Problem logging in Windows

[Helpito]

Hi:

 

I hope you can help me.

 

First that all, I’m running Windows Vista 64 bit.

The problem I’ve is that I can’t log in Windows. Just before I should see my different accounts icons, my computer gets freeze. In fact, it’s not the first time it happens, but all the previous occasions, I logged in safe mode and restore my system to a created restore point and all worked.

But this time, logging in safe mode with networking (from there I’m writing) and trying to restore system, it tells me that: “No restore points have been created…”. So, for some reason the computer has erased all my restores points. When I try to create another one, at System properties windows, the tag System Protection doesn’t appear. I don’t know if maybe it’s because I’m in safe mode but anyways the fact is that I can’t restore my system.

So, I’m trying to restore my startup for first time but when I reboot, my only 3 options are those of same mode, there is not any option about restore startup. I booted from my System Recovery Disc (who came with the laptop) and after choosing the language, I only get 2 options: Delete all files in the computer and install Windows from zero and Reinstall windows putting my files in c:\backup but it says that it’s probably I will need to reinstall all my softwares. So, in brief, there isn’t a restore startup option.

 

Thank you very much for any kind of help.

 

Ari

[RandyL]

I don't know what the cause is and it may be hard to determine or correct at this point. The time to figure it out was when you could still get into Windows. Instead you kept working around the issue.

 

However we are where we are now. It could be hardware related like a failing drive with a corrupted OS or a different hardware issue.

 

Possibly it could be malware.

 

When you use F8 to get to the boot options try "Repair my computer" or "Last known good configuration".

 

If you don't see Restore points try ticking the box that says show older restore points or restore points older then five days. I forget what the exact option is in Vista.

 

If any of these work then it's time to find out what is causing this to keep happening.

 

If they don't work then it might be worth a try to scan for malware in safemode with a good detection program. Try the options to get into Windows first.

[Helpito]

Hi Randy:

 

I don't think is a malware because I've installed Ad-Adware (Lavasoft) and Malwarebytes Anti-Malware.

 

When I use F8 I only get 3 options of same mode (safe mode, safe mode with networking and safe mode with command prompt). NOTHING MORE, nothing about repair or something like that.

 

Thanks!!!

[RandyL]

This is not normal. You are missing a lot of options in the Advanced Startup.

 

try ticking the box that says show older restore points

Have you tried this?

 

I take it you never made the startup repair disks. With the latest service packs you would have had the option.

 

msconfig may be an option to try to deselect startup items but something is just not right here.

[Helpito]

Randy:

 

Well, the news are that now I'm logged normally .....

I followed these steps: http://support.microsoft.com/kb/929135

My services are all ok. About my startups, I enabled all EXCEPT 4 that were suspicious at once, manufacture unkown and one of these files it's named: winlogon.exe with a file name full of letters and numbers.

 

So, one of these startups was causing the problem, now they are disabled.

 

Do you recommend me something now?

Maybe doing a startup repair disk? I don't know how to do it, I'm using Windows Vista Sp2. I think I did it when I used Windows XP but in start-programs-acccesories-system tools I don't find any option ......

 

Thanks a lot.

[Plastic Nev]

Hi, if you can post all the full details of those 4 items you have disabled, we may help to find which one is the problem one.

 

I don't have Vista, so it may be different to what I have in Windows7 for making a repair disk, but have a look and see any way.

 

open control panel and then select "System and Security"

Next is "Backup and Restore"

When that page opens, on the left hand side column, see if there is an option to "Create a System Repair Disc"

 

You will need a DVD disk to put in the drawer and just follow the instructions.

 

Nev.

[RandyL]

It seems that using selective startup in msconfig disabled the offending entry. Now I'm wondering if you might have malware. I'll ask the security guys what they think.

 

By all means make that repair disk as Nev said. Thanks Nev.

[Starbuck]

Hi Helpito

 

Let's see if we can get a clearer picture of what's going on here.

 

• Download OTL to your desktop.
  If using Firefox ..right click on the link and select 'Save Link/Target As'.
   
  if you have problems, try this download link:
  OTL
  
• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
  
• When the window appears, underneath Output at the top change it to Minimal Output.
  
• Check the boxes beside LOP Check and Purity Check

.

 

.

http://img.photobucket.com/albums/v708/starbuck50/new/Otllatest.png

 

Now copy the lines in bold below.

 

netsvcs

msconfig

%SYSTEMDRIVE%\*.*

%systemroot%\system32\Spool\prtprocs\w32x86\*.dll

%systemroot%\*. /mp /s

%systemroot%\system32\*.dll /lockedfiles

%systemroot%\Tasks\*.job /lockedfiles

%systemroot%\system32\drivers\*.sys /lockedfiles

%systemroot%\system32\*.exe /lockedfiles

%systemroot%\System32\config\*.sav

%PROGRAMFILES%\*

%USERPROFILE%\..|smtmp;true;true;true /FP

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU

hklm\software\clients\startmenuinternet|command /rs

hklm\software\clients\startmenuinternet|command /64 /rs

CREATERESTOREPOINT

 

• right click in the Custom Scans/Fixes window (under the blue bar) and choose Paste.
   
  http://img.photobucket.com/albums/v708/starbuck50/new%20forum/scan-fix.png
  .
  
• Click the Run Scan button.
   
  http://img.photobucket.com/albums/v708/starbuck50/runscan.png
   
  
• Do not change any settings unless otherwise told to do so. The scan wont take long.
  
• When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
  
• Please copy (Edit->Select All, Edit->Copy) the contents of both these files, one at a time, and post them with your next reply.

 

Thanks