[SOLVED] [Win7SP1Pro x64] WU corrupt/broken. Surt tdcc 10.

C

Coloboom

Active member
Joined
Oct 5, 2017
Posts
44
I believe an automatic Adobe Acrobat update triggered these issues a couple of days ago, but can't be sure.

I have disabled the Windows Update service and have not installed updates since June.

-----

What I have learned:

It seems that if TrustedInstaller.exe is executed, the machine will eventually become unusable.

I have experienced
  1. Never-ending 100% hard drive access (most common)
  2. Blue Screen Of Death

-----

What I have tried:

  • sfc /scannow
    • It gets to 50% and hangs. Using Resource Monitor I can see that TrustedInstaller.exe is not running when I start sfc /scannow. TrustedInstaller.exe begins executing when I execute the SFC command.
  • Windows6.1-KB947821-v34-x64.msu - Windows Update fixer
    • The first time I ran it, it began installing and eventually failed.
    • Each time I run it now, it causes a Blue Screen of Death

======================
SFCFix.txt contents
---------------------------------------

SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-10-05 07:47:47.294
Microsoft Windows 7 Service Pack 1 - amd64
Not using a script file.


AutoAnalysis::
SUMMARY: Some corruptions could not be fixed automatically. Seek advice from helper or sysnative.com.
CBS & SFC total detected corruption count: 0
CBS & SFC total unimportant corruption count: 0
CBS & SFC total fixed corruption count: 0
SURT total detected corruption count: 10
SURT total unimportant corruption count: 0
SURT total fixed corruption count: 0
AutoAnalysis:: directive completed successfully.


Successfully processed all directives.

Failed to generate a complete zip file. Upload aborted.

SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2017-10-05 07:53:49.935
----------------------EOF-----------------------


CBS.zip available at CBS.zip
 
Hello and welcome,

Follow the intructions below please.

Step 1:
ChkDsk Scan
  • Click on Start - All programs - Accessories.
  • Rightclick on Command-prompt and select Run as administrator.
  • When command prompt opens, typ chkdsk into it, then press enter.
  • Wait for this to complete.
  • Download ListChkdskResult.exe by SleepyDude and save it on your desktop.
  • Rightclick
    58a60a47ed1bd-ListChkdskResult.PNG
    ListChkdskResult.exe and select Run as administrator. Notepad will open the file ListChkdskResult.txt on completion. (The file ListChkdskResult.txt can be found on your desktop.)
  • Copy and paste this in your next reply.


Step 2:
Retrieve Components Hive
1. Navigate to C:\Windows\System32\Config and locate the COMPONENTS file.
2. Please copy this file to your desktop.
Note: If you receive an error that this file is in-use, simply reboot your computer and try again. Note: If you find that you need to reboot and are unable to because this is a server then try Option#2 below.
3. Right-click on this file on your desktop and select Send To...Compressed (zipped) folder. This will create a file named COMPONENTS.ZIP on your desktop.
4. The file will likely be too large to upload here so please upload to SendSpace and just provide the link here.


Option#2 (only if you are unable to follow the previous instructions)


  • Please download the Freeware RegBak from here: Acelogix Software - Download products
     You will find it at the bottom of the page that the link brings you to.
  • Go ahead and install this program and accept all the defaults. After the last install screen the program should open.
  • Click the New Backup button. Accept the defaults and simply click Start.
  • When it says Finished successfully, click the Close button.
  • This will bring you back to the main screen of the program. You will see one entry in this list with the date that you did it. Right-click on this line-item and select Explore Backup...
  • This will bring you into the folder where the backup was made. You should see a Users folder and a Windows folder along with a couple other files. Double-click on the Windows folder to open it. Then open the System32 folder and then config folder. You should see around 6 files in here, one of which is named COMPONENTS.
  • Copy the COMPONENTS file to your Desktop. If the COMPONENTS file does not exist, please fetch it instead from C:\Windows\System32\config\COMPONENTS.
  • Now right-click on the COMPONENTS file that is on your desktop and select Send to > Compressed (zipped) folder.
  • Then please upload the zip file (COMPONENTS.zip) to your favourite file sharing website (it will be too big to upload here). Examples of services to upload to are Dropbox or One Drive or SendSpace and then just provide the link in your reply.
  • You can close any open windows you have as well as the RegBak program now.
 
I was unable to run chkdsk while the OS was running. In order to force it to run, I executed chkdsk /r and had it run at restart.

Code: 
ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 10/8/2017 8:34:13 AM >------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 71161
Source Name: Microsoft-Windows-Wininit
Time Written: 10-08-2017 @ 12:32:38
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.


A disk check has been scheduled.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 5)...
  646400 file records processed.                                         


File verification completed.
  1773 large file records processed.                                   


  0 bad file records processed.                                     


  2 EA records processed.                                           


  45 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 5)...
  774208 index entries processed.                                        


Index verification completed.
  0 unindexed files scanned.                                        


  0 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 5)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 48 unused index entries from index $SII of file 0x9.
Cleaning up 48 unused index entries from index $SDH of file 0x9.
Cleaning up 48 unused security descriptors.
Security descriptor verification completed.
  63905 data files processed.                                           


CHKDSK is verifying Usn Journal...
  25936824 USN bytes processed.                                            


Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x143152000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x14315e000 for 0x1000 bytes.
Windows replaced bad clusters in file 28946
of name \Windows\System32\schtasks.exe.
Read failure with status 0xc0000185 at offset 0x5069b8000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x5069c7000 for 0x1000 bytes.
Windows replaced bad clusters in file 64683
of name \pagefile.sys.
Read failure with status 0xc0000185 at offset 0x13cafdb000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x13cafe8000 for 0x1000 bytes.
Windows replaced bad clusters in file 339786
of name \PROGRA~2\COMMON~1\Intuit\TurboTax\TY15\PER\MSI\WINPER~3.MSI.
Read failure with status 0xc0000185 at offset 0x926f8f000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x926f93000 for 0x1000 bytes.
Windows replaced bad clusters in file 378600
of name \Windows\winsxs\X82D78~1.233\msaudite.dll.
  646384 files processed.                                                


File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  13697234 free clusters processed.                                        


Free space verification is complete.
Adding 4 bad clusters to the Bad Clusters File.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.


 235715583 KB total disk space.
 179943404 KB in 384718 files.
    235532 KB in 63906 indexes.
        24 KB in bad sectors.
    747687 KB in use by the system.
     65536 KB occupied by the log file.
  54788936 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
  13697234 allocation units available on disk.


Internal Info:
00 dd 09 00 58 d8 06 00 fa 67 0c 00 00 00 00 00  ....X....g......
8f 07 00 00 2d 00 00 00 00 00 00 00 00 00 00 00  ....-...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 70379
Source Name: Microsoft-Windows-Wininit
Time Written: 10-04-2017 @ 13:00:57
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.




One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 3)...
  646400 file records processed.                                         


File verification completed.
  1777 large file records processed.                                   


  0 bad file records processed.                                     


  2 EA records processed.                                           


  45 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 3)...
The VCN 0x174 of index $I30 in file 0x2cd0 is already in use.
Correcting error in index $I30 for file 11472.
The VCN 0x171 of index $I30 in file 0x2cd0 is already in use.
The VCN 0x173 of index $I30 in file 0x2cd0 is already in use.
The VCN 0x172 of index $I30 in file 0x2cd0 is already in use.
Correcting error in index $I30 for file 11472.
The down pointer of current index entry with length 0x110 is invalid.
7d b4 01 00 00 00 f1 00 10 01 f8 00 01 00 00 00  }...............
d0 2c 00 00 00 00 01 00 60 be 49 08 fa 3c d3 01  .,......`.I..<..
60 be 49 08 fa 3c d3 01 60 be 49 08 fa 3c d3 01  `.I..<..`.I..<..
60 be 49 08 fa 3c d3 01 00 10 00 00 00 00 00 00  `.I..<..........
10 03 00 00 00 00 00 00 20 00 00 00 00 00 00 00  ........ .......
5b 01 36 00 30 00 62 00 65 00 34 00 39 00 30 00  [.6.0.b.e.4.9.0.
38 00 66 00 61 00 33 00 63 00 64 00 33 00 30 00  8.f.a.3.c.d.3.0.
31 00 34 00 64 00 31 00 64 00 30 00 30 00 30 00  1.4.d.1.d.0.0.0.
30 00 34 00 38 00 30 00 36 00 34 00 34 00 30 00  0.4.8.0.6.4.4.0.
32 00 2e 00 24 00 24 00 5f 00 73 00 79 00 73 00  2...$.$._.s.y.s.
74 00 65 00 6d 00 33 00 32 00 5f 00 6d 00 69 00  t.e.m.3.2._.m.i.
67 00 77 00 69 00 7a 00 5f 00 70 00 6f 00 73 00  g.w.i.z._.p.o.s.
74 00 6d 00 69 00 67 00 72 00 65 00 73 00 5f 00  t.m.i.g.r.e.s._.
64 00 61 00 74 00 61 00 5f 00 38 00 33 00 38 00  d.a.t.a._.8.3.8.
33 00 65 00 64 00 32 00 39 00 37 00 37 00 39 00  3.e.d.2.9.7.7.9.
36 00 65 00 33 00 30 00 65 00 2e 00 63 00 64 00  6.e.3.0.e...c.d.
66 00 2d 00 6d 00 73 00 ff ff ff ff ff ff ff ff  f.-.m.s.........
Sorting index $I30 in file 11472.
  781950 index entries processed.                                        


Index verification completed.
CHKDSK is scanning unindexed files for reconnect to their original directory.
Recovering orphaned file ef7c16f3f93cd3014f12000048064402.$$_system32_fi-fi_448337a68202d703.cdf-ms (49040) into directory file 11472.
Recovering orphaned file EE7F3E~1.CDF (104134) into directory file 11472.
Recovering orphaned file ee7f3e02fa3cd3017219000048064402.$$_system32_ko-kr_4e039de673c23e4a.cdf-ms (104134) into directory file 11472.
Recovering orphaned file 60be4908fa3cd3014b1d000048064402.$$_system32_21f9a9c4a2f8b514.cdf-ms (111728) into directory file 11472.
Recovering orphaned file 60be4908fa3cd3014c1d000048064402.$$_system32_migwiz_2650d8d30fee1fe9.cdf-ms (111738) into directory file 11472.
Recovering orphaned file F5A82B~1.CDF (115024) into directory file 11472.
Recovering orphaned file f5a82b0bfa3cd3015e1e000048064402.$$_system32_es-es_429cd1a084dc7119.cdf-ms (115024) into directory file 11472.
Recovering orphaned file EC8266~4.CDF (118909) into directory file 11472.
Recovering orphaned file EC9A02~1.CDF (119050) into directory file 11472.
Recovering orphaned file ECF2D3~1.CDF (119609) into directory file 11472.
Recovering orphaned file ECD652~1.CDF (119782) into directory file 11472.
Recovering orphaned file ECCCCA~1.CDF (119788) into directory file 11472.
Recovering orphaned file ECFD59~1.CDF (119794) into directory file 11472.
Recovering orphaned file EC8493~1.CDF (123452) into directory file 11472.
Recovering orphaned file ec849313fa3cd301ce20000048064402.$$_system32_printing_admin_scripts_en-us_f242a041737eb912.cdf-ms (123452) into directory file 11472.
Recovering orphaned file ECB5A4~1.CDF (146414) into directory file 11472.
Recovering orphaned file ecb5a4390b3dd301b5170000a003dc04.program_files_windows_sidebar_gadgets_rssfeeds.gadget_22ec6b16cd2d39ce.cdf-ms (146414) into directory file 11472.
Recovering orphaned file ECB5A4~2.CDF (146461) into directory file 11472.
Recovering orphaned file ecb5a4390b3dd301b6170000a003dc04.program_files_windows_sidebar_gadgets_rssfeeds.gadget_images_420b96bc9fb8ab54.cdf-ms (146461) into directory file 11472.
Recovering orphaned file F5E31D~1.CDF (147231) into directory file 11472.
Recovering orphaned file f5e31d3c0b3dd3015d190000a003dc04.$$_system32_pt-pt_5783f7006581b92f.cdf-ms (147231) into directory file 11472.
Recovering orphaned file F5EBD1~1.CDF (157624) into directory file 11472.
Recovering orphaned file f5ebd1440b3dd301ce1d0000a003dc04.program_files_ffd0cbfc813cc4f1.cdf-ms (157624) into directory file 11472.
Recovering orphaned file F5EBD1~2.CDF (157639) into directory file 11472.
Recovering orphaned file f5ebd1440b3dd301cf1d0000a003dc04.program_files_windows_mail_e07902f329fe05e9.cdf-ms (157639) into directory file 11472.
Recovering orphaned file F5EBD1~3.CDF (157640) into directory file 11472.
Recovering orphaned file f5ebd1440b3dd301d01d0000a003dc04.program_files_common_files_d7a65bb2f0e854e7.cdf-ms (157640) into directory file 11472.
Recovering orphaned file 60A44E~1.CDF (208513) into directory file 11472.
Recovering orphaned file 60A44E~2.CDF (208558) into directory file 11472.
Recovering orphaned file 60a44e910e3dd3017c100000f8051404.$$_system32_appraiser_59bebec9f06db09b.cdf-ms (208558) into directory file 11472.
Recovering orphaned file 60A44E~3.CDF (208642) into directory file 11472.
Recovering orphaned file 60a44e910e3dd3017d100000f8051404.$$_appcompat_appraiser_telemetry_94274e99519f58a9.cdf-ms (208642) into directory file 11472.
Recovering orphaned file 60A44E~4.CDF (208647) into directory file 11472.
Recovering orphaned file 60a44e910e3dd3017e100000f8051404.programdata_microsoft_diagnosis_af2ddc54e6a8e491.cdf-ms (208647) into directory file 11472.
Recovering orphaned file 60a44e910e3dd3017f100000f8051404.programdata_microsoft_diagnosis_etllogs_ffc0f561f3797ceb.cdf-ms (208648) into directory file 11472.
Recovering orphaned file ede527970e3dd3013f130000f8051404.$$_system32_dism_066548addf2fbd4b.cdf-ms (212668) into directory file 11472.
Recovering orphaned file EF6A73~1.CDF (215987) into directory file 11472.
Recovering orphaned file EF359F~1.CDF (216045) into directory file 11472.
Recovering orphaned file EF59C1~1.CDF (216098) into directory file 11472.
Recovering orphaned file EF59AB~1.CDF (216157) into directory file 11472.
Recovering orphaned file EF4B53~1.CDF (216159) into directory file 11472.
Recovering orphaned file EF1137~1.CDF (216161) into directory file 11472.
Recovering orphaned file EF6D30~1.CDF (216200) into directory file 11472.
Recovering orphaned file EF4FD9~1.CDF (216202) into directory file 11472.
Recovering orphaned file ED6A98~1.CDF (223731) into directory file 11472.
Recovering orphaned file ed6a989c0e3dd30139160000f8051404.$$_policydefinitions_89130cdfc4d9c27c.cdf-ms (223731) into directory file 11472.
Recovering orphaned file ED6A98~2.CDF (223814) into directory file 11472.
Recovering orphaned file ed6a989c0e3dd3013a160000f8051404.$$_system_4c3aa2308f9f8f41.cdf-ms (223814) into directory file 11472.
Recovering orphaned file f61928a00e3dd30121170000f8051404.program_files_windows_sidebar_gadgets_rssfeeds.gadget_en-us_js_eebbf22d9f05f549.cdf-ms (225706) into directory file 11472.
