New
#21
1) In the left lower corner search type: msinfo32 > allow it to load for 20 to 30 minutes > save as NFO > post a share link into the thread
2) In the left lower corner search type: dxdiag > allow it to load for 20 to 30 minutes > save as text > post a share link into this thread
3) The logs displayed BSOD with the last one on 1/23/2020.
4) Non-BSOD crashes were seen on 3/28, 3/21, 3/18, 3/8, 3/4, 2/29, 2/5
These are see when there are heat problems, malfunctioning hardware, and manual power offs due to hangs and freezes, etc.
4) The logs displayed corruption of the drive file system.
5) Please make sure that images are posted for all steps / tests:
Take Screenshot in Windows 10
How to Upload and Post Screenshots and Files at Ten Forums
6) If the computer has Ccleaner (do not install the software if it is not already installed) > click windows tab or custom clean > scroll down to system and advanced > post an image into the thread
Open Ccleaner > click windows tab or custom clean > scroll down to system and advanced > post an image into the thread
7) Run HD Tune (free version) (all drives)
HD Tune website
Post images into the thread for results on these tabs:
a) Health
b) Benchmark
c) Full error scan
8) Run Sea Tools for Windows
long generic test
Post an image of the test result into the thread
SeaTools for Windows |
Seagate
How to use SeaTools for Windows | Seagate Support US
9) Run HD Sentinel: (free or trial edition)
Hard Disk Sentinel - HDD health and temperature monitoring
Hard Disk Sentinel - HDD health and temperature monitoring
Post images of each of these tabs into the thread:
Overview tab
Temperature
SMART
Disk performance
10) Open administrative command prompt and type or copy and paste:
chkdsk /r /v
This may take hours to run so plan to run overnight.
Run on all drives using the syntax: chkdsk /r /v C: or chkdsk /r /v D: changing the drive letter to the applicable drive.
C:\Windows\system32>chkdsk /r /v
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
Type: Y
reboot
11) Use the information in this link to find the chkdsk report in the event viewer. Copy and paste into notepad > save to desktop > post into the thread using one drive or drop box share link:
Read Chkdsk Log in Event Viewer in Windows 10 Windows 10 Performance Maintenance Tutorials
Read Chkdsk Log in Event Viewer in Windows 10
12) When available post images of the results for ESET and Superantispyware scans.
13) Open control panel > add remove programs > post images into the thread
14) Open device manager > click view > click show hidden devices > manually expand each row > look for any row displaying a yellow triangle with black exclamation mark or unknown device > post images into the thread
15) Open disk management > by default some columns are compressed > widen each Status and Volume > make sure the contents within the parenthesis are in full view and that none of the characters are cutoff > view disk 0 > widen this row as needed so that all of the characters are in full view > post an image into the thread
Disk Management - How to Post a Screenshot of
16) Run each DM and V2 after completing all of the above steps
17) Run the administrative PS command after completing all of the above steps
!8) If there are any problems running either DM or V2 place the computer in clean boot and run each the log collectors
Perform a Clean Boot in Windows 10 to Troubleshoot Software Conflicts
19) If there are any problems running either DM or V2 in clean boot then place the computer in safe mode (shift + restart) and run each log collector in safe mode
Boot into Safe Mode on Windows 10
Code:Event[17743]: Log Name: System Source: Ntfs Date: 2020-03-28T08:12:14.999 Event ID: 55 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Calamity Description: A corruption was discovered in the file system structure on volume C:. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x60000000c758f. The name of the file is "\Users\rfochtmann\AppData\Local\ConnectedDevicesPlatform\801759c501da4a32\ActivitiesCache.db-wal".Code:Event[17742]: Log Name: System Source: Ntfs Date: 2020-03-28T08:12:14.644 Event ID: 55 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Calamity Description: A corruption was discovered in the file system structure on volume C:. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x21000000030ff2. The name of the file is "\Users\rfochtmann\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal".Code:Event[17741]: Log Name: System Source: Ntfs Date: 2020-03-28T08:12:14.558 Event ID: 55 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Calamity Description: A corruption was discovered in the file system structure on volume C:. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x84000000006c4f. The name of the file is "\Users\rfochtmann\AppData\Roaming\Thunderbird\Profiles\f2i0yicv.default\ImapMail\imap.gmail-1.com\INBOX.msf".Code:Event[17740]: Log Name: System Source: Ntfs Date: 2020-03-28T08:12:14.267 Event ID: 55 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Calamity Description: A corruption was discovered in the file system structure on volume C:. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x28000000047ab3. The name of the file is "\hiberfil.sys".Code:Event[17738]: Log Name: System Source: Ntfs Date: 2020-03-28T08:12:09.643 Event ID: 55 Task: N/A Level: Error Opcode: Info Keyword: N/A User: S-1-5-18 User Name: NT AUTHORITY\SYSTEM Computer: Calamity Description: A corruption was discovered in the file system structure on volume Calamity. The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x28000000047ab3. The name of the file is "\hiberfil.sys".
Please make sure images are posted for all steps / tests:
Take Screenshot in Windows 10
How to Upload and Post Screenshots and Files at Ten Forums
eventlog: Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
I have had SuperAntiSpyware running for 12.5 hours and the totals have NOT changed during the last 5 hours, yet when I hit Stop Scan it says it is not finished..Also under the Files Scanned section the same file is listed. Any suggestions?
I am pausing Super and now running ESET
- - - Updated - - -
4) The logs displayed corruption of the drive file system. What does that mean? New computer, new hard drive?
5) Please make sure that images are posted for all steps / tests: When you write IMAGES do you mean saved files like eventlog.txt or do you mean an actual screenshot of the control panel screen?
In the 5 Code boxes above are the corrupted files. Do you want me to find them and delete them or what if anything should I do with this info?
Dxdiag: Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
msinfo32: Microsoft OneDrive - Access files anywhere. Create docs with free Office Online.
How many of these tests can I run while Super and ESET are running?
I'm working my way down post #22 and I will try CCleaner next as it is on my machine.
Do I understand you correctly? You want me to clean all of the System and Advanced items? or do you just want me to analyze them? And do I uncheck the items in Edge, IE, Explorer?
You can run anything while malware scanning is running in the background.
The drives (hardware needs to be checked with HD Tune and Sea Tools for Windows) will be tested.
If there are no significant problems then the drive file system will be fixed running the chkdsk switches.
Different operating systems can be installed on a disk drive. They use different file systems.
If the file system becomes corrupt the files can no longer be read.
This can cause failure to boot or loss of important files.
Chkdsk switches can fix and recover problems related to corruption of the drive file system (NTFS).
Superantispyware was hanging /freezing.
Run malwarebytes > post images of the results into the thread
https://www.malwarebytes.com/
Images = screenshots (snipping tool)
I'm working my way down post #22 and I will try CCleaner next as it is on my machine.
Do I understand you correctly? You want me to clean all of the System and Advanced items? or do you just want me to analyze them? And do I uncheck the items in Edge, IE, Explorer?
CCleaner wants me to restart to clean Edge, but restarting takes forever to get back to where I am as all changes I have made are lost. FF has to be synced etc. So I am not going to restart until I have to, or you tell me to.
Last edited by Gomer; 31 Mar 2020 at 10:48.
For Ccleaner uncheck:
a) all boxes in the advanced section
b) all boxes in the system section except for
Empty recycle bin
Temporary files
Clipboard
Chkdsk file fragments
The step was to only post image settings.
Do not run the tool at this time as the files if available can be used for troubleshooting.
Super is still scanning, as is ESET, and HD tune Error Scan
The benchmark numbers were low.
The CPU was high.
Place the computer in clean boot > upload V2
Run the benchmark again.
If CPU is > 10 then place into safe mode and repeat benchmarks.
For Ccleaner please uncheck the boxes per the prior post.
Please define "Place the computer in clean boot"
Last edited by Gomer; 31 Mar 2020 at 21:23.
When the computer is booted there are different options:
a) normal boot
b) selective boot
c) clean boot
d) boot into safe mode
etc.
In a prior post there were tutorials for each clean boot and safe mode.
Post #22 steps #18 and #19
For Ccleaner check these boxes:
a) Empty recycle bin
b) Temporary files
c) Clipboard
d) Chkdsk File Fragments