[jim10011]

I am running Windows 7 and have been having starting issues and some functionality issues. I can still use my computer but most of the time it does not start properly and acts as if I'm in safe mode. And sometimes I get a Windows is restarting message (can't remember exactly that it says).

I have run Malwarebytes and used my Windows repair cd to get this computer to start correctly but nothing has helped. I have done disk check and run every Windows check with F10 as well.  And oftentimes it will not properly shut down and I have to hold the power button in to turn it off. Any help would be greatly appreciated  .

 

Attached Thumbnails

• 

[Advertisements]

Search for:

 

services.msc

 

hit Enter

 

Scroll down to 

 

System Event Notification Service 

 

right click and select Properties.

 

Verify that the Startup Type is set to Automatic. If you make a change hit Apply.  Is it running?  If it is not running try to Start it.  Do you get an error?  What does it say?

 

Is this a 32 or 64 bit version of Windows 7?  (Click on Compuer then System Properties then look where it says: System Type: )

[RKinner]

Search for:

 

services.msc

 

hit Enter

 

Scroll down to 

 

System Event Notification Service 

 

right click and select Properties.

 

Verify that the Startup Type is set to Automatic. If you make a change hit Apply.  Is it running?  If it is not running try to Start it.  Do you get an error?  What does it say?

 

Is this a 32 or 64 bit version of Windows 7?  (Click on Compuer then System Properties then look where it says: System Type: )

[jim10011]

64 Bit. 

Yes, it is set to automatic.

Service Status: Started

[RKinner]

Go back into services.msc

Find COM+ Event System.

right click and select Properties.  Stop the service.

 

It will warn you that SENS and BITS will also stop.  Tell it OK.

 

You will see it stop both services then it will stop COM+ Event System.  

 

Now Start COM+ Event System then Background Intelligent Transfer Service (BITS)

 

Now Start System Event Notification Service (SENS)

 

Each service should start very quickly without errors,  

 

Get the free version of Speccy:

 

http://www.filehippo...download_speccy (Look in the upper right for the Download

Latest Version button  - Do NOT press the large Start Download button on the upper left!)  

Download, Save and Install it.  Tell it you do not need CCLEANER if it asks.    Run Speccy.  When it finishes (the little icon in the bottom left will stop moving), 

File, Save as Text File,  (to your desktop) note the name it gives. OK.  Open the file in notepad and delete the line that gives the serial number of your Operating System.  

(It will be near the top about 10-20 lines down.) Save the file.  Attach the file to your next post.  (More Reply Options, Choose File, Open, Attach This File)

 

 

Right click on (My) Computer and select Manage (Continue) Then click on the arrow in front of Event Viewer. Next Click on the arrow in front of Windows Logs Right click on System and Clear Log, Clear. Repeat for Application.

 

Reboot. 

 

Start, All Programs, Accessories then right click on Command Prompt and Run as Administrator.  Then type (with an Enter after each line).

sfc  /scannow

 

 

 

Copy the next two lines:

 

findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 

notepad \windows\logs\cbs\junk.txt 

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.

Hit Enter. Copy and paste the text from notepad or if it is too big, just attach the file.)

 

 

1. Please download the Event Viewer Tool by Vino Rosso

http://images.malwar...om/vino/VEW.exe

and save it to your Desktop:

2. Right-click VEW.exe and Run AS Administrator

3. Under 'Select log to query', select:

 

* System

4. Under 'Select type to list', select:

* Error

* Warning

 

 

Then use the 'Number of events' as follows:

 

 

1. Click the radio button for 'Number of events'

Type 20 in the 1 to 20 box

Then click the Run button.

Notepad will open with the output log.

 

 

Please post the Output log in your next reply then repeat but select Application.  (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

[jim10011]

I'm confused here:

 

Then type (with an Enter after each line).

sfc  /scannow

(what do you mean "with an enter after each line?" I only see one line to type, sfc  /scannow. Do I just type sfc  /scannow then hit enter?

 

Copy the next two lines:

 

findstr  /c:"[SR]"  \windows\logs\cbs\cbs.log  >  \windows\logs\cbs\junk.txt 

notepad \windows\logs\cbs\junk.txt 

(copy them to where?)

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  Right click and Paste or Edit then Paste and the copied line should appear.

