[trodat]

The earliest restore point I have is from 01/08/2013. My computer's death occurred in the last week of May. I got it running in the 31st of May. Shouldn't I have several restore points from June and July?

[Advertisements]

Do I risk loosing any docs if I do that? My whole life is in this PC...

You shouldn't lose document files. Anything in "My Documents" folder should not be affected. We can also reverse the restore if needed.

The earliest restore point I have is from 01/08/2013. My computer's death occurred in the last week of May. I got it running in the 31st of May. Shouldn't I have several restore points from June and July?

==================== Restore Points =========================

01-08-2013 12:31:36 Ponto de verificação do sistema
02-08-2013 12:47:17 Ponto de verificação do sistema
06-08-2013 10:30:14 Ponto de verificação do sistema
07-08-2013 15:13:11 Removed Civilization III: Conquests



You seem to have a restore point from June and July, but we need one from before you reinstalled the OS. Can you try the one from 2/8?

[Buddierdl]

Do I risk loosing any docs if I do that? My whole life is in this PC...

You shouldn't lose document files. Anything in "My Documents" folder should not be affected. We can also reverse the restore if needed.

The earliest restore point I have is from 01/08/2013. My computer's death occurred in the last week of May. I got it running in the 31st of May. Shouldn't I have several restore points from June and July?

==================== Restore Points =========================

01-08-2013 12:31:36 Ponto de verificação do sistema
02-08-2013 12:47:17 Ponto de verificação do sistema
06-08-2013 10:30:14 Ponto de verificação do sistema
07-08-2013 15:13:11 Removed Civilization III: Conquests



You seem to have a restore point from June and July, but we need one from before you reinstalled the OS. Can you try the one from 2/8?

[trodat]

What I meant is that the problems I've described have happened since May. Because I got the computer working I've been delaying definitely fixing it untill now. So a 02/08 (that's the 2nd of August, not the 8th of February) restore point shouldn't really help, right?

Anyway, the situation has changed dramatically... for the worse.

A colleague of mine was having trouble with a docx file that was constantly crashing MS Word. Because I am a dumb, dumb person, I tried do help her, and asked her to send me the file so I could check it out. Yes, even though I dont have any AV working... You know, maybe changing to rtf could help or something... Anyway, while I was working the doc the computer crashed (blue screen) and it will not boot anymore.

It's now telling me to "Insert Boot Media in selected Boot device and press a key". And before it gets there the hard drive makes some really strange (and loud) noises.

I'm kind of lost for words here...

Edit: Added date clarification.

Edited by trodat, 09 August 2013 - 08:02 AM.

[trodat]

After trying to start a few more times I was finally given a start with last known good configuration option, and windows is now running like before.

[Buddierdl]

Sorry about the dates...I guess I was reading them backwards.



Anyway, I don't know if it was related to .docx file, but it sounds to me like your boot drive has failed. I noticed some HD errors showing in your logs, but it looked like they corresponded to your external drive. Do you have a D: drive? Is E: your external drive? Your OS is on C:, right?

We can run chkdsk on the drive from the recovery console to check the drive. If you have data that you need off of the drive, you may want to back it up first (tutorial here).

• Insert the Windows XP CD into your CD drive and restart your computer. If you are prompted, select any options required to start (boot) from the CD.
• When the text-based part of Setup begins, follow the prompts. Select the repair or recover option by pressing R.
• If you have a dual-boot or multiboot system, select the installation that you want to access from the Recovery Console.
• When you are prompted, type the Administrator password.
• At the command prompt, type chkdsk /r and press enter.
• Let me know if it reports any bad sectors.

Edited by Buddierdl, 09 August 2013 - 09:39 AM.
Missed second post

[Buddierdl]

Sounds to me like your Hard Drive is failing. Also you really need to have at least 15% free space on the C: (12 GB for you). I would back up your data that you don't want to lose and also try to free up at least 12 GB on C:

Then, lets check the drive for errors. Open a command prompt (Start -> Run -> type cmd and press enter) and type chkdsk /r followed by enter and let it run. Then download and run this script to get the report for me.

[trodat]

I now have 14.8 GB free in C:

Hope you understand this, it's in portuguese:

ListChkdskResult by SleepyDude v0.1.6 Beta | 17-06-2013

------< Log generate on 09-08-2013 19:29:25 >------
Category: 0
Computer Name: PC-7
Event Code: 1001
Record Number: 1049
Source Name: Winlogon
Time Written: 20130809185129.000000+060
Event Type: Informações
User:
Message: A verificar o sistema de ficheiros em C:
O tipo do sistema de ficheiros é NTFS.

Foi agendada uma verificaçao de disco.
O Windows vai agora verificar o disco.
A limpar pequenas inconsistências da unidade.
A limpar 40 entradas de índice nao utilizadas do índice $SII do ficheiro 0x9.
A limpar 40 entradas de índice nao utilizadas do índice $SDH do ficheiro 0x9.
A limpar 40 descritores de segurança nao utilizados.
O CHKDSK está a verificar o diário USN...
Verificaçao do diário USN concluída.
O CHKDSK está a verificar os dados do ficheiro (fase 4 de 5)...
Verificaçao dos dados do ficheiro concluída.
O CHKDSK está a verificar o espaço livre (fase 5 de 5)...
A verificaçao do espaço livre está completa.

