Jump to content

Recommended Posts

Hello,

I am running windows 10 on a desktop PC and it has recently and suddenly gotten buggy.  Some applications, such as Microsoft Edge, the calculator and games have disappeared and I can't download anything from the windows store.  Internet has slowed down as well.  I run ESET NOD32 and keep it updated and I ran Malwarebytes and found no issues.  Hopefully you can shed some light on the issue.

Thanks,
Bill

Addition.txt

FRST.txt

Link to post
Share on other sites

Hello,

When did this happen?

 

2eyjdoj.png Check Disk

  • Press the WindowsKey.png on your keyboard. Type cmd and right click >> Run as Administrator.
  • Copy/Enter the command below and press Enter:
    chkdsk C: /r
  • You should get a message to schedule Check Disk at next system restart. Please type Y and press Enter.
  • All you should do now is to restart your PC and let the Check Disk process finish uninterrupted.


Check Disk report:

  • Press the WindowsKey.png + R on your keyboard at the same time. Type powershell.exe and click OK.
  • Copy and paste the following command inside powershell window and press Enter:
    get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt
  • Paste the contents into your next reply.

Link to post
Share on other sites
T6 hours ago, TwinHeadedEagle said:

Hello,

When did this happen?

 

2eyjdoj.png Check Disk

  • Press the WindowsKey.png on your keyboard. Type cmd and right click >> Run as Administrator.
  • Copy/Enter the command below and press Enter:
    
    chkdsk C: /r
  • You should get a message to schedule Check Disk at next system restart. Please type Y and press Enter.
  • All you should do now is to restart your PC and let the Check Disk process finish uninterrupted.


Check Disk report:

  • Press the WindowsKey.png + R on your keyboard at the same time. Type powershell.exe and click OK.
  • Copy and paste the following command inside powershell window and press Enter:
    
    get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt
  • Paste the contents into your next reply.

 

Thanks for the reply.  This started about a week ago.

I ran chkdsk twice and both times it froze at 12% complete (I let it go for over an hour at 12% both times).  Here is the report after a forced exit/power down:

TimeCreated : 2/22/2017 7:32:53 PM
Message     :
             
              Checking file system on C:
              The type of the file system is NTFS.
              Volume label is OS.
             
             
              One of your disks needs to be checked for consistency. You
              may cancel the disk check, but it is strongly recommended
              that you continue.
              Windows will now check the disk.                        
             
              Stage 1: Examining basic file system structure ...
              Cleaning up instance tags for file 0x2b3b9.
              The total allocated size 0x2af000 of attribute of type 0x80 and instance
              tag 0x4 in file 0x5225f is incorrect.  The expected value is 2b0000.
              Fixing corrupt attribute record (128, )
              in file record segment 336479.
                1396736 file records processed.                                                       
              File verification completed.
                25564 large file records processed.                                  
                0 bad file records processed.                                    
             
