MrZero

I think I'm fine now, thank you very much for all your help.

Yes

Hitting Export and trying to save it didn't do anything so I copied it to clipboard and pasted it into note pad ScanLog.txt

Another crash after 5 hours

sfcdetails.txt Log Name: ApplicationSource: Microsoft-Windows-WininitDate: 5/27/2015 2:31:09 PMEvent ID: 1001Task Category: NoneLevel: InformationKeywords: ClassicUser: N/AComputer: ChrisPCDescription: Checking file system on C:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 187136 file records processed. File verification completed. 1226 large file records processed. 0 bad file records processed. 2 EA records processed. 58 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 254262 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 187136 file SDs/SIDs processed. Cleaning up 14 unused index entries from index $SII of file 0x9.Cleaning up 14 unused index entries from index $SDH of file 0x9.Cleaning up 14 unused security descriptors.CHKDSK is compacting the security descriptor stream 33564 data files processed. CHKDSK is verifying Usn Journal... 36608192 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 187120 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 2112644 free clusters processed. Free space verification is complete.CHKDSK discovered free space marked as allocated in themaster file table (MFT) bitmap.Correcting errors in the Volume Bitmap.Windows has made corrections to the file system. 60567583 KB total disk space. 51740556 KB in 134288 files. 83836 KB in 33567 indexes. 0 KB in bad sectors. 292615 KB in use by the system. 65536 KB occupied by the log file. 8450576 KB available on disk. 4096 bytes in each allocation unit. 15141895 total allocation units on disk. 2112644 allocation units available on disk. Internal Info:00 db 02 00 b8 8f 02 00 be cd 04 00 00 00 00 00 ................16 01 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ....:...........00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Windows has finished checking your disk.Please wait while your computer restarts. Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2015-05-27T21:31:09.000000000Z" /> <EventRecordID>21833</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ChrisPC</Computer> <Security /> </System> <EventData> <Data> Checking file system on C:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 187136 file records processed. File verification completed. 1226 large file records processed. 0 bad file records processed. 2 EA records processed. 58 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 254262 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 187136 file SDs/SIDs processed. Cleaning up 14 unused index entries from index $SII of file 0x9.Cleaning up 14 unused index entries from index $SDH of file 0x9.Cleaning up 14 unused security descriptors.CHKDSK is compacting the security descriptor stream 33564 data files processed. CHKDSK is verifying Usn Journal... 36608192 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 187120 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 2112644 free clusters processed. Free space verification is complete.CHKDSK discovered free space marked as allocated in themaster file table (MFT) bitmap.Correcting errors in the Volume Bitmap.Windows has made corrections to the file system. 60567583 KB total disk space. 51740556 KB in 134288 files. 83836 KB in 33567 indexes. 0 KB in bad sectors. 292615 KB in use by the system. 65536 KB occupied by the log file. 8450576 KB available on disk. 4096 bytes in each allocation unit. 15141895 total allocation units on disk. 2112644 allocation units available on disk. Internal Info:00 db 02 00 b8 8f 02 00 be cd 04 00 00 00 00 00 ................16 01 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ....:...........00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Windows has finished checking your disk.Please wait while your computer restarts.</Data> </EventData></Event> Log Name: ApplicationSource: Microsoft-Windows-WininitDate: 5/27/2015 2:31:09 PMEvent ID: 1001Task Category: NoneLevel: InformationKeywords: ClassicUser: N/AComputer: ChrisPCDescription: Checking file system on D:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 136960 file records processed. File verification completed. 182 large file records processed. 0 bad file records processed. 0 EA records processed. 0 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 144782 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 136960 file SDs/SIDs processed. Cleaning up 1 unused index entries from index $SII of file 0x9.Cleaning up 1 unused index entries from index $SDH of file 0x9.Cleaning up 1 unused security descriptors.Security descriptor verification completed. 3912 data files processed. CHKDSK is verifying Usn Journal... 37173976 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 136944 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 29864800 free clusters processed. Free space verification is complete.Windows has checked the file system and found no problems. 244196351 KB total disk space. 124447736 KB in 91367 files. 42240 KB in 3913 indexes. 0 KB in bad sectors. 247175 KB in use by the system. 65536 KB occupied by the log file. 119459200 KB available on disk. 4096 bytes in each allocation unit. 61049087 total allocation units on disk. 29864800 allocation units available on disk. Internal Info:00 17 02 00 3c 74 01 00 18 a7 02 00 00 00 00 00 ....<t..........11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2015-05-27T21:31:09.000000000Z" /> <EventRecordID>21834</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ChrisPC</Computer> <Security /> </System> <EventData> <Data> Checking file system on D:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 136960 file records processed. File verification completed. 182 large file records processed. 0 bad file records processed. 0 EA records processed. 0 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 144782 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 136960 file SDs/SIDs processed. Cleaning up 1 unused index entries from index $SII of file 0x9.Cleaning up 1 unused index entries from index $SDH of file 0x9.Cleaning up 1 unused security descriptors.Security descriptor verification completed. 3912 data files processed. CHKDSK is verifying Usn Journal... 37173976 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 136944 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 29864800 free clusters processed. Free space verification is complete.Windows has checked the file system and found no problems. 244196351 KB total disk space. 124447736 KB in 91367 files. 42240 KB in 3913 indexes. 0 KB in bad sectors. 247175 KB in use by the system. 65536 KB occupied by the log file. 119459200 KB available on disk. 4096 bytes in each allocation unit. 61049087 total allocation units on disk. 29864800 allocation units available on disk. Internal Info:00 17 02 00 3c 74 01 00 18 a7 02 00 00 00 00 00 ....<t..........11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</Data> </EventData></Event>

