[SOLVED] Continuing MSRT Problems

[PaulB]

Yet again I have been continually offered the MSRT, this time for December. I have again followed the instructions in https://www.sysnative.com/forums/wi...software-removal-tool-october.html#post136208 which seems to have fixed the problem but I would really like to know what I can do to stop a recurrence. Unlike when the problem occurred in November and I fixed it, this time I have kept the logs!

The cbs.txt file is on Google drive at https://drive.google.com/file/d/0B7PqpaxIdCMHYmx1cXdzU1ZpSlE/view?usp=sharing When I ran the sfc /scannow this time I got a message on completion of "Windows Resource Protection did not find any integrity violations" which I haven't seen before but looks like good news!

I have attached the SURT log and the SURT persist log Looking at the persist log, it looks as though the same error/corruption occurred this month as occurred in November.

Any help with finding a permanent solution to this problem is appreciated.

 

[BrianDrab]

Hi Paul -

We'll take another look and see if we can find anything. Please do the following.

Step#1 - ChkDsk Repair
1. Click your Start Orb in the lower left of your computer and type cmd in the search box.
2. Once the cmd program is found, right-click on it with your mouse and select Run as administrator as shown below.

3. Answer Yes when asked to allow.
4. You should now have a black window open that you can type in to.
5. Please type chkdsk /R and then press enter. Note: There is a space after the command chkdsk and before the forward slash
6. You will get a prompt telling you chkdsk cannot run because the volume is in use. Answer Y and hit enter to schedule the run at next boot.
7. Reboot your computer and chkdsk will run. Let it complete please.
8. Right-click ListChkdskResult.exe and select Run as administrator (Allow if prompted)and a text file will open (and also be saved on the desktop as ListChkdskResult.txt).
Please copy the contents of this file and paste into your next post.

 

[PaulB]

I tried to run chkdsk as suggested but got a message that chkdsk could not open the volume for direct access. Should I use chkdsk /f instead? I looked at the log produced by the exec and it didn't have any information in it relating to the latest chkdsk run. The latest entry was:-

------< Log generate on 29/12/2015 09:12:32 >------
Category: 0
Computer Name: Paul-Laptop
Event Code: 26212
Record Number: 953099
Source Name: Chkdsk
Time Written: 12-28-2015 @ 13:05:51
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode on a volume snapshot.

Checking file system on G:
The type of the file system is NTFS.
Volume label is My Passport.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.
49984 file records processed.

0 large file records processed.

0 bad file records processed.

0 EA records processed.

0 reparse records processed.

53316 index entries processed.

0 unindexed files processed.

49984 security descriptors processed.

Cleaning up 15 unused index entries from index $SII of file 0x9.
Cleaning up 15 unused index entries from index $SDH of file 0x9.
Cleaning up 15 unused security descriptors.
1667 data files processed.

CHKDSK is verifying Usn Journal...
34258008 USN bytes processed.

Usn Journal verification completed.
Windows has checked the file system and found no problems.

1953480703 KB total disk space.
372045080 KB in 48248 files.
20740 KB in 1668 indexes.
0 KB in bad sectors.
209359 KB in use by the system.
65536 KB occupied by the log file.
1581205524 KB available on disk.

4096 bytes in each allocation unit.
488370175 total allocation units on disk.
395301381 allocation units available on disk.

-----------------------------------------------------------------------

- which appears to have come from when I connected an external drive for backup. (I am running Vista) The full log is at https://drive.google.com/file/d/0B7PqpaxIdCMHa0Jxc2xNVUoyaEk/view?usp=sharing (not pasted here as it is 172KB)

Incidentally, I used to run a registry cleaner (either CCleaner or Advanced System Clean) and have now stopped doing that in case that was the cause of my problems. Since stopping doing this I haven't had any problems. Could one of those utilities have caused my problems?

 

[BrianDrab]

Incidentally, I used to run a registry cleaner (either CCleaner or Advanced System Clean) and have now stopped doing that in case that was the cause of my problems. Since stopping doing this I haven't had any problems. Could one of those utilities have caused my problems?

Bingo. I'm glad you said that. Yes, absolutely. These types of utilities can and often do cause these types of issues. I think you solved it yourself! :thumbsup2:

 

[PaulB]

Thanks, Brian, for your help :smile9: I guess that bottom line is not to use my registry cleaners!! If I did, what key should I look for so that it can be bypassed when doing a clean or is doing a registry clean (which I used to do fairly regularly after installing software updates) a waste of time?

 

[BrianDrab]

No problem.

The usefulness of cleaning the registry is highly overrated and can be dangerous. In most cases, using a cleaner to remove obsolete, invalid and erroneous entries does not affect system performance but it can result in "unpredictable results". Unless you have a particular problem that requires a registry edit to correct it, (and you are expert in the registry), I would suggest you leave the registry alone.

Further Information
miekiemoes' Blog: Registry Cleaners and System Tweaking Tools
Answers to common security questions - Best Practices - Anti-Virus, Anti-Malware, and Privacy Software

 

[PaulB]

Thanks once again - those links you posted made interesting reading. No further registry cleaning for me unless I have a specific problem that needs it!