[SOLVED] Not sure if I'm posting in the right section

[flipper26]

I didn't see this windows pop up until I connected to the internet. Before that the tool was just running, running, running.

 

[DR M]

Yes, make sure you have internet connection.

Please try this:

Download ShowKeyPlus from here: https://github.com/Superfly-Inc/Sho...nload/ShowKeyPlus7060/ShowKeyPlus1.0.7060.zip

Save it on your Desktop.

You will need to un-zip the content of the folder, and then un-zip the x64 folder. Run the exe file and give me the screenshot you are getting please.

 

[flipper26]

Attached is a screenshot. I have blacked out some of the characters in case that one of them is my Windows key.

 

[DR M]

Thanks!

The screenshot shows that you have an OEM license, meaning that you didn't use KMS to activate your operating system. This is good, although I wonder why did you have it in your computer!

Now, I would like to uninstall the programs I referred to here (e.g. Adobe Flash Player, Java, SpyHunter, QnswnbsXi...). Please let me know which programs are not legally activated (those you remember), to finish with those too. After that, we will see what to do regarding the startup issue.

 

[flipper26]

I've gone back to look at that list and couldn't remember some of them so looking online a bunch are freeware or have trial periods. If you want to remove the ones on the list plus Adobe Flash Player, Java, Spyhunter and QnswenbsXi that should be fine.
Thanks

 

[DR M]

If you want to remove the ones on the list plus Adobe Flash Player, Java, Spyhunter and QnswenbsXi that should be fine.

Hello. Unfortunately (or not) it doesn't go like this. It's not a matter of "what I want", but what must be done. The thing is that you had/have at least one crack (for Topaz), a torrent client, many pro version programs which need a paid subscription and are not running on the trial expired version, plus KMS service which is definitely an illegal tool to bypass activation for Microsoft products. We are not members of "software police" here, to investigate users' installed programs and uninstall what we like or what we want or what we suspect is not properly activated. I already told you that having and using such programs is the best and easiest way to infect a system and cause issues to it. So, how can anyone be sure that your issues didn't start because of one or more of these programs? I know that the update's corruption is the obvious, but it's not so simple to say what made your computer un-bootable.

Since it seems to me that you don't mind uninstalling any program, I would suggest a clean install of the operating system and a fresh start. This would solve your issues. If, however, you prefer me to continue with uninstalling the programs I mentioned above, and make a bit more maintenance, I will do that for you.

Please, let me know how you would like to proceed.

 

[flipper26]

Perhaps I didn't use the right words. Yes, I know the programs need to be uninstalled and I appreciate your help in doing so.

I've never had to do a clean install and am not really comfortable setting up a machine from the beginning as I've never done so. For the time being I'd prefer you to continue with the uninstalling and maintenance.

If we do need to do a clean install can it be done so that the User Name folder is the same as before (I've had this nickname for decades). I read something about Windows now uses part of your last name for the User Name folder and it's very difficult to change.

Thanks

 

[DR M]

Hello.

I was waiting for you to tell me the programs not activated properly. Since I can't check that for you, I'm giving you a fix which includes the ones I am sure they need to get uninstalled. We are also going to do some maintenance, but this doesn't confirm that it will solve the startup issue. Clean install is not as complicated as you think, and we can guide you to do it if needed. I have the impression that the restriction in the number of the username letters is not present anymore.

1. FRST fix

Please do the following to run a FRST fix.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
CreateRestorePoint:
CloseProcesses:
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Topaz DeNoise AI_is1
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Topaz Photo AI_is1
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Topaz Sharpen AI 4.1.0
DeleteKey: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{26A24AE4-039D-4CA4-87B4-2F64180333F0}
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Adobe Flash Player PPAPI
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{2A075BB4-E976-4278-BF3F-E5C6945D84C0}
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{185F9795-9663-4F13-9EF9-307A282ADB5A}
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\QnswnbsXi Brand_is1
DeleteKey: HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\SpyHunter5
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKU\S-1-5-21-1876214748-2417306340-1488581364-1002\...\StartupApproved\Run: => "DriverFix"
S3 EnigmaFileMonDriver; \??\C:\WINDOWS\system32\Drivers\EnigmaFileMonDriver.sys [X]
S3 SIUSBXP; \??\C:\Windows\system32\drivers\SiUSBXp.sys [X]
2024-01-05 14:40 - 2024-01-05 14:40 - 000000207 _____ C:\Windows\tweaking.com-regbackup-LAPTOP-RLPEIM75-Windows-10-Home-(64-bit).dat
2024-01-05 12:41 - 2024-01-05 12:41 - 000002234 _____ C:\Users\Administrator\Desktop\Tweaking.com - Windows Repair.lnk
2024-01-05 12:31 - 2024-01-05 12:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tweaking.com
2024-01-05 12:17 - 2024-01-05 14:43 - 000761945 _____ C:\Windows\Tweaking.com - Windows Repair Setup Log.txt
2024-01-07 19:51 - 2024-01-07 19:51 - 006291456 _____ C:\Users\OWNER\Downloads\Unconfirmed 978134.crdownload
2024-01-07 19:51 - 2024-01-07 19:51 - 006291456 _____ C:\Users\OWNER\Downloads\Unconfirmed 652081.crdownload
2024-01-07 19:51 - 2024-01-07 19:51 - 006291456 _____ C:\Users\OWNER\Downloads\Unconfirmed 127861.crdownload
2024-01-02 21:58 - 2024-01-02 21:58 - 000000000 _____ C:\Users\OWNER\Downloads\Unconfirmed 917183.crdownload
2024-01-02 21:58 - 2024-01-02 21:58 - 000000000 _____ C:\Users\OWNER\Downloads\Unconfirmed 144622.crdownload
EmptyTemp:
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

2. Fresh logs

Run FRST tool ance more and give me fresh logs, Addition and FRST.


In your next reply please post:

1. The fixlog.txt
2. The fresh FRST logs

 

[flipper26]

Attached are the logs that you requested. Thanks.

 

[DR M]

The following fix includes an entry I missed (McAfee). My bad.

NOTICE: This script was written specifically for this user. Running it on another machine may cause damage to your operating system

• Select the entire contents of the code box below, from the "Start::" line to "End::", including both lines. Right-click and select "Copy ". No need to paste anything to anywhere.

Start::
AV: McAfee VirusScan (Enabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}
HKU\S-1-5-21-1876214748-2417306340-1488581364-1002\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_321_pepper.exe [1453624 2020-01-25] (Adobe Inc. -> Adobe)
C:\Windows\SysWOW64\Macromed
End::

• Right-click on FRST64 on your Desktop, to run it as administrator. When the tool opens, click "yes" to the disclaimer.
• Press the Fix button once and wait.
• FRST will process fixlist.txt
• When finished, it will produce a log fixlog.txt on your Desktop.
• Post the log in your next reply.

AFTER THAT:


1. Prepare a bootable USB drive with Windows 10

These links will guide you how to do it:

Create installation media for Windows
Download Windows 10

2. Make your computer boot from USB drive

You have to change boot order, so when the time comes, the computer will boot from the USB drive, installing Windows from scratch.

This link maybe helpful: How to Change Computer BIOS Settings

3. Repair PC

Start the computer, with the USB inserted in it. Choose Repair your computer and go to Troubleshoot > Advanced Options > Startup repair.

Follow the prompts, let the computer do the repair and let me know the result.

 

[flipper26]

Attached is the fixlog. The startup repair couldn't repair the PC (screenshot attached). I'm wondering if at this point I should just do a clean install, what is your opinion? Thanks

 

[DR M]

I'm wondering if at this point I should just do a clean install, what is your opinion? Thanks

Yes, after the last result, my opinion is that a clean install is the best for you right now. However, there is also the option of a factory reset, which only removes all the programs/apps you installed after you purchased the computer, but not your files. So, we can try this first before the clean install.

For now, let me try one more thing.

Insert the usb that you created above. Open File Explorer and let me know:

1. The drive letter for it (e.g. D).
2. Double click on it and find the Sources folder and let me know if it contains a file named "install.wim" or a file named "install.esd".

 

[flipper26]

Yes, there is an "install.esd"

 

[DR M]

Drive letter?

 

[flipper26]

The drive letter for the USB is "D"

 

[DR M]

Thanks.

• Open Command Prompt as Administrator.
• Copy and paste the following, and then Enter:

dism /Get-WimInfo /WimFile:D:\sources\install.esd

Take a screenshot of what you get and post it in your next reply.

 

[flipper26]

Attached please find the screenshots

 

[DR M]

Good.

Again, open Command Prompt as Administrator and copy/paste the following, then Enter:

DISM /Online /Cleanup-Image /RestoreHealth /Source:ESD:D:\sources\install.esd:1 /LimitAccess

Be patient until DISM repairs the Windows image component store.
When the operation is completed, you should be informed that the "operation is completed successfully".

Let me know how it went.

 

[flipper26]

Yes, it says that the operation completed successfully.

 

[DR M]

It was quick.

Now, continue with the following command, followed by Enter:

sfc /scannow

Let me know the result. You can give me the screenshot of the final result.