Solved Can't execute programs after login but after safemode reboot is OK?

[FrancisChung]

I'm having a really bizarre problem where I've been trying to solve for over a week without much success.

Basically when I login to my compute, I can't execute any programs and I've noticed none of my startup programs are running.

But when I go into Safe mode, then reboot normally and login again everything seems to work as normal?
Could it be a virus reactivating itself or Windows trying to install something in stealth that is messing things up? Or something more innocent at work here?


To give you some background first: I haven't used my computer in over a year because I was travelling a lot. But the computer was running efficiently before and when I turned it on again it was working fine.
I've been using Windows since 3.1 so I consider myself above average when it comes to dealing with Windows issues.

I was using Kaspersky Pure before but it obviously expired so I installed Kaspersky Internet Security with a new subscription code.

I have not run any Windows Update yet on the machine as I don't want add more variables to the situation whilst I'm trying to solve this.

The things I've tried (and failed)

Restore from older disk image backups.
Run HW diagnostics Memory, HDD
Trawled through the Registry for odd entries
Scanned the computer multiple times for virus, rootkits
Ran Gmer
Cleaned up registry via CCleaner
Ran Chkdsk
Ran Autoruns and did a spring clean

I'm convinced it's a s/w issue because it runs normally when I do a normal boot after a Safemode login/exit.

What could it be doing during this normal boot and the next one that is causing this issue?

The only thing left for me to try is
1) Restore File associations to their default (Doubt this fixes anything)
2) Uninstall Kaspersky (I've never had any problems with them all these years I've been using them)
3) Restore to a really really old backup
4) Reinstall Windows.

Any suggestions other than the 4 would be greatly appreciated!

 

[mitchell65]

Hi and welcome to the Forum.
Try this: After Safe Mode exit then normal boot. If PC is running OK then create another user and give it Admin rights and see if that works without going into Safe Mode first!

 

[FrancisChung]

Thanks for the quick response, mitchell65!

Update :
1) The file associate fix didn't work (but I did run in Normal Boot)
2) Creating a new admin user didn't work either. After creating the user in normal boot and tried to login with the new user but it hangs on the Welcome screen after password entry.

 

[mitchell65]

Try running sfc /scannow at least three times! Then run free Malwarebytes

 

[FrancisChung]

I can't seem to run sfc /scannow even though the Trusted Installer service is running.

Malwarebytes did flag a "virus" but it was the Opera Browser Password Tool which I had installed a while back to retrieve some passwords. I've never had any issues with it before but I removed it nonetheless.

I had to reboot the program after the removal of the Tool, and when I login I get a black screen LOL
But I can run process explorer to kill the existing Explorer and start a new one and it logs in.

Unfortunately I still have the same problem.

 

[mitchell65]

Did you try to run sfc /scannow from an elevated command prompt?


http://www.sevenforums.com/tutorials/783-elevated-command-prompt.html

 

[FrancisChung]

Yes I double checked to see it was an elevated command prompt (Context Menu -> Run As Administrator).
Still the same service can't start error.

Not sure if it's related but in the normal boot I couldn't see the CBS logs with notepad++, but in safemode it automatically elevated it to show the logs.

I will post the relevant section of the log if you think it's helpful?

 

[mitchell65]

You might want to look at this
Just had a thought. As your PC had been off for such a long time I wonder if all your services are now disabled? Try typing "services" in the start search box then click services and see if they are all disabled!

 

[FrancisChung]

My services are as I left it.

I might try deleting the reboot.xml in the winsxs folder and see if that makes a difference as suggested by a comment in this article.

Windows Resource Protection could not start the repair service

 

[Layback Bear]

Just a thought because your computer hasn't been used in a year.

Check your bios and Windows 7 for correct time and date and time zone.

These tutorials by Brink might be helpful.

http://www.sevenforums.com/tutorials/1538-sfc-scannow-command-system-file-checker.html

And these at the bottom of that page.

How to Run the System File Checker in a Command Prompt at Boot
How to Do a System Restore in Windows 7
How to Do a Repair Install to Fix Windows 7
How to Run Disk Check in Windows 7
How to See Windows 7 Reliability and Problem History with Reliability Monitor
How to Extract Files from the Windows 7 Installation DVD
How to Troubleshoot a Problem by Performing a Clean Startup in Windows 7 or Vista

I see you use Ccleaner.
Open Ccleaner and then Tools and see if you have any Restore Points.

 

[FrancisChung]

I've decided to go back to a really old backup. The reboot.xml delete had no effect and I doubt it is Kaspersky that is causing this.

If I can't run SFC or if it's still showing the same symptoms, then I'll have to rebuild my PC.

If this happens, is anyone aware of any programs that will help me quickly reinstall and reconfig the applications I have to install?

 

[FrancisChung]

So the old backup worked. Everything was going fine until I installed Kaspersky Internet Security 2016 over Kaspersky Pure (Straight install, not uninstall / new install as I did previously).

:devil::devil:

At least I know the root cause of my evils lol.

I think I will go back to another backup ... install all the Windows Updates first .... then try installing Kaspersky.

Incidentally, I was very cautious and made multiple System Restores on the way.
When I tried to restore one, it complained about errors in C drive and I should perform a check.
When I tried to schedule a check and reboot, I could never get the PC to boot even in Safe Mode.

Is this a possible sign of H/W degradation or something else?

 

[FrancisChung]

Update : I've managed to get my PC in an updated state with all 110+ Windows Update installed.

I had to use a combination of WSUS Offline (Run as Administrator), SFC /scannow (Run in Powershell Command Prompt, not normal one) and SFCFIX (Run as Administrator).

Looks like all my problems were Kaspersky related which is a real shame.

I did try installing Kaspersky after all Updates were installed but it's still exhibiting the same issue.
I guess I'll have to find another security solution other than Kaspersky.

Again Thanks for all the people that responded. Much appreciated.

 

[Layback Bear]

Happy Days again, you found the problem.
Some people have very good luck with Kaspersky and some have no luck at all with Kaspersky.

Finding a anti virus program that you and your system likes can take a little time.

I use Microsoft Security Essentials and Malwarebytes Anti Malware Premium for my security.
They are easy to use and play well with each other and Windows 7.
On top of that they have kept my systems secure for years.

 

[FrancisChung]

Update : I had to restore my PC to a much earlier state as I belatedly found out 1 of the Windows Update killed my Bluray Driver and I wasn't able to figure out which of the 110+ updates was the culprit.

I struggled mightily to get Windows Update working again using the WSUS Offline , SFC /scannow and SFCFix method that I outlined below and worked for me previously. Aaaaargh!

I however found this article which eventually fixed my woes with Windows Update issue.

Windows 7 SP1 Windows Update stuck checking for updates - Super User

I tried them chronologically top to bottom but the one that worked for me was the Alternative fix (September 2016).
You mileage may potentially vary.

Hope this saves someone a ton of grief.