Windows 10: EMERGENCY - Boot Loop After Win Update

Page 5 of 8 FirstFirst ... 34567 ... LastLast

  1. Posts : 20,139
    windows 10 professional version 1607 build 14393.969 64 bit
       21 May 2018 #41

    There were problems with the drive file system.
    There were problems with the operating system.

    1) In the prior post it appeared that Windows 10586 was used.
    What happened that 10586 or Windows 1511 was used?
    2) Please list all of the steps used for Macrium from creating a flash drive to fixing the boot. Include restoration.
    3) What is happening with iorbit? How frequently is it used? What parts of the software are used? What kind of subscription?
    4) What antivirus products are in use (always on and manual)?
    5) Which antivirus products have been used in the past 6 months (always on and manual)?
    6) What is the malware history over the past 6 months? Were there any infections?
    7) Create a brand new bootable Windows 10 iso:
    Download Windows 10
    8) Run HD Tune:
    http://www.hdtune.com/
    Post images for the test results on these tabs:
    a) Health (SMART)
    b) Benchmark
    c) Full error scan
    The full error scan can be run overnight as it may take several hours.
    After evaluation of the drive steps will be made to fix the scannow detected corruption problems.
    9) Open administrative command prompt and type or copy and paste:
    chkdsk /x /f /r /v C:
    This may take many hours so plan to run overnight

    C:\Windows\system32>chkdsk /x /f /r /v
    The type of the file system is NTFS.
    Cannot lock current drive.


    Chkdsk cannot run because the volume is in use by another
    process. Would you like to schedule this volume to be
    checked the next time the system restarts? (Y/N)

    Type: Y
    reboot


    10) Use the information in this link to find the chkdsk report in the event viewer. Copy and paste > notepad > post a one drive or drop box share link into the thread


    Code:
    Event[575]:  Log Name: System  Source: volmgr  Date: 2018-05-20T02:51:47.956  Event ID: 46  Task: N/A  Level: Error  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: DESKTOP-CS2L7VM  Description: Crash dump initialization failed!
    Code:
    Event[578]:  Log Name: System  Source: Microsoft-Windows-Kernel-PnP  Date: 2018-05-20T02:51:48.222  Event ID: 219  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: DESKTOP-CS2L7VM  Description: The driver \Driver\NVHDA failed to load for the device HDAUDIO\FUNC_01&VEN_10DE&DEV_0084&SUBSYS_14623283&REV_1001\5&2316c71d&0&0001.
    Code:
    Event[579]:  Log Name: System  Source: Microsoft-Windows-Kernel-PnP  Date: 2018-05-20T02:51:48.456  Event ID: 219  Task: N/A  Level: Warning  Opcode: Info  Keyword: N/A  User: S-1-5-18  User Name: NT AUTHORITY\SYSTEM  Computer: DESKTOP-CS2L7VM  Description: The driver \Driver\IntcAzAudAddService failed to load for the device HDAUDIO\FUNC_01&VEN_10EC&DEV_0887&SUBSYS_1462F994&REV_1003\4&2bb929&0&0001.
    Code:
    Event[2436]:  Log Name: System  Source: Disk  Date: 2018-05-21T00:08:00.442  Event ID: 51  Task: N/A  Level: Warning  Opcode: N/A  Keyword: Classic  User: N/A  User Name: N/A  Computer: DESKTOP-CS2L7VM  Description: An error was detected on device \Device\Harddisk1\DR2 during a paging operation.
    Code:
    avast! SecureLine TAP Adapter v3    ROOT\NET\0000    This device is disabled.
    Code:
    Standard PS/2 Keyboard    ACPI\PNP0303\0    This device is not present, is not working properly, or does not have all its drivers installed.
    Code:
    Microsoft PS/2 Mouse    ACPI\PNP0F03\0    This device is not present, is not working properly, or does not have all its drivers installed.
    Code:
    CHKDSK is verifying Usn Journal...  35755200 USN bytes processed.                                                           
    
    
    
    
    Usn Journal verification completed.
    Correcting errors in the master file table's (MFT) BITMAP attribute.
    
