Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Close but no cigar: Complex Boot Failure after System Restore (Win7)


11 Sep 2012   #1

Various
 
 

Greetings all. Well, I haven't had to bug you guys in quite a while, but I find myself back begging at the door. The situation is a bit complex, but tantalizingly close.

The system has primarily run Windows 7 for years, but still can dual boot the older Vista. I'm on the Vista right now. There are four physical drives. From vista, I can access the Windows 7 c: drive as N:.

Problems began last night with power hit and failure of backup supply.

On boot, system wanted to check the disk, but complained it couldn't due to "recently installed programs." -- then proceeded to boot to Windows 7 seemingly normally. I decided to do a system restore to prior to the program I had installed earlier in the evening, but restore complained that I needed to check the disk first. Trapped!

I went ahead and uninstalled the program that had been recently installed.

For the first time in ages, I booted to vista -- vista noticed the disk check issue on the Windows 7 partition (I should note, both Windows 7 and vista share the *physical* C: drive) and proceeded to successfully check it. There were about 5 orphan files and 5 index errors corrected.

I rebooted and came back into Windows 7 successfully. However, I felt unsure about the state of that previously installed program, and decided to do a restore to just prior to its installation. Restore seemingly OK. System reboots.

At this point, Windows 7 startup began failing. Apparently that restore was not the best idea I ever had.

Boot sequence proceeds normally through "busy bar" animation to the point when the GUI would launch. At that point I see a message at the top of the screen too fast to read and the hardware reboots again.

I cannot get into GUI or command prompt safe mode. Lots of drivers load, there's a long pause, then reboot. System Repair comes up clean on everything until it says "unspecified system changes may be preventing boot". When I try to restore to an even earlier restore point from within Repair it all proceeds and then says fail at the end. I turned on the boot logging but am unsure where that file is now. As noted I CAN access the Windows 7 C: drive from Vista. In fact I just did another chkdsk on it and it comes back clean.

My assumption is that probably a single file or some such was blasted. I very much want to try bring this system back without a full load -- I know I could copy off /Users and other data like that but there are many programs with complex configurations I do not want to lose if at all possible.

I'm hoping to attack this as systematically as possible, but I need to throw myself at your mercy for a suggested line of attack.

Thanks!

Additional info. I now have the boot log -- it is quite lengthy.

I have also managed to catch the error that appears just before the reboot (that is, busy bar runs, screen goes dark for a few seconds, this error flashes, then system reboots):

It appears to be (I had to catch this on video and dig down to the frame):

STOP: c000021a (Fatal System Error)
The initial session process or system process te ... [cut off]

Thanks!

More info. The error message above appears to be described at:

How to troubleshoot a "STOP 0xC000021A" error

This is very illuminating, and describes how various "remote control" programs may
replace the default winlogin DLL. And in fact, the program I had installed just before this entire sequence began was indeed a remote access program I was testing.

So right now I'm trying to figure out how to get at the registry value for that system from over on Vista. I found instructions for using regedit on a different disk, and navigated (I think) over to the proper drive's \windows\system32\config\SYSTEM. At that point it requests a key name (apparently for reference) -- I just used FIX1. But navigating down into (what I believe is) that registry I do not find the key described in the KB article listed above.

So right now my focus is in finding out how to get at the appropriate registry value on that drive (the C: drive for Windows 7, N: from Vista) and see if I can set the winlogin back to the default as described.

Any clues appreciated! Thanks.

My System SpecsSystem Spec
.

11 Sep 2012   #2

Various
 
 

More info. Under Windows 7, control of the Winlogin is apparently under the registry path:

HKLM/Microsoft/Windows/CurrentVersion/Authentication/Credential Provider Filters


In my case containing:
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Provider Filters\{DDC0EED2-ADBE-40b6-A217-EDE16A79A0DE}


and
KLM/Microsoft/Windows/CurrentVersion/Authentication/Credential Providers
In my case containing:
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{25CBB996-92ED-457e-B28C-4774084BD562}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{3dd6bec0-8193-4ffe-ae25-e08e39ea4063}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{503739d0-4c5e-4cfd-b3ba-d881334f0df2}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{6f45dc1e-5384-457a-bc13-2cd81b0d28ed}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{8bf9a910-a8ff-457f-999f-a5ca10b4a885}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{94596c7e-3744-41ce-893e-bbf09122f76a}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{AC3AC249-E820-4343-A65B-377AC634DC09}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{e74e57b0-6c6d-44d5-9cda-fb2df5ed7435}
HKEY_LOCAL_MACHINE\test\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{F8A0B131-5F68-486c-8040-7E8FC3C85BB6}

Most (but not all) of the Content Providers appear to be normal Windows 7.

