[zimbibambu]

I need some help:
Some days ago my laptop displayed the blue screen and now it is impossible to reboot it in Windows (also safe mode).
If I try to run the Windows 7 installation DVD, the recovery says that it can't see the hard drive image.


I ran FRST as I saw on the web and it gave me this:


Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 27-02-2014 02
Ran by SYSTEM on MININT-Q3I8ICC on 28-02-2014 23:22:26
Running from E:\
WIN_7 Service Pack 1 (X64) OS Language: English(US)
Boot Mode: Recovery
Attention: Could not load system hive.
Attention: System hive is missing.


The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingc...can-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingc...can-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo...very-scan-tool/

==================== Registry (Whitelisted) ==================

ATTENTION: Software hive is missing.
ATTENTION: Software hive is not loaded.
ATTENTION: System hive is not loaded.

==================== Services (Whitelisted) =================


==================== Drivers (Whitelisted) ====================


==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========


==================== One Month Modified Files and Folders =======


==================== Known DLLs (Whitelisted) ================


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\wininit.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\wininit.exe IS MISSING <==== ATTENTION!.
C:\Windows\explorer.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\explorer.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\svchost.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\svchost.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\services.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\User32.dll IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\User32.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\userinit.exe IS MISSING <==== ATTENTION!.
C:\Windows\SysWOW64\userinit.exe IS MISSING <==== ATTENTION!.
C:\Windows\System32\rpcss.dll IS MISSING <==== ATTENTION!.
C:\Windows\System32\Drivers\volsnap.sys IS MISSING <==== ATTENTION!.
C:\Windows\system32\codeintegrity\Bootcat.cache IS MISSING <==== ATTENTION!.
C:\Windows\System32\winsrv.dll IS MISSING <==== ATTENTION!.

==================== Restore Points =========================


==================== Memory info ===========================

Percentage of memory in use: 12%
Total physical RAM: 3948.54 MB
Available physical RAM: 3446.67 MB
Total Pagefile: 3946.74 MB
Available Pagefile: 3438.5 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB

==================== Drives ================================

Drive e: (16) (Removable) (Total:14.91 GB) (Free:11.71 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 298 GB) (Disk ID: 4C1644FD)
Partition 1: (Active) - (Size=277 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=21 GB) - (Type=05)

========================================================
Disk: 1 (Size: 15 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================





Can someone help me?

Edited by zimbibambu, 02 March 2014 - 04:36 AM.

[Advertisements]

Hi from the recovery console select Command Prompt

At the prompt type the following command and press enter :

chkdsk c: /r

Wait for it to complete and then try a normal boot

If that fails then run an FRST scan again

[Essexboy]

Hi from the recovery console select Command Prompt

At the prompt type the following command and press enter :

chkdsk c: /r

Wait for it to complete and then try a normal boot

If that fails then run an FRST scan again

[zimbibambu]

I did what you said. It took about 25 hours, but it made it.
Now the computer boot in normal mode, but it takes 5 minutes and there are some graphic errors.
In Safe mode it crash loading aswrvrt.sys.

[Essexboy]

OK so we have progress

Could you initially run a fresh FRST scan now from normal mode and post that

[zimbibambu]

Do I have to run it from the Windows USB installer like before or directly from Windows?

[zimbibambu]

In the meantime I tried to repair Windows using System Restore and I uninstalled avast (now the safe mode crash loading CLASSPNP.sys).

Then I ran FRST scan as before and here is the result.

Attached Files

•  FRST.txt   29.73KB   287 downloads

Edited by zimbibambu, 02 March 2014 - 04:44 AM.

[Essexboy]

Sorry I mean to run it from normal windows, from the desktop

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will produce a log called FRST.txt in the same directory the tool is run from.
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.

[zimbibambu]

FRST.txt and Addition.txt:

Attached Files

•  FRST.txt   36.14KB   338 downloads
•  Addition.txt   47.6KB   294 downloads

[Essexboy]

Most of the errors appear related to svchost so I will check that out now

Download and Install Combofix

Download ComboFix from one of the following locations:
Link 1
Link 2

VERY IMPORTANT !!! Save ComboFix.exe to your Desktop

* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.
• Accept the disclaimer and allow to update if it asks
  
  [img width=426 height=293]http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png[/img]
  
  
  
• When finished, it shall produce a log for you.
• Please include the C:\ComboFix.txt in your next reply.

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3. If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

[zimbibambu]

Now the boot and the loading of Windows are still slow and the pc doesn't identify any wifi.

I didn't said before (I don't know if it's an important information), but the logo of boot loading is not the standard Windows 7 one, it seems more like the Vista's one.

Anyway here's the file:

Attached Files

•  ComboFix.txt   17.93KB   272 downloads

[Essexboy]

OK next we will run the system file checker to confirm that windows files are OK

Go Start > All Programs > Accessories
Right click command prompt and select "Run as Administrator"
In the black box type the following command :

sfc /scannow

Allow it to complete and then reboot

Let me know how it is behaving then

[zimbibambu]

The scan get to 32% and then appeared:
"Windows resources protection: impossible to fulfill the requested issue"

I rebooted and it's behaving as in the last post.

[Essexboy]

OK could you restore the computer using System Restore to at least a few days prior to the problems and see if that resolves it

[zimbibambu]

I did it but there are not many changes. The system is still slow, it isn't able to load Windows aero and to find any wifi connection.

[Essexboy]

Lets look at the network. What error does windows give when you try the troubleshooter ?

Please download MiniToolBox, save it to your desktop and run it.
[img width=337 height=425]https://dl.dropbox.com/u/73555776/minitoolbox.JPG[/img]
Checkmark the following checkboxes:

• Flush DNS
• Report IE Proxy Settings
• Reset IE Proxy Settings
• Report FF Proxy Settings
• Reset FF Proxy Settings
• List content of Hosts
• List IP configuration
• List Winsock Entries
• List last 10 Event Viewer log
• List Installed Programs
• List Devices
• List Users, Partitions and Memory size.
• List Minidump Files

Click Go and post the result (Result.txt). A copy of Result.txt will be saved in the same directory the tool is run.

Note: When using "Reset FF Proxy Settings" option Firefox should be closed.