    
    Windows has made corrections to the file system.
    No further action is required.
    
    
     467865018 KB total disk space.
     334797952 KB in 407458 files.
        291148 KB in 85133 indexes.
             0 KB in bad sectors.
        623086 KB in use by the system.
         65536 KB occupied by the log file.
     132152832 KB available on disk.
    
    
          4096 bytes in each allocation unit.
     116966254 total allocation units on disk.
      33038208 allocation units available on disk.
    
    
    Internal Info:
    00 ae 07 00 f8 83 07 00 c8 e3 0e 00 00 00 00 00  ................
    3c 05 00 00 a5 00 00 00 00 00 00 00 00 00 00 00  <...............
    
    
    Windows has finished checking your disk.
    Please wait while your computer restarts.
    Corrupt boot manager on 5/17:
    Code:
    Event[1593]:  Log Name: Application
      Source: Windows Error Reporting
      Date: 2018-05-17T02:51:30.973
      Event ID: 1001
      Task: N/A
      Level: Information
      Opcode: Info
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: DESKTOP-CS2L7VM
      Description: 
    Fault bucket , type 0
    Event Name: StartupRepairOnline
    Response: Not available
    Cab Id: 0
    
    
    Problem signature:
    P1: 10.0.17134.1
    P2: 10.0.17134.1
    P3: MSI
    P4: 0
    P5: 0
    P6: BadShutdown
    P7: 1
    P8: CorruptBootManager
    P9: 
    P10:
    Code:
    Version=1
    EventType=LiveKernelEvent
    EventTime=131713433796716090
    ReportType=4
    Consent=1
    ReportStatus=2049
    ReportIdentifier=b614c753-3c8f-458a-bcc8-83c54f4da4b7
    Wow64Host=34404
    NsAppName=LiveKernelEvent
    OriginalFilename=WerFault.exe
    AppSessionGuid=00000000-0000-0000-0000-000000000000
    BootId=1162297680
    IsFatal=4294967295
    Response.type=4
    Sig[0].Name=Code
    Sig[0].Value=ab
    
    Ns[0].Name=stopcodeNs[0].Value=000000AB
    Ns[1].Name=p1
    Ns[1].Value=0000000000000002
    Ns[2].Name=p2
    Ns[2].Value=0000000000000040
    Ns[3].Name=p3
    Ns[3].Value=0000000000000000
    Ns[4].Name=p4
    Ns[4].Value=0000000000000002
    FriendlyEventName=Hardware error
    ConsentKey=LiveKernelEvent
    AppName=Windows
    AppPath=C:\Windows\System32\WerFault.exe
    ReportDescription=A problem with your hardware caused Windows to stop working correctly.
    Last edited by zbook; 21 May 2018 at 01:13.
      My ComputerSystem Spec

  2.    21 May 2018 #42

    Hi zbook,

    I did as you asked. Below are my answers and the results:


    1) What happened that 10586 or Windows 1511 was used?
    - I don’t understand your question.

    2) Please list all of the steps used for Macrium from creating a flash drive to fixing the boot. Include restoration.
    - The same steps that were used from the link you provided.

    3) What is happening with iorbit? How frequently is it used? What parts of the software are used? What kind of subscription?
    - I don’t know what iorbit is.

    4) What antivirus products are in use (always on and manual)?
    - Avast.. always on.

    5) Which antivirus products have been used in the past 6 months (always on and manual)?
    - Avast free edition.

    6) What is the malware history over the past 6 months? Were there any infections?
    - There were some infections but very few.

    7) Create a brand new bootable Windows 10 iso: Download Windows 10
    - Why are you asking me to do this when I already have one and still use?

    8) Run HD Tune:
    http://www.hdtune.com/
    Post images for the test results on these tabs:
    a) Health (SMART)
    b) Benchmark
    c) Full error scan

    - Below are images of the results from hdtune:

    Click image for larger version. 

Name:	benchmark.png 
Views:	47 
Size:	59.6 KB 
ID:	189624Click image for larger version. 

Name:	full error.png 
Views:	49 
Size:	27.9 KB 
ID:	189625Click image for larger version. 

Name:	health.png 
Views:	48 
Size:	60.3 KB 
ID:	189626


    9) Open administrative command prompt and type or copy and paste:
    chkdsk /x /f /r/ v C:
    - It gives an error stating: “Invalid parameter- / ”
      My ComputerSystem Spec


  3. Posts : 20,139
    windows 10 professional version 1607 build 14393.969 64 bit
       21 May 2018 #43

    1) See the top of post #36 within the image is displayed 10586 or Windows 1511. What was happening that this version of Windows was used.
    2) What happened with Ubuntu? What steps were used and how come you switched to Macrium.
    3) For viewers of the thread please post the step by step methods that you used for Macrium.
    4) For Macrium there were post macrium problems with the drive file system and the operating system. So please again list each step that you used without reference to a link. This may be useful for viewers too.
    5) It appeared that in post #36 that an old Windows 10 iso was used: 10586 Windows 1511; so that was the reason to create a brand new Windows 10 iso.
    6) For the chkdsk command make sure the spacing is correct. It appears to be a typo. There needs to be a space after r and before /
    chkdsk /x /f /r /v C: instead of ckdsk /x /f /r/ v C:
    7) Uninstall Malwarebytes
    8) Then run the Malwarebytes clean up utility:
    https://support.malwarebytes.com/docs/DOC-1112
    9) Uninstall Avast
    Avast Uninstall Utility | Download aswClear for Avast Removal
    Using the Uninstall Utility for Avast Antivirus | Official Avast Support
    10) Turn on Windows defender
    11) Open file explorer > this PC > C: > in the right upper corner search for iorbit > uninstall iorbit
    12) Uninstall iorbit remnants in the registry: T-Tools BitRemover
    13) Run ESET: Free Virus Scan | Online Virus Scan from ESET ESET
    Post an image of the results into the thread
    14) Run SUERANTISPYWARE: SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
    Post an image of the results into the thread
    15) Pending the above steps, plan to fix the operating system and troubleshoot BSOD.
    Last edited by zbook; 21 May 2018 at 03:09.
      My ComputerSystem Spec

  4.    22 May 2018 #44

    Hi zbook,

    I need some time before I do your next steps. Appreciate your help so far. I'll get on this soon as I finish my projects at work.
      My ComputerSystem Spec

  5.    23 May 2018 #45

    Hi zbook,

    Heres my answers to your questions and results of the tests you requested of me to perform....


    1) See the top of post #36 within the image is displayed 10586 or Windows 1511. What was happening that this version of Windows was used.
    - I now have been updated to the current 1803 automatically.

    2), 3) & 4) What happened with Ubuntu? What steps were used and how come you switched to Macrium.
    - Decided not to use ubuntu since I got my PC to boot with the help of Macrium. From what I remember, I booted from the Macrium disc and chose the option to repair boot.

    5) It appeared that in post #36 that an old Windows 10 iso was used: 10586 Windows 1511; so that was the reason to create a brand new Windows 10 iso.
    - As Iíve said in the 1st question, I now have been updated to the recent 1803 version.

    6) For the chkdsk command make sure the spacing is correct. It appears to be a typo. There needs to be a space after r and before /
    chkdsk /x /f /r /v C: instead of ckdsk /x /f /r/ v C:
    - I ran it.

    7) & 8) Uninstall Malwarebytes
    8) Then run the Malwarebytes clean up utility:
    - I uninstalled it.

    9) Uninstall Avast
    Avast Uninstall Utility | Download aswClear for Avast Removal
    Using the Uninstall Utility for Avast Antivirus | Official Avast Support.
    - Uninstalled the software with the programs you mentioned.

    10) Turn on Windows defender.
    - Its turned on.

    11) Open file explorer > this PC > C: > in the right upper corner search for iorbit > uninstall iorbit.
    - I canít find iorbit in C:Ö many months ago I had uninstalled it.

    12) Uninstall iorbit remnants in the registry: T-Tools BitRemover.
    - 1 registry key was removed using BitRemover. I found an iorbit folder in Program Files (x86) and I manually removed it.

    13) Run ESET: Free Virus Scan | Online Virus Scan from ESET ESET
    Post an image of the results into the thread.
    - Here's an image of the results:

    Click image for larger version. 

Name:	online scanner.png 
Views:	38 
Size:	64.4 KB 
ID:	189950

    14) Run SUERANTISPYWARE: SUPERAntiSpyware | Remove Malware | Remove Spyware - AntiMalware, AntiSpyware, AntiAdware!
    Post an image of the results into the thread
    - Here's an image of the results:

    Click image for larger version. 

Name:	3.png 
Views:	38 
Size:	70.5 KB 
ID:	189951
      My ComputerSystem Spec


  6. Posts : 20,139
    windows 10 professional version 1607 build 14393.969 64 bit
       23 May 2018 #46

    1) Please post links for text reports to each ESET and Superantspyware.
    2) Find the chkdsk report in the event viewer > copy and paste > notepad > post a share link into the thread
    Read Chkdsk Log in Event Viewer in Windows 10 | Windows 10 Tutorials
    3) Run the BETA log collector > post a new zip into the thread
    https://www.tenforums.com/attachment...-v2-beta10.zip
    Last edited by zbook; 23 May 2018 at 20:47.
      My ComputerSystem Spec

  7.    24 May 2018 #47

    Hi zbook,

    1) Please post links for text reports to each ESET and Superantspyware.
    - I ran Superantspyware and ESET. But after having not detected any spyware they did not provide a text report option. I apologize for that.. I didnt know an option for text report existed only when it detected virus.

    2) Find the chkdsk report in the event viewer > copy and paste > notepad > post a share link into the thread
    Read Chkdsk Log in Event Viewer in Windows 10 | Windows 10 Tutorials
    - Here are the files:
    https://drive.google.com/open?id=1D0...XSfL4JO75P-6Ih
    https://drive.google.com/open?id=10l...rUd6MzTIWvzWwF

    3) Run the BETA log collector > post a new zip into the thread
    https://www.tenforums.com/attachment...-v2-beta10.zip
    - Heres the file:
    https://drive.google.com/open?id=1HV...cLSKxCRxZLUOFc

    zbook, you asked me to uninstall malwarebytes and avast free edition. Do you recommend that I reinstall them or do you recommend I install av programs that are better?

    Also, at certain times my video game gets choppy. And my mouse's left button doesnt work as it should, it doesnt click when it should, as if it didn't click. This never happened before my PC had these issues. What do you recommend?
      My ComputerSystem Spec


  8. Posts : 20,139
    windows 10 professional version 1607 build 14393.969 64 bit
       24 May 2018 #48

    1) The computer has software to bypass the activation of iorbit and malwarebytes.
    This software needs to be uninstalled.

    2) The chkdsk looks good.
    There were no unfixed or recurrent problems.

    3) For the malware, without the text reports, consider opening a thread in this forum for a malware check:
    AntiVirus, Firewalls and System Security - Windows 10 Forums

    4) Were all of the found malware quarantined then uninstalled?

    5) Run the ESET uninstall tool:
    Uninstall ESET manually using the ESET uninstaller toolESET Knowledgebase

    6) Uninstall Superantispyware
    Run the superantispyware uninstall assistant:
    SUPERAntiSpyware FAQ - How do I uninstall SUPERAntiSpyware?

    7) In the left lower corner search type control > open control panel > large or small icons > troubleshooting > on the left pane click view all > run these troubleshooters:
    a) hardware and devices
    b) keyboard
    c) playing audio
    d) recording audio
    e) video playback
    For each troubleshooter right click > left click run as administrator > click on advanced > un-check apply repairs automatically
    After each scan has ran > click on view detailed information > use the microsoft snipping tool to make an image of the problem(s) fixed or the problem(s) that was/were not able to be fixed > post a link into the thread
    Apply the fixes and reboot as necessary.
    For audio > open enhancements > click advanced tab > check multiple sounds
    Run any other troubleshooter that may be related to problems on the computer

