Solved Computer hangs and won't open exe files. I think SSD ??

February 5, 2019 at 00:43:17
Specs: Windows 10 64bit, Intel® Core i5-8400/8GB DDR4 2666MHz
Noticed the problem first when i couldn't open my company file in reckon. My accountant says the file is corrupt, And check my Hard Drive for errors. So i opened command prompt (admin) and typed in chkdsk c:/r
On stage 2: Examining file name linkage.... twice it says An unspecified error occurred with a bunch of numbers in brackets. And the chkdsk stops. So I downloaded Crystal Disk Info. And it says the SSD is Good.

I dont know what to try next? I need some assistance.


See More: Computer hangs and wont open exe files. I think SSD ??

Reply ↓  Report •

✔ Best Answer
February 6, 2019 at 17:02:47
If needed.

[Fixed] ChkDsk Stuck at 10%, 11%, 12%, 27%, 100% in Windows 10/8/7
https://www.easeus.com/partition-ma...



#1
February 5, 2019 at 01:12:09
chkdsk checks files as well as for bad sectors.

Go into safe mode & run chkdsk from there.

Start your PC in safe mode in Windows 10
http://windows.microsoft.com/en-au/...
http://www.tomshardware.co.uk/faq/i...
7 ways to boot into Safe Mode in Windows 10
http://www.digitalcitizen.life/4-wa...

Start Windows in “Safe mode with Command Prompt”
At the command prompt, Copy & Paste > chkdsk.exe /f and press Enter.
If Chkdsk wants to schedule a check at the next boot, say Yes.
Copy & Paste > shutdown –r – 01 then press Enter to restart Windows.
Chkdsk should run on restart.
https://www.wikihow.com/Run-a-Chkds...
http://www.mydigitallife.info/2006/...
http://www.robvanderwoude.com/shutd...
http://www.aumha.org/win5/a/shutcut...

message edited by Johnw


Reply ↓  Report •

#2
February 5, 2019 at 01:49:12
Gonna try to boot into safe mode. and try chkdsk there.

BTW the SSD is a SP (Silicon Power). I downloaded there toolbox program, but could not get it to install.


Reply ↓  Report •

#3
February 5, 2019 at 01:56:29
I tried all the methods to get into safe mode, none would work. Closest i got to was the Start-up Settings screen, where it says Restart to change Windows options such as: and in that list is Enable safe mode. But no numbers like in the guide, just dots, and a button at the bottom with Restart. With just restarts the computer back into normal mode Windows.

Reply ↓  Report •

Related Solutions

#4
February 5, 2019 at 02:29:23
"My accountant says the file is corrupt"

Lets check this side of things. Will see if they will run first.

Here are the first 2 steps, more steps will be needed, after I see the results of these logs.

Step 1: Run AdwCleaner
https://www.softpedia.com/get/Antiv...
https://www.bleepingcomputer.com/do...
https://www.malwarebytes.com/adwcle...
https://toolslib.net/downloads/view...
Tutorial if needed.
https://adwcleaner-download.com/how...
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click Scan
In the results tabs, uncheck anything you don't want to remove.
Click on Cleaning.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You also can find the logfile at C:\AdwCleaner [C1 or later].txt as well.
https://i.imgur.com/r3PoAEG.gif

Step 2: Run Malwarebytes Anti-Malware ( MBAM ) Use Threat Scan.
https://www.softpedia.com/get/Antiv...
https://www.freewarefiles.com/Malwa...
https://www.freewarefiles.com/scree...
https://www.malwarebytes.org/downlo...
Forum
https://www.malwarebytes.org/forums/
After the Free trial, I choose this.
https://fs5.directupload.net/images...
You then get this screen.
https://fs5.directupload.net/images...
Or,
Deactivate Malwarebytes for Windows Premium Trial
https://support.malwarebytes.com/do...
At the end of a scan, you will get something like this.
https://fs5.directupload.net/images...
https://fs5.directupload.net/images...
https://fs5.directupload.net/images...
After clicking on > View Report & then > Export. Click 'Copy to Clipboard'
Paste the contents of the clipboard into your reply.


Reply ↓  Report •

#5
February 5, 2019 at 02:30:25
Ok i figured out why the exe files not working. Bit Defender is blocking them for some reason. Have disabled them. And msconfig runs. so why try safe mode again.

Reply ↓  Report •

#6
February 5, 2019 at 02:38:25
"so why try safe mode again"
May not need to, depends where the corruption is.
Process of elimination.