Recovering orphaned file EE724C~1.CDF (227335) into directory file 11472.
Recovering orphaned file ee724ca50e3dd30172190000f8051404.$$_system32_ko-kr_4e039de673c23e4a.cdf-ms (227335) into directory file 11472.
Recovering orphaned file EE7479~1.CDF (227612) into directory file 11472.
Recovering orphaned file ee7479a70e3dd3010d1b0000f8051404._0000000000000000.cdf-ms (227612) into directory file 11472.
Recovering orphaned file 60B157~1.CDF (228179) into directory file 11472.
Recovering orphaned file 60b157ab0e3dd301bc1c0000f8051404.$$.cdf-ms (228179) into directory file 11472.
Recovering orphaned file 60B157~2.CDF (228197) into directory file 11472.
Recovering orphaned file 60b157ab0e3dd301bd1c0000f8051404.$$_globalization_mct_0b932a9a9cc9f99b.cdf-ms (228197) into directory file 11472.
Recovering orphaned file D47505~1.CDF (229280) into directory file 11472.
Recovering orphaned file d47505ac0e3dd301481d0000f8051404._0000000000000000.cdf-ms (229280) into directory file 11472.
Recovering orphaned file D47505~2.CDF (229290) into directory file 11472.
Recovering orphaned file d47505ac0e3dd301491d0000f8051404.$$.cdf-ms (229290) into directory file 11472.
Recovering orphaned file D47505~3.CDF (229302) into directory file 11472.
Recovering orphaned file d47505ac0e3dd3014a1d0000f8051404.$$_globalization_mct_0b932a9a9cc9f99b.cdf-ms (229302) into directory file 11472.
Recovering orphaned file 994E30~1.CDF (229319) into directory file 11472.
Recovering orphaned file 994e30ac0e3dd3014b1d0000f8051404.$$_system32_21f9a9c4a2f8b514.cdf-ms (229319) into directory file 11472.
Recovering orphaned file 994E30~2.CDF (229320) into directory file 11472.
Recovering orphaned file 994e30ac0e3dd3014c1d0000f8051404.$$_system32_migwiz_2650d8d30fee1fe9.cdf-ms (229320) into directory file 11472.
Recovering orphaned file 994E30~3.CDF (229321) into directory file 11472.
Recovering orphaned file 994e30ac0e3dd3014d1d0000f8051404.$$_system32_migwiz_postmigres_data_8383ed297796e30e.cdf-ms (229321) into directory file 11472.
Recovering orphaned file 994E30~4.CDF (229331) into directory file 11472.
Recovering orphaned file 994e30ac0e3dd3014e1d0000f8051404.$$_system32_migwiz_postmigres_web_997c3ff186280ede.cdf-ms (229331) into directory file 11472.
Recovering orphaned file 99BDCD~1.CDF (229338) into directory file 11472.
Recovering orphaned file 994e30ac0e3dd3014f1d0000f8051404.$$_system32_migwiz_postmigres_web_base_images_0e64dea9756e1d4c.cdf-ms (229338) into directory file 11472.
Recovering orphaned file 9D6456~1.CDF (229373) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301531d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-ndis_b44547c729f73574.cdf-ms (229373) into directory file 11472.
Recovering orphaned file 9D6456~2.CDF (229374) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301541d0000f8051404.$$_system32_migwiz_replacementmanifests_windowssearchengine_145004789b880a4a.cdf-ms (229374) into directory file 11472.
Recovering orphaned file 9D6456~3.CDF (229375) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301551d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-iis-rm_9ee468490d6de347.cdf-ms (229375) into directory file 11472.
Recovering orphaned file 9D6456~4.CDF (229388) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301561d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-shmig_9ef85dcb89d16c58.cdf-ms (229388) into directory file 11472.
Recovering orphaned file 9D9F66~1.CDF (229395) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301571d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-international-core_05a14960964e6af4.cdf-ms (229395) into directory file 11472.
Recovering orphaned file 9D62AE~1.CDF (229406) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301581d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-offlinefiles-core_3b64983f65339578.cdf-ms (229406) into directory file 11472.
Recovering orphaned file 9D29CE~1.CDF (229423) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd301591d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-terminalservices-licenseserver_cff2bf5f876a8fcd.cdf-ms (229423) into directory file 11472.
Recovering orphaned file 9D8306~1.CDF (229465) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd3015a1d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-terminalservices-appserver-licensing_10d3d9d862990d9c.cdf-ms (229465) into directory file 11472.
Recovering orphaned file 9DB49E~1.CDF (229470) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd3015b1d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-windows-audio-mmecore-other_5137bedd30b4e5d8.cdf-ms (229470) into directory file 11472.
Recovering orphaned file 9DBFAF~1.CDF (229474) into directory file 11472.
Recovering orphaned file 9d6456ac0e3dd3015c1d0000f8051404.$$_system32_migwiz_replacementmanifests_microsoft-activedirectory-webservices_fbfc8031b6420fb6.cdf-ms (229474) into directory file 11472.
Recovering orphaned file 1EEA5F~1.CDF (229489) into directory file 11472.
Recovering orphaned file 1eea5fac0e3dd3015d1d0000f8051404.$$_diagnostics_scheduled_maintenance_6bb1b174b39bb442.cdf-ms (229489) into directory file 11472.
  59 unindexed files scanned.                                        