    8) Uninstall Virtual Box > reinstall to refresh drivers

    9) Uninstall ElRawDisk or RawDisk or iolo Technologies by EldoS (/n software - A Bright Future for EldoS Products) > reinstall if you use the software to refresh drivers




    Code:
    Event[3815]:  Log Name: System
      Source: Service Control Manager
      Date: 2018-05-24T02:48:46.267
      Event ID: 7000
      Task: N/A
      Level: Error
      Opcode: N/A
      Keyword: Classic
      User: N/A
      User Name: N/A
      Computer: DESKTOP-CS2L7VM
      Description: 
    The eapihdrv service failed to start due to the following error: 
    This driver has been blocked from loading
    Code:
    Name:    IntcAzAudAddServiceDisplay Name:    Service for Realtek HD Audio (WDM)Filename:    RTKVHDA.sys
    Code:
    Event[3449]:  Log Name: System
      Source: Microsoft-Windows-Kernel-PnP
      Date: 2018-05-23T16:25:44.166
      Event ID: 219
      Task: N/A
      Level: Warning
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: DESKTOP-CS2L7VM
      Description: 
    The driver \Driver\IntcAzAudAddService failed to load for the device HDAUDIO\FUNC_01&VEN_10EC&DEV_0887&SUBSYS_1462F994&REV_1003\4&2bb929&0&0001.
    Code:
    Event[3446]:  Log Name: System
      Source: Microsoft-Windows-Kernel-PnP
      Date: 2018-05-23T16:25:43.947
      Event ID: 219
      Task: N/A
      Level: Warning
      Opcode: Info
      Keyword: N/A
      User: S-1-5-18
      User Name: NT AUTHORITY\SYSTEM
      Computer: DESKTOP-CS2L7VM
      Description: 
    The driver \Driver\NVHDA failed to load for the device HDAUDIO\FUNC_01&VEN_10DE&DEV_0084&SUBSYS_14623283&REV_1001\5&2316c71d&0&0001.
    Code:
    nvhda32.sysnVidia HDMI Audio Device (nForce chipset driver)http://www.nvidia.com/Download/index.aspx
    Last edited by zbook; 24 May 2018 at 03:59.
      My ComputerSystem Spec

  9.    26 May 2018 #49

    Hi zbook,

    1) The computer has software to bypass the activation of iorbit and malwarebytes.
    This software needs to be uninstalled.
    - Where do I find these programs?

    3) For the malware, without the text reports, consider opening a thread in this forum for a malware check:
    AntiVirus, Firewalls and System Security - Windows 10 Forums.
    - Someone suggested to run RKILL, AdwCleaner and Malwarebytes. An RKILL report is attached. When I ran RKILL it let me know that Windows Defender was disabled. I reenabled it and ran a virus scan. In the middle of the scan Win Defender stopped suddenly. So I ran it again and it found nothing.

    Also, I ran AdwCleaner and it found some threats. Attached is a report.

    Rkill.txt
    AdwCleaner report - 5-26-2018.txt

    4) Were all of the found malware quarantined then uninstalled?
    - I believe so.

    5) Run the ESET uninstall tool:
    Uninstall ESET manually using the ESET uninstaller toolESET Knowledgebase
    - It detected these threats which I deleted:

    C:\$Recycle.Bin\S-1-5-21-618580453-2480567015-3997358870-1001\$RVM4KFB\Keygen\keygen.eXe a variant of MSIL/HackTool.Crack.Y potentially unsafe application

    C:\Users\x\Documents\KMSAuto Net 2015 1.4.6 + KMSAuto Lite 1.2.7\KMSAuto Net 2015 1.4.6 Multilingual Portable [SadeemPC].zip a variant of MSIL/HackKMS.I potentially unsafe application
    ESET 5-26-2018.txt

    But Iím a little confused about one option in ESET. It asks me to ďremove files from quarantine.Ē See image below. I left it blank so hope this was the right decision.

    Click image for larger version. 

Name:	eset mess.png 
Views:	22 
Size:	87.4 KB 
ID:	190246

    6) Uninstall Superantispyware
    Run the SUPERAntiSpyware uninstall assistant.
    - Didnt find any threats. And its uninstalled.