80405293 KB de espaço total em disco.
64536292 KB em 98067 ficheiros.
46416 KB em 9142 índices.
0 KB em sectores danificados.
273521 KB em utilizaçao pelo sistema.
65536 KB ocupados pelo ficheiro de registo.
15549064 KB disponíveis em disco.

4096 bytes em cada unidade de atribuiçao.
20101323 unidades de atribuiçao no disco.
3887266 unidades de atribuiçao disponíveis no disco.

Informaçoes internas:
80 11 03 00 d4 a2 01 00 58 64 02 00 00 00 00 00 ........Xd......
46 4c 00 00 02 00 00 00 ef 00 00 00 00 00 00 00 FL..............
02 45 7f 07 00 00 00 00 a4 35 33 7f 00 00 00 00 .E.......53.....
ca 2f f6 0a 00 00 00 00 f6 2a 69 19 07 00 00 00 ./.......*i.....
3c 6a d4 0b 01 00 00 00 82 be 7f be 08 00 00 00 <j..............
99 9e 36 00 00 00 00 00 28 39 07 00 13 7f 01 00 ..6.....(9......
00 00 00 00 00 90 fb 62 0f 00 00 00 b6 23 00 00 .......b.....#..

O Windows terminou a verificaçao do disco.
Espere enquanto o computador reinicia.


-----------------------------------------------------------------------
Category: 0
Computer Name: PC-7
Event Code: 1001
Record Number: 30
Source Name: Winlogon
Time Written: 20130603121956.000000+060
Event Type: Informações
User:
Message: A verificar o sistema de ficheiros em \DosDevices\C:
O tipo do sistema de ficheiros é NTFS.
A limpar etiquetas de instância do ficheiro 0x79ac.
A limpar pequenas inconsistências da unidade.
A limpar 5066 entradas de índice nao utilizadas do índice $SII do ficheiro 0x9.
A limpar 5066 entradas de índice nao utilizadas do índice $SDH do ficheiro 0x9.
A limpar 5066 descritores de segurança nao utilizados.
O CHKDSK está a verificar o diário USN...
Verificaçao do diário USN concluída.
O CHKDSK está a verificar os dados do ficheiro (fase 4 de 5)...
Verificaçao dos dados do ficheiro concluída.
O CHKDSK está a verificar o espaço livre (fase 5 de 5)...
A verificaçao do espaço livre está completa.
O Windows efectuou correcçoes no sistema de ficheiros.

80405293 KB de espaço total em disco.
75114840 KB em 117891 ficheiros.
51820 KB em 10107 índices.
0 KB em sectores danificados.
273493 KB em utilizaçao pelo sistema.
65536 KB ocupados pelo ficheiro de registo.
4965140 KB disponíveis em disco.

4096 bytes em cada unidade de atribuiçao.
20101323 unidades de atribuiçao no disco.
1241285 unidades de atribuiçao disponíveis no disco.

Informaçoes internas:
80 11 03 00 0a f4 01 00 58 e4 02 00 00 00 00 00 ........X.......
10 70 00 00 02 00 00 00 7d 14 00 00 00 00 00 00 .p......}.......
06 86 fe 06 00 00 00 00 90 ea 3e aa 00 00 00 00 ..........>.....
86 9a f6 47 00 00 00 00 22 57 6d b2 07 00 00 00 ...G...."Wm.....
d4 7c 82 81 00 00 00 00 0e cb d5 2e 09 00 00 00 .|..............
99 9e 36 00 00 00 00 00 18 38 07 00 83 cc 01 00 ..6......8......
00 00 00 00 00 60 a5 e8 11 00 00 00 7b 27 00 00 .....`......{'..


-----------------------------------------------------------------------

[trodat]

I will be away on vacation until the 20th of August.

Please do not lock/close this thread. I will be back.

Thank you!!

[Buddierdl]

Ok. Let me know when you are ready and we will continue.

[trodat]

I am back. Problems remain

[Buddierdl]

What I think happened was the repair that you tried to do with the CD actually ended up wiping your registry so that a lot of needed entries are missing. We may be able to reinstall the programs that aren't working to restore their registry entries. However, the best way that might work would be a system restore. Do you have an restore points before May 31 that aren't too long ago? Also could you give me a list of the programs that don't work?

[trodat]

No, sorry, earliest restore point I have available is from the 1st of August.

I didn't have mbam installed before this happened. Because it was installed only after it should have made it's own new registry entries right?

2 programs stopped working that day:

- MSE
- Outlook

And, of course, now also mbam.

[Buddierdl]

Do the other office programs (Word, Excel, etc.) work? Do you have you install key for Office?

[trodat]

Other Office programs work. I do have an install key.

[Buddierdl]

Let's focus on Outlook first. Does it give any error when you try to start it?

1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.