Windows 11 Home Not Working After Windows Tweaking

Discussion in 'Malware Help - MG (A Specialist Will Reply)' started by beckylousiana, Jul 9, 2025.

  1. beckylousiana

    beckylousiana Corporal

    Yes, I have enabled it. Rebooted and back to BitLocker screen for recovery key, same loop, I am at cmd, should I try everything again?
     
  2. beckylousiana

    beckylousiana Corporal

    I cannot see my reply to 150 - Yes, I have enabled Secure Boot. :)
     
  3. beckylousiana

    beckylousiana Corporal

    just seeing this. sometimes i have to sign out and sign back in to see new posts. ? I will try that right now!! SORRY
     
  4. beckylousiana

    beckylousiana Corporal

    I tried, See attached
     

    Attached Files:

  5. Oh My!

    Oh My! Malware Expert Staff Member

    Using Notepad attempt to navigate and save the X:\windows\logs\dism\dism.log to the USB. Attach it to your reply.
     
  6. beckylousiana

    beckylousiana Corporal

    I cannot find that file. :/
    see attachments

    20250725_212018.jpg
     

    Attached Files:

  7. Oh My!

    Oh My! Malware Expert Staff Member

    Your computer is not cooperating so we are going to pivot a bit. Let's see if we can access the hard drive a different way, though I am not confident this will work. This method is more complicated so stop if you have any questions or concerns.

    If you do not have a spare USB drive for the below instructions make a copy of the install.wim file on the working computer Desktop in case we need it later.

    Please do this.

    ===================================================

    Copying Files Using Ubuntu USB

    --------------

    Warning: You will need a USB device with at least 4 GB of space - Caution this process will remove all your information from your USB drive. Please note we are using an older/smaller version of Ubuntu. Please be sure to use Version 16.04.

    • Download Ubuntu Desktop and save it to your Desktop (very large file)
    • Download Pen Drive Linux's USB Installer (scroll down to Download Universal USB Installer - click on Download UUI) and save it to your desktop
    • Right click Universal-USB-Installer and select Run as administrator
    • Click I Agree
    • On the drop down list under Step 1 select your USB drive
    • Place a check mark in the Prepare this Device? box
    • Review the warning screen then click Yes
    • Confirm the Windows Explorer screen that pops up shows This folder is empty then close the window
    • Click OK on the Success! pop up window
    • Under Step 2: Select a Distribution to put on... select Ubuntu
    • Under Step 3 PENDING: Browse to your ubuntu*desktop*iso click Browse
    • Navigate to the Desktop then locate and double click on ubuntu-16.04.7-desktop-amd64
    • Click Create
    • On the Process Complete window click Next
    • On the Would you like to add more ISO/Distros Now on... click No
    • Click Finish
    • Insert the USB drive into the target computer
    • Boot to the Recovery Environment either from you computer (boot interrupt) or your Windows 11 Media Creation Tool (select Repair your computer)
    • Click on Use a device
    • Select USB HDD:
    • Hit Enter on the Dir [Linux-ISOs] screen
    • Using the down arrow on the keyboard scroll down to ubuntu-16.04.7-desktop-amd64.iso then hit Enter
    • Select Boot in normal mode then hit Enter
    • Select Try Ubuntu without installing then hit Enter
    • Click on the File cabinet (Files) icon on the left hand side
    • Left click on the hard drive icon and verify the existence of a Windows folder
    • On the left hand side of this window verify you see your USB listed which should include Ubuntu in the drive name
    • On the right side of the open window double click on Users
    • Double click on your User Name folder
    • From this screen you can examine the folders and contents to look for files you want to back up
    • For any file or folder you want to back up right click on the entry then select Copy To...
    • Select your external drive or USB device
    • Click Select and your information will be backed up
    • Repeat the process as necessary to copy your files
    • Review the contents of the external drive or USB device to ensure the items are present
    • When completed click on the X in the upper left corner of each window to close them
    • Click on the gear icon in the upper right corner of the Desktop, click Shut Down..., then Shut Down again
    • Following shut down remove the Ubuntu USB drive
    ===================================================

    Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.
    • Results?
     
  8. beckylousiana

    beckylousiana Corporal

    We are in the parking lot of a service shop in Salt Lake City with engine issues. Will be here for a few days. Hopefully I can get caught up with getting my husband's computer fixed.
    I did just locate another USB named "New Media Creation Tool" (I remember doing 2) and I was able to locate the 2 files install.wsm & install2.wsm pertaining to your previous instructions

    I am going to attempt to do #115 again.

    Rec'd Error after E:\>dism /image:C:\ /cleanup-image /restorehealth /source:E:\install.wim:1 /limitaccess

    see pic attached
     
    Last edited: Jul 26, 2025
  9. beckylousiana

    beckylousiana Corporal

    My phone would not allow me to add a pic, so here it is
     

    Attached Files:

  10. beckylousiana

    beckylousiana Corporal

    We are in the parking lot of a service shop in Salt Lake City with engine issues. Will be here for a few days. Hopefully I can get caught up with getting my husband's computer fixed.
    I did just locate another USB named "New Media Creation Tool" and I located the 2 files install.wsm & install2.wsm pertaining to your previous instructions
     
  11. beckylousiana

    beckylousiana Corporal

    I can't see where this was posted, so I will sent it again. :/
     

    Attached Files:

  12. Oh My!

    Oh My! Malware Expert Staff Member

    Sorry to hear about your traveling troubles.

    I am not very optimistic about our chances but as long as you are willing let's keep trying for bit. I want to consider trying to run FRST64 again.

    • Download FRST64 onto the E: USB containing the install.wim file.
    • Boot to the computer Recovery Environment (boot interrupt method to the X:\Windows\System32 prompt)
    • Attach the E: drive USB and verify it is recognized as the E: drive
    • Try to run the dism /image:C:\ /cleanup-image /restorehealth /source:E:\install.wim:1 /limitaccess command
    • If it doesn't complete type dism.exe /image:C:\ /cleanup-image /revertpendingactions then hit Enter
    • If that does not work type in Notepad and press Enter
    • Select File then Open
    • In the lower right hand corner change Text Documents (*.txt) to All Files (*.*)
    • On the left side locate and double click on the USB device containing FRST64
    • Right click on the FRST64 icon and select Run as administrator
    • Click Yes on the Disclaimer
    • Click Scan
    • If it completes post the report
    • If none of this works, using the Notepad method see if there is a C:\Window\System32\Logfiles\Srt\SrtTrail.txt file with a relatively current date

    -----

    Are you able to successfully copy the install.wim file into the Windows 11 Installation USB sources folder?

    -----

    You can still try the Ubuntu instructions to see if you can access the documents that way.
     
  13. beckylousiana

    beckylousiana Corporal

    Ok, will work on all of this today! Not that this will change anything, but just to make sure you remember that I am not able to boot with repeated on/off forced shutdown method.
    As soon as I power up it goes straight to "Bitlocker Recovery......" and I have to enter the BitLocker Recovery Key, diagnosing pc, enter code again and again to finally access cmd from advanced options where the prompt is X:\Windows\System32>

    THANX FOR ALL OF YOUR EFFORTS!!
     
  14. Oh My!

    Oh My! Malware Expert Staff Member

    Thanks for the reminder. I will just say boot to the USB or to the X:\Windows\System32> prompt. :)

    Hope you are doing OK on the road.
     
  15. beckylousiana

    beckylousiana Corporal

    I just did all instructions with booting without the usb.
    See below Error messages for both dism commands in cmd.
    I copied and pasted into text message and put it on thumbdrive to bring to my pd to make it easier for you to read. I have also attached the FRST report completed. :)
    --------
    CMD-07-27-25 12pm:
    Microsoft Windows [Version 10.0.26100.1]
    (c) Microsoft Corporation. All rights reserved.
    X:\Windows\System32>notepad
    X:\Windows\System32>dism /image:c:\ /cleanup-image /restorehealth /source:E:\install.wim:1 /limitaccess
    Deployment Image Servicing and Management tool
    Version: 10.0.26100.1
    Image Version: 10.0.26100.4202
    The scratch directory size might be insufficient to perform this operation. This can cause unexpected behavior.
    Use the /ScratchDir option to point to a folder with sufficient scratch space. The recommended size is at least 1024 MB.
    Error: 0x800f0801
    DISM failed. No operation was performed.
    For more information, review the log file.
    The DISM log file can be found at X:\windows\Logs\DISM\dism.log
    X:\Windows\System32>notepad
    X:\Windows\System32>dism.exe /image:C:\ /cleanup-image /revertpendingactions
    Deployment Image Servicing and Management tool
    Version: 10.0.26100.1
    Image Version: 10.0.26100.4202
    The scratch directory size might be insufficient to perform this operation. This can cause unexpected behavior.
    Use the /ScratchDir option to point to a folder with sufficient scratch space. The recommended size is at least 1024 MB.
    Reverting pending actions from the image...
    Error: 0xd000014c
    An error occurred reverting the pending actions from the image.
    For more information, review the log file.
    The DISM log file can be found at X:\windows\Logs\DISM\dism.log
    X:\Windows\System32>notepad
    X:\Windows\System32>
    --------
     

    Attached Files:

  16. Oh My!

    Oh My! Malware Expert Staff Member

    Glad you were able to run a FRST scan. That gives us something more to work with.

    Allow me some time to evaluate and determine our next step.
     
    beckylousiana likes this.
  17. Oh My!

    Oh My! Malware Expert Staff Member

    You posted the topic on July 9th. Did this event happen that day? If not, which day, if you can recall.

    Navigate to C:\Windows\System32\Config\COMPONENTS file and copy it onto the USB. Zip and upload the file to GoFile or the file hosting site of your choice and post the download link in your reply.
     
  18. beckylousiana

    beckylousiana Corporal

    I started working on the computer because it finally refused to boot up around July 9th.
    I will finish your instruction and post. :)
     
  19. beckylousiana

    beckylousiana Corporal

    I am assumed you meant from my working computer... but I probably assumed wrong. So I will attach the other one next-- :/ https://gofile.io/d/bu2gpx
     
  20. beckylousiana

    beckylousiana Corporal

  21. beckylousiana

    beckylousiana Corporal

    IM SORRY! I ran Tweaking.com around end of May, started working on the computer for not booting correctly around June 9, but finally have up on trying on my own and contacted Major Geeks July 9.
     
  22. Oh My!

    Oh My! Malware Expert Staff Member

    Thanks for the update.

    On the broken computer navigate to C:\Windows\System32\Config\System file and copy it onto the USB. Zip and upload the file to GoFile or the file hosting site of your choice and post the download link in your reply.
     
    beckylousiana likes this.
  23. beckylousiana

    beckylousiana Corporal

    I will dooo!!
     
  24. beckylousiana

    beckylousiana Corporal

    link to the system file from broken computer --
    https://gofile.io/d/cxGOae
     
  25. beckylousiana

    beckylousiana Corporal

    We are in a hotel room now waiting for our motorhome to be fixed… This trip has been a nightmare.. So I have finally had a moment to catch up with the computer. See my actions below with the Ubuntu instructions from #157--

    NOTE: Security Boot is enabled

    Per #162 I Attempt Ubuntu again:


    Booting without USB-

    Entered BitLocker recovery key

    “Automatic Repair, Your PC did not start correctly 1.) Restart 2.) Advanced Options

    Chose >Advanced Options > Use Device > Options-

    1.) UEFI: General UDisk 5.00, Partition 2

    2.) UEFI: CD/DVD

    3. UEFI: Removable Device

    4.) UEFI:Network Device


    Booting without USB-

    Entered BitLocker recovery key

    “Automatic Repair, Your PC did not start correctly 1.) Restart 2.) Advanced Options

    >Advanced Options > Use Device > Options-

    This time only 1 option avaiable

    1.) UEFI: General UDisk 5.00, Partition 2

    Chose it and rec’d error message

    ERROR

    Verification failed: (0x1A) Security Violation “OK”

    Flashed a message "SHIM UEFi …. Press any key for …. Management">

    “Peform MOK Management - 1. Continue to boot 2. Enroll Key from Disk 3. Enroll hash from disk

    Pressed Esc to return to previous screen - “ERROR

    Verification failed: (0x1A) Security Violation > OK Flashed a message and brought me back to BitLocker recovery key entry
     
  26. beckylousiana

    beckylousiana Corporal

    SORRY - REVISED 175 as I had booted with the USB on the first try

    See my actions below with the Ubuntu instructions from #157--
    NOTE: Security Boot is enabled

    Per #162 I Attempt Ubuntu again:

    Booting with USB recovery drive-
    Entered BitLocker recovery key
    “Automatic Repair, Your PC did not start correctly 1.) Restart 2.) Advanced Options
    Chose >Advanced Options > Use Device > Options-
    1.) UEFI: General UDisk 5.00, Partition 2
    2.) UEFI: CD/DVD
    3. UEFI: Removable Device
    4.) UEFI:Network Device
    Booting without USB-
    Entered BitLocker recovery key
    “Automatic Repair, Your PC did not start correctly 1.) Restart 2.) Advanced Options
    >Advanced Options > Use Device > Options-
    This time only 1 option avaiable
    1.) UEFI: General UDisk 5.00, Partition 2
    Chose it and rec’d error message
    ERROR
    Verification failed: (0x1A) Security Violation “OK”
    Flashed a message "SHIM UEFi …. Press any key for …. Management">
    “Peform MOK Management - 1. Continue to boot 2. Enroll Key from Disk 3. Enroll hash from disk
    Pressed Esc to return to previous screen - “ERROR
    Verification failed: (0x1A) Security Violation > OK Flashed a message and brought me back to BitLocker recovery key entry
     
  27. Oh My!

    Oh My! Malware Expert Staff Member

    Thank you.

    Please do this.

    • Download System.zip to your Desktop
    • Unzip the folder onto the Desktop
    • Copy and paste the System file onto your USB
    • Repeat the previous process you used to navigate to C:\Windows\System32\Config\System
    • Right click on System, select Rename, and rename it to Systemold
    • Copy and paste the System file located on the USB into the C:\Windows\System32\Config folder
    • Shut down your computer
    • Start your computer and attempt to boot into Windows
    ===================================================

    Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.
    • Results?
     
  28. beckylousiana

    beckylousiana Corporal

    The link brings me to a file named System and was not zipped. Shall I just use that file?

    See attached screen pic when I tried to rename the system file. :/
     

    Attached Files:

    Last edited: Jul 30, 2025
  29. Oh My!

    Oh My! Malware Expert Staff Member

    Yes you can use that file.

    If you have more than one System file rename them to different names so that you do not have any file named system. Once the config folder does not contain any file specifically named system (without the addition of any other letters) copy and paste the downloaded system file into the folder.
     
  30. Oh My!

    Oh My! Malware Expert Staff Member

    Just touching base. Hope everything is OK.
     
  31. beckylousiana

    beckylousiana Corporal

    We finally got our motorhome back and on the road again.. :) We are here in Idaho for a week so I am hoping I can catch up with everything. THANK YOU!
     
  32. Oh My!

    Oh My! Malware Expert Staff Member

    I understand and didn't mean to pester you. I was genuinely worried things were not going well.

    For whatever it is worth, I am very hopeful this latest fix will be more successful than out previous efforts.

    BTW, Windows Update just broke my Windows 10 test computer! Wouldn't boot! :(
     
  33. beckylousiana

    beckylousiana Corporal

    I have copied your system file and restarted the computer. It siad "Your computer ran into a problem > BitLocker recovery key > "preparing Automatic repair" > "Automatic Repair - Your pc did not start correctly" *restart *advanced options - I restarted to try again, same errors. "Enter BitLocker Recovery Key to get going again" > Automatic Repair *restart *Advanced Options -- so I stopped there.
     
  34. beckylousiana

    beckylousiana Corporal

    OMGOSH!!! WHY DO THEY DO THAT!!?? CRY CRY CRY
     
  35. Oh My!

    Oh My! Malware Expert Staff Member

    You copied the file but never got passed the BitLocker part? And you are trying to access the command prompt using the exact same steps as you used to get to the Components file?
     
  36. beckylousiana

    beckylousiana Corporal

    I am missing something. i did copy the file and copied and pasted into the config folder, then tried to boot into windows, but when restarting the pc it went directly into the Bitlocker as described
     
  37. Oh My!

    Oh My! Malware Expert Staff Member

    I had hoped for better. Are you able to boot to the USB with FRST64.exe on it and run a FRST scan?
     
  38. beckylousiana

    beckylousiana Corporal

    I redownloaded the FRST64 onto the recovery USB and booted with the recovery USB both with secure boot enabled and disabled, cmd displays x:\sources> so i entered into notepad but when I go to FRST64, right click to run as administrator nothing happens.
     
  39. Oh My!

    Oh My! Malware Expert Staff Member

    While booting to the USB what Advanced options are you presented with besides Command Prompt?
     
  40. beckylousiana

    beckylousiana Corporal

    Advanced Options:
    Startup Repair
    Command Prompt
    Uninstall Updates
    UEFI Firmware
    System Restore
    System Image Recovery
     
  41. Oh My!

    Oh My! Malware Expert Staff Member

    Thank you.

    It would be very helpful if we can get FRST to run. Download FRST64.exe onto a separate USB than the boot USB. Attach the second USB and see if it will run that way. If so, post the FRST.txt report.
     
    beckylousiana likes this.
  42. beckylousiana

    beckylousiana Corporal

    Here is the FRST.txt! i can copy and paste it if you would like
     

    Attached Files:

  43. Oh My!

    Oh My! Malware Expert Staff Member

    Great, thanks. No need to copy and paste.

    I need to do some testing on my end.
     
    beckylousiana likes this.
  44. Oh My!

    Oh My! Malware Expert Staff Member

    When you booted to the USB then ran FRST64 did you every have to put in the BitLocker Recovery Key?
     
  45. beckylousiana

    beckylousiana Corporal

    No, but I had secure boot disabled...??
    It's like different every time... but probably just my imagination... BitLocker has not come up the last 3 times booting from the USB
     
  46. Oh My!

    Oh My! Malware Expert Staff Member

    We do have different results when we attempt things and that is part of the problem. Beyond that, some information is inaccurate. I will spare you all the gritty details but we are working with less than precise information and inconsistent results. Nevertheless, I am in it as long as you are or it is obvious everything has been tried and nothing works.

    Disabling Secure Boot does not automatically disable BitLocker. The latest FRST Scan is incomplete and is missing some important information. It may be because BitLocker is enabled.

    Please do this.
    • At the command prompt type manage-bde -status c: and hit Enter
    • If Lock Status: indicates Unlocked run a new FRST Scan
    • If Lock Status: indicates Locked, type manage-bde -unlock c: -rp ***Your Recovery Key*** then hit Enter
    • If this is successful run a new FRST Scan
     
  47. beckylousiana

    beckylousiana Corporal

    I
    Just to be clear, the cmd I have after booting with the recovery USB is - X:\sources> and when I enter the first command it says that "manage-bde is not recognized as an internal or external command, operable program or batch file"

    When I change the prompt to c:\> it gives me the same error message
     
  48. Oh My!

    Oh My! Malware Expert Staff Member

    Try to change to the C:\Windows\System32 prompt then run the command.

    If it doesn't work run another FRST scan anyway.
     
  49. beckylousiana

    beckylousiana Corporal

    I could not change the prompt to C:\Windows\System32 . :(
    So I ran notepad from X:\Sources then Ran the FRST64 from USB separate from the recovery disk., see attached report. I don't know why it is dated 06/30/2025 but it was run today. :/
     

    Attached Files:

  50. Oh My!

    Oh My! Malware Expert Staff Member

    This is part of the difficulty. Your initial scan was dated in April, 2024. That report showed you had an old ZeroAccess infection which I haven't seen for years!

    Using Notepad see if you can navigate to and copy the below file and folder onto the FRST64 USB. If you are able, attach them or upload to GoFile and post the download links

    C:\OfflineRecEnvTrace.etl
    C:\RecoveryLogs


    While still in Notepad let me know if a C:\FRST folder is present and if so if there are any entries contained in a Hives folder.

    Please repeat the System instructions again from Post #172.

    Please do this.

    ===================================================

    Farbar Recovery Scan Tool Search

    --------------------
    • Launch FRST as you did previously
    • Type the following in the Search: box
    Code:
    explorer.exe;User32.dll;InputHost.dll
    
    • Click Search Files button
    • When completed click OK and a Search.txt document will placed on the USB drive
    • Copy and paste the contents of that document your reply
    ===================================================

    Things I would like to see in your next reply. Please be sure to copy and paste any requested log information unless you are asked to attach it.
    • Attached or uploaded file/folder
    • Is a Hives folder present?
    • System download link
    • Search.txt
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds