Page 2 of 3 FirstFirst 123 LastLast
Results 11 to 20 of 28

Thread: Restarting computer, black screen-- virus???

  1. #11
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  2. #12
    Junior Member
    Join Date
    Apr 2014
    Posts
    25

    Default

    Forgive my stupid question, but I can't seem to figure out how to get it to download straight to my desktop. Normally if I do that, I right-click on the link, but for this it's just offering a Firefox HTML doc when I try it. If I hit 'download' it immediately goes to my downloads file (I'm in Chrome). I didn't see a way to temporarily change the automatic download location to my desktop. Like I said, I know it's a stupid question, and I apologize... I don't know I'm just too tired or what, but I can't see what to do.

    Also, I uninstalled Tweaking and it said it was successful, but I'm still seeing related files (tweaking_tab, etc.) even though I searched in Uninstall Programs, so I don't know what all is left or how it will impact this.

  3. #13
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi Nightwingsgurl,

    Visit this link to see how to change the location of where you save downloads.

    https://support.google.com/chrome/answer/95574?hl=en

    The Tweaking uninstall can be addressed when we are cleaning up. But any left-over files shouldn't impact your computer's performance.
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  4. #14
    Junior Member
    Join Date
    Apr 2014
    Posts
    25

    Default

    Quote Originally Posted by OCD View Post
    Hi Nightwingsgurl,

    Visit this link to see how to change the location of where you save downloads.

    https://support.google.com/chrome/answer/95574?hl=en

    The Tweaking uninstall can be addressed when we are cleaning up. But any left-over files shouldn't impact your computer's performance.

    Great, thank you! I saved it to the Desktop, but installed it on C.....Windows Repair, which was the default option. Also-- I realized that I saved the other programs I ran in the same way-- downloads, then dragged to Desktop. Is there anything you want me to redo?



    Here's the log:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation. All rights reserved.

    C:\Users\Imari\Desktop>CD /D C:\

    C:\>chkdsk C:
    The type of the file system is NTFS.
    The volume is in use by another process. Chkdsk
    might report errors when no corruption is present.
    Volume label is OS.

    WARNING! F parameter not specified.
    Running CHKDSK in read-only mode.

    CHKDSK is verifying files (stage 1 of 3)...
    9 percent complete. (235700 of 261888 file records processed)
    261888 file records processed.

    File verification completed.
    2064 large file records processed.

    0 bad file records processed.

    0 EA records processed.

    44 reparse records processed.

    CHKDSK is verifying indexes (stage 2 of 3)...
    43 percent complete. (265005 of 341028 index entries processed)
    Index entry CHKDSK.EXE-496676BC.pf in index $I30 of file 6464 is incorrect.
    Index entry CHKDSK~1.PF in index $I30 of file 6464 is incorrect.
    48 percent complete. (298692 of 341028 index entries processed)
    Index entry Local State in index $I30 of file 208971 is incorrect.
    Index entry LOCALS~1 in index $I30 of file 208971 is incorrect.
    48 percent complete. (300814 of 341028 index entries processed)
    341028 index entries processed.

    Index verification completed.

    Errors found. CHKDSK cannot continue in read-only mode.

    C:\>



    I'm restarting it now. (I wanted to post the log since it said a restart will be required for the fix, and I wasn't sure if I'd get a chance to copy it before it shut down. If I get a new log, I'll post that, too!)

  5. #15
    Junior Member
    Join Date
    Apr 2014
    Posts
    25

    Default

    Okay, it ran the check disk and booted up. I didn't see any logs or anything. Is there anything additional to post?

    What do I scan it with? Tweaking again or Spybot?

    Thank you!

  6. #16
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi Nightwingsgurl,,

    We need to re-run chkdsk, this time from the command prompt.

