Kolobos wrote: Did you replace any files?
In the log you can see:
C: \ Windows \ explorer.exe
[2017-08-05 12:23] - [2017-07-23 15:12] - 004469840 _____ (Microsoft Corporation) FC1145751AC6E4FF1656381BB09A5AA3
C: \ Windows \ SysWOW64 \ explorer.exe
[2017-07-23 15:12] - [2017-07-23 15:12] - 004469840 _____ (Microsoft Corporation) FC1145751AC6E4FF1656381BB09A5AA3
Yes, before FRST was running, I replaced the explorer from windows by taking it from the winsxs directory.
After starting FRST, I replaced all files in the Bamital & volsnap section that were not verified. This time I took the files from another laptop with the same system. In addition to the substitution, I also removed this task:
C: \ Windows \ Tasks \ {57CD816F-7A8A-DD63-74BA-5A4317F59EBC} .job
After this change, the system did not log in, it only called the stop code 0xc000021a. I went back to the old winlogon.exe file and everything went back to its previous state.
Kolobos wrote:
In normal mode, if you run the explorer from the task manager, does it start correctly or not?
After selecting the combination of Ctrl + Alt + Del keys and selecting the task manager, you have to wait about 15 minutes for the window to appear. An explorer is running in the processes. After completing the process and restarting after 30 minutes, a desktop appears, where I can right click on the empty space of the desktop, and when you hover over an icon or taskbar, the mouse cursor is still busy - the spinning circle.
It looks as if something was blocking, but in the task manager the processor is practically zero and the memory usage is 15%.
I am enclosing the log of the fixlist.txt implementation. Unfortunately, it's still the same.
