Computer Stuck In Weird Loop

Discussion in 'Malware Help (A Specialist Will Reply)' started by Chaos Annihilator, Jul 29, 2026.

  1. Oh My!

    Oh My! Malware Expert Staff Member

    Try to run a FRST scan in Safe Mode and attach the reports. I'll check them when I return.
     
  2. Chaos Annihilator

    Chaos Annihilator Specialist

    Everything is working smoothly, it stayed in Safe Mode all night and didn't restart. FRST worked fine, and I see no weird Y's or question marks in the reports. So far so good! Hope you enjoyed your ride, you deserve a break.
     

    Attached Files:

  3. Oh My!

    Oh My! Malware Expert Staff Member

    The first thing I would like us to do is check the Windows operating system itself. Please run this.

    ===================================================

    Farbar Recovery Scan Tool - Run Fix Using Attached File

    --------------------
    • Download the attached file and save it in the same location as FRST.exe (example, Desktop, USB device) <<< Important
    • Right click on FRST and select Run as administrator
    • Click Fix and once completed your computer will reboot
    • The tool will create a log on the desktop called Fixlog.txt
    • Copy and paste the contents of the report in your reply
     

    Attached Files:

  4. Chaos Annihilator

    Chaos Annihilator Specialist

    Here is the fix log. It did not restart the computer, but that made me happy because I thought it was a 50/50 chance at best that it would come back on okay. I can restart it myself if you want, but won't unless you say.

    Fix result of Farbar Recovery Scan Tool (x64) Version: 06-08-2026 01
    Ran by Hellhound Hunter (08-08-2026 19:02:41) Run:2
    Running from D:\
    Loaded Profiles: Hellhound Hunter
    Boot Mode: Safe Mode (minimal)
    ==============================================

    fixlist content:
    *****************
    cmd: sfc /scannow
    cmd: DISM /Online /Cleanup-Image /CheckHealth
    *****************


    ========= sfc /scannow =========


    Beginning system scan. This process will take some time.

    Beginning verification phase of system scan.

    Verification 0% complete.
    Verification 1% complete.
    Verification 1% complete.
    Verification 2% complete.
    Verification 2% complete.
    Verification 3% complete.
    Verification 4% complete.
    Verification 4% complete.
    Verification 5% complete.
    Verification 5% complete.
    Verification 6% complete.
    Verification 6% complete.
    Verification 7% complete.
    Verification 8% complete.
    Verification 8% complete.
    Verification 9% complete.
    Verification 9% complete.
    Verification 10% complete.
    Verification 10% complete.
    Verification 11% complete.
    Verification 12% complete.
    Verification 12% complete.
    Verification 13% complete.
    Verification 13% complete.
    Verification 14% complete.
    Verification 14% complete.
    Verification 15% complete.
    Verification 16% complete.
    Verification 16% complete.
    Verification 17% complete.
    Verification 17% complete.
    Verification 18% complete.
    Verification 18% complete.
    Verification 19% complete.
    Verification 20% complete.
    Verification 20% complete.
    Verification 21% complete.
    Verification 21% complete.
    Verification 22% complete.
    Verification 22% complete.
    Verification 23% complete.
    Verification 24% complete.
    Verification 24% complete.
    Verification 25% complete.
    Verification 25% complete.
    Verification 26% complete.
    Verification 26% complete.
    Verification 27% complete.
    Verification 28% complete.
    Verification 28% complete.
    Verification 29% complete.
    Verification 29% complete.
    Verification 30% complete.
    Verification 31% complete.
    Verification 31% complete.
    Verification 32% complete.
    Verification 32% complete.
    Verification 33% complete.
    Verification 33% complete.
    Verification 34% complete.
    Verification 35% complete.
    Verification 35% complete.
    Verification 36% complete.
    Verification 36% complete.
    Verification 37% complete.
    Verification 37% complete.
    Verification 38% complete.
    Verification 39% complete.
    Verification 39% complete.
    Verification 40% complete.
    Verification 40% complete.
    Verification 41% complete.
    Verification 41% complete.
    Verification 42% complete.
    Verification 43% complete.
    Verification 43% complete.
    Verification 44% complete.
    Verification 44% complete.
    Verification 45% complete.
    Verification 45% complete.
    Verification 46% complete.
    Verification 47% complete.
    Verification 47% complete.
    Verification 48% complete.
    Verification 48% complete.
    Verification 49% complete.
    Verification 49% complete.
    Verification 50% complete.
    Verification 51% complete.
    Verification 51% complete.
    Verification 52% complete.
    Verification 52% complete.
    Verification 53% complete.
    Verification 53% complete.
    Verification 54% complete.
    Verification 55% complete.
    Verification 55% complete.
    Verification 56% complete.
    Verification 56% complete.
    Verification 57% complete.
    Verification 58% complete.
    Verification 58% complete.
    Verification 59% complete.
    Verification 59% complete.
    Verification 60% complete.
    Verification 60% complete.
    Verification 61% complete.
    Verification 62% complete.
    Verification 62% complete.
    Verification 63% complete.
    Verification 63% complete.
    Verification 64% complete.
    Verification 64% complete.
    Verification 65% complete.
    Verification 66% complete.
    Verification 66% complete.
    Verification 67% complete.
    Verification 67% complete.
    Verification 68% complete.
    Verification 68% complete.
    Verification 69% complete.
    Verification 70% complete.
    Verification 70% complete.
    Verification 71% complete.
    Verification 71% complete.
    Verification 72% complete.
    Verification 72% complete.
    Verification 73% complete.
    Verification 74% complete.
    Verification 74% complete.
    Verification 75% complete.
    Verification 75% complete.
    Verification 76% complete.
    Verification 76% complete.
    Verification 77% complete.
    Verification 78% complete.
    Verification 78% complete.
    Verification 79% complete.
    Verification 79% complete.
    Verification 80% complete.
    Verification 80% complete.
    Verification 81% complete.
    Verification 82% complete.
    Verification 82% complete.
    Verification 83% complete.
    Verification 83% complete.
    Verification 84% complete.
    Verification 84% complete.
    Verification 85% complete.
    Verification 86% complete.
    Verification 86% complete.
    Verification 87% complete.
    Verification 87% complete.
    Verification 88% complete.
    Verification 89% complete.
    Verification 89% complete.
    Verification 90% complete.
    Verification 90% complete.
    Verification 91% complete.
    Verification 91% complete.
    Verification 92% complete.
    Verification 93% complete.
    Verification 93% complete.
    Verification 94% complete.
    Verification 94% complete.
    Verification 95% complete.
    Verification 95% complete.
    Verification 96% complete.
    Verification 97% complete.
    Verification 97% complete.
    Verification 98% complete.
    Verification 98% complete.
    Verification 99% complete.
    Verification 99% complete.
    Verification 100% complete.

    Windows Resource Protection found corrupt files but was unable to fix some of them.
    For online repairs, details are included in the CBS log file located at
    windir\Logs\CBS\CBS.log. For example C:\Windows\Logs\CBS\CBS.log. For offline
    repairs, details are included in the log file provided by the /OFFLOGFILE flag.


    ========= End of CMD: =========


    ========= DISM /Online /Cleanup-Image /CheckHealth =========


    Deployment Image Servicing and Management tool
    Version: 10.0.26100.8737

    Image Version: 10.0.26200.8875

    The component store is repairable.
    The operation completed successfully.


    ========= End of CMD: =========


    ==== End of Fixlog 19:27:36 ====
     
  5. Oh My!

    Oh My! Malware Expert Staff Member

    I intentionally did not add anything in the Fixlist to cause a reboot. Since I am not sure if the problem is related to a corrupt operating system or other corruptions I want to deal with the operating system first.

    Please copy the C:\Windows\logs\CBS folder onto your USB then zip the file on your clean system. Attach the folder to your reply.

    ===================================================

    DISM RestoreHealth from Administrator Command Prompt

    --------------------

    • Press the Windows Key, type cmd, then select Run as administrator
    • Copy and paste DISM /Online /Cleanup-Image /RestoreHealth after the command prompt then hit Enter
    • Patiently wait as the process may take a long time to complete
    • When completed report whether the process was successful or an error occurred
    ===================================================

    Things I would like to see in your next reply.
    • Attached zip file
    • Results?
     
  6. Chaos Annihilator

    Chaos Annihilator Specialist

    Here is the zip file. The DISM tool is still running, 22% complete so far....
     

    Attached Files:

    • CBS.zip
      File size:
      773.8 KB
      Views:
      2
  7. Chaos Annihilator

    Chaos Annihilator Specialist

    It stopped at 46.2%. I'll type it all out for you, it's pretty short:

    Deployment Image Servicing and Management tool
    Version: 10.0.26100.8737

    Image Version: 10.0.26200.8875

    [=========================== 46.2%
    Error: 4448

    The WOF driver encountered a corruption in the compressed file's Resource Table.

    The DISM log file can be found at C:\Windows\Logs\DISM\dism.log


    The log sounds easy enough to find, I'll work on copying it for you while waiting for a response.
     
  8. Chaos Annihilator

    Chaos Annihilator Specialist

    I've attached the DISM log, if that helps. I have to go do some work, I'll be back in an hour and a half or so. Thanks!
     

    Attached Files:

  9. Oh My!

    Oh My! Malware Expert Staff Member

    It will not be possible to fix your computer short of what is known as an In-Place Upgrade. Hold off until I test some options. It may ending up being we will need to do a fresh install.
     
  10. Chaos Annihilator

    Chaos Annihilator Specialist

    Shoot. At least this means she won't have to buy a new one, right? Thanks for helping me back up her stuff through Hirens, that really helped.
     
  11. Oh My!

    Oh My! Malware Expert Staff Member

    I am assuming you still have the Hirens USB.

    I am inclined to believe this won't be successful but it may be our last shot before having to do a full reinstall.
    • While is Safe Mode click Start, type msconfig, then select Run as admninstrator
    • On the General tab select Diagnostic startup
    • On the Boot tab uncheck Safe boot
    • Click OK then confirm restart
    • Let me know if you can boot successfully
     
  12. Chaos Annihilator

    Chaos Annihilator Specialist

    I do still have the Hirens USB. Just to clarify, we're not doing anything with it right now, you're just making sure I still have it in case we get totally locked out of Windows again, right?
     
  13. Chaos Annihilator

    Chaos Annihilator Specialist

    When I type msconfig, I get System Configuration. That's the right thing, right?
     
  14. Oh My!

    Oh My! Malware Expert Staff Member

    Correct, Hirens just in case.

    Yes System Configuration.
     
    Chaos Annihilator likes this.
  15. Chaos Annihilator

    Chaos Annihilator Specialist

    It did boot, we're now in (is it really called Normal Mode?), but it still has the same issues as at the first, with the Windows Security thing saying These Files can't be opened, and the right side of the task bar completely blank.
     
  16. Oh My!

    Oh My! Malware Expert Staff Member

    It is a stripped down version of Normal Boot.

    Click the Windows icon, type change advanced startup options, and click Open. Let me know if you are able to see Recovery options - Reset this PC
     
  17. Chaos Annihilator

    Chaos Annihilator Specialist

    Yes, I see it and can click Reset PC. Should I?
     
  18. Oh My!

    Oh My! Malware Expert Staff Member

    Yes, select that and select Keep my files.
     
  19. Chaos Annihilator

    Chaos Annihilator Specialist

    That made a blue window come up that led to "Additional Settings" Current settings: Restore apps and settings which came with this PC
    I could click Change Settings , back, next, or cancel.
    Do we need to change anything, or do I click Next?
     
  20. Oh My!

    Oh My! Malware Expert Staff Member

    Select Change settings and see if you get the option to save files.
     
  21. Chaos Annihilator

    Chaos Annihilator Specialist

    It let me click "Keep my files" before the blue window came up. When I click Change Settings I just have the option to say yes or no to "Restore apps and settings which came with this PC". Maybe this is about Lenovo stuff that my friend may have uninstalled since purchasing the computer? I'm not sure which to say.
     
  22. Oh My!

    Oh My! Malware Expert Staff Member

    Do you have Internet access on this computer?
     
  23. Chaos Annihilator

    Chaos Annihilator Specialist

    No. Do you want me to take a picture?
     
  24. Oh My!

    Oh My! Malware Expert Staff Member

    No, that's OK.

    If we select Reset keeping files and folders you most likely will need to reinstall any 3rd party programs. I am trying to avoid that.

    We have a couple of options. Do you have a spare USB with 16 GB capacity?
     
  25. Chaos Annihilator

    Chaos Annihilator Specialist

    Yes, I have an empty 32GB
     
  26. Oh My!

    Oh My! Malware Expert Staff Member

    Great.

    Leaving to go see grandkids but let me know if you can do this.

    Navigate to Windows 11 download
    Under Download Windows 11 Disk Image (ISO) for x64 devices click Select Download
    Select Windows 11 (multi-edition ISO for x64 devices)
    Click Confirm
    Click Choose one then select English (United States)
    Click Confirm
    Under Download - Windows 11 English click 64-bit Download
    Save the file onto the Desktop
     
  27. Chaos Annihilator

    Chaos Annihilator Specialist

    I'm saving this to my desktop so far, right, not the USB yet?
     
  28. Oh My!

    Oh My! Malware Expert Staff Member

    Correct. Better chance of a successful download to the computer. We will then transfer it over to the USB and I will give you instructions for that.
     
  29. Chaos Annihilator

    Chaos Annihilator Specialist

    Okay thanks. I think I can do this. Have fun!
     
  30. Oh My!

    Oh My! Malware Expert Staff Member

    I did and we are back.
     
    Chaos Annihilator likes this.
  31. Chaos Annihilator

    Chaos Annihilator Specialist

    That was fast, I wasn't expecting that. And as usual I expected it to be more difficult than it turned out to be. It is downloading now, says we have about 1 hour left.
     
  32. Chaos Annihilator

    Chaos Annihilator Specialist

    It's still downloading. I have to go for a couple of hours, we probably won't get our schedules in sync again tonight. You could go ahead and post the next steps if you want, then I'll have all night to hesitate and come up with questions and get up the nerve :)
    Thanks for continuing to help!
     
  33. Oh My!

    Oh My! Malware Expert Staff Member

    My pleasure.

    After the download is complete insert a USB with at least 12GB of space into your computer
    Using Windows Explorer navigate to and right click on the USB device
    Select Format...
    Under File system select exFAT
    Click Start and verify the format was successful
    Right click on the downloaded Windows 11 ISO file, select Send to, then select your USB device
    Confirm the transfer was successful
    Once completed insert the USB device into the compromised computer while it is still booted in Diagnostic mode
    Using Windows Explorer left click on the USB device drive letter
    Right click on the ISO file to the right then select Mount
    Right click on Setup and select Run as administrator
    Click on Change how Setup downloads updates
    Select Not right now then click Next
    When presented, select Keep personal files and apps
    Complete the process of the installation
     
  34. Chaos Annihilator

    Chaos Annihilator Specialist

    I was doing really good, I got the Windows 11 ISO file onto the USB last night. I just came back, I inserted the USB into the compromised computer. As far as I can tell, the computer is still in Diagnostic mode, though I forgot to open a document so I could tell if it restarted.

    Now I'm stuck.

    When I go in file explorer and right click on the USB, I can't select Mount. Even if I do "show more options", Mount is not there. I wonder if it did not download onto the USB correctly? I thought it did...
     
  35. Oh My!

    Oh My! Malware Expert Staff Member

    Try left clicking on the USB drive letter then right clicking on the ISO file to the right.
     
  36. Chaos Annihilator

    Chaos Annihilator Specialist

    That did it. Now it's working on it...
     
  37. Chaos Annihilator

    Chaos Annihilator Specialist

    It took a long time to install, and said it would restart several times. I saw it restart once, then it went to a black screen and said it was "undoing changes made to your computer" and worked on that for a while.
    Now it is a black screen that says "Setup Notice: Windows Boot Manager boot failed." and I can click OK. Should I click OK? What happened?
     
  38. Oh My!

    Oh My! Malware Expert Staff Member

    Sorry I never received a notification you replied.

    The setup process was unable to rewrite/repair the operating system. I feared that might happen.

    Click OK and let me know what happens.
     
  39. Chaos Annihilator

    Chaos Annihilator Specialist

    That's fine.
    I hit OK, now it says:

    Setup Notice: Default Boot Device Missing or Boot Failed.
    Insert Recovery Media and Hit any key
    Then Select "Boot Manager" to choose a new Boot Device or to Boot Recovery Media

    The USB is still in there, doesn't it have recovery media? I could take it out and put it in a different port?
     
  40. Chaos Annihilator

    Chaos Annihilator Specialist

    Oh, and I can only hit OK again.
     
  41. Oh My!

    Oh My! Malware Expert Staff Member

    The USB you are using is different than the bootable Windows 11 USB you created. We are going back to Hirens. We may be doing a fresh install soon.

    • Shut down the compromised computer
    • Insert the Hirens USB device
    • Start the compromised computer and repeatedly press the F12 key to boot the the USB drive
    • Hit Enter on DIR [Linux-ISOs]
    • Arrow down to HBCD_PE_x64.iso then hit Enter
    • Hit Enter on Boot in normal mode
    • Once the program loads double click on the Utilities folder
    • Double click on the BCD-MBR tools folder
    • Right click on EasyBCD and select Run as administrator
    • Click Go to run the program in English
    • Click OK twice
    • Click BCD Backup/Repair
    • Select Reset BCD configuration then click Perform Action
    • Click OK on the Warning screen and allow the quick process to complete.
    • Select Re-Create/repair boot files then click Perform Action
    • In the lower left hand corner of the window you should see BCD successfully repaired quickly flash
    • Close all open windows
    • Click on the Windows icon in the lower left hand corner of the screen and select Shut down
    • Remove the USB drive from the computer
    • Start the computer and tell me what happens
     
  42. Chaos Annihilator

    Chaos Annihilator Specialist

    Okay. Before I boot to Hirens, I do take out the USB with windows 11 that is in there now, right? Do you think it could have not worked because I did this windows 11 USB wrong somehow?
     
  43. Oh My!

    Oh My! Malware Expert Staff Member

    Yes, remove the attached USB.

    You did not do anything wrong. There are times when an operating system can't be repaired. I normally see that when trying to Reset the system while in the Recovery Environment. The DISM failing to complete along with the lengthy list of corrupted files identified in the CBS log are very bad signs relative to repair. Let's try this one last Hirens step but I doubt we will find any significant success. It's a Hail Mary before throwing in the towel.
     
    Chaos Annihilator likes this.
  44. Chaos Annihilator

    Chaos Annihilator Specialist

    It looked like it was booting normally (no Preparing Automatic Repair, anyway), and I was waiting to see if the desktop looked okay, but before the desktop came up, it went to a black screen and says "Updates are Underway. Please keep your computer on."
    Is this a good sign? I guess we'll have to see when it gets done.
     
  45. Oh My!

    Oh My! Malware Expert Staff Member

    Wait and see.
     
  46. Chaos Annihilator

    Chaos Annihilator Specialist

    Nope, same problems. We're at the desktop, but the right side of the task bar is blank, and the "These files can't be opened" window is up because of Logitec Setpoint, or whatever.
     
  47. Chaos Annihilator

    Chaos Annihilator Specialist

    I have to go for now, I'll leave the computer as it is. So next is a fresh install of Windows, right? Not a new computer?
     
  48. Oh My!

    Oh My! Malware Expert Staff Member

    We will chat tomorrow. I don't think she will need a new computer.
     
    Chaos Annihilator likes this.
  49. Oh My!

    Oh My! Malware Expert Staff Member

    Before continuing on let's check the state of your system following the reinstall. Please repeat Post #153. Also, could you post a picture of the skewed desktop?
     
  50. Chaos Annihilator

    Chaos Annihilator Specialist

    Sorry it took me a while to get back. Here's the log, and the picture of the desktop is attached. It doesn't look too bad really, the logitech icon on the left of the task bar is not normal, and the security warning window seems to be about that (if I try to close it, it opens again, and it will come up for/about anything I try to do on this computer). The right side of the task bar being blank is weird, the date and time should be there, and her security shield, wifi, battery, and whatever else she had should be there. There's also more strange things if I dig around. Now it won't connect to the internet, but it used to say it couldn't connect, but still could. Avast seems to be working, but Windows thinks it's disabled. There may be more problems I just haven't found yet.

    Fix result of Farbar Recovery Scan Tool (x64) Version: 06-08-2026 01
    Ran by Hellhound Hunter (11-08-2026 12:01:40) Run:3
    Running from D:\
    Loaded Profiles: Hellhound Hunter
    Boot Mode: Normal
    ==============================================

    fixlist content:
    *****************
    cmd: sfc /scannow
    cmd: DISM /Online /Cleanup-Image /CheckHealth
    *****************


    ========= sfc /scannow =========


    Beginning system scan. This process will take some time.

    Beginning verification phase of system scan.

    Verification 0% complete.
    Verification 1% complete.
    Verification 1% complete.
    Verification 2% complete.
    Verification 2% complete.
    Verification 3% complete.
    Verification 4% complete.
    Verification 4% complete.
    Verification 5% complete.
    Verification 5% complete.

    Windows Resource Protection could not perform the requested operation.


    ========= End of CMD: =========


    ========= DISM /Online /Cleanup-Image /CheckHealth =========


    Deployment Image Servicing and Management tool
    Version: 10.0.26100.8737

    Image Version: 10.0.26200.8875

    No component store corruption detected.
    The operation completed successfully.


    ========= End of CMD: =========


    ==== End of Fixlog 12:02:14 ====
     

    Attached Files:


MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds