[dinGospo89]

Problem signature:

Problem Event Name:     StartupRepairOffline

Problem Signature 01:    6.1.7600.16385

Problem Signature 02:    6.1.7600.16385

Problem Signature 03:    unknown

Problem Signature 04:    21199321

Problem Signature 05:    AutoFailover

Problem Signature 06:    31

Problem Signature 07:    CorruptFile

OS version:                     6.1.7600.2.0.0.256.1

Locale ID:                        1033

[Advertisements]

The MBR looks good. A Windows 7 MBR, 3 partitions NTFS, the first one active (bootable). So it must be something else.

[JSntgRvr]

The MBR looks good. A Windows 7 MBR, 3 partitions NTFS, the first one active (bootable). So it must be something else.

[JSntgRvr]

Please download Listparts to a flash drive.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

Plug the flashdrive into the infected PC.

From an Off position in the computer, enter the System Recovery Options.

To enter the System Recovery Options from the Advanced Boot Options:

• Restart the computer.
• As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.
• Click on Repair your computer menu item.
• Select US as the keyboard language settings, and then click Next.
• Select the operating system you want to repair, and then click Next.
• Select your user account and click Next.

On the System Recovery Options menu you will get the following options:

Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Command Prompt

• Select Command Prompt
• In the command window type in notepad and press Enter.
• The notepad opens. Under File menu select Open.
• Select "Computer" and find your flash drive letter and close the notepad.
• In the command window type e:\ListParts.exe (for x64 bit version type e:\ListParts64.exe) and press Enter
  Note: Replace letter e with the drive letter of your flash drive.
• The tool will start to run.
• When the tool opens click Yes to disclaimer.
• Put check mark on List BCD.
• Press Scan button.
• It will make a log (Result.txt) in the flash drive. Please copy and paste it to your reply.

[dinGospo89]

should i just copy it to a usb just like i did with fixlist? and do you know maybe from those logs which version should i choose.. i think it's a 64 but not 100% sure.. 

[JSntgRvr]

You are using Windows 7 64bits, so the version is 64bits. Run it as you run FRST, except that must be done after a restart.

[dinGospo89]

done

Attached Files

•  Result.txt   7.68KB   609 downloads

[dinGospo89]

im reading this result.txt and i came across this:

 

RAM Defects

-----------

identifier              {badmemory}

 

Global Settings

---------------

identifier              {globalsettings}

inherit                 {dbgsettings}

                        {emssettings}

                        {badmemory}

 

 

so i was thinking.. is it possible that i am having this problem because some kind of RAM memory problem?

[JSntgRvr]

im reading this result.txt and i came across this:
 
RAM Defects
-----------
identifier              {badmemory}
 
Global Settings
---------------
identifier              {globalsettings}
inherit                 {dbgsettings}
                        {emssettings}
                        {badmemory}
 
 
so i was thinking.. is it possible that i am having this problem because some kind of RAM memory problem?

That is part of the BCD, but has no value. It means nothing.

[JSntgRvr]

Run this command at the prompt:

SFC /ScanNow /Offbootdir=C:\ /Offwindir=D:\Windows

Let me know the outcome.

[dinGospo89]

Windows Resource Protection did not find any integrity violations

Edited by dinGospo89, 21 May 2017 - 06:58 PM.

[JSntgRvr]

Wow!

 

Lets run CHKDSK at the prompt:

 

CHKDSK D: /R

[dinGospo89]

Done with CHKDSK

Attached Thumbnails

• 

[JSntgRvr]

Lets try an Offline scanner.

 

Kaspersky Rescue Disk 10 is designed to scan, disinfect and restore infected operating systems. It should be used when it is impossible to boot the operating system.

 

Here is the download link and information to record the iso file to a CD or USB device

 

Keep me posted.

[dinGospo89]

i'v done it, but still get same error when i try to boot it.. 

scanned it twice found bunch of adWare's, deleted it all but still can't boot.. ill post up some pictures..

Attached Thumbnails

• 
• 
• 
• 
• 
• 

[JSntgRvr]

Can you boot in Safe Mode?