cannot load into regular mode, safe mode, safe mode w/ networking, etc. without getting the black screen with a movable mouse cursor. They are all running Windows XP Professional, and when attempted to do a repair installation, it will copy the files and reboot, but on reboot it goes back to the black screen with a mouse cursor.



Solution:
Search for the below Registry entry:

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Drivers32
A string name "midi9" was present with value "C:\DOCUME~1\user\LOCALS~1\Temp\..\bibcfbk.tmp 0yAAAAAAAA"


The string name may differ, check & match the value given above, if any string have this value delete the string & del the file given in the patch.

The newly created Registry Values are:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
midi9 = "[file and pathname of the sample #1] 0yAAAAAAAA"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
LoadAppInit_DLLs = 0x00000001

The following Registry Value was modified:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows]
AppInit_DLLs =

You need to Boot with some Bootable CD like BartPE (Pre-loaded Windows XP) to access the registry & load the Software hive.

Although in this example the file name is "bibcfbk.tmp" it changes from computer to computer.

Deleting this registry key solves the problem, you can also delete the file itself from the system32 folder.

If you do not have Bootable CD like BartPE (Pre-loaded Windows XP) then follow the below mentioned procedure:

1)Remove the hard disk from the problematic machine

Note: It is **only** recommended for the person who have good hardware knowledge OR you may guide these steps to our dealers / partners hardware engineers to follow these steps.

2)Connect this hard drive to some other working machine as a SLAVE hard drive.

3)Copy the file named software (having no extension) from SLAVE hard disk (Problematic machine’s hard drive) from location \windows\system32\config to your local machine’s desktop.

4)Open registry of your local machine Start >> Run >> Regedit.exe then press ok

5)Now first Click HKEY_LOCAL_MACHINE and then click File >> Load Hive

Now locate the copied file on your desktop (software) and then click Open

6)Give the name to Key Name box ( example : abc ) and then Click Ok

Now expand your HKEY_LOCAL_MACHINE key, then it will show you abc under this key. Now navigate to;

\Microsoft\Windows NT\CurrentVersion\Drivers32

Now locate to the String value name “midi9”

Double Click this string and check the value, it should have something like this:

("C:\DOCUME~1\user\LOCALS~1\Temp\..\bibcfbk.tmp 0yAAAAAAAA")

(Please, Do note that the file name and the path might be different in your case.)

So, open Windows Explorer and browse to the path accordingly.
Take a backup of that file and save it to a password-protected Zip file, so that you can send the file to us at samples@mwti.net with a cc to support@mwti.net for detection purpose.

Now, delete the original file from that location.
Also, delete the String “midi9” from the registry.

7)In the registry, come back to key abc on the top and then click File >> Unload Hive

8)Now you have to copy this software file back to the original location i.e. \windows\system32\config folder of SLAVE hard disk.

9) Now remove the SLAVE hard drive and connect back to the machine and then check. The system should boot properly.
Gurdip Singh
MicroWorld.
Gurdip Singh
 
Posts: 51
Joined: Fri Dec 28, 2007 7:38 pm
Location: Mumbai

Return to Technical Support

Who is online

Users browsing this forum: No registered users and 18 guests

cron