Solved The specified service does not exist as an installed service

Last scans...

redtarget.gif
Download Security Check from here or here and save it to your Desktop.
  • Double-click SecurityCheck.exe
  • Follow the onscreen instructions inside of the black box.
  • A Notepad document should open automatically called checkup.txt; please post the contents of that document.

NOTE 1. If one of your security applications (e.g., third-party firewall) requests permission to allow DIG.EXE access the Internet, allow it to do so.
NOTE 2. SecurityCheck may produce some false warning(s), so leave the results reading to me.
NOTE 3. If you receive UNSUPPORTED OPERATING SYSTEM! ABORTED! message restart computer and Security Check should run


redtarget.gif
Please download Farbar Service Scanner (FSS) and run it on the computer with the issue.
Make sure the following options are checked:
  • Internet Services
  • Windows Firewall
  • System Restore
  • Security Center
  • Windows Update
  • Windows Defender
  • Other Services

Press "Scan".
It will create a log (FSS.txt) in the same directory the tool is run.
Please copy and paste the log to your reply.


redtarget.gif
Download Temp File Cleaner (TFC)
Alternate download: http://www.itxassociates.com/OT-Tools/TFC.exe
  • Double click on TFC.exe to run the program.
  • Click on Start button to begin cleaning process.
  • TFC will close all running programs, and it may ask you to restart computer.


redtarget.gif
Download Sophos Free Virus Removal Tool and save it to your desktop.
  • Double click the icon and select Run
  • Click Next
  • Select I accept the terms in this license agreement, then click Next twice
  • Click Install
  • Click Finish to launch the program
  • Once the virus database has been updated click Start Scanning
  • If any threats are found click Details, then View log file... (bottom left hand corner)
  • Copy and paste the results in your reply
  • Close the Notepad document, close the Threat Details screen, then click Start cleanup
  • Click Exit to close the program
 
Security Check Logs:

Results of screen317's Security Check version 1.014 --- 12/23/15
Windows 7 Service Pack 1 x64 (UAC is enabled)
Internet Explorer 11
``````````````Antivirus/Firewall Check:``````````````
Windows Firewall Enabled!
Avira Antivirus
Antivirus up to date!
`````````Anti-malware/Other Utilities Check:`````````
Java version 32-bit out of Date!
Google Chrome (76.0.3809.132)
Google Chrome (SetupMetrics...)
````````Process Check: objlist.exe by Laurent````````
Avira Antivir avgnt.exe
Avira Antivir avguard.exe
Avira Antivirus sched.exe
Avira Antivirus avshadow.exe
`````````````````System Health check`````````````````
Total Fragmentation on Drive C: 4%
````````````````````End of Log``````````````````````
 
FSS Logs:

Farbar Service Scanner Version: 27-01-2016
Ran by Rajshree (administrator) on 29-09-2019 at 18:50:17
Running from "C:\Users\Rajshree\Desktop"
Microsoft Windows 7 Ultimate Service Pack 1 (X64)
Boot Mode: Normal
****************************************************************

Internet Services:
============

Connection Status:
==============
Localhost is accessible.
LAN connected.
Google IP is accessible.
Google.com is accessible.
Yahoo.com is accessible.


Windows Firewall:
=============

Firewall Disabled Policy:
==================


System Restore:
============

System Restore Policy:
========================


Action Center:
============


Windows Update:
============
wuauserv Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to open wuauserv registry key. The service key does

not exist.
Checking ImagePath: ATTENTION!=====> Unable to open wuauserv registry key. The service key does

not exist.
Checking ServiceDll: ATTENTION!=====> Unable to open wuauserv registry key. The service key does

not exist.


Windows Autoupdate Disabled Policy:
============================


Windows Defender:
==============
WinDefend Service is not running. Checking service configuration:
Checking Start type: ATTENTION!=====> Unable to retrieve start type of WinDefend. The value does

not exist.
Checking ImagePath: ATTENTION!=====> Unable to retrieve ImagePath of WinDefend. The value does

not exist.
Unable to retrieve ServiceDll of WinDefend. The value does not exist.


