Hp Desktop Windows 7 Restarted Unexpectedly And Now Won't Start

Discussion in 'Software' started by dadhammer, Nov 11, 2016.

  1. dadhammer

    dadhammer Private First Class

    attached is the result of the first and only malewarebytes threat scan i was able to run.

    a few 'potentially unwanted programs' were identified

    i do not ever open internet explorer

    "
    Registry Keys: 3

    PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, , [617455687c1e73c3663946e335d08a76],

    PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, , [33a234891981d2649d02df4a788d02fe],

    PUP.Optional.ASK, HKU\S-1-5-21-2375802078-1423229213-3210898512-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2FA28606-DE77-4029-AF96-B231E3B8F827}, , [c70e497422780f277927092014f147b9],

    Registry Values: 3

    PUP.Optional.ASK, HKLM\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF, , [617455687c1e73c3663946e335d08a76]

    PUP.Optional.ASK, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF, , [33a234891981d2649d02df4a788d02fe]

    PUP.Optional.ASK, HKU\S-1-5-21-2375802078-1423229213-3210898512-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{2fa28606-de77-4029-af96-b231e3b8f827}|URL, http://search.ask.com/web?q={searchterms}&l=dis&o=HPDTDF, , [c70e497422780f277927092014f147b9]
     

    Attached Files:

  2. dadhammer

    dadhammer Private First Class


    Thanks for all of your attention.
    Still curious about the progressive failures of security, but i guess we've gone as far as we can together - which is much farther than I would have gotten on my own.

    Thank you very much for your help and time.
     
  3. dadhammer

    dadhammer Private First Class

    I wonder if there would be any sense in uninstalling the current security software and reinstalling the newest version via usb drive to run?

    I may give that a shot just to see what happens.
     
  4. satrow

    satrow Major Geek Extraordinaire

    If you suspect malware involvement, read the instructions in this Sticky and follow it, please. I can't give advice on detecting and cleaning malware (though I sometimes detect it in minidumps/BSOD collection data).



    EDIT: from the data in the minidump, it would be close to pointless uninstalling any 3rd party AV/Security software, there was none loaded at the time of the crash.
     
    dadhammer likes this.
  5. mdonah

    mdonah Major Geek Extraordinaire

    From all that I've read in this thread and the looks of things (I don't think you and satrow are going to be able to resolve this especially since the experts satrow alluded to are having difficulty themselves), I think you're going to have to do a clean install of Win 7 and Win 7 device drivers from HP for your particular machine. Make sure to back up all of your important data first.
     
    dadhammer likes this.
  6. dadhammer

    dadhammer Private First Class

    so weird that it said none was installed, as it has been for years, and exists within my system in all programs, system tray, and desktop


    thank you all, moving on to clean install
     
  7. mdonah

    mdonah Major Geek Extraordinaire

    The crash was occurring BEFORE the AV loaded so, it's not going to say any was installed.
     
    dadhammer and satrow like this.
  8. dadhammer

    dadhammer Private First Class

    Hi y'all.

    That does make sense. I was thinking that reinstalling would maybe discover something in Safe Mode though, where it IS showing to installed, but simply not working. Unfortunately though, these programs need and internet connection to install. :(

    Thanks for the links about what to do when suspecting malware. I really wanted to know whether, before going down that road, whether or not the progressive failing behaviors might have aroused your suspicions as well, given that we are only talking about a driver conflict or hardware failure.

    On that, I wonder if my problem might be indicated as a failing processor from what you see. It would be unfortunate to spend a lot of time starting from scratch on hardware that is broken. I assume it's not the case or you would have said that, but also thought it worth asking and ruminating over.
     
  9. dadhammer

    dadhammer Private First Class

    I found a drive big enough to accommodate back-ups of my media and documents on desktop and in the doc folder.

    A friend also suggested I should back-up the program files first. Do you agree with that?

    I am in the midst of some Standard Def video projects I'd hate to lose progress on any more than the time I've already lost to this issue.

    Also, how do I ensure that I save my browser bookmarks? Anything else you can advise me before I begin the reload process?
    Thanks
    d
     
  10. satrow

    satrow Major Geek Extraordinaire

    I'm not seeing signs of hardware failure. The CPU would be the least likely hardware to fail.

    No point in back up the Program Files, their installers, maybe. Backup your Application data folder, if you can, you might be able to patch some of your editing progress from there - but it really depends on where your software stores the data.

    Open your browser in Safe Mode, export the Bookmarks to html and save the html page.
     
  11. dadhammer

    dadhammer Private First Class

    Thanks. Will do.