    Click image for larger version. 

Name:	superantispyware results.png 
Views:	22 
Size:	49.5 KB 
ID:	190249

    7) In the left lower corner search type control > open control panel > large or small icons > troubleshooting > on the left pane click view all > run these troubleshooters:
    a) hardware and devices
    b) keyboard
    c) playing audio
    d) recording audio
    e) video playback
    For each troubleshooter right click > left click run as administrator > click on advanced > un-check apply repairs automatically
    After each scan has ran > click on view detailed information > use the microsoft snipping tool to make an image of the problem(s) fixed or the problem(s) that was/were not able to be fixed > post a link into the thread
    Apply the fixes and reboot as necessary.
    For audio > open enhancements > click advanced tab > check multiple sounds
    Run any other troubleshooter that may be related to problems on the computer.
    - I ran these but were met with unexpected results:

    Click image for larger version. 

Name:	audio - no multiple sounds.png 
Views:	22 
Size:	11.5 KB 
ID:	190250Click image for larger version. 

Name:	keyboard error.png 
Views:	22 
Size:	24.6 KB 
ID:	190252Click image for larger version. 

Name:	hardware - error.png 
Views:	22 
Size:	17.1 KB 
ID:	190251Click image for larger version. 

Name:	playing audio.png 
Views:	22 
Size:	20.3 KB 
ID:	190253Click image for larger version. 

Name:	recording audio.png 
Views:	22 
Size:	13.7 KB 
ID:	190254Click image for larger version. 

Name:	video playback.png 
Views:	22 
Size:	9.8 KB 
ID:	190255

    8) Uninstall Virtual Box > reinstall to refresh drivers
    - Ok, uninstalled VB. Will be reinstalling it and its drivers today.

    9) Uninstall ElRawDisk or RawDisk or iolo Technologies by EldoS (/n software - A Bright Future for EldoS Products) > reinstall if you use the software to refresh drivers
    - I couldnt find any programs by: EldoS Corporation or iolo Technologies. What do you advise?


    --- Let me know what are the next steps.. Thanks.
      My ComputerSystem Spec


  10. Posts : 20,139
    windows 10 professional version 1607 build 14393.969 64 bit
       26 May 2018 #50

    See rule #4
    Forum Rules - Windows 10 Help Forums
    To comply with the rules the software used to bypass the activation of Malwarebytes and Iorbit needs to be removed.

    There are software tools that are used by the team in the antivirus forum.
    Please open a thread or transfer this thread into the forum:
    AntiVirus, Firewalls and System Security - Windows 10 Forums

    An option to consider is:
    a) Clean the drive to fix malware, and the computer environment (problems with mouse, piracy, problems displayed with troubleshooters, etc.
    b) Run scans on the transferred/ backed up files until clean
    c) Clean install Windows 10
    d) Restore files
      My ComputerSystem Spec


 
Page 5 of 8 FirstFirst ... 34567 ... LastLast

Related Threads
After a recent crash, my windows 10 does not load properly anymore and instead is stuck in an endless restart loop (system repairs etc does not work). I have also formatted one of my hard drives and did a clean install from a usb and the same thing...
Emergency Windows Meltdown patch locks some AMD PCs into endless loop - TechRepublic
Hi, greetings all from Argentina. I upgraded my laptop to the new Windows build, and now I can't boot to Windows, it keeps restarting when the Windows logo is displayed. I tried to repair the boot from the USB recovery prompt with bootrec /fixboot...
I tried F12 when booting up PC and got a screen called Boot Menu. C drive has a plus sign beside it. I used the arrow to go down to CD rom and hit enter. When I tried to boot from the CD disk, it still booted into Windows, and when I used F12...
Windows AU Update causing boot loop in Windows Updates and Activation
Hi All, Having an issue updating a laptop. this is a laptop loaded with a custom image which i deploy via SCCM. The image is currently on build 1511, so the update im doing is from 1511 to 1607. The way im updating, is using the Windows 10...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 18:15.
Find Us