Hit Enter. Copy and paste the text from notepad or if it is too big, just attach the file.)

(Sorry I'm lost.)

[RKinner]

sfc  /scannow

hit Enter

 

Then copy the 2 lines.  (Select the two lines and Ctrl + c)

(This puts them on the clipboard where they will stay until we need them)

 

If you still have the Command Prompt open you can right click on it and Paste (or Edit then Paste) and the two lines will move from the clipboard to the command prompt window.  Hit Enter.

[jim10011]

3 files

Attached Files

•  HOMEPC-HP.txt   690.12KB   316 downloads
•  junk.txt   93.93KB   226 downloads
•  VEW.txt   2.37KB   220 downloads

[jim10011]

2nd Vew

Attached Files

•  VEW2.txt   2.13KB   217 downloads

[RKinner]

Speccy says you have Spybot S&D  installed.  We don't recommend Spybot anymore as it causes more problems than it fixes.  Best to uninstall it and remove any immunizations it may have installed.

 

Speccy also says you have both a wired Internet connection and a wireless active at the same time.  This sometimes confuses Windows so it would be best to disable the wireless.

 

You have a Seagate drive which like all Seagate drives is showing a lot of errors.  Seagates are prone to early failure so make sure you backup any files you do not want to lose.  (I recommend Western Digital Black drives.  They are probably the best out there right now)

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, then type:

sc  delete  sbre

hit Enter.  This removes an old driver leftover from running Vipre which is causing this error:

 

Log: 'System' Date/Time: 20/05/2017 12:25:37 AM

Type: Error Category: 0

Event: 7026 Source: Service Control Manager

The following boot-start or system-start driver(s) failed to load:  SBRE

 

 

 

Type:

sc  config  wudfsvc  start=  auto

Hit Enter.  This fixes

 

Log: 'System' Date/Time: 20/05/2017 12:25:38 AM

Type: Warning Category: 212

Event: 219 Source: Microsoft-Windows-Kernel-PnP

The driver \Driver\WUDFRd failed to load for the device WpdBusEnumRoot\UMB\2&37c186b&1&STORAGE#VOLUME#_??_USBSTOR#DISK&VEN_GENERIC-&PROD_COMPACT_FLASH&REV_1.01#058F63626476&1#.

 

 

 

 

This error:

 

Log: 'Application' Date/Time: 20/05/2017 12:23:41 AM

Type: Warning Category: 0

Event: 6003 Source: Microsoft-Windows-Winlogon

The winlogon notification subscriber <GPClient> was unavailable to handle a critical notification eve

 

 

Can cause very slow logons and may be related to your primary complaint.  Apparently it can be caused by errors in WMI so try:

 

Try 

Windows Repair all in one

 

http://www.tweaking....all_in_one.html

 

Download it using one of the Download links under

Download Windows Repair Free/Pro - For Windows XP, Vista, 7, 8, 8.1, 10 (32 & 64 Bit)

Version 3.9.31 (05/16/2017) Change Log - PAD File 

 

Installer (31.84 MB)

 

 

 

and save it then run it by rightclicking and Run As Admin

 

You can skip to step 4 or 5 where it gives you the same picture as in the above link.

 

Make sure only the following is checked before hitting Start:

 

 

Repair WMI

 

 

 

Reboot after it finishes

 

Run VEW again as before and post both logs.

[jim10011]

Files attached. I got that error message again. Thanks for your help I really appreciate it .

Attached Thumbnails

• 

Attached Files

•  _Windows_Repair_Log.txt   2.6KB   240 downloads
•  Repair_WMI.txt   199.91KB   286 downloads
•  VEW.txt   14.81KB   239 downloads
•  VEW2.txt   8.27KB   249 downloads

[RKinner]

Looks like you are in Safe Mode this time.  Is that the case?

 

Let's run a disk check, clear the alarms and check for errors.

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:

2. Click Properties, and then click Tools.

3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,

4. Check both boxes and then click Start.

You will receive the following message:

The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?

Click Yes to schedule the disk check, but don't restart yet.

 

 

Right click on (My) Computer and select Manage (Continue) Then click on the arrow in front of Event Viewer. Next Click on the arrow in front of Windows Logs Right click on System and Clear Log, Clear. Repeat for Application.

 

Reboot.

 

2. Right-click VEW.exe and Run AS Administrator

3. Under 'Select log to query', select:

 

* System

4. Under 'Select type to list', select:

* Error

* Warning

 

 

Then use the 'Number of events' as follows:

 

 

1. Click the radio button for 'Number of events'

Type 20 in the 1 to 20 box

Then click the Run button.

Notepad will open with the output log.

 

 

Please post the Output log in your next reply then repeat but select Application.  (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

[jim10011]

Vino's Event Viewer v01c run on Windows 2008 in English

Report run at 25/05/2017 10:52:47 AM

 

Note: All dates below are in the format dd/mm/yyyy

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'System' Log - Critical Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'System' Log - Error Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'System' Log - Warning Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'System' Date/Time: 25/05/2017 2:49:01 PM

Type: Warning Category: 0

Event: 1014 Source: Microsoft-Windows-DNS-Client

Name resolution for the name api.mixpanel.com timed out after none of the configured DNS servers responded.

 

Log: 'System' Date/Time: 25/05/2017 2:48:50 PM

Type: Warning Category: 0

Event: 11 Source: Microsoft-Windows-Wininit

Custom dynamic link libraries are being loaded for every application. The system administrator should review the list of libraries to ensure they are related to trusted applications.

 

Log: 'System' Date/Time: 25/05/2017 2:47:56 PM

Type: Warning Category: 0

Event: 4001 Source: Microsoft-Windows-WLAN-AutoConfig

WLAN AutoConfig service has successfully stopped. 

 

---------------------------------------------------------------------------------------

Vino's Event Viewer v01c run on Windows 2008 in English

Report run at 25/05/2017 10:54:49 AM

 

Note: All dates below are in the format dd/mm/yyyy

 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'Application' Log - Critical Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'Application' Log - Error Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

'Application' Log - Warning Type

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Log: 'Application' Date/Time: 25/05/2017 2:47:47 PM

Type: Warning Category: 0

Event: 1530 Source: Microsoft-Windows-User Profiles Service

Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.     DETAIL -   6 user registry handles leaked from \Registry\User\S-1-5-21-1219835080-3833390587-2249361862-1001:

Process 1812 (\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\sched.exe) has opened key \REGISTRY\USER\S-1-5-21-1219835080-3833390587-2249361862-1001

Process 3696 (\Device\HarddiskVolume2\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe) has opened key \REGISTRY\USER\S-1-5-21-1219835080-3833390587-2249361862-1001

Process 588 (\Device\HarddiskVolume2\Windows\System32\winlogon.exe) has opened key \REGISTRY\USER\S-1-5-21-1219835080-3833390587-2249361862-1001

Process 3696 (\Device\HarddiskVolume2\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe) has opened key \REGISTRY\USER\S-1-5-21-1219835080-3833390587-2249361862-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections

Process 2832 (\Device\HarddiskVolume2\Program Files (x86)\Avira\Antivirus\avguard.exe) has opened key \REGISTRY\USER\S-1-5-21-1219835080-3833390587-2249361862-1001\Software\Microsoft\Windows NT\CurrentVersion\Winlogon

Process 3696 (\Device\HarddiskVolume2\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe) has opened key \REGISTRY\USER\S-1-5-21-1219835080-3833390587-2249361862-1001\Software\Microsoft\Windows\CurrentVersion\Uninstall

 

 

[jim10011]

I have a bunch of what looks like system files on my desktop. 

Attached Thumbnails

• 

[RKinner]

The files look like they may be from Windows Repair All in One.  If you uninstall it they should go away.  If not just delete them.

 

Copy the next 2 lines:

reg query  "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" > \junk.txt

notepad  \junk.txt

Start, All Programs, Accessorie then right click on Command Prompt and Run As Admin.

 

Right click in the new window and Paste (or Edit then Paste) and the copied lines should appear.  Hit Enter.  Notepad should open.  Copy the text from notepad into a reply.

 

 

You should check with Avira and see if they have a newer version.  Yours is causing a few errors.

[jim10011]

Nothing I have done has made a bit of difference. My pc is running worse than ever. It shuts off randomly, my copy/paste feature is really buggy and can't highlight and copy what I want, and Windows starts improperly half the time. I am thinking what we are doing isn't helping . I appreciate your help but am thinking reinstalling Windows is my only hope. What do you think?