    Something odd discovered, there is a user account on that machine I have no recollection of creating with a strange name.
    It was created on April 1, 2014! and it seems to have all permissions enabled on the properties>security tab

    eek
     
  12. satrow

    satrow Major Geek Extraordinaire

    The full user name of that account might help.
     
  13. dadhammer

    dadhammer Private First Class


    Just to be certain about terminology and procedures, where will I find the 'installers'?
     
  14. satrow

    satrow Major Geek Extraordinaire

    I'd guess that they would still be where they were downloaded to, if they aren't all on disc.
     
    dadhammer likes this.
  15. dadhammer

    dadhammer Private First Class

    understood, and done. thanks.
     
  16. dadhammer

    dadhammer Private First Class

    the user name was 'postgres'
     
  17. satrow

    satrow Major Geek Extraordinaire

    dadhammer likes this.
  18. dadhammer

    dadhammer Private First Class

  19. dadhammer

    dadhammer Private First Class

    Oh no.

    I found a sufficiently large drive to back-up everything, and then did a system recovery.
    Everything was going well until the third restart while updating windows, and the system got stuck while shutting down form an update.

    I clicked restart system again (it was prompting me to make a choice. Suddenly at start-up I find myself back at square one :(

    BSOD Startup Repair "Your computer was unable to start."
    'Startup repair is checking your system for problems..."

    No repairs accomplished. :(

    I have three restore points, all generated today. (Note that the clock time are three hours too early, as before]

    [date and time] [Description] [Type]
    11/17/2016 10:37:17 pm Windows Update Critical Update
    11/17/2016 10:06:22 pm Windows Update Critical Update
    11/17/2016 09:50:59pm Initial Restore Point Install

    attempting to restore the latest point now.
     
  20. dadhammer

    dadhammer Private First Class

    "System Restore did not complete successfully.
    Details: An unspecified error occurred during System Restore. (0x8000ffff)"

    I'm going to try the next available restore point.
    I'll also note that over the past ten years or so, starting with Windows 98, I have never seen a successful attempt to restore executed. Do they ever work?
     
  21. dadhammer

    dadhammer Private First Class

    Well that's strange.
    I selected the option provided to try another restore point, and the system restarted successfully.

    I will continue to work on the Windows Updates, but curious to know what you might make of this.
    Very sleepy, so I intend to knock-off until morning after running updates again.
     
  22. dadhammer

    dadhammer Private First Class

    Once I entered my user account, I got the following message:
    "System Restore completed successfully."

    My clock is now accurate again.
    Still haven't begun to reload my programs, fwiw.
     
  23. satrow

    satrow Major Geek Extraordinaire

    No repairs accomplished means it couldn't find anything within its remit to fix, might mean manual intervention is required, might have meant it was a false alarm. Could the time issue be part of this - maybe...

    Check with Reliability Reports (http://lifehacker.com/how-to-troubleshoot-windows-10-with-reliability-monitor-1745624446) over the next few days, 'something' might show up, if it's a Windows bug, you might get a 'fix' offered for it, eventually.
     
    dadhammer likes this.
  24. dadhammer

    dadhammer Private First Class


    Thanks for the explanation about restore behaviors.

    This Reliability Monitor is a feature I've never encountered. Reading through the link now.
    Looks promising. Thank you.


    I've been taking screenshots with a phone every step of the way during recovery to compile a visual record of the process as presented to me as well.

    Had a single 'fail' overnight, but I seem to have moved past it now.

    Still worries about the possibility that I have some failing hardware somewhere, but the only reason I'm even thinking that way has to do with those early messages, and the failure to restart once as reported in reply #69. Hopefully it's just an anomally?

    Seems I've gotten through the "Service Pack 1" installation successfully.

    The Windows Experience Index is rating me at a 1.0 right now. Will keep an eye on that. I know my video card drivers have yet to be dealt with.

    Also, when this has completed, I will be switching to a Windows 7 Professional Enterprise license. Currently updating the OEM Home Premium from the recovery partition.
     
  25. dadhammer

    dadhammer Private First Class

    Is there a maybe reason that I shouldn't accept the optional updates I've been presented with?
    The only one I've ever consciously avoided was the upgrade to Windows 10.
     
  26. satrow

    satrow Major Geek Extraordinaire

    = you need to install the drivers for the hardware from the HP Support/Downloads page for your exact model #.

    Optional downloads are usually safe but mostly irrelevant :)
     
    dadhammer likes this.
  27. dadhammer

    dadhammer Private First Class

    I just accepted five optional updates. During the prompted restart, I was prompted with a choice for Safe mode, but allowed it to Start Windows Normally. I am now watching a static "Starting Windows" screen with a static four color logo. Sounds as if the drive is spinning at high RPMs, or the fan is working overtime? Not sure. High pitched activity.