Recovering orphaned file 1EEA5F~2.CDF (229494) into directory file 11472.
Recovering orphaned file 1eea5fac0e3dd3015e1d0000f8051404.$$_diagnostics_scheduled_maintenance_en-us_1c00802b579d904e.cdf-ms (229494) into directory file 11472.
  0 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 3)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 11 unused index entries from index $SII of file 0x9.
Cleaning up 11 unused index entries from index $SDH of file 0x9.
Cleaning up 11 unused security descriptors.
Security descriptor verification completed.
Inserting data attribute into file 353536.
  67777 data files processed.                                           


CHKDSK is verifying Usn Journal...
The USN Journal length 0xb0 in file 0x361 is less the
largest USN encountered, 0x5cf1df4d8, plus eight in file 0x71f78.
Repairing Usn Journal $J data stream.
Usn Journal verification completed.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.


 235715583 KB total disk space.
 181167344 KB in 406146 files.
    245432 KB in 67777 indexes.
         8 KB in bad sectors.
    722071 KB in use by the system.
     65536 KB occupied by the log file.
  53580728 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
  13395182 allocation units available on disk.


Internal Info:
00 dd 09 00 2c 3b 07 00 e0 1c 0d 00 00 00 00 00  ....,;..........
89 07 00 00 2d 00 00 00 00 00 00 00 00 00 00 00  ....-...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 70287
Source Name: Microsoft-Windows-Wininit
Time Written: 10-04-2017 @ 00:39:31
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.




One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 3)...
  646400 file records processed.                                         


File verification completed.
  1884 large file records processed.                                   


  0 bad file records processed.                                     


  2 EA records processed.                                           


  45 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 3)...
Index entry global.stat of index $I30 in file 0x5264b points to unused file 0x37a1f.
Deleting index entry global.stat in index $I30 of file 337483.
Index entry GLOBAL~1.STA of index $I30 in file 0x5264b points to unused file 0x37a1f.
Deleting index entry GLOBAL~1.STA in index $I30 of file 337483.
  782382 index entries processed.                                        


Index verification completed.
CHKDSK is scanning unindexed files for reconnect to their original directory.
  1 unindexed files scanned.                                        


Recovering orphaned file 104[4] (211877) into directory file 160512.
Recovering orphaned file 104_4_~1 (211877) into directory file 160512.
  0 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 3)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 7 unused index entries from index $SII of file 0x9.
Cleaning up 7 unused index entries from index $SDH of file 0x9.
Cleaning up 7 unused security descriptors.
Security descriptor verification completed.
  67992 data files processed.                                           


CHKDSK is verifying Usn Journal...
  36646056 USN bytes processed.                                            


Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.


 235715583 KB total disk space.
 192380624 KB in 413303 files.
    245252 KB in 67993 indexes.
         8 KB in bad sectors.
    757927 KB in use by the system.
     65536 KB occupied by the log file.
  42331772 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
  10582943 allocation units available on disk.


Internal Info:
00 dd 09 00 f8 57 07 00 e7 41 0d 00 00 00 00 00  .....W...A......
a0 08 00 00 2d 00 00 00 00 00 00 00 00 00 00 00  ....-...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 70054
Source Name: Microsoft-Windows-Wininit
Time Written: 10-03-2017 @ 11:19:35
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.




One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 3)...
  646400 file records processed.                                         


File verification completed.
  1886 large file records processed.                                   


  0 bad file records processed.                                     


  2 EA records processed.                                           


  45 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 3)...
  782402 index entries processed.                                        


Index verification completed.
  0 unindexed files scanned.                                        


  0 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 3)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 19 unused index entries from index $SII of file 0x9.
Cleaning up 19 unused index entries from index $SDH of file 0x9.
Cleaning up 19 unused security descriptors.
Security descriptor verification completed.
  68002 data files processed.                                           


CHKDSK is verifying Usn Journal...
  34047944 USN bytes processed.                                            


Usn Journal verification completed.
Windows has checked the file system and found no problems.


 235715583 KB total disk space.
 192807444 KB in 415551 files.
    246184 KB in 68003 indexes.
         8 KB in bad sectors.
    755811 KB in use by the system.
     65536 KB occupied by the log file.
  41906136 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
  10476534 allocation units available on disk.


Internal Info:
00 dd 09 00 ca 60 07 00 e3 4a 0d 00 00 00 00 00  .....`...J......
a2 08 00 00 2d 00 00 00 00 00 00 00 00 00 00 00  ....-...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 69605
Source Name: Microsoft-Windows-Wininit
Time Written: 09-30-2017 @ 12:21:50
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.




A disk check has been scheduled.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 3)...
  646400 file records processed.                                         


File verification completed.
  1866 large file records processed.                                   


  0 bad file records processed.                                     


  2 EA records processed.                                           


  45 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 3)...
  781696 index entries processed.                                        


Index verification completed.
  0 unindexed files scanned.                                        


  0 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 3)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 152 unused index entries from index $SII of file 0x9.
Cleaning up 152 unused index entries from index $SDH of file 0x9.
Cleaning up 152 unused security descriptors.
Security descriptor verification completed.
  67649 data files processed.                                           


CHKDSK is verifying Usn Journal...
  36360368 USN bytes processed.                                            


Usn Journal verification completed.
Windows has checked the file system and found no problems.


 235715583 KB total disk space.
 191223888 KB in 412880 files.
    244808 KB in 67650 indexes.
         8 KB in bad sectors.
    757855 KB in use by the system.
     65536 KB occupied by the log file.
  43489024 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
  10872256 allocation units available on disk.


Internal Info:
00 dd 09 00 fa 54 07 00 0f 3b 0d 00 00 00 00 00  .....T...;......
91 08 00 00 2d 00 00 00 00 00 00 00 00 00 00 00  ....-...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 64504
Source Name: Microsoft-Windows-Wininit
Time Written: 04-21-2017 @ 12:30:03
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.


A disk check has been scheduled.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 5)...
The highest VCN 0x200000000002e of attribute of type 0x80 and instance
tag 0x4 is incorrect.  The expected value is 0x2e.
Deleting corrupt attribute record (128, "")
from file record segment 332059.
  646400 file records processed.                                         


File verification completed.
  1634 large file records processed.                                   


  0 bad file records processed.                                     


  2 EA records processed.                                           


  47 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 5)...
The index root $I30 is missing in file 0x5111a.
Correcting error in index $I30 for file 332058.
The root index $I3 in file 0x5111a is incorrect.
The expected name is $I30.
Removing corrupt index $I3 in file 332058.
  776862 index entries processed.                                        


Index verification completed.
  0 unindexed files scanned.                                        


  0 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 5)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
Security descriptor verification completed.
Inserting data attribute into file 332058.
Inserting data attribute into file 332059.
  65233 data files processed.                                           


CHKDSK is verifying Usn Journal...
  34940136 USN bytes processed.                                            


Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x15ca18000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x15ca1a000 for 0x1000 bytes.
Windows replaced bad clusters in file 30469
of name \Windows\System32\config\COMPON~1.
  646384 files processed.                                                


File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
  8595822 free clusters processed.                                        


Free space verification is complete.
Adding 1 bad clusters to the Bad Clusters File.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.


 235715583 KB total disk space.
 200340000 KB in 392826 files.
    235796 KB in 65232 indexes.
         8 KB in bad sectors.
    756491 KB in use by the system.
     65536 KB occupied by the log file.
  34383288 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
   8595822 allocation units available on disk.


Internal Info:
00 dd 09 00 34 fd 06 00 14 a4 0c 00 00 00 00 00  ....4...........
e3 07 00 00 2f 00 00 00 00 00 00 00 00 00 00 00  ..../...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------
Category: 0
Computer Name: T7610
Event Code: 1001
Record Number: 64457
Source Name: Microsoft-Windows-Wininit
Time Written: 04-21-2017 @ 12:07:26
Event Type: Information
User: 
Message: 


Checking file system on C:
The type of the file system is NTFS.
Volume label is OSDisk.




A disk check has been scheduled.
Windows will now check the disk.                         


CHKDSK is verifying files (stage 1 of 3)...
Read failure with status 0xc0000185 at offset 0xc69336000 for 0x1000 bytes.
File record segment 332056 is unreadable.
Read failure with status 0xc0000185 at offset 0xc69336000 for 0x1000 bytes.
File record segment 332057 is unreadable.
Read failure with status 0xc0000185 at offset 0xc69336000 for 0x1000 bytes.
File record segment 332058 is unreadable.
Read failure with status 0xc0000185 at offset 0xc69336000 for 0x1000 bytes.
File record segment 332059 is unreadable.
  646400 file records processed.                                         


File verification completed.
  1634 large file records processed.                                   


Read failure with status 0xc0000185 at offset 0xc69336000 for 0x400 bytes.
Read failure with status 0xc0000185 at offset 0xc69336400 for 0x400 bytes.
  4 bad file records processed.                                     


  2 EA records processed.                                           


  47 reparse records processed.                                      


CHKDSK is verifying indexes (stage 2 of 3)...
The file name index present bit in file 0x5111a should not be set.
Fixing incorrect information in file record segment 332058.
Index entry plugin.properties of index $I30 in file 0x510ce points to unused file 0x51118.
Deleting index entry plugin.properties in index $I30 of file 331982.
Index entry plugin.xml of index $I30 in file 0x510ce points to unused file 0x51119.
Deleting index entry plugin.xml in index $I30 of file 331982.
Index entry PLUGIN~1.PRO of index $I30 in file 0x510ce points to unused file 0x51118.
Deleting index entry PLUGIN~1.PRO in index $I30 of file 331982.
  776852 index entries processed.                                        


Index verification completed.
CHKDSK is scanning unindexed files for reconnect to their original directory.
  6 unindexed files scanned.                                        


CHKDSK is recovering remaining unindexed files.
  4 unindexed files recovered.                                      


CHKDSK is verifying security descriptors (stage 3 of 3)...
  646400 file SDs/SIDs processed.                                        


Cleaning up 1436 unused index entries from index $SII of file 0x9.
Cleaning up 1436 unused index entries from index $SDH of file 0x9.
Cleaning up 1436 unused security descriptors.
Security descriptor verification completed.
  65227 data files processed.                                           


CHKDSK is verifying Usn Journal...
  34266976 USN bytes processed.                                            


Usn Journal verification completed.
Adding 1 bad clusters to the Bad Clusters File.
Correcting errors in the master file table's (MFT) DATA attribute.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.


 235715583 KB total disk space.
 200308112 KB in 392808 files.
    235792 KB in 65230 indexes.
         4 KB in bad sectors.
    755467 KB in use by the system.
     65536 KB occupied by the log file.
  34416208 KB available on disk.


      4096 bytes in each allocation unit.
  58928895 total allocation units on disk.
   8604052 allocation units available on disk.


Internal Info:
00 dd 09 00 1c fd 06 00 eb a3 0c 00 00 00 00 00  ................
e3 07 00 00 2f 00 00 00 00 00 00 00 00 00 00 00  ..../...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................


Windows has finished checking your disk.
Please wait while your computer restarts.


-----------------------------------------------------------------------

As requested, the COMPONENTS.zip file.

Thanks
 
Download
51ab99ff51ec9-CrystalDiskInfo.png
CrystalDiskInfo.zip and save it on your desktop.
Extract the .zip file to a new folder.
In this new folder, run the tool DiskInfo.
When the tool is finished, it will show some information about the hard disc.
Note: Resize the window so that all information is visible.
Take a screenshot. Read this on how to take a screenshot.
Upload the image file to a file-sharing site and post the download link.
 
Remove Update Manually
1. Click on the Start button and in the search box, type Command Prompt.
2. When you see Command Prompt on the list, right-click on it and select Run as administrator.
3. When command prompt opens, copy and paste the following command into it, then press enter.
wusa /uninstall /KB:3124275

4. Let me know if it says it was successful or if there are any errors.
 
I assume it worked. A dialog popped up. I chose YES. Dialog disappeared. Machine seems to be idle again.
 
Note: Restart your computer first.


Install Update with DISM

  1. Download the update MSU here: https://download.microsoft.com/down...CD141F8B48A/IE11-Windows6.1-KB3124275-x64.msu
  2. Copy the MSU file to a convenient location (such as C:\temp).
  3. Click on the Start button and in the search box, type Command Prompt
  4. When you see Command Prompt on the list, right-click on it and select Run as administrator
  5. When command prompt opens, copy and paste the following commands into it, press enter after each

    cd C:\temp
    replace C:\temp with your path if different

    expand IE11-Windows6.1-KB3124275-x64.msu -f:* C:\temp

    DISM.exe /Online /Add-Package /PackagePath:C:\temp\IE11-Windows6.1-KB3124275-x64.cab
  6. You should receive the message:
    The operation completed successfully.
  7. Make sure to allow the computer to restart if prompted.

    If you receive any other message:
  8. Right-click on the Command Prompt window and click Select All, this will invert all of the colours by selecting the text, now press enter. All of this text is now copied.
  9. Paste (Ctrl+V) it into your next post.
  10. Zip and attach C:\Windows\Logs\CBS\CBS.log
 
Run sfc /scannow again and report the result.
If it fails, zip all the files in the folder C:\Windows\Logs\CBS and attach it to your next reply.
Note: if the file is too big to upload to your next post please upload via a service such as Dropbox or One Drive or SendSpace and just provide the download link.
 
C:\temp>sfc /scannow


Beginning system scan. This process will take some time.


Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection found corrupt files but was unable to fix some of them.
Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example
C:\Windows\Logs\CBS\CBS.log

The log file
 
Follow the instructions below please.

Step 1:
WARNING! The following fix is specific to the user's system in this thread only. No one else should follow these instructions, as it could damage your system.

  • Download
    myjIXnC.png
    SFCFix and move the executable to your desktop.
  • Download the attachment SFCFix.zip and save it on your desktop.
  • Save any work you have open, and close all programs.
  • Drag the SFCFix.zip file over the SFCFix.exe executable and release it.
    1p8eDnI.gif
  • SFCFix will launch, let it complete.
  • Once done, a file will appear on your desktop, called SFCFix.txt.
  • Open the file, then copy and paste its content in your next reply.


Step 2:
Run sfc /scannow again and report the result.
 

Attachments

SFCFix version 3.0.0.0 by niemiro.
Start time: 2017-10-08 18:30:02.438
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\ted\Desktop\SFCFix.zip [0]








PowerCopy::
Successfully took permissions for file or folder C:\Windows\winsxs\amd64_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_e8657d02cbf5e4c1\schtasks.exe


Successfully copied file C:\Users\ted\AppData\Local\niemiro\Archive\amd64_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_e8657d02cbf5e4c1\schtasks.exe to C:\Windows\winsxs\amd64_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_e8657d02cbf5e4c1\schtasks.exe.


Successfully restored ownership for C:\Windows\winsxs\amd64_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_e8657d02cbf5e4c1\schtasks.exe
Successfully restored permissions on C:\Windows\winsxs\amd64_microsoft-windows-sctasks_31bf3856ad364e35_6.1.7601.17514_none_e8657d02cbf5e4c1\schtasks.exe
PowerCopy:: directive completed successfully.








Successfully processed all directives.
SFCFix version 3.0.0.0 by niemiro has completed.
Currently storing 1 datablocks.
Finish time: 2017-10-08 18:30:02.683
Script hash: sDWqp53STwYgctJfGnnFVmFuZO3QK0iW1VSkWPnZ/hM=
----------------------EOF-----------------------


Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.


C:\Windows\System32>sfc /scannow


Beginning system scan. This process will take some time.


Beginning verification phase of system scan.
Verification 100% complete.


Windows Resource Protection did not find any integrity violations.


C:\Windows\System32>
 
Great. Check Windows Update and report the result.
 
Sorry, wasn't clear if you wanted me to simply check for updates or install them. To be safe, I just checked.
Capture.JPG
 
In anticipation of doing Windows Updates, I tried to make a restore point... no luck.

Capture.JPG
 
Restart the computer and try again.
 
1. Download the Farbar Recovery Scan Tool and save it to your Desktop:
64-bit: Downloading Farbar Recovery Scan Tool

2. Right-click to run the tool as administrator. When the tool opens click Yes to disclaimer.
3. Note: Ensure that the Addition.txt check box is checked at the bottom of the form within the Optional Scan area.
4. Press the Scan button.
5. Please wait for the tool to finish. It will produce two logfiles called FRST.txt and Addition.txt in the same directory the tool is run from (which should be the desktop)
6. Post the logfiles FRST.txt and Addition.txt as attachment in your next reply.
 
You must log in or register to reply here.

Has Sysnative Forums helped you? Please consider donating to help us support the site!

Back
Top