Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

windows will not start or repair


  • Please log in to reply
16 replies to this topic

#1 dyann

dyann

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 30 March 2017 - 10:45 AM

After working on a Zbot trojan issue with a bleeping computer tech my computer and my tech stopped working, he told me to post on this forum for assistance. You can see the history here https://www.bleepingcomputer.com/forums/t/642836/trojan-zbot-problem/ 

 

The computer is a HP Desktop it has dual hard drives (a mirror drive), and an external Seagate harddrive it was originally a windows 7 with the free windows 10 upgrade. There is software on the computer that can't be easily replaced so total wipe is not desirable. Any suggestion or assistance would be greatly appreciated, I was left with "I suggest you start a new topic in the Windows 10 forum. A technician should be able to suggest a programs or means to restore the computer."  I am hopeful that this is the case,

 

If it helps I got the message Startup Repair couldn't repair your pc when tryin gto let windows perform the repair, it gave a log file location so i started the pc chose command prompt (dos mode) and when looking through the repair txt doc from the cmd prompt everything completed successfully except the following:

 

Root cause found:

- - - - - - - - - -  - - - - - - - - - -

unspecified changes to system configuration might have caused the problem,

 

repair action:

result: Failed error code = 0x32

time taken 3656 ms

 

repair action: system restore

result: Failed error code = 0x1f

time taken = 1791922 ms

 

re[pair  action: system files integrity check and repair

result: Failed error code = 0x490

time taken = 1977156 ms


Edited by dyann, 30 March 2017 - 11:25 AM.


BC AdBot (Login to Remove)

 


#2 rhysharrison

rhysharrison

  • Members
  • 12 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Western Australia
  • Local time:10:04 PM

Posted 31 March 2017 - 08:34 AM

Maybe get a new hard drive & simply copy all the files and programs across?



#3 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 31 March 2017 - 09:54 AM

Please boot your computer with Windows Setup Media and from Windows Recovery Environment start the Command Prompt.

Please type below command into Command Prompt and press Enter key.

The following command scans integrity of all protected Windows system files and repairs files with problems when possible.

Sfc  /Scannow   /OFFBOOTDIR=D:\   /OFFWINDIR=D:\Windows



Please replace partition letter D: with Windows installed partition letter.  When computer boots into Windows Recovery Environment (WinRE) environment the drive letter assign to Windows partition may not be C: drive letter because Windows 7, 8 , 8.1 and 10 creates a separate system partition when it's installed from scratch. The system partition contains boot files WinRE assigns the system partition the C: drive letter and the Windows installed partition will be assign any other drive letter usually D: drive letter is assign to Windows installed partition. The Bcdedit /enum | find "osdevice" command can be use to find out the drive letter of the Windows installed partition the output of the Bcdedit command is similar to this osdevice partition=D:. The drive letter after partition= is the drive letter of the Windows partition.

Posted Image


#4 dyann

dyann
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 31 March 2017 - 11:26 AM

You asked to boot computer with Windows Setup Media - I do not have any dvd of/with Windows Setup Media 

I started computer - it failed to load - I selected troubleshoot then advanced options then command prompt

I located the windows partition (D:) changed directory cd\d: and ran the command line you provided

After running Sfc  /Scannow   /OFFBOOTDIR=D:\   /OFFWINDIR=D:\Windows I got "Windows Resource Protection did not find any integrity violations"

 

tried to start and computer still freezes while trying to load windows



#5 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 31 March 2017 - 11:55 AM

Please boot your computer with Windows Setup Media and from Windows Recovery Environment start the Command Prompt.

Please type below command into Command Prompt and press Enter key.

Following command will  fixes errors on the disk and locates bad sectors and recovers readable information.


Chkdsk D: /r



Please replace partition letter D: with Windows installed partition letter.  When computer boots into Windows Recovery Environment (WinRE) environment the drive letter assign to Windows partition may not be C: drive letter because Windows 7, 8 , 8.1 and 10 creates a separate system partition when it's installed from scratch. The system partition contains boot files WinRE assigns the system partition the C: drive letter and the Windows installed partition will be assign any other drive letter usually D: drive letter is assign to Windows installed partition. The Bcdedit /enum | find "osdevice" command can be use to find out the drive letter of the Windows installed partition the output of the Bcdedit command is similar to this osdevice partition=D:. The drive letter after partition= is the drive letter of the Windows partition.

Posted Image


#6 dyann

dyann
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 31 March 2017 - 02:03 PM

You asked to boot computer with Windows Setup Media - I do not have any dvd of/with Windows Setup Media 

I started computer - it failed to load - I selected troubleshoot then advanced options then command prompt

results of Chkdsk D: /r

Examining basic file system in NTFS.

Volume lable is OS

 

Stage 1: Examining basic file system structure ...

 845312 file records processed

File verification completed

 23376 large file records processed

 0 bad file records processed

 

Stage 2: Examining file name linkage ...

 1026392 index entries processed

Index verification completed

 0 unindexed files scanned

 0 unindexed files recovered to lost and found

 

Stage 3: Examining security descriptors ...

Inserting an index entry with ID 2464 into index $SDH of file 9

Repairing the security file record segment

Cleaning up 8239 unused index entries from index $SII of file 9

Cleaning up 8239 unused index entries from index $SDH of file 9

Cleaning up 8239 unused security descriptors

CHKDSK is compacting the security descriptor stream

Security descriptor verification completed

 90541 data files processed

CHKDSK is verifying Usn Journal ...

Usn Journal verfication completed

 

Stage 4 : Looking for bad clusters in user file data ...

Progress: 12298 of 845296 done; Stage:  1%; Total:  2%; ETA:  34:32:20 ...

 

I have not aborted or done anything but the computer has sat at this point for at least 30 mins with no change - cursor is still blinking 

will let it sit until I hear back 


#7 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 31 March 2017 - 02:19 PM

Let it run its repairing errors.


Posted Image


#8 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 01 April 2017 - 05:28 AM

How is everything progressing, do you need more assistant on this issue?


Posted Image


#9 dyann

dyann
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 01 April 2017 - 09:32 AM

results of Chkdsk D: /r

Examining basic file system in NTFS.

Volume lable is OS

 

Stage 1: Examining basic file system structure ...

 845312 file records processed

File verification completed

 23376 large file records processed

 0 bad file records processed

 

Stage 2: Examining file name linkage ...

 1026392 index entries processed

Index verification completed

 0 unindexed files scanned

 0 unindexed files recovered to lost and found

 

Stage 3: Examining security descriptors ...

Inserting an index entry with ID 2464 into index $SDH of file 9

Repairing the security file record segment

Cleaning up 8239 unused index entries from index $SII of file 9

Cleaning up 8239 unused index entries from index $SDH of file 9

Cleaning up 8239 unused security descriptors

CHKDSK is compacting the security descriptor stream

Security descriptor verification completed

 90541 data files processed

CHKDSK is verifying Usn Journal ...

Usn Journal verfication completed

 

Stage 4 : Looking for bad clusters in user file data ...

 845296 files processed

File data verification completed

 

Stage 5: Looking for bad, free clusters ...

 129817498 free clusters processed

free space verification is completed

Correcting errors in master file table's (MFT) BITMAP attribute

Correcting errors in Volume Bitmap

 

Windows has made corrections to the file system

No further action is required

 

948592639 KB total disk space

427995444 KB in 732702 files

      378688 KB in 90544 indexes

                0 KB in bad sectors

      948511 KB in use by the system

        65536 KB occupied by the log file

519269996 KB available on disk

 

4096 bytes in each allociation unit

237148159 total allociation units on disk

129817499 allociation units available on disk

Failed to transfer logged messages to the event log with status 50

 

typed exit - selected turn off pc and restarted 

 

Windows still will not load - freezes during start-up

computer has two hard drives one is a mirror drive can the mirror drive be affecting anything? 

 

I appreciate your help with this



#10 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 01 April 2017 - 10:59 AM

RAID 1 consists of an exact copy (or mirror) of a set of data on two or more disks this way if one hard disk fails you can boot computer with second mirrored hard disk.

 

Please boot your computer with Windows Setup Media and from Windows Recovery Environment start the Command Prompt.

Please type below command into Command Prompt and press Enter key.

Following commands will repair Master Boot Record (MBR), Boot Sector and BCD Store.


Bootrec /FixMbr

Bootrec  /FixBoot

Bootrec  /RebuildBcd

Posted Image


#11 dyann

dyann
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 02 April 2017 - 09:51 AM

Error on 3rd step
The computer does now start in safe mode but not in normal mode

Edited by dyann, 02 April 2017 - 09:53 AM.


#12 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 02 April 2017 - 11:13 AM

I would like to have you run a Clean Boot.
 
How to perform a Clean Boot.

Warning:  Disabling items in Services or Startup may leave your anitivius disabled until the process is ended.  For this reason I would suggest that you perform this process off line.

 Press the Windows keywindowskey_zps092d5c75.png and the R key to open Run, then type msconfig in the search box.  This will open System Configuration.

If you are prompted for an administrator password or for confirmation, you should enter the password or provide confirmation.

(1)  Click/tap on the General tab.

(2)  Click/tap on the Selective startup option.

(3)  Remove the check mark in the Load startup items  check box.

msconfig_zpsuoxvomjq.png

4.  Click on the Services tab.

5.  Place a check mark in the Hide all Microsoft services check box, this will remove the Microsoft Services from the list but will still be running.

6.  Click Disable all, this will remove all of the check marks in the Services list.

clean%20boot%203_zpsyvcjopso.png

7.  Click on Hide all Microsoft services.  Click on Apply then OK

clean%20boot%202_zpsekds879g.png

Click on Restart in the window that opens.

When the computer is restarted it will boot normally.

Let me know if the problem persists after restarting the computer.


Posted Image


#13 dyann

dyann
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 03 April 2017 - 09:06 AM

Followed steps with no change computer still freezes

#14 FreeBooter

FreeBooter

  • Members
  • 3,137 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Turkey - Adana
  • Local time:05:04 PM

Posted 03 April 2017 - 12:20 PM

Install latest device driver from your computer manufacturer website.


Posted Image


#15 dyann

dyann
  • Topic Starter

  • Members
  • 18 posts
  • OFFLINE
  •  
  • Local time:10:04 AM

Posted 03 April 2017 - 01:26 PM

please explain a little further - i need to re-install all the device (video card,cd/dvd, ethernet, ... drivers?

this was not a off the shelf computer i will have to hunt down all the hardware manufacturers that were used and find the drivers on-line to complete this task, and no I don't have the original cd(s) that came with the computer. I did a quick check in safe mode and there were no conflicts or errors showing with the devices.

Is there a good chance this will resolve the issue or is there some other step we can try? 


Edited by dyann, 03 April 2017 - 01:29 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users