I did not, I thought those were the same thing the first time I read it. Should I rerun check disk after SFC or no?

Log Name: ApplicationSource: Microsoft-Windows-WininitDate: 5/27/2015 7:09:42 AMEvent ID: 1001Task Category: NoneLevel: InformationKeywords: ClassicUser: N/AComputer: ChrisPCDescription: Checking file system on C:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 187136 file records processed. File verification completed. 1226 large file records processed. 0 bad file records processed. 2 EA records processed. 58 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 254240 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 187136 file SDs/SIDs processed. Cleaning up 429 unused index entries from index $SII of file 0x9.Cleaning up 429 unused index entries from index $SDH of file 0x9.Cleaning up 429 unused security descriptors.Security descriptor verification completed. 33553 data files processed. CHKDSK is verifying Usn Journal... 35024544 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 187120 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 2016400 free clusters processed. Free space verification is complete.Windows has checked the file system and found no problems. 60567583 KB total disk space. 52123192 KB in 132309 files. 82612 KB in 33554 indexes. 0 KB in bad sectors. 296179 KB in use by the system. 65536 KB occupied by the log file. 8065600 KB available on disk. 4096 bytes in each allocation unit. 15141895 total allocation units on disk. 2016400 allocation units available on disk. Internal Info:00 db 02 00 f2 87 02 00 79 be 04 00 00 00 00 00 ........y.......15 01 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ....:...........00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Windows has finished checking your disk.Please wait while your computer restarts. Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2015-05-27T14:09:42.000000000Z" /> <EventRecordID>21799</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ChrisPC</Computer> <Security /> </System> <EventData> <Data> Checking file system on C:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 187136 file records processed. File verification completed. 1226 large file records processed. 0 bad file records processed. 2 EA records processed. 58 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 254240 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 187136 file SDs/SIDs processed. Cleaning up 429 unused index entries from index $SII of file 0x9.Cleaning up 429 unused index entries from index $SDH of file 0x9.Cleaning up 429 unused security descriptors.Security descriptor verification completed. 33553 data files processed. CHKDSK is verifying Usn Journal... 35024544 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 187120 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 2016400 free clusters processed. Free space verification is complete.Windows has checked the file system and found no problems. 60567583 KB total disk space. 52123192 KB in 132309 files. 82612 KB in 33554 indexes. 0 KB in bad sectors. 296179 KB in use by the system. 65536 KB occupied by the log file. 8065600 KB available on disk. 4096 bytes in each allocation unit. 15141895 total allocation units on disk. 2016400 allocation units available on disk. Internal Info:00 db 02 00 f2 87 02 00 79 be 04 00 00 00 00 00 ........y.......15 01 00 00 3a 00 00 00 00 00 00 00 00 00 00 00 ....:...........00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Windows has finished checking your disk.Please wait while your computer restarts.</Data> </EventData></Event> Log Name: ApplicationSource: Microsoft-Windows-WininitDate: 5/27/2015 7:09:42 AMEvent ID: 1001Task Category: NoneLevel: InformationKeywords: ClassicUser: N/AComputer: ChrisPCDescription: Checking file system on D:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 136960 file records processed. File verification completed. 182 large file records processed. 0 bad file records processed. 0 EA records processed. 