Unable to run CHKDSK

[Guzman]

I’ve been trying to run chkdsk c: /f scan but everytime I run it the pc goes threw the normal process of restarting  but when it get to the part where it scans it says that it’s scanning but then it redirects me to my login screen as if I skipped it.

[Porthos]

Can you please collect and upload as an attachment the diagnostic data using our MBST?

• Download and run the Malwarebytes Support Tool
• Accept the EULA and click Advanced tab on the left (not Start Repair)
• Click the Gather Logs button, and once it completes, attach the zip file it creates on your desktop to your next reply

[Guzman]

mbst-grab-results.zip

[Guzman]

I ran another one because im not sure if i had to restart my pc before doing it so i restarted my pc and ran malwarebytes support tool again.

mbst-grab-results.zip

[AdvancedSetup]

Press the Windows + R keys to open the Run dialog, type powershell.exe, and press Enter.

In PowerShell, copy and paste the command below, and press Enter

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername –match "wininit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.txt

CHKDSKResults.txt file will be created on your desktop, that is the log file of your chkdsk scan results from Event Viewer.

Please upload that file on your next reply

 

Edited April 5, 2021 by AdvancedSetup
updated information

[Guzman]

I got this error

out-file : Could not find a part of the path 'C:\Users\hecto\Desktop\CHKDSKResults.tx'.
At line:1 char:132
+ ... ninit"} | fl timecreated, message | out-file Desktop\CHKDSKResults.tx
+                                         ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : OpenError: (:) [Out-File], DirectoryNotFoundException
    + FullyQualifiedErrorId : FileOpenFailure,Microsoft.PowerShell.Commands.OutFileCommand

[AdvancedSetup]

Okay, please try this version.

 

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername -match "wininit"} | fl timecreated, message | out-file C:\Users\hecto\Desktop\CHKDSKResults.txt

 

[AdvancedSetup]

It looks like there is/was a possible bug in some versions of PowerShell

If you copy / paste each line one-by-one into PowerShell and press the Enter key after each line it should create the CHKDSKResults.txt file on your desktop.

$UserDesktop = (Get-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" -Name "Desktop").Desktop

get-winevent -FilterHashTable @{logname="Application"; id="1001"}| ?{$_.providername -match "wininit"} | fl timecreated, message | out-file "$UserDesktop\CHKDSKResults.txt"

 

[Guzman]

This is the file that came up on my desktop it doesnt have anything in it

CHKDSKResults.txt

[Guzman]

Could it be that the files needed for chkdsk be corrupted 

[AdvancedSetup]

No, I gather that the DISK CHECK did not actually run for one reason or another.

 

 

Please review and follow the directions below to get into Windows 10 Safe Mode at a Command Prompt

If needed, here is another link with 8 ways to boot into Windows 10 Safe Mode

Please print out these instructions, or view them from another computer.

On the affected computer please log off by right click over the Start button and select Log Off.

Then, at the Login screen press and hold the shift key on the keyboard and click the power button on-screen, and select Restart. Do not let go of the Shift key until it reboots

After the Restart, it will come up with a screen as shown below. Click on the Troubleshoot button.

Then you'll have another menu like below. Click on the Advanced options button.

Now click on the Command Prompt button

You should probably see a screen similar to below, getting the command prompt ready.

Select your Account

Type in your Password

Now, type in NOTEPAD and press the Enter key

Click File -> Open inside of Notepad to see what drive Windows is on.

Now type in CHKDSK  C: /F  {make sure you use your disk letter, which may be D: or E: etc.}

NOTE: DO NOT use the /R switch unless you have signs of real disk issues or have a lot of time.
Using the /R switch can take hours or even days to complete depending on the size and speed of the computer.
For most users, the /F switch is enough

The disk check should run and look similar to the below. From this Safe Mode, the drive cannot be locked and should not ask for any reboot. It should just run like shown below.

Please try the above, and if you continue to have issues, take some pictures with your phone and post them back so we can see what's going on.

Thank you

[Guzman]

I had to make a new Microsoft account because when it came to the part for the password it wasn’t working it was saying it was the wrong password I tried to reset it but it still didn’t work but I made the other one and was able to run it

[AdvancedSetup]

When run from Safe Mode like this it cannot create the log. But what you show on screen shows that it did not find any issues.

Why are you running disk check? Are you having a specific issue?

 

[Guzman]

I was running it to see if everything worked normal when I got it back from Best Buy other than that it’s all good and I also have a question why did they delete above flash and installed Java because I’ve heard that Java can be a security risk 

[Guzman]

I also noticed a local disk f: with bitlocker encryption and i dont know what it is it doesnt let me open it .

[AdvancedSetup]

Flash has been set as End of Life by Adobe

https://www.adobe.com/products/flashplayer/end-of-life.html

Not sure why they'd install Java as only a select handful of games and utilities even use it. The vast majority of programs have no need or use of Java. You can go into your Control Panel, Programs, Programs and Features and uninstall Java. Easy to reinstall if later on you decide you do need it. https://java.com

Please click on the Start menu and type in POWERSHELL and when it shows on the menu, right-click and select "Run as administrator" and then copy / paste the following into the windows and post back the results.

 

Get-PhysicalDisk | Format-Table -AutoSize 

Then run the following as well in PowerShell and post back the results

Get-BitLockerVolume 

 

Edited April 5, 2021 by AdvancedSetup
updated information

[Guzman]

Ok so i did some looking up and i found that its a hard disk image file

[AdvancedSetup]

The command above from PowerShell will provide the details to help us provide better information

 

[Guzman]

PS C:\WINDOWS\system32> Get-PhysicalDisk | Format-Table -AutoSize

Number FriendlyName           SerialNumber                             MediaType CanPool OperationalStatus HealthStatus
------ ------------           ------------                             --------- ------- ----------------- ------------
0      WDC WDS100T2B0C-00PXH0 E823_8FA6_BF53_0001_001B_448B_4943_4225. SSD       False   OK                Healthy


PS C:\WINDOWS\system32> Get-BitLockerVolume


   ComputerName: DESKTOP-C3753RN

VolumeType      Mount CapacityGB VolumeStatus           Encryption KeyProtector              AutoUnlock Protection
                Point                                   Percentage                           Enabled    Status
----------      ----- ---------- ------------           ---------- ------------              ---------- ----------
OperatingSystem C:        930.38 FullyDecrypted         0          {}                                   Off
 

[AdvancedSetup]

Well as shown in those values there is no F: drive currently online or available to query

 

[Guzman]

PS C:\WINDOWS\system32> Get-PhysicalDisk | Format-Table -AutoSize

Number FriendlyName           SerialNumber                             MediaType CanPool OperationalStatus HealthStatus
------ ------------           ------------                             --------- ------- ----------------- ------------
0      WDC WDS100T2B0C-00PXH0 E823_8FA6_BF53_0001_001B_448B_4943_4225. SSD       False   OK                Healthy
1      Msft Virtual Disk                                               SSD       False   OK                Healthy


PS C:\WINDOWS\system32> Get-BitLockerVolume


   ComputerName: DESKTOP-C3753RN

VolumeType      Mount CapacityGB VolumeStatus           Encryption KeyProtector              AutoUnlock Protection
                Point                                   Percentage                           Enabled    Status
----------      ----- ---------- ------------           ---------- ------------              ---------- ----------
OperatingSystem C:        930.38 FullyDecrypted         0          {}                                   Off
Data            F:          0.00                                   {ExternalKey}             False      Unknown
 

[Guzman]

It came up when i ran it again because it pops up sometimes and disappears not sure if thats normal

[AdvancedSetup]

There is value in using BitLocker especially if this is a laptop. But there is also DANGER if  you loose the encryption key as you will not be able to access or decrypt the data if you encounter disk issues.
https://www.danielengberg.com/how-to-check-status-of-bitlocker-encryption-on-a-client/

 

Well, it could come from many methods that bring up a virtual drive. Probably best if we get a more detailed set of logs to check on the system and what is running.

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

Thank you

 

 

[Guzman]

The thing is i dont remember using bitlocker because i know ill end up losing the password or key but here are the results

FRST.txt Addition.txt

[AdvancedSetup]

I don't see an immediately recognizable virtual device loading it but it does show there.

 

==================== Drives ================================

Drive c: (Windows) (Fixed) (Total:930.38 GB) (Free:821.89 GB) NTFS
Drive d: (Recovery) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS
Drive e: () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS
Drive f: () (Fixed) (Total: ? GB) (Free: ? GB) (Protected) (Locked)

\\?\Volume{b6c419be-be7d-44a6-a3cf-6e586bd6aff2}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 9EDCF0FA)

Partition: GPT.

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 1024 GB) (Disk ID: 2FF7942A)
Partition 1: (Not Active) - (Size=1024 GB) - (Type=07 NTFS)

 

Please double-check there is not some type of other drive installed, connected.

We can run some more tools to try and figure out the device tomorrow, but also check on your User Manual for the motherboard

I'm assuming you built this computer yourself?