1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Inactive Error during startup: Stop: c000021a (Fatal System Error)

Discussion in 'Malware and Virus Removal Archive' started by GatesHell, 2015/11/21.

  1. 2015/11/21
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    [Inactive] Error during startup: Stop: c000021a (Fatal System Error)

    Hi.
    I think i have same problem as jharry and maelkaka.
    I read their threads and decide ask for help.

    Thanks in advance!

    I run Farbar Recovery Scan Tool and here is the content of frst.txt:

    Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-11-2015
    Ran by SYSTEM on MININT-8UK9MQB (21-11-2015 20:13:44)
    Running from k:\
    Platform: Windows 7 Ultimate (X86) Language: English (United States)
    Internet Explorer Version 11
    Boot Mode: Recovery
    Default: ControlSet001
    ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.

    Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

    ==================== Registry (Whitelisted) ===========================

    (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

    HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [9394792 2010-07-25] (Realtek Semiconductor)
    HKLM\...\Run: [VirtualCloneDrive] => C:\Program Files\Elaborate Bytes\VirtualCloneDrive\VCDDaemon.exe [85160 2009-06-17] (Elaborate Bytes AG)
    HKLM\...\Run: [PMBVolumeWatcher] => C:\Program Files\Sony\PMB\PMBVolumeWatcher.exe [597792 2009-11-04] (Sony Corporation)
    HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-01-04] (Advanced Micro Devices, Inc.)
    HKLM\...\Run: [ATICustomerCare] => C:\Program Files\ATI\ATICustomerCare\ATICustomerCare.exe [311296 2010-05-04] (Advanced Micro Devices, Inc.)
    HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-29] (Microsoft Corporation)
    HKLM\...\Run: [QuickTime Task] => C:\Program Files\QuickTime\QTTask.exe [421888 2015-06-16] (Apple Inc.)
    HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [157968 2015-08-12] (Apple Inc.)
    HKLM\...\RunOnce: [EasyTuneVI] => C:\Program Files\GIGABYTE\ET6\ETCall.exe [20480 2007-07-26] ()
    HKU\Svetli\...\Run: [uTorrent] => "D:\source\Apple\Users\Svetli\AppData\Roaming\uTorrent\uTorrent.exe" /MINIMIZED
    HKU\Svetli\...\Run: [f.lux] => C:\Users\Svetli\AppData\Local\FluxSoftware\Flux\flux.exe [1017224 2013-10-23] (Flux Software LLC)
    HKU\Svetli\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)

    ==================== Services (Whitelisted) ========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S2 ADExchange; C:\Program Files\Common Files\ArcSoft\esinter\Bin\eservutil.exe [43112 2012-02-16] (ArcSoft Inc.)
    S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [284672 2011-01-04] (Advanced Micro Devices, Inc.)
    S2 AMD Reservation Manager; C:\Program Files\ATI Technologies\ATI.ACE\Reservation Manager\AMD Reservation Manager.exe [140224 2010-06-16] (Advanced Micro Devices)
    S2 bgsvcgen; C:\Windows\system32\bgsvcgen.exe [145504 2011-01-27] (B.H.A Corporation)
    S2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2015-10-11] (Microsoft Corporation)
    S2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2015-10-11] (Microsoft Corporation)
    S2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-29] (Microsoft Corporation)
    S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-29] (Microsoft Corporation)
    S2 NitroDriverReadSpool8; C:\Program Files\Nitro\Pro 8\NitroPDFDriverService8.exe [196616 2013-07-24] (Nitro PDF Software)
    S2 PDFProFiltSrvPP; C:\Program Files\Nuance\PaperPort\PDFProFiltSrvPP.exe [144672 2010-03-08] (Nuance Communications, Inc.)
    S2 SBSDWSCService; C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe [1153368 2009-01-26] (Safer Networking Ltd.)
    S3 Sony Ericsson PCCompanion; C:\Program Files\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [155344 2011-06-29] (Avanquest Software)
    S2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [5702416 2015-09-11] (TeamViewer GmbH)
    S2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-17] (Logitech Inc.)
    S2 Update service; C:\Program Files\Popcorn Time\Updater.exe [335360 2014-12-08] (Company)
    S2 UsbClientService; C:\Program Files\Synology\Assistant\UsbClientService.exe [248704 2012-09-17] ()
    S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-26] (Microsoft Corporation)
    S4 clr_optimization_v2.0.50727_32; %systemroot%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [X]

    ===================== Drivers (Whitelisted) ==========================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

    S3 61883; C:\Windows\System32\DRIVERS\61883.sys [46976 2009-07-13] (Microsoft Corporation)
    S3 busenum; C:\Windows\System32\DRIVERS\busenum.sys [45792 2012-08-03] (Windows (R) Win 7 DDK provider)
    S1 cdrbsdrv; C:\Windows\System32\Drivers\cdrbsdrv.sys [33408 2011-01-27] (B.H.A Corporation)
    S1 ElbyCDIO; C:\Windows\System32\Drivers\ElbyCDIO.sys [26024 2009-12-17] (Elaborate Bytes AG)
    S3 etdrv; C:\Windows\etdrv.sys [17488 2015-10-18] (Windows (R) 2000 DDK provider)
    S3 gdrv; C:\Windows\gdrv.sys [17488 2015-10-18] (Windows (R) 2000 DDK provider)
    S3 GVTDrv; C:\Windows\system32\Drivers\GVTDrv.sys [24944 2015-10-18] ()
    S3 hamachi; C:\Windows\System32\DRIVERS\hamachi.sys [25280 2010-11-08] (LogMeIn, Inc.)
    S3 LVPr2Mon; C:\Windows\System32\DRIVERS\LVPr2Mon.sys [25824 2010-05-07] ()
    S3 MarvinBus; C:\Windows\System32\DRIVERS\MarvinBus.sys [171520 2005-09-23] (Pinnacle Systems GmbH)
    S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
    S3 s0016bus; C:\Windows\System32\DRIVERS\s0016bus.sys [89256 2008-05-16] (MCCI Corporation)
    S3 s0016mdfl; C:\Windows\System32\DRIVERS\s0016mdfl.sys [15016 2008-05-16] (MCCI Corporation)
    S3 s0016mdm; C:\Windows\System32\DRIVERS\s0016mdm.sys [120744 2008-05-16] (MCCI Corporation)
    S3 s0016mgmt; C:\Windows\System32\DRIVERS\s0016mgmt.sys [114216 2008-05-16] (MCCI Corporation)
    S3 s0016nd5; C:\Windows\System32\DRIVERS\s0016nd5.sys [25512 2008-05-16] (MCCI Corporation)
    S3 s0016obex; C:\Windows\System32\DRIVERS\s0016obex.sys [110632 2008-05-16] (MCCI Corporation)
    S3 s0016unic; C:\Windows\System32\DRIVERS\s0016unic.sys [115752 2008-05-16] (MCCI Corporation)
    S3 s1039mdm; C:\Windows\System32\DRIVERS\s1039mdm.sys [124016 2010-03-15] (MCCI Corporation)
    S1 StarOpen; C:\Windows\System32\Drivers\StarOpen.sys [5632 2006-07-24] ()
    S2 WiseFs; C:\Windows\WiseFs32.sys [10792 2015-02-27] (WiseCleaner.com)
    S2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files\CyberLink\PowerDVD9\NavFilter\000.fcl [87536 2009-12-15] (CyberLink Corp.)
    S3 cpuz136; \??\C:\Windows\TEMP\cpuz136\cpuz136_x32.sys [X]
    S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]
    S5 FontCache3.0.0.0; C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe [42856 2009-06-10] (Microsoft Corporation)
    S3 IPNPF; system32\drivers\IPNPF.sys [X]
    S1 MpKsl46011676; \??\C:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{9913061E-5123-4841-B21F-8C9C1C334887}\MpKsl46011676.sys [X]
    S3 NdisCap; system32\DRIVERS\ndiscap.sys [X]
    S3 NdisTapi; system32\DRIVERS\ndistapi.sys [X]
    S1 Npfs; no ImagePath
    S1 nsiproxy; system32\drivers\nsiproxy.sys [X]
    S0 pcw; System32\drivers\pcw.sys [X]
    S3 PptpMiniport; system32\DRIVERS\raspptp.sys [X]
    S3 ql2300; \SystemRoot\system32\DRIVERS\ql2300.sys [X]
    S3 RasAcd; System32\DRIVERS\rasacd.sys [X]
    S3 Rasl2tp; system32\DRIVERS\rasl2tp.sys [X]
    S3 RasPppoe; system32\DRIVERS\raspppoe.sys [X]
    S3 RasSstp; system32\DRIVERS\rassstp.sys [X]
    S3 rdpbus; system32\DRIVERS\rdpbus.sys [X]
    S1 RDPENCDD; system32\drivers\rdpencdd.sys [X]
    S1 RDPREFMP; system32\drivers\rdprefmp.sys [X]
    S2 rspndr; system32\DRIVERS\rspndr.sys [X]
    S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
    S3 TFsfltdrv; \??\C:\Windows\system32\drivers\tfsfltdrv.sys [X]
    S3 Tpacketv; system32\DRIVERS\tpacketv.sys [X]
    S3 TpacketvMP; system32\DRIVERS\tpacketv.sys [X]
    S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
    S3 UmPass; \SystemRoot\system32\DRIVERS\umpass.sys [X]
    S3 vga; system32\DRIVERS\vgapnp.sys [X]
    S3 VGPU; System32\drivers\rdvgkmd.sys [X]
    S3 ViaC7; \SystemRoot\system32\DRIVERS\viac7.sys [X]
    S3 WacomPen; \SystemRoot\system32\DRIVERS\wacompen.sys [X]
    S3 Wd; \SystemRoot\system32\DRIVERS\wd.sys [X]
    S3 WIMMount; system32\drivers\wimmount.sys [X]

    ==================== NetSvcs (Whitelisted) ===================

    (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


    ==================== One Month Created files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-11-21 20:13 - 2015-11-21 20:13 - 00000000 ____D C:\FRST
    2015-11-19 22:56 - 2015-11-19 22:56 - 00000000 __SHD C:\found.000

    ==================== One Month Modified files and folders ========

    (If an entry is included in the fixlist, the file/folder will be moved.)

    2015-11-21 18:21 - 2009-07-13 18:37 - 00000000 __RHD C:\users\Default

    ==================== Known DLLs (Whitelisted) =========================


    ==================== Bamital & volsnap =================

    (There is no automatic fix for files that do not pass verification.)

    C:\Windows\explorer.exe => MD5 is legit
    C:\Windows\System32\winlogon.exe => MD5 is legit
    C:\Windows\System32\wininit.exe => MD5 is legit
    C:\Windows\System32\svchost.exe => MD5 is legit
    C:\Windows\System32\services.exe
    [2015-05-12 11:36] - [2015-04-12 19:19] - 0259072 ____A (Microsoft Corporation) 0780A42DBD7D9969F9BF4A19AA4285B5

    C:\Windows\System32\User32.dll => MD5 is legit
    C:\Windows\System32\userinit.exe => MD5 is legit
    C:\Windows\System32\rpcss.dll => MD5 is legit
    C:\Windows\System32\dnsapi.dll => MD5 is legit
    C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

    ==================== EXE Association (Whitelisted) =============


    ==================== Restore Points =========================


    ==================== Memory info ===========================

    Percentage of memory in use: 22%
    Total physical RAM: 2046.55 MB
    Available physical RAM: 1593.21 MB
    Total Virtual: 2046.55 MB
    Available Virtual: 1592.94 MB

    ==================== Drives ================================

    Drive c: () (Fixed) (Total:77.92 GB) (Free:40.85 GB) NTFS
    Drive e: () (Fixed) (Total:390.56 GB) (Free:199.55 GB) NTFS
    Drive f: () (Fixed) (Total:462.69 GB) (Free:244.81 GB) NTFS
    Drive k: () (Removable) (Total:7.42 GB) (Free:3.57 GB) NTFS
    Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
    Drive y: (System Reserved) (Fixed) (Total:0.35 GB) (Free:0.31 GB) NTFS ==>[system with boot components (obtained from drive)]