    Chkdsk in Vista/7

    You must run the command prompt as an administrator or in an "elevated mode".
    • Start menu, in the search bar type "cmd"
    • Right-click the cmd icon, select "run as administrator"
      • If you have user account control (UAC) set up it may prompt you to accept that action.
    • Then type in "chkdsk /f" (make note of the space between chkdsk and /)

    =========================

    To view results log:
    • Open the Start Menu, and type eventvwr.msc in the search box and press enter.
    • If prompted by UAC, then click on Yes (Windows 7) or Continue (Vista).
    • In the left pane of Event Viewer, double click on Windows Logs to expand it, then right click on Application and click on Find.
    • Copy and paste Chkdsk into the line, and click on Find Next.
    • You will now see the system log for the scan results of Check Disk (chkdsk).
    • In the right had menu select copy, open notepad and paste the chkdsk results into notepad
    • Post in your next reply.

    =========================

    In your next post please provide the following:
    • chkdsk log
    • How is the computer running at the moment, any symptoms?
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  7. #17
    Junior Member
    Join Date
    Apr 2014
    Posts
    25

    Default

    We need to re-run chkdsk, this time from the command prompt.
    It says it had an error because the drive was in use. I tried restarting my computer and had the same results.

    Chkdsk error.jpg


    In your next post please provide the following:
    • chkdsk log
    • How is the computer running at the moment, any symptoms?
    I followed your instructions, but this log looks like it's from Dec. 6 (which makes sense if the scan couldn't complete).

    Log Name: Application
    Source: Chkdsk
    Date: 12/6/2014 9:13:07 PM
    Event ID: 26213
    Task Category: None
    Level: Information
    Keywords: Classic
    User: N/A
    Computer: Imari-PC
    Description:
    Chkdsk was executed in read-only mode. A volume snapshot was not used. Extra errors and warnings may be reported as the volume may have changed during the chkdsk run.

    Checking file system on C:
    The type of the file system is NTFS.
    The volume is in use by another process. Chkdsk
    might report errors when no corruption is present.
    Volume label is OS.

    WARNING! F parameter not specified.
    Running CHKDSK in read-only mode.

    CHKDSK is verifying files (stage 1 of 3)...
    261888 file records processed.

    File verification completed.
    2064 large file records processed.

    0 bad file records processed.

    0 EA records processed.

    44 reparse records processed.

    CHKDSK is verifying indexes (stage 2 of 3)...
    The file reference 0x9e000000001a5a of index entry CHKDSK.EXE-496676BC.pf of index $I30
    with parent 0x1940 is not the same as 0x9d000000001a5a.

    Index entry CHKDSK.EXE-496676BC.pf in index $I30 of file 6464 is incorrect.
    The file reference 0x9e000000001a5a of index entry CHKDSK~1.PF of index $I30
    with parent 0x1940 is not the same as 0x9d000000001a5a.
    Index entry CHKDSK~1.PF in index $I30 of file 6464 is incorrect.
    The file reference 0x7400000000a61d of index entry Local State of index $I30
    with parent 0x3304b is not the same as 0x7300000000a61d.

    Index entry Local State in index $I30 of file 208971 is incorrect.
    The file reference 0x7400000000a61d of index entry LOCALS~1 of index $I30
    with parent 0x3304b is not the same as 0x7300000000a61d.
    Index entry LOCALS~1 in index $I30 of file 208971 is incorrect.
    341028 index entries processed.

    Index verification completed.

    Errors found. CHKDSK cannot continue in read-only mode.

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Chkdsk" />
    <EventID Qualifiers="0">26213</EventID>
    <Level>4</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-12-07T02:13:07.000000000Z" />
    <EventRecordID>59335</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Imari-PC</Computer>
    <Security />
    </System>
    <EventData>
    <Data>

    Checking file system on C:
    The type of the file system is NTFS.
    The volume is in use by another process. Chkdsk
    might report errors when no corruption is present.
    Volume label is OS.

    WARNING! F parameter not specified.
    Running CHKDSK in read-only mode.

    CHKDSK is verifying files (stage 1 of 3)...
    261888 file records processed.

    File verification completed.
    2064 large file records processed.

    0 bad file records processed.

    0 EA records processed.

    44 reparse records processed.

    CHKDSK is verifying indexes (stage 2 of 3)...
    The file reference 0x9e000000001a5a of index entry CHKDSK.EXE-496676BC.pf of index $I30
    with parent 0x1940 is not the same as 0x9d000000001a5a.

    Index entry CHKDSK.EXE-496676BC.pf in index $I30 of file 6464 is incorrect.
    The file reference 0x9e000000001a5a of index entry CHKDSK~1.PF of index $I30
    with parent 0x1940 is not the same as 0x9d000000001a5a.
    Index entry CHKDSK~1.PF in index $I30 of file 6464 is incorrect.
    The file reference 0x7400000000a61d of index entry Local State of index $I30
    with parent 0x3304b is not the same as 0x7300000000a61d.

    Index entry Local State in index $I30 of file 208971 is incorrect.
    The file reference 0x7400000000a61d of index entry LOCALS~1 of index $I30
    with parent 0x3304b is not the same as 0x7300000000a61d.
    Index entry LOCALS~1 in index $I30 of file 208971 is incorrect.
    341028 index entries processed.

    Index verification completed.

    Errors found. CHKDSK cannot continue in read-only mode.
    </Data>
    <Binary>00FF0300DC5F03006156060000000000BB0D00002C0000000000000000000000</Binary>
    </EventData>
    </Event>


    I haven't had any real issues, except that it seems a bit slow. It is working faster than before, though.

  8. #18
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi Nightwingsgurl,

    Quote Originally Posted by Nightwingsgurl View Post
    It says it had an error because the drive was in use. I tried restarting my computer and had the same results.

    Chkdsk error.jpg
    When you received this message did your press the "Y" key to run on next restart?

    If not, complete the step again. This time press the "Y" key on your keyboard and then reboot the computer. Locate the log as previously done and post for review.
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

  9. #19
    Junior Member
    Join Date
    Apr 2014
    Posts
    25

    Default

    Quote Originally Posted by OCD View Post
    Hi Nightwingsgurl,



    When you received this message did your press the "Y" key to run on next restart?

    If not, complete the step again. This time press the "Y" key on your keyboard and then reboot the computer. Locate the log as previously done and post for review.

    I didn't do that the first time. This time I did. I followed your instructions to get the log, but it looks like it still has the 12/6 date on it, so I'm not sure why I'm missing today's log. I'll include a screenshot-- it has something with today's date in there.


    Chkdsk error message 12-11-14.jpg


    Log Name: Application
    Source: Microsoft-Windows-Wininit
    Date: 12/6/2014 9:31:56 PM
    Event ID: 1001
    Task Category: None
    Level: Information
    Keywords: Classic
    User: N/A
    Computer: Imari-PC
    Description:


    Checking file system on C:
    The type of the file system is NTFS.
    Volume label is OS.


    One of your disks needs to be checked for consistency. You
    may cancel the disk check, but it is strongly recommended
    that you continue.
    Windows will now check the disk.

    CHKDSK is verifying files (stage 1 of 3)...
    261888 file records processed.

    File verification completed.
    2064 large file records processed.

    0 bad file records processed.

    0 EA records processed.

    44 reparse records processed.

    CHKDSK is verifying indexes (stage 2 of 3)...
    341016 index entries processed.

    Index verification completed.
    0 unindexed files scanned.

    0 unindexed files recovered.

    CHKDSK is verifying security descriptors (stage 3 of 3)...
    261888 file SDs/SIDs processed.

    Cleaning up 767 unused index entries from index $SII of file 0x9.
    Cleaning up 767 unused index entries from index $SDH of file 0x9.
    Cleaning up 767 unused security descriptors.
    Security descriptor verification completed.
    39565 data files processed.

    CHKDSK is verifying Usn Journal...
    36366992 USN bytes processed.

    Usn Journal verification completed.
    CHKDSK discovered free space marked as allocated in the
    master file table (MFT) bitmap.
    CHKDSK discovered free space marked as allocated in the volume bitmap.
    Windows has made corrections to the file system.

    125028351 KB total disk space.
    98417128 KB in 181466 files.
    140916 KB in 39566 indexes.
    0 KB in bad sectors.
    369115 KB in use by the system.
    65536 KB occupied by the log file.
    26101192 KB available on disk.

    4096 bytes in each allocation unit.
    31257087 total allocation units on disk.
    6525298 allocation units available on disk.

    Internal Info:
    00 ff 03 00 73 5f 03 00 9c 55 06 00 00 00 00 00 ....s_...U......
    bb 0d 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

    Windows has finished checking your disk.
    Please wait while your computer restarts.

    Event Xml:
    <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
    <System>
    <Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
    <EventID Qualifiers="16384">1001</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-12-07T02:31:56.000000000Z" />
    <EventRecordID>59360</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>Imari-PC</Computer>
    <Security />
    </System>
    <EventData>
    <Data>

    Checking file system on C:
    The type of the file system is NTFS.
    Volume label is OS.


    One of your disks needs to be checked for consistency. You
    may cancel the disk check, but it is strongly recommended
    that you continue.
    Windows will now check the disk.

    CHKDSK is verifying files (stage 1 of 3)...
    261888 file records processed.

    File verification completed.
    2064 large file records processed.

    0 bad file records processed.

    0 EA records processed.

    44 reparse records processed.

    CHKDSK is verifying indexes (stage 2 of 3)...
    341016 index entries processed.

    Index verification completed.
    0 unindexed files scanned.

    0 unindexed files recovered.

    CHKDSK is verifying security descriptors (stage 3 of 3)...
    261888 file SDs/SIDs processed.

    Cleaning up 767 unused index entries from index $SII of file 0x9.
    Cleaning up 767 unused index entries from index $SDH of file 0x9.
    Cleaning up 767 unused security descriptors.
    Security descriptor verification completed.
    39565 data files processed.

    CHKDSK is verifying Usn Journal...
    36366992 USN bytes processed.

    Usn Journal verification completed.
    CHKDSK discovered free space marked as allocated in the
    master file table (MFT) bitmap.
    CHKDSK discovered free space marked as allocated in the volume bitmap.
    Windows has made corrections to the file system.

    125028351 KB total disk space.
    98417128 KB in 181466 files.
    140916 KB in 39566 indexes.
    0 KB in bad sectors.
    369115 KB in use by the system.
    65536 KB occupied by the log file.
    26101192 KB available on disk.

    4096 bytes in each allocation unit.
    31257087 total allocation units on disk.
    6525298 allocation units available on disk.

    Internal Info:
    00 ff 03 00 73 5f 03 00 9c 55 06 00 00 00 00 00 ....s_...U......
    bb 0d 00 00 2c 00 00 00 00 00 00 00 00 00 00 00 ....,...........
    00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................

    Windows has finished checking your disk.
    Please wait while your computer restarts.
    </Data>
    </EventData>
    </Event>

  10. #20
    Malware Team-Emeritus
    Join Date
    Sep 2012
    Location
    Florida, USA
    Posts
    1,161

    Default

    Hi Nightwingsgurl,

    but it looks like it still has the 12/6 date on it, so I'm not sure why I'm missing today's log. I'll include a screenshot-- it has something with today's date in there.
    I don't really have an explanation as to why you weren't able to access todays log. You could try expanding the Event Viewer window and see if there are other chkdsk (Wininit) logs available. But the 12/06/14 log seems to be fine.

    Are you having any other issues?
    OCD
    ----------
    Graduate of WTT Classroom
    Member of UNITE

    Threads will be closed if no response after 5 days

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •