Corrupt files, frequent BSOD, can't chkdsk

Status
Not open for further replies.
Hmm I just tested each line and all is well! Makes me think it is a permissions issue.

Run it again as I edited it to show each line as it executes and pause before exit.

Let me know what happens now.

But you can do a windows search (Activate the Advanced Options) for or copy paste this > Norton*.*;Syman*.*
and delete all found. Note the Semicolon after norton*.* above

Mike
 
copy/paste operation

Well, it's very interesting. I'm going to try to copy exactly what happened here:

C:\Documents and Settings\UserProfile>cd\

C:\>attrib /s c:\norton*.* >"%USERPROFILE%"\Desktop\Norton.log

C:\>attrib -h -s -r /s c:\norton*.*

C:\>attrib /s c:\syman*.* >"%USERPROFILE%"\Desktop\Symantec.log

C:\>attrib -h -s -r /s c:\syman*.*

C:\>del /f /q /s c:\norton*.*
Deleted file - c:\Documents and Settings\UserProfile\Desktop\norton.log

C:\>del /f /q /s c:\syman*.*
Deleted file - c:\Documents and Settings\UserProfile\Desktop\symantec.log

C:\>pause
Press any key to continue . . .

C:\>

But no norton.log or symantec.log on desktop, nor, according to a file search, anywhere else.

I did your windows file search, with advanced options checked, of Norton*.*;Syman*.* and there were no results.
 
chkdsk

So I followed your instructions:
1. Open CMD prompt
2. Type
chkntfs /d
then
chkdsk /c c:
type
exit

And this is what happened:
it checked the disk (not working on fixing anything since it was a /c instead of a /f) and then said this:

CHKDSK is verifying files (stage 1 of 3) . . .
File verification completed.
CHKDSK is verifying indexes (stage 2 of 3) . . .
Deleting index entry UserProfile.ct in index $I30 of file 26419.
Deleting index entry USER~1.CT in index $I30 of file 26419.
Index verification completed.

Errors found. CHKDSK cannot continue in read-only mode.

I am now going to reboot, and then try to ask for a chkdks and reboot again.
 
Ok what is important is that Windows search did not find anything so they are gone.

Besides the Chkdsk issue fill me in on anything else before we begin to finish and close.

Windows Update work?

In an hour or so I will post a final link to take another shot at the Chkdsk by resetting permissions so check back!

Mike
 
still no chkdsk

Everything seems to be fine except for the chkdsk issue. Still no BSODs, and no more corrupt file notifications.
Thank you!
 
Chkdsk

Thanks, Kim. I do know that, and I've been running it from my XP boot cd, which has been helpful in the whole involved process of cleaning up my machine. But what I still don't get is why I can't do it the way I'm supposed to be able to.
 
Yes but because: "Errors found" You obviously should fix them.

Also if you run System File Checker that's suppose to put all Windows system files back to normal ( note it runs for a while, and Antivirus or any other resident protection should be disabled, all programs closed... yadayadayada :D)

Start->Run-> SFC /ScanNow

No data will be hurt, oh and there's one space after SFC
 
sfc ran in post 14.

Plus she over did the Regseeker while cleaning Norton, then done a full repair install only yesterday, which is way better than a sfc!

Mike
 
Hi Kate
Go here Download RepairPermissions
http://www.adrive.com/public/af555196cec405866b9f21308829d7a85d2f7b86c411bc055b69d0ed15efcaec.html

Execute it, it will create a RepairPermissions folder, Enter the folder and run rsp.bat

When finished you may delete the Installer and/or folder.

Reboot and test chkdsk!

Then lets wrap it up! Tho if still issues with Chkdsk we will continue with that if you want.

Thread Closing-------------------------------------------------------------------

Some of these tools update so often they require downloading again later if needed. But keep and run MBAM and SAS to maintain.

Remove ComboFix
Start-Run
type
combofix /u
Hit enter or click OK.

Please download OTCleanIt http://download.bleepingcomputer.com/oldtimer/OTCleanIt.exe

Save to desktop.

This will remove all the tools we used to clean your computer.

Double-click OTCleanIt.exe. Click CleanUp. Yes to the "Begin cleanup Process?"

