[RebelGamer137]

My main Windows 7 profile won't log on, I get a user service fail error message and that my profile can't be loaded. Is there anything I can do to access my profile again or at least recover my files?

[Advertisements]

Hi,

Can you access the system using another user account with Administrator privileges?

[SleepyDude]

Hi,

Can you access the system using another user account with Administrator privileges?

[RebelGamer137]

Yes, I have one open as we speak. This is a very big concern for me. I already tried rebooting and it did not work. I am worry this is an early warning of more problems, could this be the case or am I just being paranoid? Last time I started having software problems with a laptop it had a fan break several months later, could this be a warning sign this computer is starting to die or was the last time most likely a coincidence? Considering this is a used computer. But back on track I do have another admin log in. What can I do?

[SleepyDude]

Hi,

Let's see if the Windows Event Log give us any tip about the problem...

Download MiniToolBox and save the file to the Desktop.
Close the browser and run the tool, check the following options:

• List last 10 Event Viewer log
• List Users, Partitions and Memory size
• List Minidump Files
• List Restore Points

Click on Go.

Post the resulting log in your next reply.

Please download SystemLook from one of the links below according to your OS Architecture and save it to your Desktop.
SystemLook (32-bit)
SystemLook (64-bit)

• Double-click SystemLook/SystemLook_x64 to run it.
• Accept the prompt Allow the program to make changes to this computer (UAC prompt)
• Copy the content of the following codebox into the main textfield:
  

  :dir
  %systemdrive%\users
  

• Click the Look button to start the scan.
• When finished, a notepad window will open with the results of the scan. Please post this log in your next reply.

Note: The log can be found on your Desktop entitled SystemLook.txt

[RebelGamer137]

MiniToolBox by Farbar Version: 13-07-2013
Ran by Warhawk2 (administrator) on 03-10-2013 at 16:30:43
Running from "C:\Users\Warhawk2\Downloads"
Microsoft Windows 7 Home Premium Service Pack 1 (X64)
Boot Mode: Normal
***************************************************************************

========================= Event log errors: ===============================

Application errors:
==================
Error: (10/03/2013 04:21:11 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 04:19:35 PM) (Source: Microsoft-Windows-User Profiles Service) (User: familia-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Access is denied.

Error: (10/03/2013 01:42:33 PM) (Source: Microsoft-Windows-User Profiles Service) (User: familia-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Access is denied.

Error: (10/03/2013 01:16:53 PM) (Source: Microsoft-Windows-User Profiles Service) (User: familia-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Access is denied.

Error: (10/03/2013 00:55:46 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 00:54:12 PM) (Source: Microsoft-Windows-User Profiles Service) (User: familia-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Access is denied.

Error: (10/03/2013 00:49:42 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 00:49:06 PM) (Source: Microsoft-Windows-User Profiles Service) (User: familia-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Access is denied.

Error: (10/03/2013 00:45:21 PM) (Source: WinMgmt) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 00:44:59 PM) (Source: Microsoft-Windows-User Profiles Service) (User: familia-PC)
Description: Windows cannot log you on because your profile cannot be loaded. Check that you are connected to the network, and that your network is functioning correctly.

DETAIL - Access is denied.


System errors:
=============
Error: (10/03/2013 04:20:36 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/03/2013 00:55:15 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/03/2013 00:49:06 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/03/2013 00:46:39 PM) (Source: DCOM) (User: )
Description: {AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}

Error: (10/03/2013 00:44:51 PM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/03/2013 00:44:28 PM) (Source: DCOM) (User: familia-PC)
Description: application-specificLocalActivation{8BC3F05E-D86B-11D0-A075-00C04FB68820}{8BC3F05E-D86B-11D0-A075-00C04FB68820}familia-PCGuestS-1-5-21-574094130-2580765709-2137452018-501LocalHost (Using LRPC)

Error: (10/02/2013 06:57:42 AM) (Source: DCOM) (User: NT AUTHORITY)
Description: application-specificLocalLaunch{C97FCC79-E628-407D-AE68-A06AD6D8B4D1}{344ED43D-D086-4961-86A6-1106F4ACAD9B}NT AUTHORITYSYSTEMS-1-5-18LocalHost (Using LRPC)

Error: (10/02/2013 06:56:30 AM) (Source: EventLog) (User: )
Description: The previous system shutdown at 6:31:40 AM on ?10/?2/?2013 was unexpected.

