[ritag1950]

Here it is.

 

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 12/6/2022 8:04:08 PM >------
Category: 0
Computer Name: Rita-PC
Event Code: 1001
Record Number: 98736
Source Name: Microsoft-Windows-Wininit
Time Written: 12-06-2022 @ 20:46:56
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.
Volume label is OS.

A disk check has been scheduled.
Windows will now check the disk.                         

Stage 1: Examining basic file system structure ...
Cleaning up instance tags for file 0x3767.
Cleaning up instance tags for file 0x12470.
Cleaning up instance tags for file 0x14aaa.
Cleaning up instance tags for file 0x1ad0e.
Cleaning up instance tags for file 0x1c623.
Cleaning up instance tags for file 0x1ddb8.
Cleaning up instance tags for file 0x4aab1.
  931584 file records processed.                                                        


File verification completed.
 Phase duration (File record verification): 39.70 seconds.
  19477 large file records processed.                                   


 Phase duration (Orphan file record recovery): 0.00 milliseconds.
  0 bad file records processed.                                     


 Phase duration (Bad file record checking): 2.41 milliseconds.

Stage 2: Examining file name linkage ...
  26128 reparse records processed.                                      


  1368322 index entries processed.                                                       


Index verification completed.
 Phase duration (Index verification): 3.49 minutes.
  0 unindexed files scanned.                                        


 Phase duration (Orphan reconnection): 10.67 seconds.
  0 unindexed files recovered to lost and found.                    


 Phase duration (Orphan recovery to lost and found): 31.45 seconds.
  26128 reparse records processed.                                      


 Phase duration (Reparse point and Object ID verification): 98.74 milliseconds.

Stage 3: Examining security descriptors ...
Cleaning up 19543 unused index entries from index $SII of file 0x9.
Cleaning up 19543 unused index entries from index $SDH of file 0x9.
Cleaning up 19543 unused security descriptors.
CHKDSK is compacting the security descriptor stream
Security descriptor verification completed.
 Phase duration (Security descriptor verification): 1.18 seconds.
  218370 data files processed.                                           


 Phase duration (Data attribute verification): 2.67 milliseconds.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.

Stage 4: Looking for bad clusters in user file data ...
  931568 files processed.                                                               


File data verification completed.
 Phase duration (User file recovery): 1.56 hours.

Stage 5: Looking for bad, free clusters ...
  60228013 free clusters processed.                                                       


Free space verification is complete.
 Phase duration (Free space recovery): 0.00 milliseconds.
Correcting errors in the Volume Bitmap.

Windows has made corrections to the file system.
No further action is required.

 479396155 KB total disk space.
 237020524 KB in 616927 files.
    446936 KB in 218373 indexes.
         0 KB in bad sectors.
   1016639 KB in use by the system.
     65536 KB occupied by the log file.
 240912056 KB available on disk.

      4096 bytes in each allocation unit.
 119849038 total allocation units on disk.
  60228014 allocation units available on disk.
Total duration: 1.64 hours (5938294 ms).

Internal Info:
00 37 0e 00 69 be 0c 00 1f 8e 15 00 00 00 00 00  .7..i...........
bc 65 00 00 54 00 00 00 00 00 00 00 00 00 00 00  .e..T...........

-----------------------------------------------------------------------
Category: 0
Computer Name: Rita-PC
Event Code: 1001
Record Number: 88218
Source Name: Microsoft-Windows-Wininit
Time Written: 09-14-2022 @ 22:43:16
Event Type: Information
User:
Message:

Checking file system on F:
The type of the file system is NTFS.
Volume label is Rita_Backup.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

Stage 1: Examining basic file system structure ...
  102400 file records processed.                                                        


File verification completed.
 Phase duration (File record verification): 1.75 seconds.
  13 large file records processed.                                   


 Phase duration (Orphan file record recovery): 0.00 milliseconds.
  0 bad file records processed.                                     


 Phase duration (Bad file record checking): 2.40 milliseconds.

Stage 2: Examining file name linkage ...
  17 reparse records processed.                                      


  113440 index entries processed.                                                       


Index verification completed.
 Phase duration (Index verification): 45.89 seconds.
  0 unindexed files scanned.                                        


 Phase duration (Orphan reconnection): 26.92 milliseconds.
  0 unindexed files recovered to lost and found.                    


 Phase duration (Orphan recovery to lost and found): 3.97 milliseconds.
  17 reparse records processed.                                      


 Phase duration (Reparse point and Object ID verification): 8.22 milliseconds.

Stage 3: Examining security descriptors ...
Cleaning up 15 unused index entries from index $SII of file 0x9.
Cleaning up 15 unused index entries from index $SDH of file 0x9.
Cleaning up 15 unused security descriptors.
Security descriptor verification completed.
 Phase duration (Security descriptor verification): 91.12 milliseconds.
  5521 data files processed.                                           


 Phase duration (Data attribute verification): 2.55 milliseconds.
CHKDSK is verifying Usn Journal...
  223029136 USN bytes processed.                                                           


Usn Journal verification completed.
 Phase duration (USN journal verification): 8.96 seconds.

Windows has scanned the file system and found no problems.
No further action is required.

 487822335 KB total disk space.
 401603740 KB in 96607 files.
     23744 KB in 5522 indexes.
         0 KB in bad sectors.
    401367 KB in use by the system.
     65536 KB occupied by the log file.
  85793484 KB available on disk.

      4096 bytes in each allocation unit.
 121955583 total allocation units on disk.
  21448371 allocation units available on disk.
Total duration: 56.81 seconds (56812 ms).

Internal Info:
00 90 01 00 fd 8e 01 00 fb 8e 01 00 00 00 00 00  ................
11 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

-----------------------------------------------------------------------
Category: 0
Computer Name: Rita-PC
Event Code: 1001
Record Number: 88217
Source Name: Microsoft-Windows-Wininit
Time Written: 09-14-2022 @ 22:43:16
Event Type: Information
User:
Message:

Checking file system on D:
The type of the file system is NTFS.
Volume label is System Reserved.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         

Stage 1: Examining basic file system structure ...
  256 file records processed.                                                        


File verification completed.
 Phase duration (File record verification): 71.15 milliseconds.
  0 large file records processed.                                   


 Phase duration (Orphan file record recovery): 2.50 milliseconds.
  0 bad file records processed.                                     


 Phase duration (Bad file record checking): 2.44 milliseconds.

Stage 2: Examining file name linkage ...
  3 reparse records processed.                                      


  378 index entries processed.                                                       


Index verification completed.
 Phase duration (Index verification): 87.70 milliseconds.
  0 unindexed files scanned.                                        


 Phase duration (Orphan reconnection): 2.55 milliseconds.
  0 unindexed files recovered to lost and found.                    


 Phase duration (Orphan recovery to lost and found): 3.47 milliseconds.
  3 reparse records processed.                                      


 Phase duration (Reparse point and Object ID verification): 5.30 milliseconds.

Stage 3: Examining security descriptors ...
Cleaning up 18 unused index entries from index $SII of file 0x9.
Cleaning up 18 unused index entries from index $SDH of file 0x9.
Cleaning up 18 unused security descriptors.
Security descriptor verification completed.
 Phase duration (Security descriptor verification): 26.48 milliseconds.
  62 data files processed.                                           


 Phase duration (Data attribute verification): 2.58 milliseconds.
CHKDSK is verifying Usn Journal...
  11144 USN bytes processed.                                                           


Usn Journal verification completed.
 Phase duration (USN journal verification): 4.96 milliseconds.

Windows has scanned the file system and found no problems.
No further action is required.

    562175 KB total disk space.
    378332 KB in 104 files.
        92 KB in 63 indexes.
         0 KB in bad sectors.
      5239 KB in use by the system.
      4288 KB occupied by the log file.
    178512 KB available on disk.

      4096 bytes in each allocation unit.
    140543 total allocation units on disk.
     44628 allocation units available on disk.
Total duration: 264.65 milliseconds (264 ms).

Internal Info:
00 01 00 00 b3 00 00 00 b0 00 00 00 00 00 00 00  ................
03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

-----------------------------------------------------------------------
Category: 0
Computer Name: Rita-PC
Event Code: 26226
Record Number: 85473
Source Name: Chkdsk
Time Written: 08-24-2022 @ 01:09:34
Event Type: Information
User:
Message: Chkdsk was executed in scan mode on a volume snapshot.  

Checking file system on \Device\HarddiskVolume8
Volume label is System Reserved.

Stage 1: Examining basic file system structure ...
  256 file records processed.                                                        

File verification completed.
 Phase duration (File record verification): 9.91 milliseconds.
  0 large file records processed.                                   

 Phase duration (Orphan file record recovery): 0.03 milliseconds.
  0 bad file records processed.                                     

 Phase duration (Bad file record checking): 0.01 milliseconds.

Stage 2: Examining file name linkage ...
  3 reparse records processed.                                      

  378 index entries processed.                                                       

Index verification completed.
 Phase duration (Index verification): 39.78 milliseconds.

 Phase duration (Orphan reconnection): 0.09 milliseconds.

 Phase duration (Orphan recovery to lost and found): 0.06 milliseconds.
  3 reparse records processed.                                      

 Phase duration (Reparse point and Object ID verification): 0.12 milliseconds.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
 Phase duration (Security descriptor verification): 20.83 milliseconds.
  62 data files processed.                                           

 Phase duration (Data attribute verification): 0.01 milliseconds.
CHKDSK is verifying Usn Journal...
  10968 USN bytes processed.                                                           

Usn Journal verification completed.
 Phase duration (USN journal verification): 7.06 milliseconds.
Windows has found problems that must be fixed offline.
Please run "chkdsk /f" to fix the issues.

    562175 KB total disk space.
    378332 KB in 104 files.
        92 KB in 63 indexes.
      5243 KB in use by the system.
      4288 KB occupied by the log file.
    178508 KB available on disk.

      4096 bytes in each allocation unit.
    140543 total allocation units on disk.
     44627 allocation units available on disk.
Total duration: 78.04 milliseconds (78 ms).

----------------------------------------------------------------------


Stage 1: Examining basic file system structure ...

Stage 2: Examining file name linkage ...

Stage 3: Examining security descriptors ...

-----------------------------------------------------------------------
Category: 0
Computer Name: Rita-PC
Event Code: 26226
Record Number: 60100
Source Name: Chkdsk
Time Written: 01-31-2022 @ 00:50:06
Event Type: Information
User:
Message: Chkdsk was executed in scan mode on a volume snapshot.  

Checking file system on \Device\HarddiskVolume9
Volume label is Rita_Backup.

Stage 1: Examining basic file system structure ...
  79360 file records processed.                                                        

File verification completed.
 Phase duration (File record verification): 3.86 seconds.
  11 large file records processed.                                   

 Phase duration (Orphan file record recovery): 0.00 milliseconds.
  0 bad file records processed.                                     

 Phase duration (Bad file record checking): 0.01 milliseconds.

Stage 2: Examining file name linkage ...
  10 reparse records processed.                                      

  89140 index entries processed.                                                       

Index verification completed.
 Phase duration (Index verification): 47.61 seconds.

 Phase duration (Orphan reconnection): 15.27 milliseconds.

 Phase duration (Orphan recovery to lost and found): 0.07 milliseconds.
  10 reparse records processed.                                      

 Phase duration (Reparse point and Object ID verification): 0.57 milliseconds.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
 Phase duration (Security descriptor verification): 67.36 milliseconds.
  4891 data files processed.                                           

 Phase duration (Data attribute verification): 0.01 milliseconds.
CHKDSK is verifying Usn Journal...
  147835344 USN bytes processed.                                                           

Usn Journal verification completed.
 Phase duration (USN journal verification): 8.64 seconds.
Windows has found problems that must be fixed offline.
Please run "chkdsk /f" to fix the issues.

 487822335 KB total disk space.
 371555900 KB in 74420 files.
     18112 KB in 4892 indexes.
    304599 KB in use by the system.
     65536 KB occupied by the log file.
 115943724 KB available on disk.

      4096 bytes in each allocation unit.
 121955583 total allocation units on disk.
  28985931 allocation units available on disk.
Total duration: 1.00 minutes (60210 ms).

----------------------------------------------------------------------


Stage 1: Examining basic file system structure ...

Stage 2: Examining file name linkage ...

Stage 3: Examining security descriptors ...

-----------------------------------------------------------------------
Category: 0
Computer Name: Rita-PC
Event Code: 26226
Record Number: 60097
Source Name: Chkdsk
Time Written: 01-31-2022 @ 00:48:47
Event Type: Information
User:
Message: Chkdsk was executed in scan mode on a volume snapshot.  

Checking file system on \Device\HarddiskVolume8
Volume label is System Reserved.

Stage 1: Examining basic file system structure ...
  256 file records processed.                                                        

File verification completed.
 Phase duration (File record verification): 13.71 milliseconds.
  0 large file records processed.                                   

 Phase duration (Orphan file record recovery): 0.03 milliseconds.
  0 bad file records processed.                                     

 Phase duration (Bad file record checking): 0.01 milliseconds.

Stage 2: Examining file name linkage ...
  3 reparse records processed.                                      

  378 index entries processed.                                                       

Index verification completed.
 Phase duration (Index verification): 55.00 milliseconds.

 Phase duration (Orphan reconnection): 0.11 milliseconds.

 Phase duration (Orphan recovery to lost and found): 0.06 milliseconds.
  3 reparse records processed.                                      

 Phase duration (Reparse point and Object ID verification): 0.12 milliseconds.

Stage 3: Examining security descriptors ...
Security descriptor verification completed.
 Phase duration (Security descriptor verification): 22.23 milliseconds.
  62 data files processed.                                           

 Phase duration (Data attribute verification): 0.01 milliseconds.
CHKDSK is verifying Usn Journal...
  10968 USN bytes processed.                                                           

Usn Journal verification completed.
 Phase duration (USN journal verification): 17.87 milliseconds.
Windows has found problems that must be fixed offline.
Please run "chkdsk /f" to fix the issues.

    562175 KB total disk space.
    378332 KB in 104 files.
        92 KB in 63 indexes.
      5243 KB in use by the system.
      4288 KB occupied by the log file.
    178508 KB available on disk.

      4096 bytes in each allocation unit.
    140543 total allocation units on disk.
     44627 allocation units available on disk.
Total duration: 109.27 milliseconds (109 ms).

----------------------------------------------------------------------


Stage 1: Examining basic file system structure ...

Stage 2: Examining file name linkage ...

Stage 3: Examining security descriptors ...

-----------------------------------------------------------------------

 

[Advertisements]

Hi, Ritag1950.

 

Windows has made corrections to the file system.

 

Your disk is fine, but I recommend you to backup your personal data (Documents, Music, Videos, Pictures etc.), so in case the disk fails in the future you will be able to retrieve them.

 

Is there any remaining issue/question/concern, regarding this computer? 

[DR M]

Hi, Ritag1950.

 

Windows has made corrections to the file system.

 

Your disk is fine, but I recommend you to backup your personal data (Documents, Music, Videos, Pictures etc.), so in case the disk fails in the future you will be able to retrieve them.

 

Is there any remaining issue/question/concern, regarding this computer? 

[ritag1950]

Thanks!  We use IDrive cloud and to a local external drive daily for our backups.

Should I now clean up those programs we used?

I am running Defender, do I also need to keep running Malwarebytes and pay for it?

[DR M]

The following tool will remove the tools we used as well as reset system restore points:

Download KpRm by kernel-panik and save it to your desktop.

• Right-click kprm_(version).exe and select Run as Administrator.
• Read and accept the disclaimer.
• When the tool opens, ensure all boxes under Actions are checked.
• Under Delete Quarantines select Delete Now, then click Run.
• Once complete, click OK.
• A log will open in Notepad titled kprm-(date).txt.
• Please copy and paste its contents in your next reply.

 

As to your security solution, you are fine with Defender and Malwarebytes. You don't have to pay for it. You can use it manually, from time to time, depending on how often you use your computer. The difference between the free and the premium option is the real time protection only. 

[ritag1950]

# Run at 12/8/2022 12:15:02 PM
# KpRm (Kernel-panik) version 2.10.0
# Website https://kernel-panik.me/tool/kprm/
# Run by Rita from C:\Users\Rita\Desktop
# Computer Name: RITA-PC
# OS: Windows 10 X64 (19045)
# Number of passes: 1

- Checked options -

    ~ Registry Backup
    ~ Delete Tools
    ~ Restore System Settings
    ~ UAC Restore
    ~ Delete Restore Points
    ~ Create Restore Point
    ~ Delete Quarantines

- Create Registry Backup -

   ~ [OK] Hive C:\WINDOWS\System32\config\SOFTWARE backed up
   ~ [OK] Hive C:\Users\Rita\NTUSER.dat backed up

     [OK] Registry Backup: C:\KPRM\backup\2022-12-08-12-15-02

- Delete Tools -


  ## AdwCleaner
     [OK] C:\Users\Rita\Desktop\adwcleaner(1).exe deleted
     [OK] C:\Users\Rita\Desktop\AdwCleaner.exe deleted
     [OK] C:\AdwCleaner deleted

  ## ESET Online Scanner
     [OK] C:\Users\Rita\Desktop\ESET Online Scanner.lnk deleted
     [OK] C:\Users\Rita\Desktop\esetonlinescanner.exe deleted

  ## FRST
     [OK] C:\Users\Rita\Desktop\Addition.txt deleted
     [OK] C:\Users\Rita\Desktop\Fixlog.txt deleted
     [OK] C:\Users\Rita\Desktop\FRST-OlderVersion deleted
     [OK] C:\Users\Rita\Desktop\FRST.txt deleted
     [OK] C:\Users\Rita\Desktop\FRST64.exe deleted
     [OK] C:\FRST deleted

  ## Malwarebytes (log)
     [OK] C:\Users\Rita\Desktop\Malwarebytes-1-12-22.txt deleted

- Restore System Settings -

     [OK] Reset WinSock
     [OK] FLUSHDNS
     [OK] Hide Hidden file.
     [OK] Show Extensions for known file types
     [OK] Hide protected operating system files

- Restore UAC -

     [OK] Set EnableLUA with default (1) value
     [OK] Set ConsentPromptBehaviorAdmin with default (5) value
     [OK] Set ConsentPromptBehaviorUser with default (3) value
     [OK] Set EnableInstallerDetection with default (0) value
     [OK] Set EnableSecureUIAPaths with default (1) value
     [OK] Set EnableUIADesktopToggle with default (0) value
     [OK] Set EnableVirtualization with default (1) value
     [OK] Set FilterAdministratorToken with default (0) value
     [OK] Set PromptOnSecureDesktop with default (1) value
     [OK] Set ValidateAdminCodeSignatures with default (0) value

- Clear Restore Points -

   ~ [OK] RP named Scheduled Checkpoint created at 11/26/2022 01:51:56 deleted
   ~ [OK] RP named Removed Amazon Browser App created at 11/28/2022 16:53:57 deleted
   ~ [OK] RP named AdwCleaner_BeforeCleaning_01/12/2022_17:20:53 created at 12/01/2022 23:20:54 deleted
     [OK] All system restore points have been successfully deleted

- Create Restore Point -

     [OK] System Restore Point created

- Display System Restore Point -

   ~ [I] RP named KpRm created at 12/08/2022 18:16:45

-- KPRM finished in 190.10s --


Also I noticed in my StartupApp I have stuff I never use like OneDrive, SKYPE, Cortana, Dropbox, GrooveMonitor, Logitech Download Assistant, can I turn these off?  Also do I need Plcon startup utility and get rid of Verizon 2.0 UA for Android??? Thanks

[DR M]

You can uninstall any app you don't use. I wouldn't touch OneDrive and Cortana, since they are related with the operating system itself. 

 

As to the Plcon startup utility, see here: https://www.bleeping....exe-29014.html

You can just disable it from the start-up process. 

[DR M]

Now your computer is clean, here are some final tips about your computer's security from now on:

Some of the following, are from Klein's (2005) article, So how did I get infected in the first place. Since then, the article has been reproduced or linked to in dozens of locations. As a result, many malware experts have continued updating it, to include current operating systems and software program information. My source is Security Garden, and I marked for you the following:

1. Keep your Windows updated!
It is important always to keep current with the latest security fixes from Microsoft. This can patch many of the security holes through which attackers can infect your computer.

2. Update 3rd Party Software Programs
Third Party software programs have long been targets for malware creators. It has been stated that "Adobe’s Reader and Flash and all versions of Java are together responsible for a total of 66 percent of the vulnerabilities in Windows systems exploited by malware.'' It's important to keep everything updated.

3. Update the browsers you use
Many malware infections install themselves by exploiting security holes in the Internet browser that you use. So... Keep them updated.

4. Be careful about what you download and what you open!

• Many "freeware" programs come with an enormous amount of bundled spyware that will slow down your system, spawn pop-up advertisements, or just plain crash your browser or even Windows itself. Watch for pre-checked options such as toolbars that are not essential to the operation of the installed software.
• Peer-to-peer (P2P) programs like Kazaa, BearShare, Imesh, Warez P2P, and others, allow the creation of a network enabling people to connect with other users and upload or download material in a fast efficient manner. BUT even if the P2P software you are using is "clean", a large percentage of the files served on the P2P network are likely to be infected.
• Cracked or pirated programs are not only illegal, but also can make your computer a malware target. Have this in mind.
• Do not open any files without being certain of what they are!

5. Avoid questionable web sites!
Visit web sites that are trustworthy and reputable. Many disreputable sites will attempt to install malware on your system through "drive-by" exploits just by visiting the site in your browser. Lyrics sites, free software sites (especially ones that target young children), cracked software sites, and pornography sites are some of the worst offenders. Also, never give out personal information of any sort online or click "OK" to a pop-up unless it is signed by a reputable company and you know what it is.

6. Registry cleaners/driver boosters/system optimizers
I do not recommend registry cleaners, system optimizers, driver boosters and the like. It is your computer and certainly your choice. However, please consider that modifying registry keys incorrectly can cause Windows instability, or make Windows unbootable. With registry cleaner and system optimization software programs, the potential is ever present to cause more problems than they claim to fix. Do note, however, that Microsoft does not support the use of registry cleaners. See Microsoft support policy for the use of registry cleaning utilities.

7. PC means personal computer!
Don't give access to your computer to friends or family who appear to be clueless about what they are doing.

8. Back-up your work!
Make back-ups of your personal files frequently. You never know when you'll have to reformat and start from scratch. You can always reformat and reinstall programs, but you cannot replace your data if you haven't made backups.

9. Must-Have Software
An anti-virus and an anti-spyware program is a necessity for the security of your computer. Be sure that you keep them updated, and that real time protection is enabled. You have now the built-in Windows 10 antivirus, Windows Defender. Together with Malwarebytes, if you run it occasionally, depending on how often you use your computer, can keep you safe.

Happy safe computing.


I'm glad I was able to help you.