Approve all if prompted by Firewall. Approve Widows Defender or other guards or security programs while OTCleanIt attempting access to the Internet to allow all.

If prompted to Reboot click, Yes.
OTCleanit will delete itself when finished, If not delete it by yourself.

-------------------------------------------------------------------------------------
Run CCleaner http://www.ccleaner.com/download/builds (get SLIM at bottom no Yahoo toolbar)
Run twice or more on Cleanup temps, then on left click Registry then Scan for issues also repeat till clean.

Run ATF-Cleaner http://majorgeeks.com/ATF_Cleaner_d4949.html Temp and Registry, repeatedly until no more found.

KCleaner ftp://ftp2.kcsoftwares.com/kcsoftwa/files/kcleaner.exe
Fantastic cleaner. (When installing uncheck Relevant Knowledge do not install)
-------------------------------------------------------------------------------------
The issues can and are likely found is in System Restore so do the below

Start-Programs-Accessories-System Tools-Disk- System Restore and create a new Restore point. Name it "After cleanup at TechSpot".

Then Start-Programs-Accessories-System Tools-Disk Cleanup
Click OK to accept C:
Select all Boxes
Then click More Options
Here click System Restore and OK to "Are you sure" and the OK to Run.

As this runs it clears all but the most recent Restore Point but it does one other thing that can contain infested files and a huge amount of disk space.

It clears what is known as Shadow copies which are used by specialized back up programs.

This is if you have the Volume Shadow Copy running which is the default.
-------------------------------------------------------------------------------------
ERUNT
Add a redundent Reg backup, get and install ERUNT let it add itself to startup and do a backup on install check all boxes.

ERUNT http://www.larshederer.homepage.t-online.de/erunt/
Yes! Even if you use system restore and other backups Registry and Images.
-------------------------------------------------------------------------------------

Every two weeks or so, run MBAM and SAS until clean.

They take a while, so leave scanning while you are sleeping working or watching TV. If not done under the gun they can be scheduled not to interfere with computer time.

If they find something they can not clean, then get back to us.

Additionally run CCleaner. ATF-Cleaner and KCleaner.
----------------------------------------------------------------------------------------
I have been using ThreatFire for more than a year, it just went from ver 3 to ver 4.

It was designed to be used with and to co-exist with other Virus scanners.

Additionally it uses a totally different process to protect. While conventional Virus scanners work from definitions ThreatFire works on recognizing Virus/Malware activity.

It's like looking at it with 2 sets of eyes and from a different angle.

It works like some Firewalls do to learn what is good/bad.

After install it will ask you about everything that could be a security issue. For example the first time you run IE or FireFox it will prompt you. You would answer to approve and remember the setting. From then on no more prompts about IE or FireFox unless the exe changes like in an update.

As it queries you about the prompt to help you determine to approve or not you can google it with one click.

http://www.threatfire.com/Download/
-------------------------------------------------------------------------------------
Look at http://www.javacoolsoftware.com/spywareblaster.html

Run SpyBot ocassionally and use the Immunize function.
http://www.safer-networking.org/en/download/

I highly reccomend Hostman: Hostman http://majorgeeks.com/HostsMan_d4592.html

Download install run and allow it to disable DNS Client and select all Host files and then Update and install all host files.

A Disk Scan (chkdsk) and Defrag are in order.

Mike
 
Sorry....

I just realized that my last reply didn't post for some reason, and you must have wondered what happened to me.

I ran the RepairPermissions but still no chkdsk. But since I can run it from the XP boot disk Recovery Console, I guess that's not a big issue--just a puzzle. I ran it again yesterday, and it still finishes up saying that it repaired one or more errors (I really wish there was a log function). And I just did another Start>My Computer>Hard Disk>Tools>Check Disk (not checking boxes), and it says it cannot complete the disk check (and that's not even trying to fix errors). I don't know if it's a permissions issue or some thing in the registry or what. But I guess I can live with it so long as it doesn't throw up corrupt .exe file notifications.

I followed through on your suggestions to clean up from our activities and downloaded all the supporting software you suggested.
Avira and ThreatFire are throwing up a couple of suspicious activity alerts a session. Sometimes I'm not that comfortable trying to assess whether I should allow a process to continue or should kill it.
 
Status
Not open for further replies.
Back