[Branflakes91093]

One day I decided to defragment my C:\ drive and also check it for errors. I defragmented and it took a lot less time than usual. Then I went to run and typed CHKDSK and nothing happened except the cmd window popping up and then disappearing quickly. So I right clicked the drive and selected to check the disk for errors. It said I couldn't because the computer was using it. It asked me if I wanted to check it after restart and I clicked OK. It checked the disk but i didn't see what it said for the second half because I was busy. After it finished, Windows booted, I logged on, and then, in the system tray, it said "Pctstray.exe- Corrupted file. The file or directory C:\ProgramData\TEMP is corrupt and unreadable. Please run the Chkdsk utility." It also says the same thing with PctsGUI.exe instead when I open Spyware Doctor. What's wrong? Will chkdsk do anything since i just ran it? How do I fix this problem? Is it fatal? Thanks for your time.

[Rollin' Rog]

You will probably have to replace what was corrupt. You may have copies as "volume shadow copies".

To check, right click on the parent folder of any missing or corrupt file and select Properties > Previous Versions and see if anything is there for it.

As for what chkdsk did, you can view the log by running eventvwr.msc and open the Applications log there and find and double click on the "wininit" entry.

Sometimes chkdsk saves partial copies of corrupt files -- good for data recovery, but not executables.

To see if any of these are present, open Folder Options > View and temporarily uncheck "hide protected files"

Look on the root directory (c:) for files saved as "Found(nnn)" where "nnn" is a number.

By the way you should always verify whether the drive is healthy before running defrag. Either run chkdsk on it first, or open a command prompt (start > run: cmd and enter fsutil dirty query c:

substitute any drive letter you want to check.

[Elvandil]

I think you may be looking at a faulty drive or faulty memory.

Try testing the drive.

Free Hard Drive Testing Applications:

Manufacturer's Tests
Victoria for DOS
Victoria for Windows (Both versions of Victoria are among the best and most thorough tests available.)
HD Tune
CheckDisk 1.03 (Marks bad sectors as unusable.)
HDAT2 (Diagnostics and bad sector recovery)
MHDD Low-level Diagnostics
Bootable Hitachi Drive Fitness Test Floppy or CD Image (works on most drives)

Hard Drive Manufacturers' Diagnostic Utilities Links:

TachTech
BleepingComputer

[Branflakes91093]

Thank you both for answering. Rollin' Rog- I right clicked the folder and there was no tab that said previous versions. I went into event viewer and here's the wininit log

Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 8/4/2008 10:26:13 PM
Event ID: 1001
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Fred-PC
Description:

Checking file system on C:
The type of the file system is NTFS.
Volume label is HP.

One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
Deleted corrupt attribute list entry
with type code 128 in file 136911.
Unable to locate attribute of type 0x80, lowest vcn 0x0,
instance tag 0x5 in file 0x216cf.
Deleted corrupt attribute list entry
with type code 128 in file 136911.
Unable to locate attribute of type 0x80, lowest vcn 0x0,
instance tag 0x3 in file 0x216cf.
Unable to locate attribute with instance tag 0x3 and segment
reference 0x10000000216cf. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, 1CA73D29)
from file record segment 136911.
Unable to locate attribute with instance tag 0x5 and segment
reference 0x10000000216cf. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, DFC5A2B2)
from file record segment 136911.
453120 file records processed.
6866 large file records processed.
0 bad file records processed.
0 EA records processed.
89 reparse records processed.
509882 index entries processed.
0 unindexed files processed.
453120 security descriptors processed.
Cleaning up 5 unused index entries from index $SII of file 0x9.
Cleaning up 5 unused index entries from index $SDH of file 0x9.
Cleaning up 5 unused security descriptors.
28382 data files processed.
CHKDSK is verifying Usn Journal...
36023160 USN bytes processed.
Usn Journal verification completed.
Windows has made corrections to the file system.
303210778 KB total disk space.
109964812 KB in 417803 files.
134224 KB in 28383 indexes.
0 KB in bad sectors.
569558 KB in use by the system.
65536 KB occupied by the log file.
192542184 KB available on disk.
4096 bytes in each allocation unit.
75802694 total allocation units on disk.
48135546 allocation units available on disk.
Internal Info:
00 ea 06 00 f4 ce 06 00 97 66 09 00 00 00 00 00 .........f......
44 07 00 00 59 00 00 00 00 00 00 00 00 00 00 00 D...Y...........
88 1c 3d 00 48 01 3d 00 89 08 00 81 e8 58 3f 00 ..=.H.=......X?.
Windows has finished checking your disk.
Please wait while your computer restarts.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Wininit" Guid="{206f6dea-d3c5-4d10-bc72-989f03c8b84b}" EventSourceName="Wininit" />
<EventID Qualifiers="16384">1001</EventID>
<Version>0</Version>
<Level>4</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-08-05T02:26:13.000Z" />
<EventRecordID>29463</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>Application</Channel>
<Computer>Fred-PC</Computer>
<Security />
</System>
<EventData>
<Data>
Checking file system on C:
The type of the file system is NTFS.
Volume label is HP.


Also, I didn't find any Found(###) files even after I turned off windows hidden folders. And lastly, I ran the FSutil and it said that my drive was not dirty. (Thank God)

Two last things. My computer never said the error today. It doesn't even say it when I run Spyware Doctor. Did it fix itself?

And the last thing- When I was in the event viewer, I found a bunch of VSS and System Restore errors. Some examples- Log Name: Application
Source: System Restore
Date: 8/5/2008 12:00:00 AM
Event ID: 8210
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Fred-PC
Description:
The scheduled restore point could not be created. Additional information: (0x80042318).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="System Restore" />
<EventID Qualifiers="0">8210</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-08-05T04:00:00.000Z" />
<EventRecordID>29491</EventRecordID>
<Channel>Application</Channel>
<Computer>Fred-PC</Computer>
<Security />
</System>
<EventData>
<Data>0x80042318</Data>
<Binary>0000000000000000DC00000000000000574C29CE5843BE27E26C1C0000000000000 00000</Binary>
</EventData>
</Event>

Log Name: Application
Source: VSS
Date: 8/5/2008 12:00:00 AM
Event ID: 12347
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: Fred-PC
Description:
Volume Shadow Copy Service error: An internal inconsistency was detected in trying to contact shadow copy service writers. The Registry Writer failed to respond to a query from VSS. Please check to see that the Event Service and Volume Shadow Copy Service are operating properly, and please check the Application event log for any other events.
Operation:
Gathering Writer Data
Executing Asynchronous Operation
Context:
Execution Context: Requestor
Current State: GatherWriterMetadata
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="VSS" />
<EventID Qualifiers="0">12347</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-08-05T04:00:00.000Z" />
<EventRecordID>29489</EventRecordID>
<Channel>Application</Channel>
<Computer>Fred-PC</Computer>
<Security />
</System>
<EventData>
<Data>
Operation:
Gathering Writer Data
Executing Asynchronous Operation
Context:
Execution Context: Requestor
Current State: GatherWriterMetadata</Data>
<Binary>2D20436F64653A2042554543584D4C4330303030383536362D2043616C6C3A20425 54543584D4C4330303030383530372D205049443A202030303030353137322D205449443A20 2030303030363034302D20434D443A2020433A5C57696E646F77735C73797374656D33325C7 2756E646C6C33322E657865202F64207372727374722E646C6C2C4578656375746553636865 64756C65645350504372656174696F6E2020202020202D20557365723A204E5420415554484 F524954595C53595354454D20202020202D205369643A2020532D312D352D3138</Binary>
</EventData>
</Event>

These are both newer than the Wininit one.

And Elvandil, thank you for the links. I tried to run Victoria for DOS and it couldn't do anything because it said the drive was busy.

Again, thanks for your support.

[Rollin' Rog]

Well I really don't see any serious problems being reported by chkdsk.

The System Restore errors are rather mysterious though -- and there is not much info available on that particular error type.

Was this Vista version installed from a Microsoft Installation disk? If so it might be worthwhile to contact them for support on it.

I have seen some System Restore issues caused by applications such as "Outpost" firewall.

Have you tried creating a restore point manually in Normal mode, and if that fails, in Safe Mode?

>> If you open System Protection you will see a list of disks which Windows thinks are connected to the drive. Is anything checked there other than the "c:" drive? If so, uncheck it and try to create a restore point for the C: drive only.

Are there any drives listed there that are actually no longer connected?

[Branflakes91093]

Sorry that it's been so long. Only the C: drive was checked and i tried to manually make a restore point and i got this.

The restore point could not be created due to the following reason:
Windows cannot create a shadow copy due to internal error in other system components. For more information view the event log.
(0x81000109)

Please try again.

What does this mean?

[Rollin' Rog]

What other drives are shown in Disk Management? run diskmgmt.exe

http://bertk.mvps.org/html/eerrormsgsv.html#9

see above for a possibility.

Also run eventvwr.msc and look for a recent error, probably in the system log, that corresponds to that.

[Branflakes91093]

uh diskmgmt.exe does not work when i type it in run.
I don't have any external drives.
All i have are 3 drives- Main, extra, and a recovery(HP)
I just tried a system restore again in system properties and it said it worked.

[Branflakes91093]

bump

[Rollin' Rog]

I'm sorry, that should have been diskmgmt.msc

So is System Restore working now?

Can you review for me what current problem remains unsolved?

[Branflakes91093]

All 3 drives are shown in disk management.
System Restore said that it had successfully created a restore point on C:\
so, nothing seems to be a problem anymore.
Thank you so much for helping me and i'll definitely come back if i have another problem. You're the best.

[Rollin' Rog]

You're welcome for the efforts -- best of luck.