Windows 7 failed to start error message

gamblingman

gamblingman

VIP Member
In notepad, go to EDIT, SELECT ALL, COPY then paste the contents here in your next post. You can do the same with malwarebytes.

EDIT: A thought came to mind, are you using a battery backup (UPS system) instead of a surge protector or directly plugging into the wall socket?
 
Last edited:
C

caboose73

New Member
This pops up when i try and run the hijackthis scan
hijackthiserror.jpg

Also after my las post my computer froze and i had to reboot it.
 
gamblingman

gamblingman

VIP Member
Right click on HiJackThis and select run as administrator. If it doesnt offer the Run as Admin, press the Shift key THEN right click on HiJackThis. And if you are getting pop-ups from the internet or what looks like a fake anti-virus DONT CLICK ON THEM AT ALL!
 
C

caboose73

New Member
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 3:55:03 PM, on 7/3/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files (x86)\iTunes\iTunesHelper.exe
F:\Computer files\SETI 2\projects\www.cosmologyathome.org\camb_2.16_windows_intelx86.exe
C:\Program Files (x86)\Mozilla Firefox\firefox.exe
C:\Program Files (x86)\Mozilla Firefox\plugin-container.exe
C:\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [boincmgr] "F:\Computer files\SETI\boincmgr.exe" /a /s
O4 - HKLM\..\Run: [boinctray] "F:\Computer files\SETI\boinctray.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [EA Core] "F:\Games\EADM\Core.exe" -silent
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O17 - HKLM\System\CCS\Services\Tcpip\..\{160E248F-D97A-4820-B798-CBEC15CDE13C}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CS1\Services\Tcpip\..\{160E248F-D97A-4820-B798-CBEC15CDE13C}: NameServer = 156.154.70.22,156.154.71.22
O17 - HKLM\System\CS2\Services\Tcpip\..\{160E248F-D97A-4820-B798-CBEC15CDE13C}: NameServer = 156.154.70.22,156.154.71.22
O20 - AppInit_DLLs: C:\Windows\SysWOW64\guard32.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\Windows\System32\alg.exe (file missing)
O23 - Service: AMD External Events Utility - Unknown owner - C:\Windows\system32\atiesrxx.exe (file missing)
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files (x86)\Bonjour\mDNSResponder.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\Windows\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\Windows\system32\fxssvc.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\Windows\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: @%systemroot%\system32\psbase.dll,-300 (ProtectedStorage) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\Windows\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\Windows\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\Windows\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\Windows\system32\sppsvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\Windows\system32\UI0Detect.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\Windows\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\Windows\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\Windows\system32\vssvc.exe (file missing)
O23 - Service: @%SystemRoot%\system32\Wat\WatUX.exe,-601 (WatAdminSvc) - Unknown owner - C:\Windows\system32\Wat\WatAdminSvc.exe (file missing)
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\Windows\system32\wbengine.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\Windows\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)

--
End of file - 7729 bytes
 
gamblingman

gamblingman

VIP Member
Please post back and answer this question first before doing any more of these steps:
Do you own this computer or is it on loan, owned by a university/college/school or owned by your employer?​

​
--------------------------------------------------------------

Go to Internet Explorer, to Tools, to Internet Options, click Connections tab, click LAN Settings, if the box for Use a Proxy Server for this Connection is checked then you need to UNCHECK the box, then click "OK" and "OK" and exit Internet Explorer.

In HijackThis, running as administrator, run the scan then place checkmarks by these things then press fix checked then exit HiJackThis.

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [boincmgr] "F:\Computer files\SETI\boincmgr.exe" /a /s
O4 - HKLM\..\Run: [boinctray] "F:\Computer files\SETI\boinctray.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [EA Core] "F:\Games\EADM\Core.exe" -silent

After that go to start button then to control panel, type features in the search box then click turn Windows features on or off then UNCHECK windows gadget platform then click OK.