    ==================== MBR & Partition Table ==================

    ========================================================
    Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2BD2C32A)
    Partition 1: (Active) - (Size=356 MB) - (Type=07 NTFS)
    Partition 2: (Not Active) - (Size=77.9 GB) - (Type=07 NTFS)
    Partition 3: (Not Active) - (Size=390.6 GB) - (Type=07 NTFS)
    Partition 4: (Not Active) - (Size=462.7 GB) - (Type=07 NTFS)

    ========================================================
    Disk: 4 (MBR Code: Windows 7 or 8) (Size: 7.4 GB) (Disk ID: C3072E18)
    Partition 1: (Active) - (Size=7.4 GB) - (Type=07 NTFS)


    LastRegBack: 2015-11-19 22:17

    ==================== End of FRST.txt ============================
     
    GatesHell,
    #1
  2. 2015/11/21
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Welcome aboard [​IMG]

    Please, observe following rules:
    • Read all of my instructions very carefully. Your mistakes during cleaning process may have very serious consequences, like unbootable computer.
    • If you're stuck, or you're not sure about certain step, always ask before doing anything else.
    • Please refrain from running any tools, fixes or applying any changes to your computer other than those I suggest.
    • Never run more than one scan at a time.
    • Keep updating me regarding your computer behavior, good, or bad.
    • The cleaning process, once started, has to be completed. Even if your computer appears to act better, it may still be infected. Once the computer is totally clean, I'll certainly let you know.
    • If you leave the topic without explanation in the middle of a cleaning process, you may not be eligible to receive any more help in malware removal forum.
    • I close my topics if you have not replied in 5 days. If you need more time, simply let me know. If I closed your topic and you need it to be reopened, simply PM me.

    =============================

    There is possibly one system file corrupted/infected (services.exe)
    I can't be 100% certain but we can give it a shot.

    Re-run FRST again.
    Type the following in the edit box after "Search: ".

    services.exe

    Click Search files button and post the log (Search.txt) it makes in your reply.
     
    broni,
    #2


  3. to hide this advert.

  4. 2015/11/22
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    Farbar Recovery Scan Tool (x86) Version:20-11-2015
    Ran by SYSTEM (2015-11-22 04:05:15)
    Running from k:\
    Boot Mode: Recovery

    ================== Search Files: "services.exe" =============

    C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_d1d9ee0844ba1cc2\services.exe
    [2015-05-12 11:36][2015-04-10 19:53] 0259072 ____A (Microsoft Corporation) 97981140500E86E5BBAD7B76BA890146

    C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.18829_none_d1614ac32b8ec5cf\services.exe
    [2015-05-12 11:36][2015-04-12 19:19] 0259072 ____A (Microsoft Corporation) 0780A42DBD7D9969F9BF4A19AA4285B5

    C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe
    [2009-07-13 15:11][2009-07-13 17:14] 0259072 ____A (Microsoft Corporation) 5F1B6A9C35D3D5CA72D6D6FDEF9747D6

    C:\Windows\System32\services.exe
    [2015-05-12 11:36][2015-04-12 19:19] 0259072 ____A (Microsoft Corporation) 0780A42DBD7D9969F9BF4A19AA4285B5

    X:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7600.16385_none_cf36168b2e9c967b\services.exe
    [2009-07-13 15:11][2009-07-13 17:14] 0259072 ____A (Microsoft Corporation) 5F1B6A9C35D3D5CA72D6D6FDEF9747D6

    X:\Windows\System32\services.exe
    [2009-07-13 15:11][2009-07-13 17:14] 0259072 ____A (Microsoft Corporation) 5F1B6A9C35D3D5CA72D6D6FDEF9747D6

    ====== End of Search ======
     
    GatesHell,
    #3
  5. 2015/11/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Download attached fixlist.txt file and save it to the very same USB flash drive you've been using. Plug the drive back in.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    On Vista or Windows 7/8: Now please enter System Recovery Options.
    On Windows XP: Now please boot into the OTLPE CD.
    Run [color= "#0000FF"]FRST(FRST64)[/color] and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

    See if you can boot normally.
     

    Attached Files:

    broni,
    #4
  6. 2015/11/22
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    After following the instrutctions.... same fatal error.

