Jump to content

MBARW 0.9.14.361 B5: Windows 10 x64 Pro Stopped Booting to Profile


siliconman01

Recommended Posts

This applies to MBARW 0.9.14.361 Beta 5 and Windows 10 x64 Professional Insider Build 14257, Chrome V48.0.2564.109.

 

Installed MBARW 0.9.14.361 B5 as a fresh install yesterday.  It appeared to be running okay.  This morning, my system would not boot up to my normal profile and booted  to the default profile. MBARW was crashing and causing EUFI to improperly boot to default profile.  Had to uninstall MBARW under the default profile. Now the system boots properly.  Am attaching the MBARW files from the Program Data folder that were left over from the uninstall, but not sure they will provide any useful info.

 

The event viewer contains the following error reports:  

 

Error Report 1

"Windows was unable to load the registry. This problem is often caused by insufficient memory or insufficient security rights. 
 
 DETAIL - The process cannot access the file because it is being used by another process.
 for C:\Users\Tom xxxxx\ntuser.dat"
 
- <System>
  <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
  <EventID>1508</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8000000000000000</Keywords>
  <TimeCreated SystemTime="2016-02-16T06:48:12.996159800Z" />
  <EventRecordID>5178</EventRecordID>
  <Correlation />
  <Execution ProcessID="1056" ThreadID="1980" />
  <Channel>Application</Channel>
  <Computer>ASUSHomeBuilt</Computer>
  <Security UserID="S-1-5-18" />
  </System>
- <EventData Name="EVENT_REGLOADKEYFAILED">
  <Data Name="Error">The process cannot access the file because it is being used by another process.</Data>
  <Data Name="File">C:\Users\Tom xxxxxx\ntuser.dat</Data>
  </EventData>
  </Event>
 
Error Report 2
"Windows cannot load the locally stored profile. Possible causes of this error include insufficient security rights or a corrupt local profile. 
 
 DETAIL - The process cannot access the file because it is being used by another process"
 
- <System>
  <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
  <EventID>1502</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8000000000000000</Keywords>
  <TimeCreated SystemTime="2016-02-16T06:48:12.998898900Z" />
  <EventRecordID>5180</EventRecordID>
  <Correlation />
  <Execution ProcessID="1056" ThreadID="1980" />
  <Channel>Application</Channel>
  <Computer>ASUSHomeBuilt</Computer>
  <Security UserID="S-1-5-21-1864777572-2058394909-979136975-1001" />
  </System>
- <EventData>
  <Data Name="Error">The process cannot access the file because it is being used by another process.</Data>
  </EventData>
  </Event>
 
Error Report 3
"Windows has backed up this user profile. Windows will automatically try to use the backup profile the next time this user logs on"
 
- <System>
  <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
  <EventID>1515</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8000000000000000</Keywords>
  <TimeCreated SystemTime="2016-02-16T06:48:12.999159500Z" />
  <EventRecordID>5181</EventRecordID>
  <Correlation />
  <Execution ProcessID="1056" ThreadID="1980" />
  <Channel>Application</Channel>
  <Computer>ASUSHomeBuilt</Computer>
  <Security UserID="S-1-5-21-1864777572-2058394909-979136975-1001" />
  </System>
  <EventData />
  </Event>
 
Error Report 4
 

"Windows cannot find the local profile and is logging you on with a temporary profile. Changes you make to this profile will be lost when you log off."

 

- <System>
  <Provider Name="Microsoft-Windows-User Profiles Service" Guid="{89B1E9F0-5AFF-44A6-9B44-0A07A7CE5845}" />
  <EventID>1511</EventID>
  <Version>0</Version>
  <Level>2</Level>
  <Task>0</Task>
  <Opcode>0</Opcode>
  <Keywords>0x8000000000000000</Keywords>
  <TimeCreated SystemTime="2016-02-16T06:48:12.999888900Z" />
  <EventRecordID>5182</EventRecordID>
  <Correlation />
  <Execution ProcessID="1056" ThreadID="1980" />
  <Channel>Application</Channel>
  <Computer>ASUSHomeBuilt</Computer>
  <Security UserID="S-1-5-21-1864777572-2058394909-979136975-1001" />
  </System>
  <EventData />
  </Event>

 

 

 

Malwarebytes Anti-Ransomware.zip

Link to post
Share on other sites

This has happened to me with windows 8.1 today, after installing the latest optional updates, during the system reboot, it has booted the temporary profile, but in my case it was enough a restart, to get back my profile. However, during the upgrade process, MBARW it was running, but I had stopped the protection.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.