bookie32 Posted June 9, 2015 Share Posted June 9, 2015 Hi guys!I have a computer laptop with a dead screen and the customer has been using an external monitor.... Problem... on login he is getting a black screen and nothhing...I suspect malware. I can't boot from a CD because he hasn't one and even if I use an external usb cdrom...don't get any boot screen on external monitor... Is there a way to edit the registry by moving the drive to another computer? Or can I get to cmd from login window...? bookie32 Link to comment Share on other sites More sharing options...
oliverpowell Posted June 9, 2015 Share Posted June 9, 2015 I'm not sure but you can get to command screen by using 'system recovery options'. Most OEM editions have this by default. Else, you'll require a boot CD to boot into system recovery options and use command interface. P.S. This isn't a malware. Something has to deal with faulty memory sticks or fan(not working properly). Let me know how it goes!! Link to comment Share on other sites More sharing options...
bookie32 Posted June 9, 2015 Author Share Posted June 9, 2015 Well, like I say I can't boot to a cd because I can't get any boot info on a external monitor...the laptop screen is dead... Link to comment Share on other sites More sharing options...
oliverpowell Posted June 9, 2015 Share Posted June 9, 2015 (edited) Sorry, I've misunderstood the question. You'll get few useful resources on the link here. Consider following the solutions and see if it helps you. Edited June 9, 2015 by Tripredacus removed url Link to comment Share on other sites More sharing options...
bookie32 Posted June 9, 2015 Author Share Posted June 9, 2015 I don't want to fix the screen?!I have had the computer running well with an external monitor...the laptop replacement is too expensive for this computer...so giving me such links is not that helpful...Thanks anyway... Link to comment Share on other sites More sharing options...
submix8c Posted June 9, 2015 Share Posted June 9, 2015 Attach the HDD to another PC as a secondary drive.Create a folder on the Primary Drive.Copy the HIVE files to that Folder. "CMD.EXE->REGEDIT->Load Hive"whichever one you think may be giving problems.from the copy (give a "dummy" name". I would suggest before you start messing with the HIVE files that you run a virus scan against the Secondary drive to give you comfort that malware isn't the culprit. If you *do* mess with the HIVE files, remember to unload them and copy them back to the Original *if* you make changes. Be aware that you'd *better* have a backup of the *originals* in case you mess up. HTH Link to comment Share on other sites More sharing options...
Tripredacus Posted June 9, 2015 Share Posted June 9, 2015 You'll get few useful resources on the link herePosting a google search is not what we consider to be helpful on this forum. If you do not know the answer or have experience with the issue, then do not comment. This is why we (unfortunately) end up having people ask questions that do not get answers. In addition to submix8c's response, I also load registry hives. However I use the regedit from a WinPE to do the work/inspection. Link to comment Share on other sites More sharing options...
jaclaz Posted June 9, 2015 Share Posted June 9, 2015 (edited) I can't boot from a CD because he hasn't one and even if I use an external usb cdrom...don't get any boot screen on external monitor...No.Meaning that the switch between internal and external monitor is at BIOS level, so there is surely a way to set the laptop to boot outputting to the external monitor.The keys to switch between internal and external (like Fn+F6 or similar) should work anyway. Is there a way to edit the registry by moving the drive to another computer?There are several ways (to edit an offline registry manually), the point is that they won't likely be of any use (if the scope is to use a malware analyzer that - usually - only works properly from the "live", "booted" system).If you intend to use an anti-malware tool capable of "offline" scanning, then of course you can remove the disk drive physically and connect it to another computer directly (I am assuming SATA) or through an USB adapter.Or, if you boot this other computer from a PE, there are tools like Runscanner designed to automate the mounting of the offline Registry hives.jaclaz Edited June 9, 2015 by jaclaz Link to comment Share on other sites More sharing options...
bookie32 Posted June 9, 2015 Author Share Posted June 9, 2015 Thanks guys!Brilliant! Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now