You cancelled the installation of the updates. You cancelled the checkdisk. No very smart!
How did you check the win7 registry for the winlogon key? you can't access the win7 registry.... unless you mount the registry hive remote. Very unlikely that key is broken/missing.
What are the last 3 lines on screen if booting to "safe mode"?
I just typed in regedit at the command prompt to get into it and view it. PLease see here, this thread has same issue with this registry issue... see here, and it was fixed, read the first few posts:
Solved: Windows 7 & Virus - Tech Support Guy
and safe mode shows, after it stops... Then 20 sec after this is will go to black screen with mouse pointer.
You must examine registrry key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon from win7! Not the same key in recovery environment!!
Load the SOFTWARE hive. An example how to do is here Password Reset load the SOFTWARE hive instead of SYSTEM hive.
Ok, wow, you learn something new every day. I went into that key, and it's set to explorer.exe. It's fine. I don't know what all those other people are doing in the other post. lol. There are countless people changing that cmd thing to explorer without loading that hive..
Ok, so, I navigated to the system32/config folder... The 5 files in there, system, sam, etc. are still showing current dates when all the bad stuff was happening, and there is a .bak for each of those files right in that same folder with the main ones, from 2 days ago when everything was fine. I deleted the current ones, and removed the .bak off the other 5... Now, you had me replace those files from regbak folder and the dates were from a week earlier, which fixed the blue screen issue, but still had the black screen mouse pointer issue. Even though it said 5 files replaced.
see my post #11, where you had me replace those files earlier if you forget... I had to scroll back as this is a lot of info.
anyway, I rebooted, and for the first time I see this! This is what I stopped the other day because it was taking so long. I guess I will let it finish... Do you think this will fix me? it's literally taking forever, and after 15 min on stage 4, it's still at 51% now at 11,000 files out of 979,000
Last edited by Jackie1; 30 Apr 2014 at 11:14.
Those baks had to be put in there when I ran some of the tools before this issue...
I have a feeling this chkdsk is going to take DAYS. It's still on stage 4, and an hour later only at 52%. This doesn't do anything but move files around, right? Isn't the SFC what fixes windows file issues? I'm just killing time...
Actually, SFC repaired C:\Windows\System32\rpcss, and afterwards, FRST did not identify the file as patched:
C:\Windows\System32\rpcss.dll => MD5 is legit
Also, FRST took care of the ZeroAccess it found.
Please follow the instruction of Kaktussoft. Right now, he is your best bet. The way things are looking, I am at a loss for new ideas. Other than a clean install, fixing this kind of situation, if at all possible, requires lots of patience.
When done with Kaktussoft's instructions, let's try to run RogueKiller, just like you did FRST64.
Please plug in a USB pen drive into a working computer.
Go to the RogueKilller download:
http://www.adlice.com/softs/roguekil...eKillerX64.exe
Save the program to the >> USB pen drive.
Remove USB pen drive when done.
Now, we are going to use the RogueKiller program from the Recovery Environment.
Plug in the USB pen drive which has RogueKiller.exe
Start the computer, and tap the F8 key until you get to the Advanced Boot Options
Use the arrow keys to select the Repair your computer menu item
From there...
Select your language settings, and click: Next
Select your User account and click: OK (If you did not set a password, leave blank.)
On the System Recovery Options you get the following options:
Startup Repair
System Restore
Windows Complete PC Restore
Windows Memory Diagnostic Tool
Scan your computer's memory for errors
Command Prompt
Select: Command Prompt
In the Command Prompt window, at the blinking cursor type notepad and press: Enter
In Notepad, under the File menu select: Open
Double-click the Computer icon on the left.
Find the pen drive letter, remember what letter it is, click on it, and press: Open
Close out of Notepad.
Click the Command Prompt window
Type x:\roguekillerX64.exe, and press: Enter
Note: Replace the drive letter x with the drive letter of your pen drive!
When RogueKiller starts, Wait until the Prescan finishes, and press the Scan button.
(PreScan finished appears under Status)
The scan runs, and, the program saves the RKreport.txt, on the pen drive.
When done, click the Command Prompt window, type exit, and press: Enter
Back at the System Recovery Options, press: Shutdown
Remove the USB pen drive.
Plug the USB pen drive in the working computer, and please provide the RKreport.txt in your reply.
Please do not take action to remove anything!!!!!
Ok, it was at 51% 7 hours ago, and now only at 54%, 7 hours later it's gone up 2%. I cannot wait for this to finish. At this rate, it's going to take DAYS. THis is insane. I've done a lot of reading in 7 hours, and everyone is saying it's ok stop a chk dsk at stage 4 or 5, but never to stop at stages 1-3. 4-5 are only moving user files. I cannot wait for this to finish. At this rate, it will be 17 more hours for stage 4 to finish, and then stage 5 is a read over of stage 4. Do you agree on this?
Last edited by Jackie1; 30 Apr 2014 at 19:36.
This is a 1.5 tb harddrive with about 15 gb free.
Per Microsoft..
During stage 4 which I'm on, Chkdsk verifies all clusters in use; during stage 5, Chkdsk verifies unused clusters.
The percent complete that Chkdsk displays during stage 4 is based on the percent of used clusters that are checked. The percent complete that Chkdsk displays during stage 5 is the percent of unused clusters that are checked. Used clusters typically take longer to check than unused clusters, so stage 4 lasts longer than stage 5 on a volume with equal amounts of used and unused clusters. For a volume with mostly unused clusters, stage 5 takes longer than stage 4.
So, since I only have 15gb free, stage 5 will go quicker than stage 4?