    Fix result of Farbar Recovery Scan Tool (x86) Version:20-11-2015
    Ran by SYSTEM (2015-11-22 12:21:21) Run:1
    Running from k:\
    Boot Mode: Recovery

    ==============================================

    fixlist content:
    *****************
    Replace: C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_d1d9ee0844ba1cc2\services.exe C:\Windows\System32\services.exe
    *****************

    C:\Windows\System32\services.exe => moved successfully
    C:\Windows\winsxs\x86_microsoft-windows-s..s-servicecontroller_31bf3856ad364e35_6.1.7601.23033_none_d1d9ee0844ba1cc2\services.exe copied successfully to C:\Windows\System32\services.exe

    ==== End of Fixlog 12:21:21 ====
     
    GatesHell,
    #5
  7. 2015/11/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Let's try one more fix...

    Download attached fixlist.txt file and save it to the very same USB flash drive you've been using. Plug the drive back in.

    NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system

    On Vista or Windows 7/8: Now please enter System Recovery Options.
    On Windows XP: Now please boot into the OTLPE CD.
    Run [color= "#0000FF"]FRST(FRST64)[/color] and press the Fix button just once and wait.
    The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

    See if you can boot normally.
     

    Attached Files:

    broni,
    #6
  8. 2015/11/22
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    I have to delete the old file(fixlist.txt) from usb flash drive or not?

    Whatever i delete it.

    After fix system ask me start repair startup or start windows normaly.
    I choice Start windows normaly and same error came again.

    Fix result of Farbar Recovery Scan Tool (x86) Version:20-11-2015
    Ran by SYSTEM (2015-11-22 11:49:01) Run:2
    Running from k:\
    Boot Mode: Recovery

    ==============================================

    fixlist content:
    *****************
    LastRegBack: 2015-11-19 22:17
    *****************

    DEFAULT => copied successfully to System32\config\HiveBackup
    DEFAULT => restored successfully from registry back up
    SAM => copied successfully to System32\config\HiveBackup
    SAM => restored successfully from registry back up
    SECURITY => copied successfully to System32\config\HiveBackup
    SECURITY => restored successfully from registry back up
    SOFTWARE => copied successfully to System32\config\HiveBackup
    SOFTWARE => restored successfully from registry back up
    SYSTEM => copied successfully to System32\config\HiveBackup
    SYSTEM => restored successfully from registry back up

    ==== End of Fixlog 11:49:07 ====
     
    Last edited: 2015/11/22
    GatesHell,
    #7
  9. 2015/11/22
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    What i can do if next time system ask me this again?
     
    GatesHell,
    #8
  10. 2015/11/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    Restart again and try startup repair this time.
     
    broni,
    #9
  11. 2015/11/22
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    This is result:

    "Startup Repair cannot repair this computer automatically
    Sending more information can help Microsoft create solutions.
    -> Send inf......
    -> Don't send
    ..........
    Problem signature:
    Problem Event name: StartupRepairOffline
    Problem Signature 01: 6.1.7600.16385
    P.S. 02: 6.1.7600.16385
    P.S. 03: unknown
    P.S. 04: 21200808
    P.S. 05: AutoFailover
    P.S. 06: 14
    P.S. 07: CorruptRegistry
    OS Version: 6.1.7600.2.0.0.256.1
    Locale ID: 1033
    ........ "

    On next window can only click on Finish and computer shutdown.
     
    GatesHell,
    #10
  12. 2015/11/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    It must be something else then.
    FRST logs don't show anything malicious.
    With the latest fix we restored your computer (registry) to the state when it successfully booted for the last time (2015-11-19 22:17) and startup repair still says "P.S. 07: CorruptRegistry ".

    I'm afraid that your only option is to reinstall Windows.

    You still can try new topic in Windows forum though...
     
    broni,
    #11
  13. 2015/11/22
    GatesHell

    GatesHell Inactive Thread Starter

    Joined:
    2015/11/21
    Messages:
    7
    Likes Received:
    0
    Ok
    Thanks for everything!
     
    GatesHell,
    #12
  14. 2015/11/22
    broni

    broni Moderator Malware Analyst

    Joined:
    2002/08/01
    Messages:
    21,701
    Likes Received:
    116
    You're very welcome [​IMG]
     
    broni,
    #13

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...