Windows Defender Disabled Policy:
==========================


Other Services:
==============


File Check:
========
C:\Windows\System32\nsisvc.dll => File is digitally signed
C:\Windows\System32\drivers\nsiproxy.sys => File is digitally signed
C:\Windows\System32\dhcpcore.dll => File is digitally signed
C:\Windows\System32\drivers\afd.sys => File is digitally signed
C:\Windows\System32\drivers\tdx.sys => File is digitally signed
C:\Windows\System32\Drivers\tcpip.sys => File is digitally signed
C:\Windows\System32\dnsrslvr.dll => File is digitally signed
C:\Windows\System32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\System32\mpssvc.dll => File is digitally signed
C:\Windows\System32\bfe.dll => File is digitally signed
C:\Windows\System32\drivers\mpsdrv.sys => File is digitally signed
C:\Windows\System32\SDRSVC.dll => File is digitally signed
C:\Windows\System32\vssvc.exe => File is digitally signed
C:\Windows\System32\wscsvc.dll => File is digitally signed
C:\Windows\System32\wbem\WMIsvc.dll => File is digitally signed
C:\Windows\System32\wuaueng.dll => File is digitally signed
C:\Windows\System32\qmgr.dll => File is digitally signed
C:\Windows\System32\es.dll => File is digitally signed
C:\Windows\System32\cryptsvc.dll => File is digitally signed
C:\Program Files\Windows Defender\MpSvc.dll => File is digitally signed
C:\Windows\System32\ipnathlp.dll => File is digitally signed
C:\Windows\System32\iphlpsvc.dll => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed


**** End of log ****
 
While doing Sophus scan for the first time it detected something and simultaneously my avira antivirus also showed a notification for "TR/AD.GoCloudnet.hljpz" and I quarantined it with Avira while the scan of Sophus was still going on. Then after a while due to power outage my laptop got shutdown abruptly.
I restarted it and started sophus scan again and this time it completed and showed a message that my system is clean.

What to do next?
 
Your computer is clean https://www.bleepstatic.com/fhost/uploads/6/snag-0004.jpg[/URL]]

1. This step will remove all cleaning tools we used, it'll reset restore points (so you won't get reinfected by accidentally using some older restore point) and it'll make some other minor adjustments...
[COLOR=#ff0000][B]This is a very crucial step so make sure you don't skip it.[/B][/COLOR]
Download [IMG]http://www.imgdumper.nl/uploads6/51a5ce45267c1/51a5ce45263de-delfix.pngDelFix by Xplode to your desktop. Delfix will delete all the used tools and logfiles.

Double-click Delfix.exe to start the tool.
Make sure the following items are checked:
  • Activate UAC (optional; some users prefer to keep it off)
  • Remove disinfection tools
  • Create registry backup
  • Purge System Restore
  • Reset system settings
Now click "Run" and wait patiently.
Once finished a logfile will be created. You don't have to attach it to your next reply.

2. Make sure Windows Updates are current.

3. If any trojans, rootkits or bootkits were listed among your infection(s), make sure, you change all of your on-line important passwords (bank account(s), secured web sites, etc.) immediately!

4. Check if your browser plugins are up to date.
Firefox - https://www.mozilla.org/en-US/plugincheck/
other browsers: https://browsercheck.qualys.com/ (click on "Scan without installing plugin" and then on "Scan now")

5. Run Malwarebytes "Quick scan" once in a while to assure safety of your computer.

6. Run Temporary File Cleaner (TFC) and AdwCleaner weekly (you need to redownload these tools since they were removed by DelFix).

7. (optional) If you want to keep all your programs up to date, download and install FileHippo App Manager.
The Update Checker will scan your computer for installed software, check the versions and then send this information to FileHippo.com to see if there are any newer releases.

8. When installing\updating ANY program, make sure you always select "Custom " installation, so you can UN-check any possible "drive-by-install" (foistware), like toolbars etc., which may try to install along with the legitimate program. Do NOT click "Next" button without looking at any given page.

9. Read:
How did I get infected?, With steps so it does not happen again!: http://www.bleepingcomputer.com/forums/topic2520.html
Simple and easy ways to keep your computer safe and secure on the Internet: http://www.bleepingcomputer.com/tutorials/keep-your-computer-safe-online/
About those Toolbars and Add-ons - Potentially Unwanted Programs (PUPs) which change your browser settings: http://www.bleepingcomputer.com/for...curity-questions-best-practices/#entry3187642

10. Please, let me know, how your computer is doing.
 
My system seems to be behaving ok now. its just that windows update service is not running. neither am I able to start it.
 
Tweaking.com - Windows Repair All-In-One (Portable)

- Download Windows Repair All-In-One (Portable Version) from here.

- Extract tweaking.com_windows_repair_aio.zip to your Desktop.

- Disable all your antivirus and antimalware software - see how to do that here.
- Right click on https://I.imgur.com/QfBzvq1.png[/URL]] and select [b]Run as Administrator[/b] ([I]XP users just double click[/I]) to start Windows Repair All-In-One.
([I]Windows Vista/7/8 users: Accept UAC warning if it is enabled.[/I])

- A window will appear. Click [b]Step 2[/b].
[img=[URL]http://I.imgur.com/2f8o60N.png[/URL]]

- Click the [b]Open Pre-Scan[/b] button, then click [b]Start Scan[/b]. Wait for Windows Repair to finish scanning.

- Depending on which error Windows Repair found, click [b]Repair Reparse Point[/b] or [b]Repair Environment Variable[/b] accordingly. When the button changes to "Done!", click the close button to return to Windows Repair.

- Go to [b]Step 3[/b], then click [b]Check[/b] in the [b]See If Check Disk Is Needed[/b].

- If Windows Repair stated that errors are found, click [b]Open Check Disk At Next Boot[/b]. Choose [b](/R) Fixes errors on the disk also locate bad sectors and recovers readable information[/b], then click [b]Add To Next Boot[/b]. [b][color=blue]Reboot the computer[/color][/b] to let Windows check the disk.
[img=[URL]http://I.imgur.com/Ymy7crZ.png[/URL]]

- Go to [b]Step 4[/b], then click [b]Do It[/b].
[img=[URL]http://I.imgur.com/zDtdN75.png[/URL]]

- Go to [b]Step 5[/b]. Under [b][color=green]System Restore[/color][/b] click [b]Create[/b].
[img=[URL]http://I.imgur.com/f7lEe1N.png[/URL]]

- Go to [b]Repairs[/b] and click [b]Open Repairs[/b]. [b][color=blue]Leave all checkmarks as they are[/color][/b], then click [b]Start Repairs[/b].
[img=[URL]http://I.imgur.com/PGv2vtD.png[/URL]]

- By default Windows Repair All-In-One will create a [b]"Logs"[/b] folder in its folder on the [b]Desktop[/b]. Please post the contents of the log in your next reply.
 
Its showing error in step 4(highlighted in red color below):

[SC] ChangeServiceConfig SUCCESS

C:\Users\Rajshree\Desktop\Tweaking.com - Windows Repair>"C:\Windows\system32\sfc
" /scannow

Windows Resource Protection could not start the repair service.
Please Restart Your Computer When System File Checker is Finished.
Press any key to continue . . .
 
"Please Restart Your Computer When System File Checker is Finished"
Did you?
 
Right click on Start menu.
Click on "Command Prompt(Admin)".
Command prompt window will open.
Paste this in:
chkdsk /r (<------watch for "space")
Press Enter.
Chkdsk will run.
Reboot.
Download ListChkdskResult.exe (by SleepyDude) from the link below:
https://dl.dropboxusercontent.com/u/12354842/My Tools/ListChkdskResult.exe
Double click on it to run it. It will take a few seconds to scan, then it will open a Notepad window with the log. Copy and paste the contents of this into your next post
 
After openining the above link and clicking on download I am getting error 403 "you dont belong here"
I retried after creating an account in dropbox but still the same error.
 
ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 10/4/2019 7:39:20 PM >------
Category: 0
Computer Name: Rajshree-PC
Event Code: 1001
Record Number: 48179
Source Name: Microsoft-Windows-Wininit
Time Written: 10-03-2019 @ 18:50:10
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
250112 file records processed.

File verification completed.
463 large file records processed.

0 bad file records processed.

2 EA records processed.

47 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
306088 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
250112 file SDs/SIDs processed.

Cleaning up 16 unused index entries from index $SII of file 0x9.
Cleaning up 16 unused index entries from index $SDH of file 0x9.
Cleaning up 16 unused security descriptors.
Security descriptor verification completed.
27989 data files processed.

CHKDSK is verifying Usn Journal...
36047968 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
250096 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
52661926 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

274580610 KB total disk space.
63481508 KB in 132289 files.
90548 KB in 27990 indexes.
0 KB in bad sectors.
360850 KB in use by the system.
65536 KB occupied by the log file.
210647704 KB available on disk.

4096 bytes in each allocation unit.
68645152 total allocation units on disk.
52661926 allocation units available on disk.

Internal Info:
00 d1 03 00 22 72 02 00 36 a4 04 00 00 00 00 00 ...."r..6.......