    These optionals are the ones I attempted prior to reporting in reply #69.

    IMG_1530[1].JPG
     
  28. dadhammer

    dadhammer Private First Class

    Previously I had been kicked into the Startup Repair utility at this point.
    Now just watching a frozen screen.
     

    Attached Files:

  29. satrow

    satrow Major Geek Extraordinaire

    I don't allow WU to install any hardware drivers.

    High fan noise during boot = BIOS is still in control of the fan speeds, Windows drivers have yet to kick in.

    Go do some garden maintenance or something, it might help your physical and mental wellbeing, staying close to a frozen screen won't :)
     
    dadhammer likes this.
  30. dadhammer

    dadhammer Private First Class

    30 minutes... still frozen. No choice but to power down? Seems so.
     
  31. dadhammer

    dadhammer Private First Class

    interesting. got it.
     
  32. dadhammer

    dadhammer Private First Class

    When powering back up, I was kicked back into the Startup Repair tool.
    So:
    - previously we discussed the possibility of hardware failure (?) (#3, #44) , and
    - and the .dmp seemed to implicate an AMD processor (#50).

    After performing a recovery, I have had two instances of the OS being unable to start after accepting an optional AMD update.

    Does this tell us anything?

    After the Startup Repair completes, I assume I'll have to try to reload a restore point.
    I'll check for a minicrash .dmp again then.
     
  33. dadhammer

    dadhammer Private First Class

    geez louise.
    the restore didn't work.
    same error as listed in reply #70

    upon reboot, I am back into the Startup Repair Utility. :(
     
  34. dadhammer

    dadhammer Private First Class

    clock times when windows has loaded successfully were correct.
    event log times for restore points are incorrect on the past two points.

    attempting to restore using the next available restore point, as pictured.

    IMG_1537[1].JPG
     
  35. dadhammer

    dadhammer Private First Class

    Just got off the line with my ISP. I have some evidence and reason to believe I've been the target of some shenanigans.
    Precautions have been taken to address that.

    I'm now running the restore attempt I previously mentioned. Will report back.
     
  36. dadhammer

    dadhammer Private First Class

  37. dadhammer

    dadhammer Private First Class

    despite the previous screenshot, the system has successfully restarted (???)

    Note: The system clock is now correct again.


    IMG_1539[1].JPG
     
  38. satrow

    satrow Major Geek Extraordinaire

    Sheesh, we're on #88 now and it's still confusing. Do you think you could put together a precis, it might help others who have a clue ;) jump in and try to help out?
     
    dadhammer likes this.
  39. dadhammer

    dadhammer Private First Class

    seems like a good idea

    just post it as a new reply, or start a new thread?
     
  40. satrow

    satrow Major Geek Extraordinaire

    New reply to begin with, should be one or two others still with us, a refresher won't do any of us any harm.
     
  41. dadhammer

    dadhammer Private First Class

    Precis / Summary:
    Windows Wouldn’t Start, and Post-System Recovery is still exhibiting problems.

    first post November 11, 2016


    - left browser open and went to lunch; returned to find the computer running the Microsoft Startup utility running; it was unsuccessful

    - The HP Recovery utility then launched

    - rebooted into safe mode (tried to boot into safe mode with networking, but it failed)

    - I ran a Malwarebytes scan which revealed a few PUPS (potentially unwanted programs) but no overt threats (the results can be seen in reply #51)

    - tried to run an Avast! system scan unsuccessfully, though it did allow me to schedule a boot-time scan, which failed to run upon reboot and Windows failed to start

    - from the HP Recovery utility I attempted to recover a Restore point with no success. Was surprised to find only one restore point in the list.

    - I booted again into Safe Mode Without Networking. Malewarebytes would no longer run, nor could I successfully launch it using it's Chameleon mode.

    - The system clock has been oscillating time zones while in Safe Mode. Only the hour hand is affected, and the time zone itself remains constant. Eldon suggested in Reply #18 that it may be related to a failing CMOS battery on the motherboard. Satrow opined in Reply #23 that since only the hour hand was affected, that this was unlikely. I haven't replaced the battery, nor have I checked it yet.

    - A Microsoft Problem Signature popped-up, and the info can be found in the first post

    - the 'files that help describe the problem' were problematic:
    I could find the .dmp file, but the sysdata.xml did not exist. Others here helped me to be sure no files were hidden.

    - reply# 10 reflects an indication of a conflict with an old Wacom device I no longer used, and the only restore point on the system was reported damaged.

    - using RevoUIninstaller, I uninstalled the Wacom software (reply #24), but Windows still wouldn’t start, and I had no remaining restore points to try.

    - I uploaded a .dmp file in reply #35. it was a kernel memory dump. (reply #42)

    - Satrow took a look at the .dmp file for me and reported on it in reply #44.

    - In reply #46 there is data about a "stop 0x124" generic error message. Satrow provided a troubleshooting link, but the steps require me to be connected to a network, which I was unable to do. The link he provided on the message confirmed his suspicion of an unknown hardware error.

    - There is further significant data from Satrow extracted from the .dmp (DEBUG) in Reply #50.
    This information is beyond my ability to interpret, but ultimately it was advised by Mdonah in Reply #55 at that I should begin a clean install after a data backup.

    This was also recommended in step seven in the link satrow provided in reply #46.

    Please note that this machine came preloaded with OEM software, and so I was unable to perform a clean install from a Windows 7 disk.

    - I did perform the system recovery though (see Reply #69)

    - I ran Windows update on the Critical updates offered successfully. When I tried to update the Optional updates, I found the original error, and windows would start again. Now however, I had multiple restore points to choose from. Please note that the clock times on the updates listed in Reply #69 exhibit the original error on the clock hour.

    - I restored successfully, and restarted windows. The clock was again accurate.

    - satrow provided a link in Reply #73 regarding Microsoft reliability reports, though I have not studied it fully or followed an course of action found there as of yet.

    - I continued then to update windows, and was able to get Service pack 1 installed in Reply
    #74.

    - the remaining updates were optional, and tried to run them again, followed by a return to the problem of Windows being unable to start. I tried one restore point which failed
    (Reply #77) and returned a frozen screen (Reply #80), and the next one which was successful put back to before the Service Pack I stage. Note that the restore points listed in Reply #84 have the recurring clock problem

    - while that was happening, satrow offered the advice not to accept hardware driver updates from Windows Update (Reply#79).

    - I have now been able to reinstall the Service Pack 1 update.

    - sidenote: my router/modem has been repeatedly failing, yesterday with my ISPs guidance we reset all of the options, changed admin names and passwords, selected a new channel, and regenerated the logon key. This morning the network again showed two strangers on my wifi. (???). Today again, all of those functions have been reset with the help of the ISPs customer support line. (see Reply #85).

    - the repeating system restore error is coded as 0x8000ffff (Reply #70 and #86)

    - in reply #82 I noted that the replies #3, #44, and #50 all seem to indicate an AMD processor in one way or another. Don't know what to make of it, but it worries me.

    - As of now I have Windows 7 updated to service pack 1, and have not accepted any further optional updates. They options are listed in the image below:

    IMG_1547[1].JPG
     

    Attached Files:

  42. dadhammer

    dadhammer Private First Class

    My guess now is that I should install the fifth update in the list, at least?
     
  43. dadhammer

    dadhammer Private First Class

    - I am first going back to see if a new .dmp file exists. If so, I'll upload it.
    - Then I plan to continue following steps 8 and 9 in the link provided in Reply #46.
    - Finally, I'll review the link provided in Reply #73 about Microsoft Reliability Reports.

    Hopefully in the meantime I might find some good advice here about which updates to accept next.

    Thank you for your continued help with this problem.
    d
     
  44. dadhammer

    dadhammer Private First Class

    It seems like this is a safe bet to accept next. Do you concur?

    IMG_1551[1].JPG
     
  45. dadhammer

    dadhammer Private First Class

    I followed through with steps 8 & 9 from the link satrow provided in Reply #46.
    The fans were quite dirty. In fact, the power supply fan now rattles quite a bit.
    Remoned RAM and Video Card and cleaned sockets with compressed air, and replaced them.

    I disconnected the printer, scanner and Pinnacle media i/o analog-to-usb hub.

    Moving on to the link in Reply #73 regarding Reliability Monitor reports.
     
  46. dadhammer

    dadhammer Private First Class

    managed to install all of the updates listed in reply #94 one by one, excepting the Mediatek wireless driver.
    Checking with the device manager, that is not the brand I have installed.
    System required a restore when attempting to install it.

    Rebooted system and selected 'Check for Updates.'
    I was presented with and update for Windows Update itself, which executed smoothly.


    Rebooted and selected 'Check for Updates' again.
    the system has been 'checking for updates' now for twelve hours
     
  47. baklogic

    baklogic The Tinkerer

    dadhammer likes this.
  48. satrow

    satrow Major Geek Extraordinaire

    dadhammer likes this.
  49. dadhammer

    dadhammer Private First Class


    Connected via ethernet, but than you for the link.
     
  50. dadhammer

    dadhammer Private First Class


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds