Notebook doesn't boot, error: autochk not existing, skipping AUTOCHECK

2 times my Notebook didn't boot anymore, it shows as an error: autochk not existing, skipping AUTOCHECK. The first time I reset the Notebook and it worked, I made a few restarts. After the last restart the same problem, it did not boot, the same failure (autochk not existing, skipping AUTOCHECK), I reset again, now it seems to work.

What is autochk / autochk.exe / AUTOCHECK for, why did it disappear? What for does one need it? How could I avoid getting these problems?

It is (at the moment) located here on my system:
C:\Windows\System32\autochk.exe
C:\Windows\syswow64\autochk.exe
C:\Windows\syswow64\de-DE\autochk.exe.mui
C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.15063.0_none_f307c682fa8fdc57\autochk.exe
C:\Windows\WinSxS\amd64_microsoft-windows-autochk_31bf3856ad364e35_10.0.15063.502_none_7732ae0427f2973a\autochk.exe
C:\Windows\WinSxS\wow64_microsoft-windows-autochk.resources_31bf3856ad364e35_10.0.15063.0_de-de_bc05b5316fe02546\autochk.exe.mui
C:\Windows\WinSxS\wow64_microsoft-windows-autochk.resources_31bf3856ad364e35_10.0.15063.502_de-de_40309cb29d42e029\autochk.exe.mui
C:\Windows\WinSxS\wow64_microsoft-windows-autochk_31bf3856ad364e35_10.0.15063.0_none_fd5c70d52ef09e52\autochk.exe
C:\Windows\WinSxS\wow64_microsoft-windows-autochk_31bf3856ad364e35_10.0.15063.502_none_818758565c535935\autochk.exe

Obviously there is no autochk.exe in the System64 folder.

And here:
C:\Windows.old\WINDOWS\syswow64\autochk.exe
C:\Windows.old\WINDOWS\System32\autochk.exe

Safety measures to start / boot / repair Win 10? - Windows 10 Forums

Hi Enter

It appears you are having disk issues. (Corruption)

Please make a backup of all your personal files asap.

Do you have install media if not you need to create.

https://www.microsoft.com/en-ca/soft...load/windows10

Next I would run sfc /scannow

You can also download Seatools for Windows and under the basic tests run S.M.A.R.T. Check

http://www.seagate.com/ca/en/support...oads/seatools/

Finally I would follow it up with chkdsk /f on drive. (Command Prompt(admin) or Powershell(admin). You will have to restart machine.) Make sure your data is backed up. Sometimes chkdsk hangs and can be problematic.


Ken

Hello Ken,

Thank you very much!

It appears you are having disk issues. (Corruption)

Yes, I have had such a thought too. Or may be malware. It cannot be an accident that the autochk disappeared twice.

Please make a backup of all your personal files asap.

I am just doing it, thank you.

Do you have install media if not you need to create.

https://www.microsoft.com/en-ca/soft...load/windows10

That's what I was asking for, no I do not have any install media.

Next I would run sfc /scannow

The internal drive with the OS is a 256 GB SSD - KINGSTON RBU-SC150S37256GD. Can I use sfc /scannow for it?

You can also download Seatools for Windows and under the basic tests run S.M.A.R.T. Check

Thank you, I already use it for the external drives.

Finally I would follow it up with chkdsk /f on drive. (Command Prompt(admin) or Powershell(admin). You will have to restart machine.) Make sure your data is backed up. Sometimes chkdsk hangs and can be problematic.

I assume, this check is not applicable for SSDs.

Yes to scannow and yes to chkdsk.

If you think malware then you could go with

https://www.malwarebytes.com/adwcleaner/

and

https://www.malwarebytes.com/

I would also check SSD manufacturers site. They may have new firmware. This could mean a clean install or not.

Data backup and media in hand your ready.

Yes to scannow and yes to chkdsk.

Not applicable to SSDs, OK.

If you think malware then you could go with

https://www.malwarebytes.com/adwcleaner/

and

https://www.malwarebytes.com//

Thank you. The last one has been running an hour or so ago, the first one just finished, when I clicked the cross (to not to shut down the compuer) at the end of the message to shut down the computer it did just it, well...

Code:

# AdwCleaner 7.0.2.1 - Logfile created on Mon Sep 25 22:15:39 2017
# Updated on 2017/29/08 by Malwarebytes 
# Database: 09-23-2017.2
# Running on Windows 10 Home (X64)
# Mode: scan
# Support: https://www.malwarebytes.com/support

***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

PUP.Optional.Legacy, C:\Users\Acer\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\Default\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\Users\Default User\AppData\Local\Host App Service
PUP.Optional.Legacy, C:\ProgramData\DriverSetupUtility
PUP.Optional.Legacy, C:\Program Files\DriverSetupUtility
PUP.Optional.Legacy, C:\Users\All Users\DriverSetupUtility


***** [ Files ] *****

PUP.Optional.Legacy, C:\Users\Acer\Desktop\App Explorer.lnk
PUP.Optional.Legacy, C:\Users\Default\Desktop\App Explorer.lnk
PUP.Optional.Legacy, C:\Users\Default User\Desktop\App Explorer.lnk


***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\{7F46C358-270D-4791-A579-AD1DDA1A3F7B}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Interface\{7BCA6879-A9F8-47DE-AE05-F5CE7EA3A474}
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\TypeLib\{ADF1FA2A-6EAA-4A97-A55F-3C8B92843EF5}
PUP.Optional.Legacy,  [Key] -  HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\Features\A38C15B2D5649AE4C9CDE19DE50DA96C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\Installer\Products\A38C15B2D5649AE4C9CDE19DE50DA96C
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\OverlayIcon.DLL
PUP.Optional.Legacy, [Key] - HKLM\SOFTWARE\Classes\AppID\Amazon1ButtonBrowserHelper.dll


***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries.

*************************



########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt ##########
---------------------------------------------------------------------------

And Malwarebytes found that:

Code:

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 25.09.17
Scan-Zeit: 15:25
Protokolldatei: 038b8bec-a1f5-11e7-8297-2c600cea7f00.json
Administrator: Ja

-Softwaredaten-
Version: 3.2.2.2029
Komponentenversion: 1.0.188
Version des Aktualisierungspakets: 1.0.2881
Lizenz: Kostenlos

-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.0)
CPU: x64
Dateisystem: NTFS
Benutzer: LAPTOP-3HCESL2G\Acer

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 351126
Erkannte Bedrohungen: 9
In die Quarantäne verschobene Bedrohungen: 9
Abgelaufene Zeit: 3 Min., 24 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 1
PUP.Optional.Amazon1Button.AppFlsh,  C:\PROGRAM FILES  (X86)\AMAZON\AMAZON1BUTTONAPP\Amazon1ButtonService64.Exe, In Quarantäne,  [1470], [333344],1.0.2881

Modul: 3
PUP.Optional.Amazon1Button.AppFlsh,  C:\PROGRAM FILES  (X86)\AMAZON\AMAZON1BUTTONAPP\Amazon1ButtonService64.Exe, In Quarantäne,  [1470], [333344],1.0.2881
PUP.Optional.Amazon1Button.AppFlsh,  C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonAppIE64.dll, In  Quarantäne, [1470], [333344],1.0.2881
PUP.Optional.Amazon1Button.AppFlsh,  C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonExtIE64.dll, In  Quarantäne, [1470], [333344],1.0.2881

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 1
PUP.Optional.Amazon1Button.AppFlsh, C:\PROGRAM FILES (X86)\AMAZON\AMAZON1BUTTONAPP, In Quarantäne, [1470], [333344],1.0.2881

Datei: 4
PUP.Optional.Amazon1Button.AppFlsh,  C:\PROGRAM FILES  (X86)\AMAZON\AMAZON1BUTTONAPP\Amazon1ButtonService64.Exe, In Quarantäne,  [1470], [333344],1.0.2881
PUP.Optional.Amazon1Button.AppFlsh,  C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonAppIE64.dll, In  Quarantäne, [1470], [333344],1.0.2881
PUP.Optional.Amazon1Button.AppFlsh,  C:\Program Files (x86)\Amazon\Amazon1ButtonApp\AmazonExtIE64.dll, In  Quarantäne, [1470], [333344],1.0.2881
Hijack.Host, C:\WINDOWS\SYSTEM32\DRIVERS\ETC\HOSTS, In Quarantäne, [25], [301381],0.0.0

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)
---------------------------------------------------------------------------

I would also check SSD manufacturers site. They may have new firmware. This could mean a clean install or not.

I will do so. The driver manager shows the newest driver is installed.

I am wondering why Malwarebytes didn't find what https://www.malwarebytes.com/adwcleaner/ found.

Many thanks

Mis-understanding.

It is quite alright and necessary to run SFC /scannow on SSD's. I say necessary as thousand of people install their OS's on SSD's.

Yes it is also okay to run chkdsk on SSD. Part of its job it to check file structure.

Please run both.

Drivers and firmware are two different things.

Malwarebytes likely didn't find as AdwCleaner removed.

Alright, I will check both.

I cannot find my SSD internal drive: 256 GB SSD - KINGSTON RBU-SC150S37256GD on the manufacturers website, I cannot find the item number or anything else I could search for there.

And I obviously do not have any data I could search for there:

Well depending on how much energy you want to put into this you could try contacting them by email / chat.

I had a quick peek. They don't make it easy.

Well, to contact such people will need the energy of a powerplant or such, I guess. And it can become dangerous. A weak person should better leave it.

Yes, not easy, those dudes know how to make one's life hard.

True but just give them the all the numbers you have they relate to model and ask them what series that relates to on website. Agree, don't let them on device.