6c 02 00 00 2f 00 00 00 00 00 00 00 00 00 00 00 l.../...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------
Category: 0
Computer Name: Rajshree-PC
Event Code: 1001
Record Number: 48044
Source Name: Microsoft-Windows-Wininit
Time Written: 10-01-2019 @ 15:52:32
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
250112 file records processed.

File verification completed.
462 large file records processed.

0 bad file records processed.

2 EA records processed.

47 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 5)...
306268 index entries processed.

Index verification completed.
0 unindexed files scanned.

0 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 5)...
250112 file SDs/SIDs processed.

Cleaning up 81 unused index entries from index $SII of file 0x9.
Cleaning up 81 unused index entries from index $SDH of file 0x9.
Cleaning up 81 unused security descriptors.
Security descriptor verification completed.
28079 data files processed.

CHKDSK is verifying Usn Journal...
37706000 USN bytes processed.

Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
250096 files processed.

File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
52713432 free clusters processed.

Free space verification is complete.
Windows has checked the file system and found no problems.

274580610 KB total disk space.
63274092 KB in 134311 files.
90408 KB in 28080 indexes.
0 KB in bad sectors.
362382 KB in use by the system.
65536 KB occupied by the log file.
210853728 KB available on disk.

4096 bytes in each allocation unit.
68645152 total allocation units on disk.
52713432 allocation units available on disk.

Internal Info:
00 d1 03 00 62 7a 02 00 0e ad 04 00 00 00 00 00 ....bz..........
6c 02 00 00 2f 00 00 00 00 00 00 00 00 00 00 00 l.../...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------
Category: 0
Computer Name: Rajshree-PC
Event Code: 26213
Record Number: 48025
Source Name: Chkdsk
Time Written: 10-01-2019 @ 14:20:44
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode. A volume snapshot was not used. Extra errors and warnings may be reported as the volume may have changed during the chkdsk run.

Checking file system on C:
The type of the file system is NTFS.
The volume is in use by another process. Chkdsk
might report errors when no corruption is present.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
250112 file records processed.

File verification completed.
461 large file records processed.

0 bad file records processed.

2 EA records processed.

47 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
Index entry Preferences of index $I30 in file 0x28875 points to unused file 0x1b7.

Index entry Preferences in index $I30 of file 166005 is incorrect.
Index entry PREFER~1 of index $I30 in file 0x28875 points to unused file 0x1b7.
Index entry PREFER~1 in index $I30 of file 166005 is incorrect.
Index entry CHKDSK.EXE-496676BC.pf of index $I30 in file 0x2c96c points to unused file 0xef92.
Index entry CHKDSK.EXE-496676BC.pf in index $I30 of file 182636 is incorrect.
Index entry CHKDSK~1.PF of index $I30 in file 0x2c96c points to unused file 0xef92.
Index entry CHKDSK~1.PF in index $I30 of file 182636 is incorrect.
The file reference 0x6200000000ef91 of index entry CMD.EXE-AC113AA8.pf of index $I30
with parent 0x2c96c is not the same as 0x6100000000ef91.
Index entry CMD.EXE-AC113AA8.pf in index $I30 of file 182636 is incorrect.
The file reference 0x6200000000ef91 of index entry CMDEXE~1.PF of index $I30
with parent 0x2c96c is not the same as 0x6100000000ef91.
Index entry CMDEXE~1.PF in index $I30 of file 182636 is incorrect.
306268 index entries processed.

Index verification completed.

Errors found. CHKDSK cannot continue in read-only mode.

-----------------------------------------------------------------------
Category: 0
Computer Name: Rajshree-PC
Event Code: 26213
Record Number: 48011
Source Name: Chkdsk
Time Written: 10-01-2019 @ 13:10:49
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode. A volume snapshot was not used. Extra errors and warnings may be reported as the volume may have changed during the chkdsk run.

Checking file system on C:
The type of the file system is NTFS.
The volume is in use by another process. Chkdsk
might report errors when no corruption is present.

WARNING! F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
250112 file records processed.

File verification completed.
462 large file records processed.

0 bad file records processed.

2 EA records processed.

47 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
Index entry Preferences of index $I30 in file 0x28875 points to unused file 0x480a.

Index entry Preferences in index $I30 of file 166005 is incorrect.
Index entry PREFER~1 of index $I30 in file 0x28875 points to unused file 0x480a.
Index entry PREFER~1 in index $I30 of file 166005 is incorrect.
306260 index entries processed.

Index verification completed.

Errors found. CHKDSK cannot continue in read-only mode.

-----------------------------------------------------------------------
Category: 0
Computer Name: Rajshree-PC
Event Code: 1001
Record Number: 47441
Source Name: Microsoft-Windows-Wininit
Time Written: 09-28-2019 @ 19:59:32
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
Attribute record of type 0x80 and instance tag 0x8 is cross linked
starting at 0xe653e for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x8
in file 0x850f is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 34063.
Attribute record of type 0x80 and instance tag 0x0 is cross linked
starting at 0x2546126 for possibly 0x83 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x0
in file 0xbdf1 is already in use.
The attribute of type 0x80 and instance tag 0x0 in file 0xbdf1
has allocated length of 0xd9ce000 instead of 0x3998000.
Deleted corrupt attribute list entry
with type code 128 in file 48625.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xe000000009a23. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 39459.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x700000000b671. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46705.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x700000000bdf4. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 48628.
250112 file records processed.

File verification completed.
Deleting orphan file record segment 39459.
Deleting orphan file record segment 46705.
500 large file records processed.

0 bad file records processed.

2 EA records processed.

47 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
Unable to locate the file name attribute of index entry CURRENT
of index $I30 with parent 0x3cda in file 0x482a.
Deleting index entry CURRENT in index $I30 of file 15578.
Unable to locate the file name attribute of index entry 86627a30-365e-4821-86d9-df0489758e9b
of index $I30 with parent 0x8503 in file 0x47df.
Deleting index entry 86627a30-365e-4821-86d9-df0489758e9b in index $I30 of file 34051.
Unable to locate the file name attribute of index entry 86627A~1
of index $I30 with parent 0x8503 in file 0x47df.
Deleting index entry 86627A~1 in index $I30 of file 34051.
305064 index entries processed.

Index verification completed.
CHKDSK is scanning unindexed files for reconnect to their original directory.
Recovering orphaned file B91603~1.CUS (109) into directory file 134209.
Recovering orphaned file b916037c1e115fe0.customDestinations-ms (109) into directory file 134209.
Recovering orphaned file WEBCAC~1.TMP (569) into directory file 75.
Recovering orphaned file WebCacheV01.tmp (569) into directory file 75.
Recovering orphaned file 000039.log (1658) into directory file 15578.
Recovering orphaned file MANIFE~2 (1659) into directory file 15578.
Recovering orphaned file MANIFEST-000038 (1659) into directory file 15578.
6 unindexed files scanned.

Recovering orphaned file 000038.dbtmp (1661) into directory file 15578.
Recovering orphaned file 000038~1.DBT (1661) into directory file 15578.
CHKDSK is recovering remaining unindexed files.
1 unindexed files recovered.

CHKDSK is verifying security descriptors (stage 3 of 3)...
250112 file SDs/SIDs processed.

Cleaning up 350 unused index entries from index $SII of file 0x9.
Cleaning up 350 unused index entries from index $SDH of file 0x9.
Cleaning up 350 unused security descriptors.
CHKDSK is compacting the security descriptor stream
Inserting data attribute into file 34063.
Inserting data attribute into file 48625.
27479 data files processed.

CHKDSK is verifying Usn Journal...
36762872 USN bytes processed.

Usn Journal verification completed.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

274580610 KB total disk space.
60632748 KB in 128531 files.
88072 KB in 27481 indexes.
0 KB in bad sectors.
361538 KB in use by the system.
65536 KB occupied by the log file.
213498252 KB available on disk.

4096 bytes in each allocation unit.
68645152 total allocation units on disk.
53374563 allocation units available on disk.

Internal Info:
00 d1 03 00 75 61 02 00 eb 88 04 00 00 00 00 00 ....ua..........
69 02 00 00 2f 00 00 00 00 00 00 00 00 00 00 00 I.../...........
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------
Category: 0
Computer Name: Rajshree-PC
Event Code: 1001
Record Number: 43810
Source Name: Microsoft-Windows-Wininit
Time Written: 08-25-2019 @ 04:38:37
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 3)...
Attribute record of type 0x80 and instance tag 0x0 is cross linked
starting at 0x14ae5d for possibly 0x11 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x0
in file 0xf1e is already in use.
The attribute of type 0x80 and instance tag 0x0 in file 0xf1e
has allocated length of 0x5b800000 instead of 0x4ea0000.
Deleted corrupt attribute list entry
with type code 128 in file 3870.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xf0000000000f0. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 240.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x710000000003b6. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 950.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x5d000000001b64. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 7012.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x10000000001f9c. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 8092.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x3a000000002154. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 8532.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x1060000000026c5. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 9925.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x23000000003764. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 14180.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x400000000b54b. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46411.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x600000000b552. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46418.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x200000000b553. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46419.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x200000000b557. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46423.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x500000000b5fe. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46590.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x400000000b656. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46678.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x400000000b6f0. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46832.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xe00000000b712. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 46866.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0x1554ac for possibly 0x62 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x2cfb7 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 184247.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x12c51b for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x2dd3f is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 187711.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x12c759 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x2dd4e is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 187726.
Attribute record of type 0xa0 and instance tag 0x4 is cross linked
starting at 0x1333a4 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0xa0 and instance tag 0x4
in file 0x2f7e1 is already in use.
Deleting corrupt attribute record (160, $I30)
from file record segment 194529.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x16d5a3 for possibly 0x10 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x30ae6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 199398.
250112 file records processed.

File verification completed.
Deleting orphan file record segment 240.
Deleting orphan file record segment 950.
709 large file records processed.

0 bad file records processed.

2 EA records processed.

47 reparse records processed.

CHKDSK is verifying indexes (stage 2 of 3)...
The multi-sector header signature for VCN 0x0 of index $I30
in file 0x2d2c0 is incorrect.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
The multi-sector header signature for VCN 0x1 of index $I30
in file 0x2d2c0 is incorrect.
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
Correcting error in index $I30 for file 185024.
The index bitmap $I30 in file 0x2d2c0 is incorrect.
Correcting error in index $I30 for file 185024.
The down pointer of current index entry with length 0xa0 is invalid.
3f dd 02 00 00 00 02 00 a0 00 82 00 01 00 00 00 ?...............
c0 d2 02 00 00 00 01 00 4b b1 94 07 dc 3b d1 01 ........K....;..
7f d8 e5 c8 09 6b d1 01 7f d8 e5 c8 09 6b d1 01 .....k.......k..
7f d8 e5 c8 09 6b d1 01 00 00 00 00 00 00 00 00 .....k..........
00 00 00 00 00 00 00 00 06 00 00 10 00 00 00 00 ................
20 01 30 00 30 00 30 00 30 00 35 00 31 00 30 00 .0.0.0.0.5.1.0.
39 00 46 00 31 00 30 00 30 00 43 00 30 00 34 00 9.F.1.0.0.C.0.4.
30 00 30 00 31 00 30 00 30 00 30 00 30 00 30 00 0.0.1.0.0.0.0.0.
30 00 30 00 30 00 46 00 30 00 31 00 46 00 45 00 0.0.0.F.0.1.F.E.
43 00 23 8a db 3b d1 01 ff ff ff ff ff ff ff ff C.#..;..........
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
Sorting index $I30 in file 185024.
The index bitmap for index $I30 in file 0x2dd3f is invalid or missing.
Correcting error in index $I30 for file 187711.
The index bitmap $I30 is present but there is no corresponding
index allocation attribute in file 0x2dd3f.
Correcting error in index $I30 for file 187711.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff 4b b1 94 07 dc 3b d1 01 ........K....;..
7f d8 e5 c8 09 6b d1 01 7f d8 e5 c8 09 6b d1 01 .....k.......k..
Sorting index $I30 in file 187711.
The index bitmap for index $I30 in file 0x2dd4e is invalid or missing.
Correcting error in index $I30 for file 187726.
The index bitmap $I30 is present but there is no corresponding
index allocation attribute in file 0x2dd4e.
Correcting error in index $I30 for file 187726.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff 4b b1 94 07 dc 3b d1 01 ........K....;..
7f d8 e5 c8 09 6b d1 01 7f d8 e5 c8 09 6b d1 01 .....k.......k..
Sorting index $I30 in file 187726.
The multi-sector header signature for VCN 0x5 of index $I30
in file 0x2f390 is incorrect.
4b 00 c7 0b 40 2d 4b 00 d0 0b 60 2d 4b 00 d9 0b K...@-K...`-K...
80 2d 4b 00 e2 0b a0 2d 4b 00 eb 0b c0 2d 4b 00 .-K....-K....-K.
The multi-sector header signature for VCN 0xd of index $I30
in file 0x2f390 is incorrect.
c2 0c 50 20 00 00 00 00 84 18 57 20 ca 0c 01 00 ..P ......W ....
78 20 00 00 00 00 93 00 53 2a d2 0c 03 00 ac 20 x ......S*.....
The multi-sector header signature for VCN 0xf of index $I30
in file 0x2f390 is incorrect.