Reply ↓  Report •

#7
February 5, 2019 at 02:43:29
sorry john didn't see your other post until now. i will run adwcleaner and malwarebytes

Reply ↓  Report •

#8
February 5, 2019 at 03:07:41
OK some seriously up. I ran adwcleaner, no threats found, did a winsock clean reboot. Went to check the log file. Is none, even my download of adwcleaner is gone. And i notice icons on desktop i move, and moved back to original position. And i always have to type in password to the wifi each time, even thou its ticked connect automatally.... Nothing is been saved when i reboot the PC.

Reply ↓  Report •

#9
February 5, 2019 at 03:09:51
"OK some seriously up"
Exactly, keep going.

Reply ↓  Report •

#10
February 5, 2019 at 03:17:45
# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-01-31.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 02-05-2019
# Duration: 00:00:11
# OS: Windows 10 Pro
# Scanned: 31793
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

and Malwarebytes I cannot get to open after installed, as a few errors saying Entry Point Not Found


Reply ↓  Report •

#11
February 5, 2019 at 03:19:56
I will stay with you, let me know when you want to go offline.


Reply ↓  Report •

#12
February 5, 2019 at 03:22:39
should I uninstall Bit Defender, as there appear to be blocking some exe files from running. Maybe by just disabling it is not stopping it completely

Reply ↓  Report •

#13
February 5, 2019 at 03:26:51
I can stay up for another 2-3 hours. 9pm here

Reply ↓  Report •

#14
February 5, 2019 at 03:27:14
Run Hitman Pro, then Copy and Paste the contents of the log, into your reply please.
http://www.softpedia.com/get/Intern...
https://www.hitmanpro.com/en-us/hmp...
How to scan and obtain a log
http://forums.majorgeeks.com/showth...
Unlimited free scanning and free 30-day version to remove detected malware.
Download now (64-bit)
https://dl.surfright.nl/HitmanPro_x...

message edited by Johnw


Reply ↓  Report •

#15
February 5, 2019 at 03:31:40
7.30pm here in Western Australia.

Reply ↓  Report •

#16
February 5, 2019 at 03:36:51
"should I uninstall Bit Defender, as there appear to be blocking some exe files from running. Maybe by just disabling it is not stopping it completely"
Yes uninstall, Windows AV ( which is what I use ) will kick in.

Use their uninstaller.

BitDefender Uninstall Tool Download
http://www.bitdefender.com.au/suppo...
http://www.bleepingcomputer.com/dow...
http://www.softpedia.com/get/Tweak/...


Reply ↓  Report •

#17
February 5, 2019 at 04:01:28
During the hitman scan, i had BSOD, wasn't watching closely, by time i got to the computer to read the error message it already restarted. Anyway i can still find out this error message.

Reply ↓  Report •

#18
February 5, 2019 at 04:08:22
"Anyway i can still find out this error message"
Thanks, we need any clues we can get.

Try running HitmanPro off a USB flash/thumb/pen drive, Copy & Paste the log if you can access it.
HitmanPro is designed to work alongside existing security programs without any conflicts. It scans the computer quickly (less than 5 minutes) and does not slow down the computer (except for the few minutes it is scanning). HitmanPro does not need to be installed. It can be run straight from a USB flash/thumb/pen drive, a CD/DVD, local or network attached hard drive.


Reply ↓  Report •

#19
February 5, 2019 at 04:22:19
[code]
HitmanPro 3.8.0.295
www.hitmanpro.com

Computer name . . . . : DESKTOP-3TO6E8V
Windows . . . . . . . : 10.0.0.16299.X64/4
User name . . . . . . : DESKTOP-3TO6E8V\Sandy
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free

Scan date . . . . . . : 2019-02-05 22:03:39
Scan mode . . . . . . : Normal
Scan duration . . . . : 11m 59s
Disk access mode . . : Direct disk access (SPTI)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No

Threats . . . . . . . : 1
Traces . . . . . . . : 1

Objects scanned . . . : 1,909,858
Files scanned . . . . : 28,593
Remnants scanned . . : 488,697 files / 1,392,568 keys

Malware _____________________________________________________________________

C:\WINDOWS\SECOH-QAD.dll
Size . . . . . . . : 3,584 bytes
Age . . . . . . . : 120.4 days (2018-10-08 13:14:19)
Entropy . . . . . : 3.2
SHA-256 . . . . . : 0398221231CFF97E1FDC03D357AC4610AFB8F3CDDE4C90A9EC4D7823B405699E
> Kaspersky . . . . : not-a-virus:NetTool.Win64.RPCHook.a
Fuzzy . . . . . . : 108.0

[/code]

3 other threats didn't upload.
https://imgur.com/a/6jnVz25


Reply ↓  Report •

#20
February 5, 2019 at 04:25:15
While you are doing your stuff, I can look for clues in these logs.

Please download Farbar Recovery Scan Tool and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
http://www.bleepingcomputer.com/dow...
If we have to run Farbar more than once, refer this SS.
http://i.imgur.com/yUxNw0j.gif
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the Desktop.
The first time the tool is run, it makes also another log (Addition.txt) on the Desktop.
The logs are large, upload them using one of these. No time delays/Captcha-I'm not a Robot/account/registration needed. Give us the links please.
http://www.fileconvoy.com/index.php

Next step after you give me the Farbar logs, if your comp will let you.

Please download Dr.Web CureIt and save it to your Desktop. DO NOT perform a scan, until you get it on your desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop. (If this is not possible, this program is portable, and runs right from the location it is downloaded to, like a USB drive or SD card.)
http://www.softpedia.com/get/Antivi...
http://filehippo.com/download_dr_we...
http://www.freedrweb.com/cureit//
http://www.freedrweb.com/cureit/?ln...
ftp://ftp.drweb.com/pub/drweb/cureit/drweb-cureit.exe
Documentation
http://download.geo.drweb.com/pub/d...

Copy & Paste the contents of the log into a text file & upload it here.
No time delays/Captcha-I'm not a Robot/account/registration needed. Give us the link please.
http://www.fileconvoy.com/index.php


Reply ↓  Report •

#21
February 5, 2019 at 04:37:57
farbar logs http://www.fileconvoy.com/dfl.php?i...

Reply ↓  Report •

#22
February 5, 2019 at 06:02:42
my Internet being a pain, rain must be causing drop outs, I've had to restart the download of cureit twice. Now saying 1 hr until download completes. Will goto sleep, continue this in the morning.

Reply ↓  Report •

#23
February 5, 2019 at 06:07:04
"Will goto sleep"
ditto, catch you tomorrow.

Reply ↓  Report •

#24
February 5, 2019 at 15:35:28
Morning John.

I've downloaded cureit. Tried to run it from the desktop and from a usb drive. Something is blocking it. Tried the same file on another computer and it works ok. So file is fine. Reading through the documentation now, see if another way to start the program.


Reply ↓  Report •

#25
February 5, 2019 at 15:41:50
Morning Sub.

Re my post #16. Did you?
There are heaps of conflicts & entries in your logs.


Reply ↓  Report •

#26
February 5, 2019 at 15:43:44
yeh i did uninstall bit defender using the uninstaller tool. But on restart it back again.

Reply ↓  Report •

#27
February 5, 2019 at 15:46:44
also the stop code for BSOD is MEMORY_MANAGEMENT, has happened only twice.

Reply ↓  Report •

#28
February 5, 2019 at 15:47:50
"But on restart it back again"
Try this uninstaller & see if it comes back.

Geek Uninstaller
http://www.softpedia.com/get/Tweak/...
http://www.freewarefiles.com/GeekUn...
http://www.freewarefiles.com/screen...
http://www.geekuninstaller.com/
Just Double click on the program you want to uninstall. If it opens a web page, close it & then wait for it to present the 2nd step.


Reply ↓  Report •

#29
February 5, 2019 at 15:53:21
Downloaded it, but program won't load. Only has the User Account Control Box open, which I click Allow and nothing happens after, was same with cureit.

Reply ↓  Report •

#30
February 5, 2019 at 15:58:14
Have you tried right clicking on the install files & > Run as Admin

Reply ↓  Report •

#31
February 5, 2019 at 16:01:29
Yes tried that on all programs i run

Reply ↓  Report •

#32
February 5, 2019 at 16:05:40
Lets do this & then try cureit. If cureit still won't run, I have a number of workarounds.

Copy & Paste only the text in Blue below & save it into Notepad on your Desktop & name it fixlist.txt
NOTE: It is important that Notepad is used. The fix will not work if Word or some other program is used.
NOTE: It is important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

CreateRestorePoint:
emptytemp:
closeprocesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {A2D1EC9A-D1E1-4709-8A73-E590B98FF857} - \AutoPico Daily Restart -> No File <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION

Open FRST64 and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that, let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please Copy & Paste the contents into your reply.
Refer these SS if needed.
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...
http://fs5.directupload.net/images/...


Reply ↓  Report •

#33
February 5, 2019 at 16:37:19
Fix result of Farbar Recovery Scan Tool (x64) Version: 4.02.2019
Ran by Sandy (06-02-2019 10:30:18) Run:1
Running from C:\Users\Sandy\Desktop
Loaded Profiles: Sandy (Available Profiles: Sandy)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
emptytemp:
closeprocesses:
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> No File
Task: {A2D1EC9A-D1E1-4709-8A73-E590B98FF857} - \AutoPico Daily Restart -> No File <==== ATTENTION
GroupPolicy: Restriction ? <==== ATTENTION
*****************

Restore point was successfully created.
Processes closed successfully.
HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
HKLM\Software\Classes\CLSID\{3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => not found
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A2D1EC9A-D1E1-4709-8A73-E590B98FF857}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A2D1EC9A-D1E1-4709-8A73-E590B98FF857}" => removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AutoPico Daily Restart" => not found
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 6053888 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 20173113 B
Java, Flash, Steam htmlcache => 0 B
Windows/system/drivers => 34207445 B
Edge => 243585488 B
Chrome => 0 B
Firefox => 0 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 4980 B
NetworkService => 974 B
Sandy => 4010587 B

RecycleBin => 0 B
EmptyTemp: => 293.8 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 10:31:02 ====


Reply ↓  Report •

#34
February 5, 2019 at 16:56:47
Just in case you didn't see my message.
Is cureit running?

Reply ↓  Report •

#35
February 5, 2019 at 17:01:23
JohnW -- Would running a rescue disk at this point help since it scans completely from outside of Windows? (I'm sure you have a few you like best)

You have to be a little bit crazy to keep you from going insane.


Reply ↓  Report •

#36
February 5, 2019 at 17:05:15
Tried cureit after the fabar fix, i get this error, also all the files gone from desktop after restart again.

https://imgur.com/a/qihIUuw


Reply ↓  Report •

#37
February 5, 2019 at 17:17:56
That is a memory problem.

Upload a screenshot of Device Manager please. No need to expand.
Upload a screenshot of System.

Upload to directupload.net ( http://en.directupload.net/ ) No account needed. Give us the link/links please.


Reply ↓  Report •

#38
February 5, 2019 at 17:23:16
"Would running a rescue disk at this point help since it scans completely from outside of Windows"
It certainly is an option I have in mind Fingers, at the moment cannot get an indication of what the problem is, due to everything getting blocked.
It is a matter of small steps.

Reply ↓  Report •

#39
Reply ↓  Report •

#40
February 5, 2019 at 17:35:08
btw the reckon company file is not corrupt, I copied it across to another PC and installed reckon on it, and it loaded fine. So whatever is blocking some exe files from loading and not saving any changes made, is probably causing the reckon problem too.

Reply ↓  Report •

#41
February 5, 2019 at 17:38:13
All your memory is available.

Extract from your logs. You may know the answer, your screenshot shows all Ok.

Name: Standard PS/2 Keyboard
Description: Standard PS/2 Keyboard
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standard keyboards)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2 Mouse
Description: Microsoft PS/2 Mouse
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


Reply ↓  Report •

#42
February 5, 2019 at 17:43:59
yeh im uisng new mouse and keyboard, it tries to install each restart, but w/e is on the system is interferring with the install of drivers

Reply ↓  Report •

#43
February 5, 2019 at 17:46:28
"but w/e is on the system is interferring with the install of drivers"
And a lot of other stuff.

When you run cureit, do you see this message?
"When first launched, Dr.Web CureIt loads in Enhanced Protection Mode (EPM).
For this mode, at the warning: To continue working in the EPM...(recommended), press > OK."

message edited by Johnw


Reply ↓  Report •

#44
February 5, 2019 at 17:52:52
No, only warning from windows " Do you want to allow this app to make changes to your device" then a loading circle for 2 seconds then nothing afterwards. (I clicked Yes on the warning)

Reply ↓  Report •

#45
February 5, 2019 at 17:54:29
Lets see if ESET can get around the blockers, you will probably have to use the thumb drive method.

Run ESET Online Scanner. Copy and Paste the contents of the log in your reply please. This scan may take a very long while, so please be patient. Maybe start it before going to work or bed.
Make sure these options are checked/ticked in Advanced settings.

Remove found threats, Scan archives, Scan for potentially unsafe applications, Enable Anti-Stealth technology.
http://www.eset.com/us/online-scann...
http://www.eset.com/home/products/o...
http://fs5.directupload.net/images/...
If your comp is unbootable, or won't let you download, you will have to download ESET from a good computer, put it on a flash/thumb/pen/usb drive & run it from there.
Create a ESET SysRescue CD or USB drive
http://www.eset.com/int/support/sys...
How do I use my ESET SysRescue CD or USB flash drive to scan and clean my system?
http://support.eset.com/kb3509/?loc...
http://support.eset.com/kb3509/#create
http://support.eset.com/kb2921/?loc...
Configure ESET this way & disable your AV.
http://i.imgur.com/wZF1Ppi.gif
How to Temporarily Disable your Anti-virus
http://www.bleepingcomputer.com/for...
http://www.techsupportforum.com/for...
3: Which web browsers are compatible with ESET Online Scanner?
http://support.eset.com/kb405/?loca...
My ESET product detected a threat—what should I do?
http://support.eset.com/kb117/
Once onto a machine, malware can disable antivirus programs, prevent antimalware programs from downloading updates, or prevent a user from running antivirus scans or installing new antivirus software or malware removal tools. At this point even though you are aware the computer is infected, removal is very difficult.
5: Why does the ESET Online Scanner run slowly on my computer?
http://support.eset.com/kb405/?view...
If you have other antivirus, antispyware or anti-malware programs running on your computer, they may intercept the scan being performed by the ESET Online Scanner and hinder performance. You may wish to disable the real-time protection components of your other security software before running the ESET Online Scanner. Remember to turn them back on after you are finished.
17: How can I view the log file from ESET Online Scanner?
http://support.eset.com/kb405/?view...
The ESET Online Scanner saves a log file after running, which can be examined or sent in to ESET for further analysis. The path to the log file is "C:\Program Files\ESET\EsetOnlineScanner\log.txt" (on 64-bit systems this directory will be "C:\Program Files (x86)\ESET\Esetonlinescanner\log.txt"). You can view this file by navigating to the directory and double-clicking it in Windows Explorer, or by copying and pasting the path specification above (including the quotation marks) into the Start > Run dialog box from the Start Menu on the Desktop.
If no threats are found, you will simply see an information window that no threats were found.
http://www.trishtech.com/security/s...


Reply ↓  Report •

#46
February 5, 2019 at 18:02:45
Ok the download looks like it take 2 hours on the nbn, gonna try hotspot my 4g and download though that see if quicker

Reply ↓  Report •

#47
February 5, 2019 at 18:06:49
"gonna try hotspot my 4g and download though that see if quicker"
Ok.

Reply ↓  Report •

#48
February 5, 2019 at 18:17:43
Don't quite have signal for 4G, but what i have is quicker thasn the nbn atm. 30mins until download complete.

Reply ↓  Report •

#49
February 5, 2019 at 18:42:08
i made a rescue boot usb, its now updating virus signature database

Reply ↓  Report •

#50
February 5, 2019 at 19:07:52
Got to go out for about 4 hrs now.

If ESET fails, probably the best method now, if it is an option, is to take the drive out & connect it to your other computer.
Then scan the faulty drive with the tools in the post.

If ESET succeeds, start at the top of the post, & run the tools again.


Reply ↓  Report •

#51
February 5, 2019 at 19:15:17
i get a warning on eset before starting the scan.

H
Warning!!! The NTFS partition with UUID='224E06874E065447' is hibernated Please resume windows and turn it off properly, so mounting could be performed safely.

Then gives me the command c:> shutdown /s /t 0

i tried this command. seemed to work in command prompt. But eset still gives same warning.

I will connect the HD to my other computer and perform scans

message edited by Sub


Reply ↓  Report •

#52
February 5, 2019 at 23:32:53
"I will connect the HD to my other computer and perform scans"
Perfect.



Reply ↓  Report •

#53
February 6, 2019 at 00:04:05
Not sure if i was doing it right, I connected the SSD to the other computer via a usb caddy. I feel most of these scans are scanning the other computers main hard drive.
Anyway, here are some logs.

# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build: 01-30-2019
# Database: 2019-01-31.3 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 02-06-2019
# Duration: 00:00:00
# OS: Windows 10 Pro
# Cleaned: 3
# Failed: 0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted C:\ProgramData\NERO\NERO TUNEITUP

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted HKLM\Software\Wow6432Node\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
Deleted HKLM\Software\Wow6432Node\NERO\nero_tuneitup

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [1439 octets] - [06/02/2019 13:28:11]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########

Malwarebytes
www.malwarebytes.com

-Log Details-
Scan Date: 2/6/19
Scan Time: 1:31 PM
Log File: a2d1fc42-29bf-11e9-a287-10bf48723250.json

-Software Information-
Version: 3.6.1.2711
Components Version: 1.0.463
Update Package Version: 1.0.9136
License: Free

-System Information-
OS: Windows 10 (Build 17134.407)
CPU: x64
File System: NTFS
User: CHRISPC\chris

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Manual
Result: Completed
Objects Scanned: 343512
Threats Detected: 0
Threats Quarantined: 0
Time Elapsed: 1 min, 5 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 0
(No malicious items detected)

File: 0
(No malicious items detected)

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)


(end)

Eset Online Scanner Log

6/02/2019 16:34:47 PM
Files scanned: 392545
Infected files: 0
Cleaned threats: 0
Total scan time: 02:24:38
Scan status: Finished

Also I still get same error when doing chkdsk on the SSD.
https://imgur.com/a/ltuqCsi

Should i run fabar on the other computer

message edited by Sub


Reply ↓  Report •

#54
February 6, 2019 at 00:13:05
"Also I still get same error when doing chkdsk on the SSD"
Right click on that drive from File Explorer.
Properties > Tools > Error checking, click Check.
Click on > Scan Drive.

Reply ↓  Report •

#55
February 6, 2019 at 00:15:01
"Should i run fabar on the other computer"
Skip Farbar for now.

Reply ↓  Report •

#56
February 6, 2019 at 00:23:30
I get an error when doing the scan as you posted, i checked event viewer for the details of the error, copy and pasted below.

Chkdsk was executed in scan mode on a volume snapshot.

Checking file system on F:
The shadow copy provider had an error. Check the System and Application event logs for more information.

A snapshot error occured while scanning this drive. You can try again, but if this problem persists, run an offline scan and fix.

It gave me another option after close the error message, Scan and Repair the Drive, so clicked that, but also error too, copied and pasted below again.

Chkdsk was executed in read/write mode.

Checking file system on F:

Stage 1: Examining basic file system structure ...

456704 file records processed. File verification completed.

15619 large file records processed.
0 bad file records processed.
Stage 2: Examining file name linkage ...
The data written out is different from what is being read back
at offset 0x2c000 for 0x1000 bytes.
An unspecified error occurred (696e647863686b2e 532).
An unspecified error occurred (6e74667363686b2e 1713).


Reply ↓  Report •

#57
February 6, 2019 at 00:32:39
"AdwCleaner" yes, that has scanned C drive.
Can't see an option to just scan the SSD.

Malwarebytes does have an option to select the drive to be scanned.


Reply ↓  Report •

#58
February 6, 2019 at 00:35:56
with Malwarebytes i also did custom scan and selected only the SSD (F:>). Found no threats.

Reply ↓  Report •

#59
February 6, 2019 at 00:41:03
It's starting to point to the SSD being faulty.

Need some time now to clear my head & try something else.

If you can keep trying, just in case you make the files work.

Back in about an hour.

message edited by Johnw


Reply ↓  Report •

#60
February 6, 2019 at 00:43:34
"stop code for BSOD is MEMORY_MANAGEMENT, has happened only twice.", try increasing VCCIO voltage by 0.05 and VDIMM/memory voltage by 0.05 from the bios

Removing the RAM stick and cleaning the gold-plated pins with an eraser can help too.

just throwing that out there johnw, if you think you have a better fix, just ignore me :D
I mean like at post 57, you're in deep already haha

i5-6600K[delid]@4.7GHz/4.4GHz cache/@1.395v LLC=6 | 2x4GB Crucial-DDR4-2400CL17@14-15-15-28 1T 3000MHz@1.4v | MSI Armor RX 570 4GB@1410Mhz core@1.2v/1920MHz


Reply ↓  Report •

#61
February 6, 2019 at 00:46:51
Lazesoft Recovery Suite Home Edition
http://www.softpedia.com/get/System...
http://www.lazesoft.com/lazesoft-re...
Screenshot ( SS )
http://i.imgur.com/c9viJO4.gif
http://fs5.directupload.net/images/...
Lazesoft Recovery Suite Home Edition video tutorial
https://vimeo.com/106789683
Tutorials
http://www.lazesoft.com/guide.html
Once you have a command prompt, Copy & Paste > chkdsk f: /f /r and then press <Enter>

Reply ↓  Report •

#62
February 6, 2019 at 00:49:12
Thanks hidde663, it's very complicated for sure.

Reply ↓  Report •

#63
February 6, 2019 at 00:51:06
about to have dinner, so you do your thing john, i have results for you when your back.

Reply ↓  Report •

#64
February 6, 2019 at 01:46:54
chkdsk inside Command Prompt in Lavasoft Recovery Suite failed stage 2: Examining file name linkage... Failed to transfer logged messages to the event log with status 50.

Now trying the memory diagnostic i saw on the lavasoft boot usb.


Reply ↓  Report •

#65
February 6, 2019 at 01:57:24
"Now trying the memory diagnostic i saw on the lavasoft boot usb"
Good to see you are looking. As System showed all was well with the memory, I expect it to give a good result.
Cleaning the contacts will probably fix the intermittent problem.

When you have finished trying files what you think may work, here is another.

Try OPTION FOUR
https://www.tenforums.com/tutorials...


Reply ↓  Report •

#66
February 6, 2019 at 02:10:57
No Errors Found using step 4 on tenforums site. tried the offlinescanandfix and the spotfix also.

Reply ↓  Report •

#67
February 6, 2019 at 02:13:11
Lets see if we can get into safe mode & do some repairs on the SSD.

Run Windows Repair
Right click on the exe & click on > Run as administrator.
http://www.softpedia.com/get/Tweak/...
http://i1-win.softpedia-static.com/...
http://www.tweaking.com/
http://www.tweaking.com/content/pag...
Tweaking.com - Windows Repair (All In One) Tips (3) Run the repairs twice! (Run repairs, reboot, run repairs in Safe mode with Networking again)
http://www.tweaking.com/articles/pa...
https://i.imgur.com/iEkCjsv.gif
Forum
http://www.tweaking.com/forums/

message edited by Johnw


Reply ↓  Report •

#68
February 6, 2019 at 02:20:55
just letting you know i got to duck out for 20mins or so. i'll be back to continue this

Reply ↓  Report •

#69
February 6, 2019 at 02:32:17
"No Errors Found using step 4 on tenforums site. tried the offlinescanandfix and the spotfix also"
Having to memorize all we have done, just remembered this.
"Crystal Disk Info. And it says the SSD is Good"
Now we have run chkdsk & Crystal Disk Info, hopefully we should be Ok, drive wise.

Reply ↓  Report •

#70
February 6, 2019 at 03:07:13
Why I was out, Bit Defender must of done a system scan. It found some Trojans. Trying to figure out how to get a log of the scan

Reply ↓  Report •

#71
February 6, 2019 at 03:14:58
I think this is the Log file from Bit Defender System Scan.

http://www.filedropper.com/15494118...

its an xml file.


Reply ↓  Report •

#72
February 6, 2019 at 03:17:05
"Trying to figure out how to get a log of the scan"

bitdefender scan log
http://bit.ly/2Sd0uXr


Reply ↓  Report •

#73
February 6, 2019 at 03:24:59
yeh tried that, instructions for ios only

Reply ↓  Report •

#74
February 6, 2019 at 03:28:41
Shall now wait for you to run post #67

Reply ↓  Report •

#75
February 6, 2019 at 03:43:26
windows repair won't open, tried right clicking run as administrator, didn't work either.

As far as I know, no files are corrupted. SSD seems to be in good health. But maybe virus or bad file structure or windows settings, is reverting windows 10 back everytime I reboot windows. Losing all files downloaded or programs installed, settings saved, all gone, like never happened.

Should I be looking at doing a clean install of Windows 10 now?


Reply ↓  Report •

#76
February 6, 2019 at 03:45:23
"Should I be looking at doing a clean install of Windows 10 now?"
Yep, couple more to try.

Run Automatic Repair

Step 1. Boot Windows from a bootable installation media and go on with Repair your computer option.

Step 2. Click Troubleshoot -> Advanced options and then Automatic Repair.

Step 3. Wait until Windows Automatic Repair finished. Restart your computer.


Reply ↓  Report •

#77
February 6, 2019 at 03:54:21
was no automatic repair option, but was a start-up repair option, so i choose that, it diagnosing, then attempting repairs, then said couldn't repair your pc

Reply ↓  Report •

#78
February 6, 2019 at 03:55:16
Do a refresh.
How to Refresh Windows 10
http://www.tenforums.com/tutorials/...
http://www.windowscentral.com/how-u...

"clean install of Windows 10"
To do a clean install, no other drive must be connected during the install.
During the install, Delete all the partitions, keep hitting Delete until Format & Delete are greyed out & you are left with Unallocated.


Reply ↓  Report •

#79
February 6, 2019 at 03:57:10
i better backup files first

Reply ↓  Report •

#80
February 6, 2019 at 04:28:06
i will let u know 2morro how i went

Reply ↓  Report •

#81
February 6, 2019 at 04:44:42
Ok, you will be nearly back to normal, one way or the other.
You gave it a very big shot, unfortunately it was something that we were never able to identify.

Reply ↓  Report •

#82
February 6, 2019 at 05:53:32
Unfortunately clean install of windows failed. Got stuck at partition screen in setup, wouldn't delete or format any partitions also tried shift F10 diskpart. Wouldn't select the dusk, but shows it. I think the drive is locked. If not then faulty. Though all scans I have done say health is good.

I'm off to bed, getting a headache working on this computer.


Reply ↓  Report •

#83
February 6, 2019 at 06:28:18
Unlock Hard Drive | Fix Drive Where Windows Installed Is Locked in Windows 10
https://www.easeus.com/storage-medi...

Next step, run SFC. Use Lazesoft, if SFC doesn't work.
How to Repair Corrupted Windows System Files with the SFC and DISM Commands
https://www.howtogeek.com/222532/ho...
Using DISM and SFC in Windows 10 to Repair System Files
http://alex.zheng-dynasty.com/2016/...
How to Repair System Files with SFC Command in Windows 10
https://www.tenforums.com/tutorials...
How to Fix Corrupted System Files with SFC /scannow in Windows
http://blog.drivethelife.com/how-to...

You probably don't need this first section, but just in case.
Insert your Lazesoft boot drive, hit the Start button & get the boot menu ( press F11 on my comp ) it's displayed down the bottom of your boot screen.
From that screen > Hard Disk hit Enter.
USB > hit Enter.
Adjust if using CD or DVD.
Once Lazesoft has loaded, click on Windows Recovery ( in the green section )
Click OK next.
Click the tab > Repair Tools.
Scroll down to > Additional Tools & click.
Click > Run SFC.

Now whilst in Lazesoft, go to a Command prompt > Format C:

If successful, go back installing W10 & deleting all the partitions.


Reply ↓  Report •

#84
February 6, 2019 at 15:28:08
OK i tried everything, i thought i succeeded when tried aomei partition assistant. deleting the partitions. but soon as i refreshed the page, partitions were back. Drive is write protected. tried every way i found on google. I think time to buy new ssd

Reply ↓  Report •

#85
February 6, 2019 at 15:43:02
"i thought i succeeded when tried aomei partition assistant. deleting the partitions"
You could try hooking the SSD back onto your good comp & deleting/ formatting from there.

Reply ↓  Report •

#86
February 6, 2019 at 16:01:18
attempting that now. and also the sp toolbox on good pc

Reply ↓  Report •

#87
February 6, 2019 at 16:04:20
Also try this chkdsk command.

chkdsk C: /f /x /r ( replace C with the correct drive letter )


Reply ↓  Report •

#88
February 6, 2019 at 16:25:26
deleting partitions didn't work, said it did, but had no affect on the drive. and sp toolbox does not find the ssd. tried chkdsk again same errors before examining linkage....

Reply ↓  Report •

#89
February 6, 2019 at 16:32:04
Looks like we have eliminated everything, if you have a spare drive ( HDD or SSD, borrow if you don't ) I would try, just to make sure there are not any other problems.

Reply ↓  Report •

#90
February 6, 2019 at 16:42:37
I scheduled a check disk on boot through the tweaking.com app. It's scanned all drives. It's been stuck on drive d: for 15min at 10%. Don't know if it's one of my drives or the SSD we working on. I don't have spare drives also.

Edit. Fixed spelling errors, on phone typing.

message edited by Sub


Reply ↓  Report •

#91
February 6, 2019 at 16:58:50
"It's been stuck"
Large drives can take a very long time & do get stuck, before continuing.

Reply ↓  Report •

#92
February 6, 2019 at 17:02:47
✔ Best Answer
If needed.

[Fixed] ChkDsk Stuck at 10%, 11%, 12%, 27%, 100% in Windows 10/8/7
https://www.easeus.com/partition-ma...


Reply ↓  Report •

#93
February 6, 2019 at 17:19:04
Can it be your bios settings are wrong?
How to Check if Windows 10 is using UEFI or Legacy BIOS
https://www.tenforums.com/tutorials...
To Check if Windows 10 is using UEFI or Legacy BIOS in System Information
1. Press the Win+R keys to open Run, type msinfo32 into Run, and click/tap on OK to open System Information.
2. In the right pane of System Summary in System Information, see if the BIOS Mode item has a value of Legacy or UEFI.

Reply ↓  Report •

#94
February 6, 2019 at 17:33:26
I know already its legacy BIOS, i set it up that way, because i dont like UEFI.

Anyhow, Surface Test finished on easeus. Found 46 Bad Sectors.
https://imgur.com/a/liZwdZY
Time for new drive i guess.

Dunno why crystaldiskinfo and disk health on ubcd said drive healthy thou.

message edited by Sub


Reply ↓  Report •

#95
February 6, 2019 at 17:53:41
"Dunno why crystaldiskinfo and disk health on ubcd said drive healthy thou"
It's like having a virus, have to try many, many tools to eliminate. In other words, you need 2nd opinions.

Reply ↓  Report •

#96
February 7, 2019 at 03:48:20
Bought a new SSD, installed windows, working fine.

Which post should I use as best answer.


Reply ↓  Report •

#97
February 7, 2019 at 04:21:56
I think #92 gave us the positive info we needed.

Reply ↓  Report •

#98
February 7, 2019 at 04:25:40
Thanks John for your time and effort, much appreciated.

Reply ↓  Report •

#99
February 7, 2019 at 04:28:57
We got there eventually, nice work Sub, you sticking at it really helped.

Reply ↓  Report •

Ask Question