[RKinner]

OK.  Time to stop spinning our wheels and reinstall windows.  Let me know how it goes.

[Advertisements]

Unexpected weirdness!  Before installing a fresh copy, I backed up the drive (via robocopy) on a new HDD I bought and partitioned.  First, it looks like it may have done some more strange juggling with the drive letters again, since it copied everything to a different drive than I specified (not a problem, it actually happened to just go onto a different partition on the drive).

 

However, when I restarted the computer, it now recognizes this as a bootable OS - I didn't think this was something robocopy was capable of?  On top of this, it seems to be a little more functional: it hangs in the same way as before (black screen with cursor in both normal and safe mode boots, still hangs for a few seconds after aswbidsha.sys in safe mode boot), but actually is able to load Windows after a few seconds.  In a normal boot, I can't login, I get the message "The User Profile Service failed the logon.  User profile cannot be loaded." for each of the accounts.  I am able to successfully get into safe mode though.

 

In the boot options menu, it lists the old drive as just "Windows 7", but this new build as "Windows 7 Professional N (recovered)" - the correct Windows version.

 

Before I went ahead with the install, I wanted to see if perhaps this opened up any new doors for us - maybe I can use this to generate a restore point?  Alternatively, might this be an indicator that my drive is failing?

Attached Files

•  ntbtlog_a_safemode.txt   240.12KB   662 downloads
•  ntbtlog_b_safemodewnetwork.txt   88.23KB   637 downloads
•  ntbtlog_c_enablebootlogging.txt   20.26KB   647 downloads

[stallada]

Unexpected weirdness!  Before installing a fresh copy, I backed up the drive (via robocopy) on a new HDD I bought and partitioned.  First, it looks like it may have done some more strange juggling with the drive letters again, since it copied everything to a different drive than I specified (not a problem, it actually happened to just go onto a different partition on the drive).

 

However, when I restarted the computer, it now recognizes this as a bootable OS - I didn't think this was something robocopy was capable of?  On top of this, it seems to be a little more functional: it hangs in the same way as before (black screen with cursor in both normal and safe mode boots, still hangs for a few seconds after aswbidsha.sys in safe mode boot), but actually is able to load Windows after a few seconds.  In a normal boot, I can't login, I get the message "The User Profile Service failed the logon.  User profile cannot be loaded." for each of the accounts.  I am able to successfully get into safe mode though.

 

In the boot options menu, it lists the old drive as just "Windows 7", but this new build as "Windows 7 Professional N (recovered)" - the correct Windows version.

 

Before I went ahead with the install, I wanted to see if perhaps this opened up any new doors for us - maybe I can use this to generate a restore point?  Alternatively, might this be an indicator that my drive is failing?

Attached Files

•  ntbtlog_a_safemode.txt   240.12KB   662 downloads
•  ntbtlog_b_safemodewnetwork.txt   88.23KB   637 downloads
•  ntbtlog_c_enablebootlogging.txt   20.26KB   647 downloads

[RKinner]

Can you create a new login while in Safe Mode?  If so give the new login admin power then reboot and see if you can log in with the new login.

[stallada]

I'm able to create a new account, but I can't login to it - it hangs on "Preparing New Desktop" for a while, before kicking me to the 'default profile'

[RKinner]

Run FRST from safe mode with networking.  Check the Addition.txt box then hit SCAN and post both logs.

 

Also see if you can do this:

1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Right-click VEW.exe and Run AS Administrator
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.  (Each time you run VEW it overwrites the log so copy the first one to a Reply or rename it before running it a second time.)

 

[stallada]

Here are each of the output logs you asked for.

Attached Files

•  FRST.txt   89.03KB   617 downloads
•  Addition.txt   75.24KB   647 downloads
•  VEW_app.txt   11.12KB   664 downloads
•  VEW_system.txt   16.5KB   671 downloads

[RKinner]

Copy the next lines

 

Start, All Programs, Accessories, right click on Command Prompt and Run as Administrator, Continue.  

 

Type with an Enter after each line:

reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList" /s > \junk.txt
dir /a c:\users\public >> \junk.txt
dir /a c:\users\stalla >> \junk.txt
dir /a /s c:\windows\system32\tasks >> \junk.txt
notepad \junk.txt

  Copy and paste the text from notepad into a reply.  Close notepad.  Close the Command Window.

 

[stallada]

Here's the generated file - figured it would be neater for you if I attached the txt rather than copy/pasting the text (although I can obviously do so if you need me to)

Attached Files

•  junk.txt   28.89KB   669 downloads

[RKinner]

Look at C:\Users\Stalla\NTUSER.DAT

 

That's essentially the user profile.  Right click on it select Properties and see what the permissions are and who owns it.

[stallada]

It has full control - 'Allow' for all, with no check (either allow or deny) for special permissions

[RKinner]

try
Windows Repair all in one

http://www.tweaking....all_in_one.html

Download it and save it then run it.

You can skip to step 4 or 5 where it gives you the same picture as in the above link.

Just check all of the options then hit Start.

Reboot when done and run VEW again as before.