We have Vista x64 Home Premium Dell desktop that we have struggled for days and days after a SMART HDD Rogue Fake HDD infection. After many, many AV scans, etc. we finally thought we had the system clean because scans were atarting to continuously show clean and the system was booting again. So, after thinking we had recovered the system, we uninstalled McAfee and installed Kaspersky Pure 2.0 as out new AV tool. We scanned again with the new Kaspersky and everything was looking good. Then about 2 days later, after basically letting the system sit idle, we began having problems installing and uninstalling programs, some programs could not start up, Kaspersky database update would fail, getting errors popping up having to do with corrupt file system, corrupt $MFT, etc.:
- Windows Media Player constantly running very high on memory consumption, even though we are not even running Windows Media Player
- Early on, after virus cleaning, we say a error pop up (only twice) saying the $MFT was corrupt and unusable
- Tried uninstalling various applications and it fails
- Kaspersky updates won't commit. Says it cannot create a directory .
- Other apps starting up automatically in Windows (i.e. Logitech, Dell Dock) give file system corruption type errors.
So, I have been on the assumption that the MFT and/or the file system is corrupt and have tried the following tasks:
From the Vista Installation DVD RE command prompt, I have run both of these commands several times with the same result:
sfc /scannow
It runs there for about 20 seconds and then returned with output/error of: "Windows Resource Protection could not start the repair service"
Next, I attempted to run chkdsk from within the same Vista DVD Installation RE command prompt:
Here is the following command I ran:
X:\Sources>chkdsk c: /x /f /r
Output was as follows:
The type of the file system is NTFS.
Volume label is OS.
CHKDSK is verifying files (stage 1 of 5)...
791104 file records processed.
File verification completed.
5387 large file records processed.
0 bad file records processed.
0 EA records processed.
50 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
14 percent complete. (838035 of 929100 index entries processed)
X:\Sources>
All the chkdsk stops and exits at this same index number 838035 every time I run it.
I have run disk diags and it all says the disks are OK.
But I am suspicious that the MFT might be corrupt or out of sync with the file system.
I have went through these steps more than once and it is the same behavior every time.
Any help or advice on this would be much appreciated.
- Windows Media Player constantly running very high on memory consumption, even though we are not even running Windows Media Player
- Early on, after virus cleaning, we say a error pop up (only twice) saying the $MFT was corrupt and unusable
- Tried uninstalling various applications and it fails
- Kaspersky updates won't commit. Says it cannot create a directory .
- Other apps starting up automatically in Windows (i.e. Logitech, Dell Dock) give file system corruption type errors.
So, I have been on the assumption that the MFT and/or the file system is corrupt and have tried the following tasks:
From the Vista Installation DVD RE command prompt, I have run both of these commands several times with the same result:
sfc /scannow
It runs there for about 20 seconds and then returned with output/error of: "Windows Resource Protection could not start the repair service"
Next, I attempted to run chkdsk from within the same Vista DVD Installation RE command prompt:
Here is the following command I ran:
X:\Sources>chkdsk c: /x /f /r
Output was as follows:
The type of the file system is NTFS.
Volume label is OS.
CHKDSK is verifying files (stage 1 of 5)...
791104 file records processed.
File verification completed.
5387 large file records processed.
0 bad file records processed.
0 EA records processed.
50 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 5)...
14 percent complete. (838035 of 929100 index entries processed)
X:\Sources>
All the chkdsk stops and exits at this same index number 838035 every time I run it.
I have run disk diags and it all says the disks are OK.
But I am suspicious that the MFT might be corrupt or out of sync with the file system.
I have went through these steps more than once and it is the same behavior every time.
Any help or advice on this would be much appreciated.