------------------------------------------------------------

After that we are going to scan your operating system to make sure the system files are correct and not missing/damaged/altered. This can take a little time, so be sure you some time to spare before beginning this step. Remember disconnect any hard drives, floppy drives, or USB's that do not contain your operating system:

Again go through the DVD diagnostic.
  1. Put the OS disk in that has the repair tools on it.
  2. When restarting the computer select to start from the DVD.
  3. Select language, region, etc... to next.
  4. Repair your computer.
  5. Select your Win7 installation.
  6. Select Command Prompt.
  7. The Command Prompt black box will appear, put the following (the red text) exactly, spaces and all!


    NOTE! After the command entry is typed press the ENTER/RETURN key.
    Also if you do not use "C" as the location of your operating system then change the "c" in the command below to wherever your operating system is stored.

    sfc /scannow /offbootdir=c:\ /offwindir=c:\windows

  8. IF IT FOUND ANY PROBLEMS THEN RUN THE COMMAND AGAIN UNTIL NO ISSUES ARE FOUND!
  9. Once it runs without finding any problems type "EXIT" at the command prompt and press Enter to restart the computer, remove the DVD quickly after leaving the repair menu! Then boot into Normal Mode and let me know how it is running and if sfc found any problems.
 
Last edited:
Okedokey

Okedokey

Well-Known Member
My 2 cents. Now that you can get into Windows, back up all your files and reinstall Windows. That will take an hour rather than trying to breath life into what is a pretty messed up install now. Infection or not, you will be better off and it will be quicker.
 
S.T.A.R.S.

S.T.A.R.S.

banned
You have mentioned that Windows is loading a lot slower and works a lot slower than usual.This can occur if your transfer mode has changed from DMA mode to the PIO mode.Windows usually do this to protect hardware from damaging,but sometimes if happens by other software even if your hardware is 100% ok.

So try this:

-Right click "Computer"
-Click "Manage"
-On the left choose "Device Manager"
-On the right double click "IDE ATA/ATAPI controllers"
-Go right mouse click on the "Primary IDE Channel"
-Click "Properties"
-Go to the tab "Advanced Settings"
-Make sure that under "Device 0" the "Device Type" is set to "Auto detection" and that the "Transfer Mode" is set to "DMA if available"
-Make sure that under "Device 1" the "Device Type" is set to "Auto detection" and that the "Transfer Mode" is set to "DMA if available"
-Click the "OK" button to save the options
-Go right mouse click on the "Secondary IDE Channel"
-Click "Properties"
-Go to the tab "Advanced Settings"
-Make sure that under "Device 0" the "Device Type" is set to "Auto detection" and that the "Transfer Mode" is set to "DMA if available"
-Make sure that under "Device 1" the "Device Type" is set to "Auto detection" and that the "Transfer Mode" is set to "DMA if available"
-Click the "OK" button to save the options

NOTE: If you have more than one "Primary IDE Channel" and more than one "Secondary IDE Channel",be sure to do THE SAME THING FOR ALL OF THEM!

Here is the picture how that looks like:
speedupsontdvdwriters.png



-After you have finished everything,close the "Computer Management"
-Restart the computer



Report back with the results...



Cheers everyone!
 
C

caboose73

New Member
Yes i own this computer and 2 things happened when i rebooted it took me 5 times to get to that command prompt box the 1st time i got this
bluescreen1.jpg

next 3 times it froze while it was loading system files. I finally got to the command prompt i typed in everything you said and now its asking me to specify the location of the offline boot directory and offline windows directory this is what the screen looks like.
commandprompt.jpg
 
johnb35

johnb35

Administrator
Staff member
Can you get back into windows and run a program for me? It seems either incompatible driver or bad hardware.

Download BlueScreenView
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

However, it may be just easier to reinstall windows after you get all your data off the drive.
 
C

caboose73

New Member
johnb35 said:
Can you get back into windows and run a program for me? It seems either incompatible driver or bad hardware.

Download BlueScreenView
No installation required.
Unzip downloaded file and double click on BlueScreenView.exe file to run the program.
When scanning is done, go Edit>Select All.
Go File>Save Selected Items, and save the report as BSOD.txt.
Open BSOD.txt in Notepad, copy all content, and paste it into your next reply.

However, it may be just easier to reinstall windows after you get all your data off the drive.
Click to expand...

I tried downloading that but windows either freezes or reboots within minutes of me logging in so should i just reinstall windows i already had all my stuff backed up on a spare external hard drive. Also any guess on what caused this?
 
S.T.A.R.S.

S.T.A.R.S.

banned
Well it can be either a bad HDD or a very well hidden virus which is messing everything up.

Let me ask you...the day/days before these problems started happening...did you download anything or installed anything or maybe touched the configuration in Windows?
Because that can cause problems like this one...

Anyway I suggest you to reinstall Windows because you will lose a lot less time than trying to fix the problem.

Still if you want to fix the problem,then do the following:

-Scan your computer against all types of viruses using software like McAfee in SAFE MODE (Be sure to adjust all options in McAfee properly)...
-After that turn off the computer
-Put Windows 7 DVD disk in the computer,boot from it and go to the Command Prompt and there type the following command:

CHKDSK C: /p /r

NOTE: Be sure that "C:" is the drive on which your Windows 7 OS is installed.If it's not "C:",replace it with the correct one!But usually it's "C:".

-Leave the process to finish...
-After the process is finished,type "EXIT" to restart the computer...
-Boot from the Windows 7 DVD disk again and perform the repair process...
-After that is finished too,try booting into Windows and see if it works.If it does,also check the options which I mentioned in my previous post in the case if your OS works very slow.
-Report back with the results...




Cheers!
 
gamblingman

gamblingman

VIP Member
If you have already done a backup then yeah, go ahead and reinstall. This system is so unstable I don't know what more we can do with it than that. Its kind of hard to run scans and recoveries if the system is constantly rebooting, freezing and having BSOD's.

I am kind of wondering if it might be a hardware issue. Do you have a program like NERO or Roxio that can burn an IMAGE to a DVD or CD? And in addition to that do you have or do you have blank DVD-R or CD-R disks, or a 3.5" drive and floppies, or a USB flash drive of at least 1GB that is relatively new without anything on it?

I ask because I'd like you to run a memory test program that will check your RAM for problems. With the constant problems you've had with doing nearly everything it points me toward RAM problems.

Sorry I didnt reply last night, had Johnb35 come in on it. I got a really bad migraine last night, feeling better now though!!!
 
C

caboose73

New Member
S.T.A.R.S-The only things i download was 2 updates for windows and an expansion for sins of a solar empire i dont mess with any of the windows stuff i just install/uninstall games and surf the internet.

Gamblingman-I dont have any programs like that but i do have the external hard drive that my files are on but its still got plenty of room on it. Also i reinstalled windows but i dont think it got rid of the old one cause when i started it up it i got this screen asking which operating system i wanted to use and it listed 2 window 7s now i only have one hard drive in my computer which i selected to install windows on so what can i do to fix this? And one more thing i booted up the computer again after the install and got this screen
installedwindowsscreen.jpg
 
johnb35

johnb35

Administrator
Staff member
Either you removed the cmos battery to reset the cmos or your cmos battery may be dying. When you do a fresh install of windows, you must delete the existing partition that windows is installed on or you will get the screen to ask which OS you want to boot into. You will need to reinstall windows again but this time make sure you delete the partition that windows is installed on.
 
gamblingman

gamblingman

VIP Member
Ha ha ha I was JUST about to post nearly the same thing! Yeah, replace that cmos battery and the rest Johnb35 said
 
C

caboose73

New Member
I have no idea what the cmos battery is or were it is so it must be dieing cause i didnt do anything to it and how do i delete the existing partition that windows is installed on? and i cant thank you guys enough for helping me with this.
 
C

caboose73

New Member
Ya its new ish i just got this computer about 6-7 months ago could it be dieing cause i dont use it alot maybe once a week for an hr or 2 im a truck driver so im only home 2 days a week
 
You must log in or register to reply here.
Top