0 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 144780 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 136960 file SDs/SIDs processed. Cleaning up 212 unused index entries from index $SII of file 0x9.Cleaning up 212 unused index entries from index $SDH of file 0x9.Cleaning up 212 unused security descriptors.Security descriptor verification completed. 3911 data files processed. CHKDSK is verifying Usn Journal... 36185168 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 136944 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 29864963 free clusters processed. Free space verification is complete.Windows has checked the file system and found no problems. 244196351 KB total disk space. 124448104 KB in 91366 files. 42240 KB in 3912 indexes. 0 KB in bad sectors. 246151 KB in use by the system. 65536 KB occupied by the log file. 119459856 KB available on disk. 4096 bytes in each allocation unit. 61049087 total allocation units on disk. 29864964 allocation units available on disk. Internal Info:00 17 02 00 3a 74 01 00 16 a7 02 00 00 00 00 00 ....:t..........11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ Event Xml:<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" /> <EventID Qualifiers="16384">1001</EventID> <Version>0</Version> <Level>4</Level> <Task>0</Task> <Opcode>0</Opcode> <Keywords>0x80000000000000</Keywords> <TimeCreated SystemTime="2015-05-27T14:09:42.000000000Z" /> <EventRecordID>21800</EventRecordID> <Correlation /> <Execution ProcessID="0" ThreadID="0" /> <Channel>Application</Channel> <Computer>ChrisPC</Computer> <Security /> </System> <EventData> <Data> Checking file system on D:The type of the file system is NTFS. A disk check has been scheduled.Windows will now check the disk. CHKDSK is verifying files (stage 1 of 5)... 136960 file records processed. File verification completed. 182 large file records processed. 0 bad file records processed. 0 EA records processed. 0 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)... 144780 index entries processed. Index verification completed. 0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)... 136960 file SDs/SIDs processed. Cleaning up 212 unused index entries from index $SII of file 0x9.Cleaning up 212 unused index entries from index $SDH of file 0x9.Cleaning up 212 unused security descriptors.Security descriptor verification completed. 3911 data files processed. CHKDSK is verifying Usn Journal... 36185168 USN bytes processed. Usn Journal verification completed.CHKDSK is verifying file data (stage 4 of 5)... 136944 files processed. File data verification completed.CHKDSK is verifying free space (stage 5 of 5)... 29864963 free clusters processed. Free space verification is complete.Windows has checked the file system and found no problems. 244196351 KB total disk space. 124448104 KB in 91366 files. 42240 KB in 3912 indexes. 0 KB in bad sectors. 246151 KB in use by the system. 65536 KB occupied by the log file. 119459856 KB available on disk. 4096 bytes in each allocation unit. 61049087 total allocation units on disk. 29864964 allocation units available on disk. Internal Info:00 17 02 00 3a 74 01 00 16 a7 02 00 00 00 00 00 ....:t..........11 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................</Data> </EventData></Event>

Crashed during scan after 9 hours and 41 minutes

7 and a half hours and still going

I only let hyper scan run for about an hour this time and didn't completely finish. Should I let it run longer?

Fixlog.txt ComboFix.txt

I don't see a fixlist.txt file to download

Disregard the above. Scan just finished. mbar-log-2015-05-24 (01-02-47).txt system-log.txt Addition.txt FRST.txt

Should the Anti-Rootkit scan take this long? Its been running for nearly 24 hours and it's still on the scanning system phase

I've been running hyper scan for 2 hours and the objects scanned number has stopped but the detected objects number keeps rising as time goes on. At the time of this message the scan has been running for 2 hours 10 minutes with 8,599 detected objects on heuristic analysis.