chkdsk /r will not run

Gateway / 835gm
August 25, 2009 at 05:46:37
Specs: Windows XP
I started experiencing freeze ups on my computer. I had to do a shutdown by holding in the power button. After rebooting I updated all my virus and malware programs and ran them. I decided to do a defrag, but the system would not allow me to do it. I would get a message that it could not start. I downloaded a program called Ultimate Defrag and tried to run that. I get a Windows error message and the program shuts down. I tried running chkdsk /r to see if that will run. When the computer reboots I get the message that the file system is RAW. AUTOCHK not available for RAW drives. I've tried go to the properties for the C drive and running the error-checking and defrag there, but I get unable to complete disk check. I've read a few posts online but I cannot seem to figure out why this started. Any assistance with this would be greatly appreciated.

See More: chkdsk /r will not run

Report •


#1
August 25, 2009 at 06:54:35
... check connections to harddrive it might be worth unhooking it and reconnect

... try booting off xp cd to repair (r) console command prompt

chkdsk /p

.


.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

#2
August 25, 2009 at 08:30:22
Sounds to me like excessive malware on your PC or possibly a failing HD.
Which virus and malware scans have you done?

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#3
August 25, 2009 at 08:38:47
Malwarebytes' Anti-malware is the only one I have done. I just updated and ran again and it says it's not finding anything.

Report •

Related Solutions

#4
August 25, 2009 at 10:24:50
jwray18
You may have a hard drive issue. I would suggest going to the hard drive manufacturers site and download/run their drive diagnostics tools.

Highly recommend you backup your important info before its lost.


Report •

#5
August 25, 2009 at 10:50:08
doing a scan with ONE program doesn't mean it is ok. There are numerous scans you can do:
Ccleaner Slim -remove all it finds
Spybot S&D use the immunize and remove all it finds
Super Anti-spy - remove all it finds

You didn't say which anti virus you are using either.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#6
August 25, 2009 at 10:55:38
Anti-virus I'm using Avast & I also have AVG Free

Report •

#7
August 25, 2009 at 10:58:39
Just today I downloaded and ran Advanced SystemCare. This found a bunch of stuff, but I'm still having the same issue. It could be that my HDD is failing on me. I'll run the diag tool for the HDD and see what it finds.

Report •

#8
August 25, 2009 at 11:02:56
***Anti-virus I'm using Avast & I also have AVG Free***

as long as you don't run 2 AV's at a time, as it will cause conflicts
ASC is not too good of a program.

Some HELP in posting on Computing.net plus free progs and instructions Cheers


Report •

#9
August 25, 2009 at 13:40:45
I ran the diag tool for this HDD. I did the advanced test and got the following response:

Disposition Code = 0X00.

I'm trying to find out what this means. When I rebooted I still get the same message that AUTOCHK not available.


Report •

#10
August 25, 2009 at 13:57:52
... disposition code of 0x00 which translates to 'No errors'

... download, burn, boot-up with this "iso"

http://www.memtest86.com/memtest86-...

.


.

.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

#11
August 25, 2009 at 19:21:03
jwray18,

I found an article that suggests that this error is caused by file system corruption:

http://www.articledashboard.com/Art...

They also claim that partition recovery software from Stellar Data Recovery (see link at end of article) will fix this problem. It looks like they have a free download that will scan your drive but won't fix anything. You have to purchase the software for $99US to get full function.

Please note that I have not used this software myself so I cannot recommend it, but I thought you might want to consider this option if you don't find another solution.

Maybe there are others that have used this software that can let us know if it's any good or not?

-- kptech


Report •

#12
August 26, 2009 at 05:08:52
I have tried several times to create a bootable cd for the memtest86, but it just doesn't seem to want to work for me. My burn program is Nero, and after I'm "done" I have a boot image and nothing has been written to the cd.

Report •

#13
August 26, 2009 at 07:10:27
"...I have tried several times to create a bootable cd..."

... its already bootable ... just burn the "iso" image:

http://wizardskeep.org/mainhall/tut...

... is your bios set to boot from cdrom first?

... anyway "memtest86" will just test your ram memory chips to make sure they're ok... process of elimination!


.


.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

#14
August 29, 2009 at 05:37:22
I cannot create the disk. When I try, all that is created is an image file. When I do a test for the drives with Nero Express, it tells me there are no CD-ROM drives. When I select to do a data dick I keep getting a message that I should get permission from my system administrator for permission to write disks. I've never had this issue before. I've checked the permissions and it's set for all users to have the ability to burn disks.

Report •

#15
August 29, 2009 at 06:04:16
... burn image

.... it might be worth trying system restore in safe mode

... tap "F8" key @ boot-up select "safe mode" using arrow keys [press ENTER]

... once in safe mode click "no" on the "pop-up" that should guide you to system restore

... select a restore point by altering the restore calendar to a time when the pc was working fine.

.


.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

#16
August 31, 2009 at 06:55:19
I tried to do a Restore in Safe Mode without Networking and it just sits there and does not allow the process to continue. I'll select the date, select okay, it'll display that I'm going to restore to this date, but it does nothing. I'm trying to avoid doing a recovery on this machine, but I'm thinking no other choice.

Report •

#17
September 4, 2009 at 12:33:37
Hello jwray18

I know precisely what happens to you, cos yesterday I've had exactly the same.
Briefly: your PC has Rootkit.TDSS
Nasty :-(
It took me over 6 hours to remove it completely, but I was starting from scratch.

Follow me please :-D
1. Download and install - get newest updates! (but do NOT run a scan now) Malwarebytes' Anti-Malware from their website:
http://www.malwarebytes.org/mbam.php
(free version)

2. Download RootRepeal from http://rootrepeal.googlepages.com/
http://ad13.geekstogo.com/RootRepea...

3. Run RootRepeal
go to tab Files, press Scan (mark C if your OS is installed on it)
go to tab Hidden Services, press Scan

After scan (in Hidden Services) right-click on every file and check 'Wipe'
The hidden services are like TDSS....... or kbiwk............?
It's Rootkit.TDSS
Check Files tab - if you find them here, Wipe them too.
Quit program.

4. Reboot PC

5. Just after launching PC run mbam (Malwarebytes' Anti-Malware) Choose quick scan. It takes 10 minutes. Remove everything what its find.

6. Reboot PC.

7. Run RootRepeal
go to tab Hidden Services, press Scan
if it find ANYTHING try Wipe it again, do the same as before (points 3-6)

8. Reboot PC

9. Run RootRepeal
go to tab Hidden Services, press Scan
if it find ANYTHING go to tabs:
drives, files, processes, hidden services
and run Scans and save all Reports and paste it here.

In my case there was two files yet which I've must deleted manually.
And check if defrag and chkdsk are working before posting an answer :-)

Remember: mbam do not even see this rootkit if you do not wiped them before. But then:
C:\WINDOWS\system32\drivers\kbiwkmaahkqkjk.sys (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kbiwkmgotggofy.dat (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kbiwkmohbmjlec.dat (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kbiwkmdjerjhcm.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\kbiwkmuonototg.dll (Rootkit.TDSS) -> Quarantined and deleted successfully.



Report •

#18
September 4, 2009 at 15:16:14
Just a word of explanation. SpyBot Immunize (and Spyware Blaster for that matter) put kill bits in the registry to prevent nasties getting a grip in the first place. Having either or both onboard then keeping them updated and activated is a good idea.

However, since neither of them have the capabilities of removing anything they will not fix problems already on your machine. They are preventatives rather than cures.

some other bloke...


Report •

#19
September 7, 2009 at 18:24:41
I was able to do what you posted and both chkdsk & defrag work now. When I run the RootRepea it shows the same two Hidden Services; ESQULserv.sys & gxvxcserv.sys (This one keeps telling me the file does not exist when I try to wipe it). I've saved the reports for each of the sections you mentioned, but I'm not seeing an option to upload them here.

Report •

#20
September 9, 2009 at 08:53:22
O my, these a dangerous trojans, beware!
for ESQULserv.sys look here:
http://htlogs.com/esqulserv-sys-is-...
for gxvxcserv.sys here:
http://htlogs.com/gxvxcservsys-is-a...

or directly HOW TO REMOVE THEM:
http://www.myantispyware.com/2007/1...
http://www.myantispyware.com/2009/0...



Report •

#21
September 9, 2009 at 11:42:35
For the ESQULserv.sys instruction, I did not find any of the files in the Device manager.

In the list of drivers right click TDSSserv.sys or TDSSxyz.sys where xyz are random characters, msqpdxserv.sys, gaopdxserv.sys, seneka or seneka.sys.

I did find the gxvxcserv.sys there and did the instructions for that. After running I rebooted and went to the Device Manager again and still saw the file there. I uninstalled it and rebooted. I went back to the Device Manager and now I d not see that file there.


Report •

#22
September 9, 2009 at 12:56:32
... I must say that I am impressed with you both "jwray18" and "gnaw"

... good show!

... get them damn critters !!


.


.

... Posting is provided "AS IS" with no warranties
http://img515.imageshack.us/img515/...
Grrrr... ....more


Report •

#23
September 9, 2009 at 14:01:39
I just follow his lead........he's the man!!!

Report •


Ask Question