Error: (10/01/2013 10:23:56 PM) (Source: Service Control Manager) (User: )
Description: The Intuit Update Service v4 service failed to start due to the following error:
%%1053

Error: (10/01/2013 10:23:56 PM) (Source: Service Control Manager) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Intuit Update Service v4 service to connect.


Microsoft Office Sessions:
=========================
Error: (10/03/2013 04:21:11 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 04:19:35 PM) (Source: Microsoft-Windows-User Profiles Service)(User: familia-PC)
Description: Access is denied.

Error: (10/03/2013 01:42:33 PM) (Source: Microsoft-Windows-User Profiles Service)(User: familia-PC)
Description: Access is denied.

Error: (10/03/2013 01:16:53 PM) (Source: Microsoft-Windows-User Profiles Service)(User: familia-PC)
Description: Access is denied.

Error: (10/03/2013 00:55:46 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 00:54:12 PM) (Source: Microsoft-Windows-User Profiles Service)(User: familia-PC)
Description: Access is denied.

Error: (10/03/2013 00:49:42 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 00:49:06 PM) (Source: Microsoft-Windows-User Profiles Service)(User: familia-PC)
Description: Access is denied.

Error: (10/03/2013 00:45:21 PM) (Source: WinMgmt)(User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (10/03/2013 00:44:59 PM) (Source: Microsoft-Windows-User Profiles Service)(User: familia-PC)
Description: Access is denied.


CodeIntegrity Errors:
===================================
Date: 2013-10-03 02:05:55.913
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-03 02:05:55.911
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-03 02:05:55.908
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-03 02:05:55.896
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-03 02:05:55.894
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-03 02:05:55.891
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-02 00:33:52.131
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-02 00:33:52.129
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-02 00:33:52.126
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\ELAMBKUP\klelam.sys because the set of per-page image hashes could not be found on the system.

Date: 2013-10-02 00:33:52.104
Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 2013\KLELAMX64\klelam.sys because the set of per-page image hashes could not be found on the system.


========================= Memory info: ===================================

Percentage of memory in use: 37%
Total physical RAM: 3558.87 MB
Available physical RAM: 2242.04 MB
Total Pagefile: 7115.92 MB
Available Pagefile: 5159.1 MB
Total Virtual: 4095.88 MB
Available Virtual: 3964.59 MB

========================= Partitions: =====================================

1 Drive c: (TI106166W0D) (Fixed) (Total:581.23 GB) (Free:485.66 GB) NTFS
3 Drive e: (SeaGate1) (Fixed) (Total:1863.01 GB) (Free:1843.29 GB) NTFS

========================= Users: ========================================

User accounts for \\FAMILIA-PC

Administrator Dad Guest
user 1 Warhawk2

========================= Minidump Files ==================================

No minidump file found

========================= Restore Points ==================================

10-09-2013 08:40:35 Windows Update
12-09-2013 07:00:27 Windows Update
18-09-2013 00:19:04 Windows Update
24-09-2013 09:16:29 Windows Update
01-10-2013 09:24:19 Windows Update

**** End of log ****

This is from MiniToolBox, System Look I get a script required error and it does nothing.

[SleepyDude]

System Look I get a script required error and it does nothing.

Hi,

You need to copy & paste the following two lines of text to the empty box of SystemLook

:dir
%systemdrive%\users

[RebelGamer137]

SystemLook 30.07.11 by jpshortstuff
Log created at 17:13 on 03/10/2013 by Warhawk2
Administrator - Elevation successful

========== dir ==========

C:\users - Parameters: "(none)"

---Files---
desktop.ini --ahs-- 174 bytes [04:54 14/07/2009] [04:54 14/07/2009]

---Folders---
All Users d--hs-- [05:08 14/07/2009]
Dad d------ [16:45 03/10/2013]
Default dr-h--- [03:20 14/07/2009]
Default User d--hs-- [05:08 14/07/2009]
familia d------ [03:45 02/03/2012]
Guest d------ [13:59 22/09/2013]
Public dr----- [03:20 14/07/2009]
TEMP d------ [16:44 03/10/2013]
user 1 d------ [16:33 03/01/2013]
Warhawk2 d------ [16:57 03/10/2013]

-= EOF =-

Here are the results.

[SleepyDude]

Dad d------ [16:45 03/10/2013]
familia d------ [03:45 02/03/2012]
Public dr----- [03:20 14/07/2009]
TEMP d------ [16:44 03/10/2013]
user 1 d------ [16:33 03/01/2013]
Warhawk2 d------ [16:57 03/10/2013]

Hi,

From the list above do you recognize the user account with problems?

[RebelGamer137]

User1, I renamed it Warhawk when I got this laptop back in January. This is a used machine.

[SleepyDude]

User1, I renamed it Warhawk when I got this laptop back in January. This is a used machine.

Only to confirm Warhawk2 is another account you see on the login screen?

Can you open the folder c:\users\user 1\ and access the folders inside? You should see your files if you open the folders My Documents, Desktop, etc.

For now I only want you to check if your files are there and you can open them.

[RebelGamer137]

Yes, Warhawk2 was created by me because of this problem. Also, I am able to access the documents so thanks for that info. Anyway I can get my main log in working again?

[SleepyDude]

Yes, Warhawk2 was created by me because of this problem. Also, I am able to access the documents so thanks for that info. Anyway I can get my main log in working again?

Hi,

The Windows event log only say that there is a access deny problem loading the profile, it could be a problem with files/folders permissions or on the user registry, it's hard to tell. The simple solution will be to transfer all the files/folders from the profile with problems to a new one.

Do you have any new files/folders stored on the new user account Warhawk2? Can it be simply replaced with the files/folders from your old/Bad profile?

I want you to run a Disk Check because Disk problems are the most frequent cause to have user profiles corrupted...

• open the Command Prompt as Administrator (Tutorial)
• type the command:
  

  chkdsk /r /x C:

  When it ask if you want to do a scan on next restart answer Yes
• restart the computer

Next,

• download ListChkdskResult
• execute the file and accept all the windows prompts to authorize the program to run
• Notepad will open with a report showing the chkdsk result
• copy & paste the log to your reply

[paddy38]

I was reading the dialog between shygal and Bugsy since I have the same problem.
I followed Bugsy advice right up to paragraph 11 " Right click and rename then change the bak to bk"

Unfortunatly he did not explain how to edit the profiles and I managed to delete both of them while trying to change the .bak

Is there anything I can do to recover from this

Paddy 38

[SleepyDude]

Hi Paddy38

Please start your own thread to avoid confusion.

Thank You.

[RebelGamer137]

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 10/5/2013 5:23:28 PM >------
Category: 0
Computer Name: familia-PC
Event Code: 1001
Record Number: 128038
Source Name: Microsoft-Windows-Wininit
Time Written: 10-05-2013 @ 21:16:17
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.
Volume label is TI106166W0D.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
505856 file records processed.

File verification completed.
553 large file records processed.

0 bad file records processed.

0 EA records processed.

108 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
588134 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
505856 file SDs/SIDs processed.

Cleaning up 754 unused index entries from index $SII of file 0x9.
Cleaning up 754 unused index entries from index $SDH of file 0x9.
Cleaning up 754 unused security descriptors.
Security descriptor verification completed.
41140 data files processed.

CHKDSK is verifying Usn Journal...
36278784 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
505840 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
127003709 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

609462271 KB total disk space.
100620500 KB in 463842 files.
199676 KB in 41141 indexes.
0 KB in bad sectors.
627255 KB in use by the system.
65536 KB occupied by the log file.
508014840 KB available on disk.

4096 bytes in each allocation unit.
152365567 total allocation units on disk.
127003710 allocation units available on disk.

Internal Info:
00 b8 07 00 a2 b4 07 00 a7 9c 0c 00 00 00 00 00 ................
7a 07 00 00 6c 00 00 00 00 00 00 00 00 00 00 00 z...l...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------

My results, let me know your prognosis?