The Content Filter may not supposed to have any entry at all for standard login, but I'm not sure.

Before I start screwing with this, any advice would be welcome. My goal again is to get back to standard Windows login. I believe the boot error I'm getting is because the Provider currently set is no longer valid due to the issues above.

Any clues?

Thanks!
My System SpecsSystem Spec
11 Sep 2012   #3

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Advanced Boot Options
Do "Disable Automatic Restart on System Failure"
Post all errors listed on BSOD
My System SpecsSystem Spec
.


11 Sep 2012   #4

Microsoft Community Contributor Award Recipient

Microsoft Windows 7 Home Premium 64-bits 7601 Multiprocessor Free Service Pack 1
 
 

Once you could logon normally. Then you did a "system restore". You can restore to "undo restore point"! Do it from Windows 7 system recovery environment if even safe mode crashes
My System SpecsSystem Spec
11 Sep 2012   #5
Microsoft MVP

 

Other steps for Troubleshooting Windows 7 Failure to Boot

I would want each OS on a separate HD booted only via the BIOS (unplug all others during isntall) so if you come to step to Clean Reinstall consider it closely.
My System SpecsSystem Spec
11 Sep 2012   #6

Various
 
 

So far when I've tried doing a restore -- to any of my restore points -- from the Recovery environment, the process seems to run OK, but eventually gives a "recovery error, nothing changes" error.
My System SpecsSystem Spec
11 Sep 2012   #7
Microsoft MVP

 

Keep working through the steps and reporting back.
My System SpecsSystem Spec
11 Sep 2012   #8

Various
 
 

It's been a while since I've looked at this, but as I recall the boot environment of this system is (or was) a bit odd, involving two physical drives. In any case, the system IS getting far along in the boot. It runs through the "idle lights" for quite a few seconds, then the screen goes dark for more seconds as would be typical, and at that point it fails. I am extremely suspicious about the fact that the remote control software had just been installed and uninstalled -- the c000021a error writeup specifically notes this issue of the login credential provider being changed. My suspicion is that the system is trying to vector through a credential provider that no longer exists, instead of the system login default. By definition, if that fails, the system is supposed to stop. But the referenced DLL does appear to exist.

The full text of the blue screen error is:

STOP c000021a (fatal system error)

the initial session process or system process terminated unexpectedly with
a status of:

0x00000000 (0xc0000034 0x00100724)

system shut down
My System SpecsSystem Spec
12 Sep 2012   #9

Various
 
 

Windows 7 back up. For the record, Repair cycles were unable to fix the problem -- they just said "unspecified changes" were at fault, and the integrity scan found nothing wrong.

So I worked my way back through all my restore points (from Repair's restore function). All but one would not restore. They churn for 10 or 15 minutes "restoring files" and then fail with "unspecified error." But the oldest one I had, from 8/26, did succeed. That got me back in, and though I found a bunch of services disabled for some reason (Window Defender, Volume Shadow Copy [needed for restore points]), etc., I re-enabled them and things look to be in pretty good shape. So while I don't really know the root cause of the problem, at least the problem was averted this time.

Thanks all!
My System SpecsSystem Spec
12 Sep 2012   #10
Microsoft MVP

 

I would post up your BSOD information in our Crashes section for expert analysis using this tool: Blue Screen of Death (BSOD) Posting Instructions - Windows 7 Forums
My System SpecsSystem Spec
Reply

 Close but no cigar: Complex Boot Failure after System Restore (Win7)




Thread Tools



Similar help and support threads for2: Close but no cigar: Complex Boot Failure after System Restore (Win7)
Thread Forum
System Restore Failure Backup and Restore
Solved System restore failed, can't boot or reinstall Win7 Backup and Restore
windows update and system restore failure. Windows Updates & Activation
win7 won't boot, system repair, restore, safe mode won't work Installation & Setup
Power failure during a attempted system restore. General Discussion
System restore failure Installation & Setup
System Restore failure - yet another tale of woe!! Backup and Restore

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 01:38 AM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33