00 65 78 74 65 6e 64 65 64 44 61 74 61 00 54 72 .extendedData.Tr
61 63 65 44 61 74 61 00 64 61 74 61 00 6d 73 63 aceData.data.msc
The multi-sector header signature for VCN 0xb of index $I30
in file 0x2f390 is incorrect.
13 30 07 00 3f 00 00 00 16 00 00 11 02 7b 9c 00 .0..?........{..
00 04 2d 30 73 83 00 00 0a 0a 06 72 f8 06 00 70 ..-0s......r...p
The multi-sector header signature for VCN 0x15 of index $I30
in file 0x2f390 is incorrect.
64 2e 20 54 68 65 20 74 72 61 63 65 20 77 61 73 d. The trace was
20 74 72 75 6e 63 61 74 65 64 2e 01 16 48 61 6e truncated...Han
The multi-sector header signature for VCN 0xc of index $I30
in file 0x2f390 is incorrect.
00 0a 10 01 02 03 28 ba 00 00 0a 2a 13 30 03 00 ......(....*.0..
54 00 00 00 2d 00 00 11 03 28 2e 00 00 0a 2c 02 T...-....(....,.
The multi-sector header signature for VCN 0xe of index $I30
in file 0x2f390 is incorrect.
01 00 7e 14 02 00 02 00 51 24 00 00 01 00 78 12 ..~.....Q$....x.
00 00 01 00 78 12 00 00 01 00 f4 1b 00 00 01 00 ....x...........
The multi-sector header signature for VCN 0x16 of index $I30
in file 0x2f390 is incorrect.
09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 01 0f .*.H............
00 30 82 01 0a 02 82 01 01 00 b3 21 22 df 6a d0 .0.........!".j.
The multi-sector header signature for VCN 0x10 of index $I30
in file 0x2f390 is incorrect.
69 73 70 6c 61 79 41 74 74 72 69 62 75 74 65 00 isplayAttribute.
50 61 72 61 6d 41 72 72 61 79 41 74 74 72 69 62 ParamArrayAttrib
The multi-sector header signature for VCN 0x18 of index $I30
in file 0x2f390 is incorrect.
31 31 30 37 30 38 32 30 35 39 30 39 5a 17 0d 32 110708205909Z..2
36 30 37 30 38 32 31 30 39 30 39 5a 30 7e 31 0b 60708210909Z0~1.
The multi-sector header signature for VCN 0x1 of index $I30
in file 0x2f390 is incorrect.
e8 04 06 00 21 06 e8 04 06 00 2d 06 e8 04 06 00 ....!.....-.....
3b 06 d4 05 06 00 45 06 56 06 06 00 7e 06 e8 04 ;.....E.V...~...
Correcting error in index $I30 for file 193424.
Correcting error in index $I30 for file 193424.
The index bitmap $I30 in file 0x2f390 is incorrect.
Correcting error in index $I30 for file 193424.
The down pointer of current index entry with length 0x78 is invalid.
c4 8d 00 00 00 00 0b 00 78 00 5a 00 01 00 00 00 ........x.Z.....
90 f3 02 00 00 00 03 00 00 93 dc cb ac 55 cf 01 .............U..
00 93 dc cb ac 55 cf 01 d0 bd b6 22 11 59 d5 01 .....U.....".Y..
d0 bd b6 22 11 59 d5 01 00 80 00 00 00 00 00 00 ...".Y..........
d8 72 00 00 00 00 00 00 20 00 00 00 00 00 00 00 .r...... .......
0c 02 53 00 59 00 35 00 42 00 36 00 42 00 7e 00 ..S.Y.5.B.6.B.~.
31 00 2e 00 44 00 4c 00 4c 00 48 00 00 00 00 00 1...D.L.L.H.....
ff ff ff ff ff ff ff ff 00 00 00 00 00 00 00 00 ................
18 00 00 00 03 00 00 00 21 00 00 00 00 00 00 00 ........!.......
Sorting index $I30 in file 193424.
The index bitmap for index $I30 in file 0x2f7e1 is invalid or missing.
Correcting error in index $I30 for file 194529.
The index bitmap $I30 is present but there is no corresponding
index allocation attribute in file 0x2f7e1.
Correcting error in index $I30 for file 194529.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff dd ff 17 ec 89 66 d1 01 .............f..
a3 fb 51 ec 89 66 d1 01 a3 fb 51 ec 89 66 d1 01 ..Q..f....Q..f..
Sorting index $I30 in file 194529.
306290 index entries processed.

Index verification completed.
CHKDSK is scanning unindexed files for reconnect to their original directory.
Recovering orphaned file System.Web.RegularExpressions.dll (3218) into directory file 193424.
Recovering orphaned file mscorlib.dll (4386) into directory file 193424.
Recovering orphaned file 68AB67~1 (5149) into directory file 185024.
Recovering orphaned file 68AB67CA7DA73301B744CAF070E41400 (5149) into directory file 185024.
Recovering orphaned file NGENRO~1.DAT (6890) into directory file 193424.
Recovering orphaned file ngenrootstorelock.dat (6890) into directory file 193424.
Recovering orphaned file SYD43B~1.DLL (7930) into directory file 193424.
Recovering orphaned file System.Web.DataVisualization.dll (7930) into directory file 193424.
Recovering orphaned file MICROS~1.DLL (8030) into directory file 193424.
Recovering orphaned file Microsoft.VisualBasic.Activities.Compiler.dll (8030) into directory file 193424.
Recovering orphaned file vbc.exe (8093) into directory file 193424.
Recovering orphaned file DIASYM~1.DLL (8378) into directory file 193424.
Recovering orphaned file diasymreader.dll (8378) into directory file 193424.
Recovering orphaned file ACCESS~1.DLL (8487) into directory file 193424.
Recovering orphaned file Accessibility.dll (8487) into directory file 193424.
Recovering orphaned file ADDINP~1.EXE (8498) into directory file 193424.
Recovering orphaned file AddInProcess.exe (8498) into directory file 193424.
Recovering orphaned file ADDINP~2.EXE (8505) into directory file 193424.
Recovering orphaned file AddInProcess32.exe (8505) into directory file 193424.
Recovering orphaned file ADDINU~1.EXE (8520) into directory file 193424.
Recovering orphaned file AddInUtil.exe (8520) into directory file 193424.
Recovering orphaned file ADONET~1.DLL (8535) into directory file 193424.
Recovering orphaned file AdoNetDiag.dll (8535) into directory file 193424.
Recovering orphaned file alink.dll (8547) into directory file 193424.
Recovering orphaned file APPLAU~1.EXE (8563) into directory file 193424.
Recovering orphaned file AppLaunch.exe (8563) into directory file 193424.
Recovering orphaned file ASPNET~1.EXE (8570) into directory file 193424.
Recovering orphaned file aspnet_compiler.exe (8570) into directory file 193424.
Recovering orphaned file ASPNET~1.DLL (8586) into directory file 193424.
Recovering orphaned file aspnet_filter.dll (8586) into directory file 193424.
Recovering orphaned file ASPNET~2.DLL (8598) into directory file 193424.
Recovering orphaned file aspnet_isapi.dll (8598) into directory file 193424.
Recovering orphaned file ASPNET~1.INI (8602) into directory file 193424.
Recovering orphaned file aspnet_perf.ini (8602) into directory file 193424.
Recovering orphaned file ASPNET~2.INI (8606) into directory file 193424.
Recovering orphaned file aspnet_perf2.ini (8606) into directory file 193424.
Recovering orphaned file ASPNET~4.DLL (8615) into directory file 193424.
Recovering orphaned file aspnet_rc.dll (8615) into directory file 193424.
Recovering orphaned file ASPNET~2.EXE (8621) into directory file 193424.
Recovering orphaned file aspnet_regbrowsers.exe (8621) into directory file 193424.
Recovering orphaned file ASPNET~3.EXE (8631) into directory file 193424.
Recovering orphaned file aspnet_regiis.exe (8631) into directory file 193424.
Recovering orphaned file ASPNET~4.EXE (8636) into directory file 193424.
Recovering orphaned file aspnet_regsql.exe (8636) into directory file 193424.
Recovering orphaned file AS41BC~1.EXE (8642) into directory file 193424.
Recovering orphaned file aspnet_state.exe (8642) into directory file 193424.
Recovering orphaned file AS0BAF~1.DLL (8646) into directory file 193424.
Recovering orphaned file AspNetMMCExt.dll (8646) into directory file 193424.
Recov
-----------------------------------------------------------------------
 
Tweaking.com - Windows Repair gave the same error but I dont know how windows update started to work today.
Thanks for your help so far.
 
You must log in or register to reply here.

Similar threads

Nicki
Solved Must have picked up something... some COVID computer variant???
Replies
9
Views
3K
Broni
Broni
E
Solved Svchost.exe launching multiple iexplore.exe - unknown cause
Replies
23
Views
3K
Broni
Broni
NonTechyDad
Solved Malware removal for my son's pc
2
Replies
33
Views
5K
Broni
Broni

Latest posts

Back