              Stage 2: Examining file name linkage ...
              Index entry WIC797~1.ETL of index $I30 in file 0x3fa89 points to unused file 0x224a2.
              Deleting index entry WIC797~1.ETL in index $I30 of file 260745.
              Index entry BACKGROUNDTASKHOST.EXE-0EA72421.pf of index $I30 in file 0x5034a points to unused file
              0x68eb.
              Deleting index entry BACKGROUNDTASKHOST.EXE-0EA72421.pf in index $I30 of file 328522.
              Index entry BAD49B~1.PF of index $I30 in file 0x5034a points to unused file 0x68eb.
              Deleting index entry BAD49B~1.PF in index $I30 of file 328522.
              The file reference 0x980000000004c0 of index entry RUA42B~1.PF of index $I30
              with parent 0x5034a is not the same as 0x970000000004c0.
              Deleting index entry RUA42B~1.PF in index $I30 of file 328522.
              The file reference 0x980000000004c0 of index entry RUNDLL32.EXE-BE8830B6.pf of index $I30
              with parent 0x5034a is not the same as 0x970000000004c0.
              Deleting index entry RUNDLL32.EXE-BE8830B6.pf in index $I30 of file 328522.
              Index entry SRU.chk of index $I30 in file 0x58b8c points to unused file 0x5295a.
              Deleting index entry SRU.chk in index $I30 of file 363404.
              Index entry SRUDB.dat of index $I30 in file 0x58b8c points to unused file 0x529ac.
              Deleting index entry SRUDB.dat in index $I30 of file 363404.
              Index entry SRUDB.jfm of index $I30 in file 0x58b8c points to unused file 0x5299e.
              Deleting index entry SRUDB.jfm in index $I30 of file 363404.
              Index entry SRUres00001.jrs of index $I30 in file 0x58b8c points to unused file 0x5294b.
              Deleting index entry SRUres00001.jrs in index $I30 of file 363404.
              Index entry SRUres00002.jrs of index $I30 in file 0x58b8c points to unused file 0x5294d.
              Deleting index entry SRUres00002.jrs in index $I30 of file 363404.
              Index entry SRURES~1.JRS of index $I30 in file 0x58b8c points to unused file 0x5294b.
              Deleting index entry SRURES~1.JRS in index $I30 of file 363404.
              Index entry SRURES~2.JRS of index $I30 in file 0x58b8c points to unused file 0x5294d.
              Deleting index entry SRURES~2.JRS in index $I30 of file 363404.
              Index entry URL882A.tmp of index $I30 in file 0x65be6 points to unused file 0x8268.
              Deleting index entry URL882A.tmp in index $I30 of file 416742.
              The file reference 0x134000000000068 of index entry DO3EF0~1.ETL of index $I30
              with parent 0x6e7cd is not the same as 0x135000000000068.
              Deleting index entry DO3EF0~1.ETL in index $I30 of file 452557.
              The file reference 0x134000000000068 of index entry dosvc.20161025_180625_097.etl of index $I30
              with parent 0x6e7cd is not the same as 0x135000000000068.
              Deleting index entry dosvc.20161025_180625_097.etl in index $I30 of file 452557.
              Unable to locate the file name attribute of index entry NOE99D~1.ETL
              of index $I30 with parent 0x7adbb in file 0x11c.
              Deleting index entry NOE99D~1.ETL in index $I30 of file 503227.
              Unable to locate the file name attribute of index entry NotificationUxBroker.060.etl
              of index $I30 with parent 0x7adbb in file 0x11c.
              Deleting index entry NotificationUxBroker.060.etl in index $I30 of file 503227.
              Unable to locate the file name attribute of index entry UpdateSessionOrchestration.039.etl
              of index $I30 with parent 0x7adbb in file 0x4c3.
              Deleting index entry UpdateSessionOrchestration.039.etl in index $I30 of file 503227.
              Unable to locate the file name attribute of index entry UPF4EA~1.ETL
              of index $I30 with parent 0x7adbb in file 0x4c3.
              Deleting index entry UPF4EA~1.ETL in index $I30 of file 503227.
              Index entry UPPS.bin of index $I30 in file 0x7ae06 points to unused file 0xfa85.
              Deleting index entry UPPS.bin in index $I30 of file 503302.
              The multi-sector header signature for VCN 0x0 of index $I30
              in file 0x7ae24 is incorrect.
              00 00 00 00 00 00 00 00 ?? ?? ?? ?? ?? ?? ?? ??  ................
              Correcting error in index $I30 for file 503332.
              The index bitmap $I30 in file 0x7ae24 is incorrect.
              CHKDSK discovered free space marked as allocated in the bitmap for index $I30 for file 503332.
              The down pointer of current index entry with length 0x18 is invalid.
              00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00  ................
              ff ff ff ff ff ff ff ff ?? ?? ?? ?? ?? ?? ?? ??  ................
              Sorting index $I30 in file 503332.
                1489572 index entries processed.                                                      
              Index verification completed.
              CHKDSK is scanning unindexed files for reconnect to their original directory.
              Recovering orphaned file DOABA1~1.ETL (1216) into directory file 452557.
              Recovering orphaned file dosvc.20161024_233956_741.etl (1216) into directory file 452557.
              Recovering orphaned file UPPS.bin (26695) into directory file 503302.
              Recovering orphaned file 3VL9CEIQ (351693) into directory file 503332.
              Recovering orphaned file ZMUWQVI4 (351694) into directory file 503332.
              Recovering orphaned file 5NOZOWAO (351695) into directory file 503332.
              Recovering orphaned file YZ8SYQ0P (351696) into directory file 503332.
                10 unindexed files scanned.                                       
              Recovering orphaned file CONTAI~1.DAT (462086) into directory file 503332.
              Recovering orphaned file container.dat (462086) into directory file 503332.
                7 unindexed files recovered to original directory.
              CHKDSK is recovering remaining unindexed files.
                3 unindexed files recovered to lost and found.                   
                  Lost and found is located at \found.000
             
             
              Stage 3: Examining security descriptors ...
              Cleaning up 5054 unused index entries from index $SII of file 0x9.
              Cleaning up 5054 unused index entries from index $SDH of file 0x9.
              Cleaning up 5054 unused security descriptors.
              Security descriptor verification completed.
                46419 data files processed.                                          
              CHKDSK is verifying Usn Journal...
              Usn Journal verification completed.
              Correcting errors in the master file table's (MFT) BITMAP attribute.
              Correcting errors in the Volume Bitmap.
             
              Windows has made corrections to the file system.
              No further action is required.
             
               962238463 KB total disk space.
               422363436 KB in 370157 files.
                  225256 KB in 46422 indexes.
                       0 KB in bad sectors.
                 1500067 KB in use by the system.
                   65536 KB occupied by the log file.
               538149704 KB available on disk.
             
                    4096 bytes in each allocation unit.
               240559615 total allocation units on disk.
               134537426 allocation units available on disk.
             
              Internal Info:
              00 50 15 00 5f 5a 06 00 61 13 0c 00 00 00 00 00  .P.._Z..a.......
              b4 15 00 00 b9 7b 00 00 00 00 00 00 00 00 00 00  .....{..........
             
              Windows has finished checking your disk.
              Please wait while your computer restarts.
             

 

Link to post
Share on other sites

FRST.gif Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

  • Right-click on FRST.gif icon and select RunAsAdmin.jpg Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Make sure that Addition.txt option is checked. option is checked.

    2873ryc.png

  • Press Scan button and wait.

  • The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.


Please attach report into your next reply.

Link to post
Share on other sites

No it's not crashing.  If there's no malware, it seems like it's probably a windows 10 problem.  Things disappeared, the windows appstore is gone, and when I go there online, I can't download anything.  Maybe i'll try reinstalling windows.

Link to post
Share on other sites
Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    No registered users viewing this page.

Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.