Some findings: (Today is 04/19/2024)
a) KB5034441 Security Update installed on 4/11/2024 12:00:00 AM
b) Recurrent chkdsk problems (drive file system corruption) on C: also corruption on R:
c) Last BSOD bugcheck 50 on 04/11/2024
d) Last unexpected shutdown and restart 04/17 /2024
Please backup files > replace the Windows drive
Code:
Drive: C:
Free Space: 916.0 GB
Total Space: 953.0 GB
File System: NTFS
Model: WDC WD10 EZEX-08M2NA0 SCSI Disk Device
Code:
Event[1347]:
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2024-04-17T13:39:11.2440000Z
Event ID: 98
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
Volume C: (\Device\HarddiskVolume2) needs to be taken offline to perform a Full Chkdsk. Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Code:
Event[1188]:
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2024-04-17T13:03:29.1020000Z
Event ID: 41
Task: N/A
Level: Critical
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Code:
Event[1125]:
Log Name: System
Source: Ntfs
Date: 2024-04-17T12:36:20.0430000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
A corruption was discovered in the file system structure on volume C:.
A corruption was found in a file system index structure. The file reference number is 0x800000001ca87. The name of the file is "\Users\Z\AppData\Local\Microsoft\OneDrive\24.062.0326.0002\LogoImages". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".
Code:
Event[1058]:
Log Name: System
Source: Ntfs
Date: 2024-04-17T12:21:26.6870000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
A corruption was discovered in the file system structure on volume C:.
A corruption was found in a file system index structure. The file reference number is 0x800000001ca87. The name of the file is "\Users\Z\AppData\Local\Microsoft\OneDrive\24.062.0326.0002\LogoImages". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".
Code:
Event[1045]:
Log Name: System
Source: Ntfs
Date: 2024-04-17T12:11:56.8470000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
A corruption was discovered in the file system structure on volume C:.
The exact nature of the corruption is unknown. The file system structures need to be scanned online.
Code:
Event[862]:
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2024-04-11T15:50:35.7920000Z
Event ID: 98
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
Volume \\?\Volume{7fe07e32-0000-0000-0000-100000000000} (\Device\HarddiskVolume1) needs to be taken offline to perform a Full Chkdsk. Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Code:
Event[61]:
Log Name: System
Source: Ntfs
Date: 2024-04-11T11:55:39.7670000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
A corruption was discovered in the file system structure on volume ??.
A corruption was found in a file system index structure. The file reference number is 0x2000000019082. The name of the file is "\System Volume Information". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".
Code:
Event[50]:
Log Name: System
Source: Ntfs
Date: 2024-04-11T11:47:46.7310000Z
Event ID: 130
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
The file system structure on volume C: has now been repaired.
Event[51]:
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2024-04-11T11:47:53.5000000Z
Event ID: 98
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
Volume C: (\Device\HarddiskVolume2) requires an Online Scan. An Online Scan will automatically run as part of the next scheduled maintenance task. Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.
Event[52]:
Log Name: System
Source: Ntfs
Date: 2024-04-11T11:47:53.5110000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
A corruption was discovered in the file system structure on volume C:.
The exact nature of the corruption is unknown. The file system structures need to be scanned online.
Event[53]:
Log Name: System
Source: Ntfs
Date: 2024-04-11T11:47:57.1730000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
A corruption was discovered in the file system structure on volume ??.
A corruption was found in a file system index structure. The file reference number is 0x2000000019082. The name of the file is "\System Volume Information". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION".
Code:
Event[866]:
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2024-04-11T15:50:48.4670000Z
Event ID: 98
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-E52D4Q4
Description:
Volume R: (\Device\HarddiskVolume3) requires an Online Scan. An Online Scan will automatically run as part of the next scheduled maintenance task. Alternatively you may run "CHKDSK /SCAN" locally via the command line, or run "REPAIR-VOLUME <drive:> -SCAN" locally or remotely via PowerShell.
Code:
Stage 1: Examining basic file system structure ...
"chkdsk /scan" is aborting due to self-healing command failure: 0xc0000102
"chkdsk /f" will be required to repair the volume.
An unspecified error occurred (6672737374727563 56c).
Code:
Event[617]:
Log Name: Application
Source: Chkdsk
Date: 2024-04-17T12:36:20.1230000Z
Event ID: 26228
Task: N/A
Level: Information
Opcode: Info
Keyword: Classic
User: N/A
User Name: N/A
Computer: DESKTOP-E52D4Q4
Description:
Chkdsk was executed in verify mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume2
Examining 1 corruption record ...
Record 1 of 1: Bad index "$I30" in directory "\Users\Z\AppData\Local\Microsoft\OneDrive\24.062.0326.0002\LogoImages <0x8,0x1ca87>" ... The multi-sector header signature for VCN 0x2 of index $I30
in file 0x1ca87 is incorrect.
fe c3 eb ea 7e 3c b8 35 ?? ?? ?? ?? ?? ?? ?? ?? ..δΩ~<.5........
corruption found.
1 corruption record processed in 0.4 seconds.
Windows has examined the list of previously identified potential issues and found problems.
Quote