[Noob88]

My computer has been acting up ever since my last SuperAntiSpyware scan.

All programs are slow to respond and my computer is always "working" or "loading" but nothing happens. I can no longer use google chrome because the pages will stay blank and keep loading. When I try to open other folders using windows explorer it is slow to load the contents, like full minutes, and there are blank rectangles next to the file names rather then the program icons... please help with getting things back to normal. I have also tried system restore twice but it has been unsuccessful because of a system file error. Is my computer infected or did a system file get deleted?

 

Any help would be much appreciated!

 

Thanks.

[Advertisements]

Hello,

 

• Run System File checker:

 

First Go to start--> In search box type "cmd.exe" (without quotes)-->in list appear as cmd.exe-->right click on it-->run as administrator--> and type the command sfc /scannow and press enter.

 

• Run a Disk check:

 

As the same procedure above go to command prompt and type chkdsk /f /r and press enter.

 

Lets post the result what happen, also try it in safe mode.

[Dashing star]

Hello,

 

• Run System File checker:

 

First Go to start--> In search box type "cmd.exe" (without quotes)-->in list appear as cmd.exe-->right click on it-->run as administrator--> and type the command sfc /scannow and press enter.

 

• Run a Disk check:

 

As the same procedure above go to command prompt and type chkdsk /f /r and press enter.

 

Lets post the result what happen, also try it in safe mode.

[Noob88]

Hello Dashing Star,

 

Thank you for looking into this. Please see below for the text at command prompt:

 

C:\Windows\system32>sfc/scannow

 

Beginning system scan.  This process will take some time.

 

Beginning verification phase of system scan.

Verification 100% complete.

Windows Resource Protection found corrupt files but was unable to fix some of them.

Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For example

C:\Windows\Logs\CBS\CBS.log

 

C:\Windows\system32>chkdsk/f/r

The type of the file system is NTFS.

Cannot lock current drive.

 

Chkdsk cannot run because the volume is in use by another

process.  Would you like to schedule this volume to be checked the next time the system restarts? (Y/N) y

 

This volume will be checked the next time the system restarts.

 

I was not able to run the Disk Check now but will do it after I restart the computer. I will post those results later today. 

I did attach the log for the System File Checker. I tried to cut and paste the text several times in this reply but the website would crash after I hit submit.

 

Thanks!

[Noob88]

Hi Dashing Star,

 

I restarted my computer this morning and it ran disk check as scheduled. I left it running and went to work but when I got back the computer was already at the Windows login screen... I'm not sure if a log was produced and where it would be. If there is one and you need that information can you direct me on where to find it?

 

Also were you able to see the results from the System File Checker?

 

Thanks.

[Dashing star]

Click and More Reply Options and Upload your folder here if you unable to copy paste.

 

Press windows key+R and copy paste this--> %windir%\logs\cbs\cbs.log %userprofile%\Desktop\cbs.txt You will get log for system file checker.

 

For check disk logs --> How to paste chkdsk logs

[Noob88]

Hi Dashing Star,

 

My System File Checker log is attached to this response "CBS.log" and the Check Disk results are pasted below, thanks!

 

TimeCreated : 9/16/2015 11:11:56 AM

Message     : 

              

              Checking file system on C:

              The type of the file system is NTFS.

              

              A disk check has been scheduled.

              Windows will now check the disk.                         

              

              CHKDSK is verifying files (stage 1 of 5)...

              Read failure with status 0xc0000185 at offset 0x2011515000 for 0x

              1000 bytes.

              File record segment 164628 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011515000 for 0x

              1000 bytes.

              File record segment 164629 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011515000 for 0x

              1000 bytes.

              File record segment 164630 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011515000 for 0x

              1000 bytes.

              File record segment 164631 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011529000 for 0x

              1000 bytes.

              File record segment 164708 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011529000 for 0x

              1000 bytes.

              File record segment 164709 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011529000 for 0x

              1000 bytes.

              File record segment 164710 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011529000 for 0x

              1000 bytes.

              File record segment 164711 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011530000 for 0x

              1000 bytes.

              File record segment 164736 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011530000 for 0x

              1000 bytes.

              File record segment 164737 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011530000 for 0x

              1000 bytes.

              File record segment 164738 is unreadable.

              Read failure with status 0xc0000185 at offset 0x2011530000 for 0x

              1000 bytes.

              File record segment 164739 is unreadable.

              Cleaning up instance tags for file 0x2a959.

                402944 file records processed.                                 

                      

              File verification completed.

                1498 large file records processed.                             

                    

              Read failure with status 0xc0000185 at offset 0x2011515800 for 0x

              400 bytes.

              Read failure with status 0xc0000185 at offset 0x2011529800 for 0x

              400 bytes.

              Read failure with status 0xc0000185 at offset 0x2011530000 for 0x

              400 bytes.

                12 bad file records processed.                                 

                  

                2 EA records processed.                                        

                 

                66 reparse records processed.                                  

                  

              CHKDSK is verifying indexes (stage 2 of 5)...

              Index entry FAAFAF~1.XML of index $I30 in file 0x28203 points to 

              unused file 0x28380.

              Deleting index entry FAAFAF~1.XML in index $I30 of file 164355.

              Index entry fabric_NZS 3101_2006.xml of index $I30 in file 0x2820

              3 points to unused file 0x28380.

              Deleting index entry fabric_NZS 3101_2006.xml in index $I30 of fi

              le 164355.

              Index entry fabric_CEDLER_DIN.xml of index $I30 in file 0x28205 p

              oints to unused file 0x28366.

              Deleting index entry fabric_CEDLER_DIN.xml in index $I30 of file 

              164357.

              Index entry FAF96C~1.XML of index $I30 in file 0x28205 points to 

              unused file 0x28366.

              Deleting index entry FAF96C~1.XML in index $I30 of file 164357.

              Index entry ConTmpl.xml of index $I30 in file 0x282ab points to u

              nused file 0x28316.

              Deleting index entry ConTmpl.xml in index $I30 of file 164523.

                528738 index entries processed.                                

                      

              Index verification completed.

              CHKDSK is scanning unindexed files for reconnect to their origina

              l directory.

                9 unindexed files scanned.                                     

                 

                0 unindexed files recovered.                                   

                 

              CHKDSK is verifying security descriptors (stage 3 of 5)...

                402944 file SDs/SIDs processed.                                

                      

              CHKDSK is compacting the security descriptor stream

              Cleaning up 1982 unused security descriptors.

                62898 data files processed.                                    

                     

              CHKDSK is verifying Usn Journal...

                37268096 USN bytes processed.                                  

                        

              Usn Journal verification completed.

              CHKDSK is verifying file data (stage 4 of 5)...

              Read failure with status 0xc0000185 at offset 0x58614000 for 0x10

              000 bytes.

              Read failure with status 0xc0000185 at offset 0x58617000 for 0x10

              00 bytes.

              Read failure with status 0xc0000185 at offset 0x58618000 for 0x10

              000 bytes.

              Read failure with status 0xc0000185 at offset 0x5861b000 for 0x10

              00 bytes.

              Windows replaced bad clusters in file 124495

              of name \Users\Mike\AppData\Local\Google\Chrome\USERDA~1\Default\

              Cookies.

                402928 files processed.                                        

                      

              File data verification completed.

              CHKDSK is verifying free space (stage 5 of 5)...

                51411027 free clusters processed.                              

                        

              Free space verification is complete.

              Adding 124 bad clusters to the Bad Clusters File.

              Correcting errors in the master file table's (MFT) DATA attribute

              .

              CHKDSK discovered free space marked as allocated in the

              master file table (MFT) bitmap.

              Correcting errors in the Volume Bitmap.

              Windows has made corrections to the file system.

              

               437082111 KB total disk space.

               230731360 KB in 329905 files.

                  185716 KB in 62901 indexes.

                     496 KB in bad sectors.

                  520903 KB in use by the system.

                   65536 KB occupied by the log file.

               205643636 KB available on disk.

              

                    4096 bytes in each allocation unit.

               109270527 total allocation units on disk.

                51410909 allocation units available on disk.

              

              Internal Info:

              00 26 06 00 6e fe 05 00 e0 ed 0a 00 00 00 00 00  .&..n...........

              8a 07 00 00 42 00 00 00 00 00 00 00 00 00 00 00  ....B...........

              00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................

              

              Windows has finished checking your disk.

              Please wait while your computer restarts.

              

 

 

 

Attached Files

•  CBS.log   4.91MB   268 downloads

[Dashing star]

How is the system behaving now? Did you have any issues?

 

Did you update your windows?

[abhishekkhanna]

The same problem I faced many a times. Now I must also try what the dashing star said. Hope it works.

[Noob88]

Hi Dashing Star,

 

The system seems to be working now. It is still a bit slow but no more blank rectangles and windows explorer is working.

 

Do I need to do anything else? I have not updated windows yet.

[Dashing star]

Hello Noob88,

 

 

The system seems to be working now. It is still a bit slow but no more blank rectangles and windows explorer is working.

 

 

 

 

To Update Windows:

• Open Windows Update by clicking the Start button , clicking All Programs, and then clicking Windows Update.
• In the left pane, click Check for updates, and then wait while Windows looks for the latest updates for your computer.
• If any updates are found, click Install updates.   If you are prompted for an administrator password or confirmation, type the password or provide confirmation..

 

If you think system is slow further, I suggest you to start new topic in Malware forum. Details Here.

 

Note: If you post in Malware forum, Explain you issue and post this(post) link in the Malware forum.

 

Regards

[Noob88]

Will do, thanks!