Windows won't start normally

Ranger · Post by **Ranger** » Tue Aug 25, 2015 8:16 am

Suddenly, Windows7 won't start and I can't figure out the cause.

Symptoms:
- System boots, it reaches the welcome screen where message "Please wait" is displayed.
- After a few tens of seconds the screen turns black
- After a few tens of seconds with the black screen, it goes back to the welcome screen displaying same message, and then it goes to the black screen again.

This cycle repeats maybe 10 times or more, then it reboots, and when the welcome screen is reached, the following message is displayed:

"The System Event Notification Service failed the logon.
The remote procedure call failed and did not execute."

I unplugged all peripherals and USB devices, including printer and mouse and tried again, but same result.

But in Safe Mode, it starts without problems.

Where should I look to figure out the problem..?

Post by **Philip** » Tue Aug 25, 2015 9:04 am

You may want to perform a virus scan, and a system file check while you are booted in safe mode.

Also, in control panel > Administrative Tools > Services, you should have the "Remote Procedure Call (RPC)" service "Started" and "Automatic".
The "Remote Procedure Call (RPC) Locator" service should be set to "Manual".

It is possible that something corrupted that service, such as malware or hdd sector corruption.

Ranger · Post by **Ranger** » Tue Aug 25, 2015 9:44 am

Hi,
Thank you for the tip.
I checked and the Remote Procedure Call (RPC) and the Remote Procedure Call (RPC) Locator services are exactly as you say.

I don't know if it helps somehow, but I uploaded the Windows Logs files in Event Viewer here:
https://www.mediafire.com/folder/w7ambzh444i71/WindowsS...

It's all the activity for just one day (today).

Still don't get what the problem is..

Post by **YeOldeStonecat** » Tue Aug 25, 2015 9:07 pm

Tried system restore to a prior day or more yet?

If she'll get into safe mode..it's almost always fixable...so there's hope.

Ranger · Post by **Ranger** » Wed Aug 26, 2015 3:47 am

It seems I posted a wrong URL, the correct one is this:
https://www.mediafire.com/folder/w7ambz ... owsStartup

I know there's hope, but I don't know what to start with...

Post by **Philip** » Wed Aug 26, 2015 11:50 am

I would do a virus/malware check, and system restore as suggested.

RaisinCain · Post by **RaisinCain** » Thu Aug 27, 2015 6:55 am

Start it in Safe Mode w/ Networking. Download Malwarebytes and Adwcleaner from the following website and run them.

http://www.malwarebytes.org & http://www.bleepingcomputer.com/download/adwcleaner/

Ranger · Post by **Ranger** » Thu Aug 27, 2015 10:54 am

THANKS RaisinCain, you're a star.

I did so and it turned out you were right!

Jeez, I can't believe some damn trojan was the cause...