System 32 problem

At start up the following message appears on the screen:

c.windows\system32\services.exe has failed to start

status code -1073741819

at this point none of the applications work although after counting down to a shut down nothing happens. I am left with a desktop but no applications active not even the anti-virus system.

It would be great if someone could point me in the direction to fix this problem.

 

can you boot to safe mode?? if so then do so and run checkdisk:

http://forums.whatthetech.com/index.php?showtopic=102348
How to perform checkdisk
if you do not have Recovery Console installed, then run from the start menu
go to start, run, type in cmd
in cmd type in chkdsk c: /r and press enter
type Y for yes and press enter
type exit and press enter
restart pc, allow checkdisk to finish and run again
this is a lengthy process depending on the size of your harddrive, the percentages will fluctuate, this is normal, you can view report in the event viewer.
go to start>run> and type in eventvwr.msc, click on the applications directory, and in the right hand panel choose winlogon.
=============

run checkdisk as many times as it takes for no errors to be found.

then come back and let me know if any errors occur and state the exact message please, it appears that you may have gotten bit by a virus.

 

Thank you Elizabeth,
I managed to get my Avast anti-virus to work and did a deep scan, it found a virus and fixed it, or so it said. I will keep your advice ready to impliment if there is a re-occurance of the problem. Hope not.
Once again thanks for the advice.

 

https://www.malwarebytes.org/

run above also and run checkdisk also look under the avast quarantine to insure that no system file has been quarantined

 

System 32 errors

Hi Elizabeth,

I have done as you suggested and have attached the results.
Not sure if this tells me there are no more errors though, and if of course I have got rid of any virus.
I did check the Avast vault and the following was what was removed:
OptimizerPro.exe
win32:Adware-gen(Adw)
Hope this makes sense.
Look forwards to your comments.

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 18/05/2016
Time: 10:35:36
User: N/A
Computer: SITE-MACHINE
Description:
Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 785 unused index entries from index $SII of file 0x9.
Cleaning up 785 unused index entries from index $SDH of file 0x9.
Cleaning up 785 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

156288320 KB total disk space.
23226696 KB in 59245 files.
30880 KB in 4717 indexes.
0 KB in bad sectors.
314248 KB in use by the system.
65536 KB occupied by the log file.
132716496 KB available on disk.

4096 bytes in each allocation unit.
39072080 total allocation units on disk.
33179124 allocation units available on disk.

Internal Info:
40 3b 01 00 e6 f9 00 00 ff 58 01 00 00 00 00 00 @;.......X......
82 07 00 00 03 00 00 00 98 09 00 00 00 00 00 00 ................
78 41 cb 02 00 00 00 00 c4 c2 89 26 00 00 00 00 xA.........&....
d4 6f e0 0d 00 00 00 00 64 8c 9d 5f 03 00 00 00 .o......d.._....
4c 8d 8f c8 05 00 00 00 ea 78 28 70 09 00 00 00 L........x(p....
99 9e 36 00 00 00 00 00 88 38 07 00 6d e7 00 00 ..6......8..m...
00 00 00 00 00 20 a5 89 05 00 00 00 6d 12 00 00 ..... ......m...

Windows has finished checking your disk.
Please wait while your computer restarts.

 

your checkdisk report was good, you are really interested in the 0 KB in bad sectors, which means that your drive is in good shape.

run your full scan with avast and see if no errors are found then you should be okay.

are you getting any error messages now??

================

http://www.shouldiremoveit.com/Optimizer-Pro-5887-program.aspx

discusses optimizer pro which is not a good program, and the

the other one, below has good removal tips for this adware (avast should have removed all bits, but you can still check)

https://malwaretips.com/blogs/win32-adware-gen-adw-removal/

 

System 32 errors

Hi Elizabeth, done a full scan with Avast, no problems reported.

The system seems more stable now, I will run the check disk again in a couple of days to see how the error count is looking.

Will let you know how I go on, or if the system 32 error occures again.

Once again thanks for all you help.

 

okey dokey

 

System 32 errors

Hi Elizabeth,
I have the c.windows\system32\services.exe has failed to start

status code -1073741819 problem again.

I have done a futher checkdisk run and here are the results.

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 19/05/2016
Time: 09:20:46
User: N/A
Computer: SITE-MACHINE
Description:
Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 5 unused index entries from index $SII of file 0x9.
Cleaning up 5 unused index entries from index $SDH of file 0x9.
Cleaning up 5 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc000009c at offset 0x15b0c000 for 0x1000 bytes.
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

156288320 KB total disk space.
23163196 KB in 60282 files.
30920 KB in 4716 indexes.
0 KB in bad sectors.
320396 KB in use by the system.
65536 KB occupied by the log file.
132773808 KB available on disk.

4096 bytes in each allocation unit.
39072080 total allocation units on disk.
33193452 allocation units available on disk.

Internal Info:
40 3b 01 00 f2 fd 00 00 71 61 01 00 00 00 00 00 @;......qa......
86 07 00 00 03 00 00 00 8c 06 00 00 00 00 00 00 ................
fc 18 e3 02 00 00 00 00 2e 29 89 24 00 00 00 00 .........).$....
18 75 18 0a 00 00 00 00 84 a2 be 62 03 00 00 00 .u.........b....
e6 b3 4a c5 05 00 00 00 62 7f 9b 6a 09 00 00 00 ..J.....b..j....
99 9e 36 00 00 00 00 00 88 38 07 00 7a eb 00 00 ..6......8..z...
00 00 00 00 00 f0 c4 85 05 00 00 00 6c 12 00 00 ............l...

Windows has finished checking your disk.
Please wait while your computer restarts.

We still have 0KB in bad sectors.

Could this just be a corrupt system file, and not a virus, or is the virus clever and needs more effort to shift?

Sorry to bother you again, but I would like to get to the bottom of this.

 

run malwarebytes free, full scan at least twice unless nothing was detected on the first scan.

https://forums.malwarebytes.org/forum/108-malware-removal-support/

forum link

do not uninstall malwarebytes when scan is done, that will save any reports and then since I am not certified to help remove malware I would like you to go to the above website and post with the malwarebytes forum for further help in cleaning your pc, you could also do this with the avast forum as you use this antivirus.

but in this thread at the malwarebytes forum someone had the same exact issue of random system32 errors and the scans the support team will have you run will find the various leftover pieces of the infection.

please keep me updated and post a link to your question at malwarebytes , please.

 

Hi Elizabeth,

I did as you suggested and ran malwarebytes.
The first pass named 17 pup type files to be removed, this was done and I ran a further 2 scans which came up with 0 results.
I did go to the malwarebytes forum and also read the thread you highlighted.
As before my system seem to settle down after the malwarebytes scans, so I thought I would give it a few days to see if there was any further sign of the infection.
Up to today, everything has been just fine, things seem to be back to normal.
I do take the point that some bits of the infection may still be lurking in the depths, but I will give it a couple more days to see.
Thanks for your time and your forebearance, I will keep you posted if I have to go to the malwarebytes forum.

 

okay great, and if it is fine, then I would turn off system restore to clear all old restore points which may be corrupted, and then would restart system restore to begin with new restore points.