ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013
------< Log generate on 02/03/2024 14:34:39 >------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 1001
Record Number: 16884
Source Name: Microsoft-Windows-Wininit
Time Written: 03-02-2024 @ 19:34:12
Event Type: Information
User:
Message:
Checking file system on C:
The type of the file system is NTFS.
Volume label is WINRETOOLS.
A disk check has been scheduled.
Windows will now check the disk.
Stage 1: Examining basic file system structure ...
1027584 file records processed.
File verification completed.
Phase duration (File record verification): 9.32 seconds.
20369 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 1.55 milliseconds.
Stage 2: Examining file name linkage ...
477 reparse records processed.
1428428 index entries processed.
Index verification completed.
Phase duration (Index verification): 21.10 seconds.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 3.35 seconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 93.91 milliseconds.
477 reparse records processed.
Phase duration (Reparse point and Object ID verification): 7.75 milliseconds.
Stage 3: Examining security descriptors ...
Cleaning up 111 unused index entries from index $SII of file 0x9.
Cleaning up 111 unused index entries from index $SDH of file 0x9.
Cleaning up 111 unused security descriptors.
Security descriptor verification completed.
Phase duration (Security descriptor verification): 42.10 milliseconds.
200423 data files processed.
Phase duration (Data attribute verification): 1.77 milliseconds.
CHKDSK is verifying Usn Journal...
38004888 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 196.48 milliseconds.
Stage 4: Looking for bad clusters in user file data ...
1027568 files processed.
File data verification completed.
Phase duration (User file recovery): 10.69 minutes.
Stage 5: Looking for bad, free clusters ...
16252705 free clusters processed.
Free space verification is complete.
Phase duration (Free space recovery): 0.00 milliseconds.
Windows has scanned the file system and found no problems.
No further action is required.
234986126 KB total disk space.
168427172 KB in 656350 files.
398840 KB in 200424 indexes.
0 KB in bad sectors.
1149294 KB in use by the system.
65536 KB occupied by the log file.
65010820 KB available on disk.
4096 bytes in each allocation unit.
58746531 total allocation units on disk.
16252705 allocation units available on disk.
Total duration: 11.26 minutes (675802 ms).
Internal Info:
00 ae 0f 00 d0 12 0d 00 10 b6 16 00 00 00 00 00 ................
80 00 00 00 5d 01 00 00 00 00 00 00 00 00 00 00 ....]...........
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26226
Record Number: 15727
Source Name: Chkdsk
Time Written: 02-12-2024 @ 01:14:47
Event Type: Information
User:
Message: Chkdsk was executed in scan mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume7
Volume label is WINRETOOLS.
Stage 1: Examining basic file system structure ...
Found corrupt basic file structure for "\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl <0x5,0x1210>"
... queued for offline repair.
Found corrupt basic file structure for "\ProgramData\Intel\DSA\Logs\Service\Service20240204.log <0xc,0x20a0>"
... repaired online.
Found corrupt basic file structure for "\Users\franz\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal <0x2,0x26b51>"
... repaired online.
904192 file records processed.
File verification completed.
Phase duration (File record verification): 10.80 seconds.
19877 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.01 milliseconds.
Stage 2: Examining file name linkage ...
475 reparse records processed.
1300624 index entries processed.
Index verification completed.
Phase duration (Index verification): 21.84 seconds.
Phase duration (Orphan reconnection): 0.00 milliseconds.
Found 2 missing entries (\Windows\LiveKernelReports\PoW32kWatchdog-20240210-1823.dmp <0xca,0x299c>, ...) in index "$I30" of directory "\Windows\LiveKernelReports <0x2,0xccbb>"
... repaired online.
Phase duration (Orphan recovery to lost and found): 1.30 milliseconds.
475 reparse records processed.
Phase duration (Reparse point and Object ID verification): 3.95 milliseconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 63.72 milliseconds.
198220 data files processed.
Phase duration (Data attribute verification): 3.17 milliseconds.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Windows has found problems and some were fixed online;
the remaining problems must be fixed offline.
Please run "chkdsk /spotfix" to fix the issues.
234986126 KB total disk space.
162663008 KB in 651980 files.
392180 KB in 198218 indexes.
988430 KB in use by the system.
65536 KB occupied by the log file.
70942508 KB available on disk.
4096 bytes in each allocation unit.
58746531 total allocation units on disk.
17735627 allocation units available on disk.
Total duration: 41.55 seconds (41550 ms).
----------------------------------------------------------------------
Stage 1: Examining basic file system structure ...
The attribute of type 0x80 and instance tag 0x0 in file 0x1210
has allocated length of 0x2d00000 instead of 0x2e00000.
Deleted corrupt attribute list entry
with type code 80 in file 1210.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x9000000068b26. The expected attribute type is 0x80.
Deleting corrupt attribute record (0x80, "")
from file record segment 0x68B26.
The attribute of type 0x80 and instance tag 0x4 in file 0x20a0
has allocated length of 0xa0000 instead of 0x85000.
Deleting corrupt attribute record (0x80, "")
from file record segment 0x20A0.
The attribute of type 0x80 and instance tag 0x4 in file 0x26b51
has allocated length of 0x2d0000 instead of 0x310000.
Deleting corrupt attribute record (0x80, "")
from file record segment 0x26B51.
Stage 2: Examining file name linkage ...
CHKDSK is scanning unindexed files for reconnect to their original directory.
Recovering orphaned file POW32K~1.DMP (299C) into directory file CCBB.
Recovering orphaned file PoW32kWatchdog-20240210-1823.dmp (299C) into directory file CCBB.
Recovering orphaned file POW32K~1.DMP (299C) into directory file CCBB.
Recovering orphaned file PoW32kWatchdog-20240210-1823.dmp (299C) into directory file CCBB.
Recovering orphaned file WATCHD~1.DMP (29AC) into directory file CCBB.
Recovering orphaned file WATCHDOG-20240210-1823.dmp (29AC) into directory file CCBB.
Recovering orphaned file WATCHD~1.DMP (29AC) into directory file CCBB.
Recovering orphaned file WATCHDOG-20240210-1823.dmp (29AC) into directory file CCBB.
2 unindexed files recovered to original directory.
Stage 3: Examining security descriptors ...
Inserting data attribute into file 1210.
Inserting data attribute into file 20A0.
Inserting data attribute into file 26B51.
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26228
Record Number: 15516
Source Name: Chkdsk
Time Written: 02-10-2024 @ 23:53:39
Event Type: Information
User:
Message: Chkdsk was executed in verify mode on a volume snapshot.
Checking file system on \Device\HarddiskVolumeShadowCopy5
The specified object was not found.
A snapshot error occured while scanning this drive. Run an offline scan and fix.
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26228
Record Number: 15515
Source Name: Chkdsk
Time Written: 02-10-2024 @ 23:53:39
Event Type: Information
User:
Message: Chkdsk was executed in verify mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume7
Volume label is WINRETOOLS.
Examining 2 corruption records ...
Record 1 of 2: Corrupt File "\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl <0x5,0x1210>" ... The attribute of type 0x80 and instance tag 0x0 in file 0x1210
has allocated length of 0x2d00000 instead of 0x2e00000.
Deleted corrupt attribute list entry
with type code 80 in file 1210.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x9000000068b26. The expected attribute type is 0x80.
Attribute record (80, "") from file record segment 68B26
is corrupt.
corruption found.
Record 2 of 2: Corrupt File "\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl <0x5,0x1210>" ... The attribute of type 0x80 and instance tag 0x0 in file 0x1210
has allocated length of 0x2d00000 instead of 0x2e00000.
Deleted corrupt attribute list entry
with type code 80 in file 1210.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x9000000068b26. The expected attribute type is 0x80.
Attribute record (80, "") from file record segment 68B26
is corrupt.
corruption found.
2 corruption records processed in 0.1 seconds.
Windows has examined the list of previously identified potential issues and found problems.
Please run chkdsk /scan to fully analyze the problems and queue them for repair.
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26228
Record Number: 15122
Source Name: Chkdsk
Time Written: 02-10-2024 @ 23:25:20
Event Type: Information
User:
Message: Chkdsk was executed in verify mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume4
Volume label is games.
Examining 2 corruption records ...
Record 1 of 2: Unneeded index entry in index "$I30" of directory "\dropbox\Dropbox\.dropbox.cache <0x10,0x10d8>" ... no corruption found.
Record 2 of 2: Unneeded index entry in index "$I30" of directory "\dropbox\Dropbox\.dropbox.cache <0x10,0x10d8>" ... no corruption found.
2 corruption records processed in 0.1 seconds.
Windows has examined the list of previously identified potential issues and found no problems.
No further action is required.
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26228
Record Number: 15119
Source Name: Chkdsk
Time Written: 02-10-2024 @ 23:24:32
Event Type: Information
User:
Message: Chkdsk was executed in verify mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume7
Volume label is WINRETOOLS.
Examining 1 corruption record ...
Record 1 of 1: Unneeded index entry in index "$I30" of directory "\Windows\System32\sru <0x2,0xd50a>" ... no corruption found.
1 corruption record processed in 0.1 seconds.
Windows has examined the list of previously identified potential issues and found no problems.
No further action is required.
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26228
Record Number: 15118
Source Name: Chkdsk
Time Written: 02-10-2024 @ 23:24:31
Event Type: Information
User:
Message: Chkdsk was executed in verify mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume7
Volume label is WINRETOOLS.
Examining 6 corruption records ...
Record 1 of 6: Corrupt File "\Users\franz\AppData\Local\Dropbox\metrics\store.bin <0xf,0x1a4e>" ... no corruption found.
Record 2 of 6: Corrupt File "\Users\franz\AppData\Local\Microsoft\Windows\Notifications\wpndatabase.db-wal <0x2,0x26b51>" ... The attribute of type 0x80 and instance tag 0x4 in file 0x26b51
has allocated length of 0x2d0000 instead of 0x310000.
Attribute record (80, "") from file record segment 26B51
is corrupt.
corruption found.
Record 3 of 6: Corrupt File "\Windows\System32\LogFiles\WMI\RtBackup\EtwRTDefenderAuditLogger.etl <0x5,0x1210>" ... The attribute of type 0x80 and instance tag 0x0 in file 0x1210
has allocated length of 0x2d00000 instead of 0x2e00000.
Deleted corrupt attribute list entry
with type code 80 in file 1210.
Unable to locate attribute with instance tag 0x0 and segment
reference 0x9000000068b26. The expected attribute type is 0x80.
Attribute record (80, "") from file record segment 68B26
is corrupt.
corruption found.
Record 4 of 6: Corrupt File "\ProgramData\NVIDIA Corporation\nvtopps\nvtopps.log <0x5,0x9ebf>" ... The attribute of type 0x80 and instance tag 0x3 in file 0x9ebf
has allocated length of 0x1000 instead of 0x4000.
Attribute record (80, "") from file record segment 9EBF
is corrupt.
corruption found.
Record 5 of 6: Unneeded index entry in index "$I30" of directory "\Users\franz\AppData\Roaming\discordcanary\Local Storage\leveldb <0x5,0x28354>" ... no corruption found.
Record 6 of 6: Unneeded index entry in index "$I30" of directory "\Users\franz\AppData\Roaming\discordcanary\Local Storage\leveldb <0x5,0x28354>" ... no corruption found.
6 corruption records processed in 0.1 seconds.
Windows has examined the list of previously identified potential issues and found problems.
Please run chkdsk /scan to fully analyze the problems and queue them for repair.
-----------------------------------------------------------------------
Category: 0
Computer Name: DESKTOP-6AVKQR9
Event Code: 26226
Record Number: 6122
Source Name: Chkdsk
Time Written: 12-07-2023 @ 03:56:06
Event Type: Information
User:
Message: Chkdsk was executed in scan mode on a volume snapshot.
Checking file system on C:
Volume label is WINRETOOLS.
Stage 1: Examining basic file system structure ...
876544 file records processed.
File verification completed.
Phase duration (File record verification): 9.02 seconds.
29967 large file records processed.
Phase duration (Orphan file record recovery): 0.00 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 1.00 milliseconds.
Stage 2: Examining file name linkage ...
493 reparse records processed.
1264636 index entries processed.
Index verification completed.
Phase duration (Index verification): 25.09 seconds.
Phase duration (Orphan reconnection): 7.40 seconds.
Phase duration (Orphan recovery to lost and found): 9.99 milliseconds.
493 reparse records processed.
Phase duration (Reparse point and Object ID verification): 8.09 milliseconds.
Stage 3: Examining security descriptors ...
Security descriptor verification completed.
Phase duration (Security descriptor verification): 243.08 milliseconds.
194047 data files processed.
Phase duration (Data attribute verification): 1.81 milliseconds.
CHKDSK is verifying Usn Journal...
38831968 USN bytes processed.
Usn Journal verification completed.
Phase duration (USN journal verification): 171.91 milliseconds.
Windows has scanned the file system and found no problems.
No further action is required.
234986126 KB total disk space.
175690756 KB in 645366 files.
411792 KB in 194048 indexes.
1000086 KB in use by the system.
65536 KB occupied by the log file.
57883492 KB available on disk.
4096 bytes in each allocation unit.
58746531 total allocation units on disk.
14470873 allocation units available on disk.
Total duration: 41.97 seconds (41970 ms).
----------------------------------------------------------------------
Stage 1: Examining basic file system structure ...
Stage 2: Examining file name linkage ...
Stage 3: Examining security descriptors ...
-----------------------------------------------------------------------
