Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

trouble using system restore


  • Please log in to reply
58 replies to this topic

#46 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted 04 July 2018 - 01:05 PM

No Users should be in C:\Windows\Users

Do you have a C:\Users folder?
If you do what are the Folders in that folder?

BC AdBot (Login to Remove)

 


#47 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted 04 July 2018 - 01:41 PM

Yes, a C:\Users folder.

 

There are two folders: Public, and Wendy.  And a hidden one called Default.

 

Not sure if the previous one is there.

 

Would you think that when I next restart the computer, I should go in to the Windows 10 Home account (not the one we log into at the moment)?



#48 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted 05 July 2018 - 07:03 AM

Hi,

Looks like a new User profile was created as seen in your last log.

The last FRST.TXT log you submitted at my requeste was from the Windy profile

Loaded Profiles: Wendy (Available Profiles: Wendy)

==================== Accounts: =============================

Administrator (S-1-5-21-2009218519-3274899539-1962924502-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2009218519-3274899539-1962924502-503 - Limited - Disabled)
Guest (S-1-5-21-2009218519-3274899539-1962924502-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2009218519-3274899539-1962924502-504 - Limited - Disabled)
Wendy (S-1-5-21-2009218519-3274899539-1962924502-1001 - Administrator - Enabled) => C:\Users\Wendy


===

Would you think that when I next restart the computer, I should go in to the Windows 10 Home account (not the one we log into at the moment)?


This is the profiles you will see if you log into Windows 10.

Ran by Jones (administrator) on JONES-PC (22-06-2018 13:13:52)

Administrator (S-1-5-21-3612101700-1588221287-1469545731-500 - Administrator - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-3612101700-1588221287-1469545731-503 - Limited - Disabled)
Guest (S-1-5-21-3612101700-1588221287-1469545731-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3612101700-1588221287-1469545731-1003 - Limited - Enabled)
Jones (S-1-5-21-3612101700-1588221287-1469545731-1000 - Administrator - Enabled) => C:\Users\Jones
Joshua Jones (S-1-5-21-3612101700-1588221287-1469545731-1005 - Administrator - Enabled) => C:\Users\Joshua Jones
WDAGUtilityAccount (S-1-5-21-3612101700-1588221287-1469545731-504 - Limited - Disabled)


No problem in booting into Windows 10. But I suspect that if it's available the Restore Point on that profile will not work and may be have other issues.
===

Going back to the Windy profile, what programs are you missing that were available in Windows 10?

#49 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted 05 July 2018 - 12:05 PM

Answer to the last question: quite a few (if you compare with the previous logs on the first few pages)!

 

It's interesting how many are showing as disabled, so dormant?

 

I wasn't here, but it looks as though my nephew put on a new installation of W10, after copying what docs etc he could.



#50 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted 06 July 2018 - 07:52 AM

Hi,

Please ask him what he did exactly.

Inform him that you are missing a lot of programs.

What can he do to get these missing programs.

Let me know.

#51 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted 08 July 2018 - 12:26 PM

We may not be able to get all of them back.

 

Having said that, when the computer starts, we are offered a choice of two options (which we never had before).  One is Windows 10, and the other seems to be the profile/user account we had problems with before.  In that case, I am wondering what would be possible to retrieve from that?



#52 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted 09 July 2018 - 09:11 AM

Hi,

 

What did you nephew do?

 

It was only a matter or the System restore not being available.

 

Please open the old Windows profile.

Run the Farbar program and post a fresh FRST log for my review. 



#53 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted 09 July 2018 - 11:36 AM

The old Windows profiles is showing as a boot-up option.  The icon for it resembles a command (if that makes sense).



#54 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted 09 July 2018 - 01:16 PM

Hi,

Looks like you nephew has change the BIOS to boot from the new profile.

I wish you would ask him what he did.

The may be a way to boot the old Windows 10 from the BIOS but not suggesting it until he confirms that it will work.

#55 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted 14 July 2018 - 02:51 PM

Update:  I have tried the old account (on the boot-up screen).

 

It tells me that I need to use recovery tools; that there is a file called 'winload.exe' that is either missing or corrupt; and also an error message 0x00000f

 

I have since found that there is option to enter Packard Bell Recovery Management (Alt + F10), and that there are two options - factory reset, or repair.  Apparently, it can send my data to a folder called Windows\Backup, but presumably I'd lose the apps, and I'm not certain it would backup all the data anyway.

 

I have W10 on a USB stick and can boot into that, just a case of going into boot options.



#56 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted 15 July 2018 - 06:02 AM

Hi,

I have since found that there is option to enter Packard Bell Recovery Management (Alt + F10), and that there are two options - factory reset, or repair. Apparently, it can send my data to a folder called Windows\Backup, but presumably I'd lose the apps, and I'm not certain it would backup all the data anyway.


Using that option will give you two choces

1 - factory reset

This will reset the computer as if it was new.
All your apps, programs addes since the beginning will be lost.
Make sure you have all the necessary files backup.
You wll possibly need to re-install all the apps and Programs.

2 - Repair.

This is the option you should try first.
It will repair what it can. Not sure of the results but the files/programs will be retained.

===

REFER TO THIS ARTICLE.

https://www.dell.com/support/article/ca/en/cabsdt1/sln297926/computer-will-not-boot-to-windows-10?lang=en

In the bottom of the article you will have the instructions to reset or Repair this computer.

Reset your Windows 10 operating system

and

Restore the operating system to factory settinga

These are the fastest way to get back your computer in working order.

#57 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted 15 July 2018 - 02:11 PM

Part of the problem I have now is that I have 2 installations of W10 (as it were).  The old corrupted one, and the one my nephew has installed.

 

If I do select repair, how do I know which one it will repair, and will it lose anything in the recent W10 installation? Will it know which to repair?

 

Obviously a factory reset will havcre emoved whatever apps (and docs?) I need, and I would have to start from zero?



#58 nasdaq

nasdaq

  • Malware Response Team
  • 39,191 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Montreal, QC. Canada
  • Local time:04:08 AM

Posted Yesterday, 06:11 AM

Hi,

If you got this message when you booted into the Old Woindows 10 then the repair will be done in the Old version.

I have since found that there is option to enter Packard Bell Recovery Management (Alt + F10), and that there are two options - factory reset, or repair. Apparently, it can send my data to a folder called Windows\Backup, but presumably I'd lose the apps, and I'm not certain it would backup all the data anyway.


This is nice to have. It should be you last option.
Is this a complete Wiondows 10 Installation from Microsoft or just a system restore you created when you got the new computer?
I have W10 on a USB stick and can boot into that, just a case of going into boot options.

#59 mrmatt

mrmatt
  • Topic Starter

  • Members
  • 140 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:West Midlands, UK
  • Local time:09:08 AM

Posted Today, 02:49 AM

The W10 on the USB stick was obtained via the Windows/Microsoft Media Creation Tool.

 

I then used another utility to put the .ISO file on to the memory stick.

 

I couldn't actually boot into W10 from there, but it gave me the option to repair the windows installation.  I obviously didn't want to try that as I wasn't yet sure.






2 user(s) are reading this topic

1 members, 1 guests, 0 anonymous users


    mrmatt