1) Some findings:
a) file system corruption Master File Table (MFT) on D:
b) secure boot update problem
c) multiple unexpected shutdowns and restarts without BSOD
d) From October one of the drives has one or more bad blocks
2) Tuneup plus:
Code:
Windows Resource Protection found corrupt files and successfully repaired them.
3) Download and install:
HP PC Hardware Diagnostics UEFI – v10.8.3.0
Learn how to isolate and identity hardware issues on your computer by running HP PC Hardware Diagnostics. Download HP PC Hardware Diagnostics today!
support.hp.com
Run overnight in system > extensive > take pictures > post images or share links displaying the tests performed with results.
4) Run Sea Tools Long generic test (all drives) > post images or share links
SeaTools - Quick diagnostic tool that checks the health of your drive.
www.seagate.com
5) Run HD Tune (all drives) (old version) > post images or share links
a) Health
b) Full error scan
6) Open administrative command prompt and copy and paste:
chkdsk /b /v
Run these chkdsk switches on all drives using the syntax: chkdsk /b /v C: or chkdsk /b /v D: or chkdsk /b /v E: etc.
Make sure that the windows drive runs overnight while sleeping.
C:\WINDOWS\system32>chkdsk /b /v
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
Type: Y
Reboot as needed.
7) After completing all chkdsk /b /v run:
https://www.tenforums.com/attachmen...-files-use-bsod-debugging-chkdskfromevent.bat
Batch files for use in BSOD debugging - Windows 10 Help Forums
Batch files for use in BSOD debugging - Windows 10 Help Forums
Make sure that this runs only after the prior three steps for each drive.
8) Run HD Sentinel (all drives) > post images or share links (do not run until posting results for each steps 4, 5, 6 and 7)
Hard Disk Sentinel - HDD health and temperature monitoring
a) Overview
b) Temperature
c) SMART
9) Please make sure that all of the above steps are performed in sequence
These steps / tests can be performed overnight while sleeping:
a) Sea Tools Long generic test
b) HD Tune Full error scan
c) Chkdsk /b /v
Code:
Event[7567]
Log Name: System
Source: Ntfs
Date: 2025-11-19T15:38:44.7130000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
A corruption was discovered in the file system structure on volume D:.
The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000026b8f. The name of the file is "<unable to determine file name>".
Code:
Event[11444]
Log Name: System
Source: Ntfs
Date: 2025-12-01T21:08:28.7840000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
A corruption was discovered in the file system structure on volume D:.
The Master File Table (MFT) contains a corrupted file record. The file reference number is 0x1000000026b8f. The name of the file is "<unable to determine file name>".
Code:
Event[14013]
Log Name: System
Source: Microsoft-Windows-TPM-WMI
Date: 2025-12-06T07:25:17.2280000Z
Event ID: 1801
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
Secure Boot certificates have been updated but are not yet applied to the device firmware. Review the published guidance to complete the update and ensure full protection. This device signature information is included here.
DeviceAttributes: FirmwareManufacturer:HP;FirmwareVersion:W77 Ver. 01.06.01;OEMModelBaseBoard:8C7A;OEMManufacturerName:HP;OSArchitecture:amd64;
BucketId: 4ce17377f996e72c4b20d54c265f23300a151349d885484203791ccd798f49ba
BucketConfidenceLevel:
UpdateType:
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.
Event[14014]
Log Name: System
Source: Microsoft-Windows-TPM-WMI
Date: 2025-12-06T07:25:17.6150000Z
Event ID: 1796
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
The Secure Boot update failed to update SBAT with error Unknown HResult Error code: 0x800700c1. For more information, please see https://go.microsoft.com/fwlink/?linkid=2169931
Code:
Event[13929]
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2025-12-06T07:20:14.9340000Z
Event ID: 98
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
Volume D: (\Device\HarddiskVolume8) needs to be taken offline for a short time to perform a Spot Fix. Please run "CHKDSK /SPOTFIX" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Code:
Event[13894]
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2025-12-06T07:19:52.7420000Z
Event ID: 41
Task: N/A
Level: Critical
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Code:
Event[13853]
Log Name: System
Source: EventLog
Date: 2025-12-06T07:20:17.7980000Z
Event ID: 6008
Task: None
Level: Error
Opcode: N/A
Keyword: Classic,
User: N/A
User Name: N/A
Computer: Rhino-NoteBook5
Description:
The previous system shutdown at 6:31:25 AM on ?12/?6/?2025 was unexpected.
Code:
Event[13719]
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2025-12-05T23:51:06.1080000Z
Event ID: 98
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
Volume D: (\Device\HarddiskVolume8) needs to be taken offline for a short time to perform a Spot Fix. Please run "CHKDSK /SPOTFIX" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Code:
Event[13515]
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2025-12-05T22:44:32.0090000Z
Event ID: 98
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
Volume D: (\Device\HarddiskVolume8) needs to be taken offline for a short time to perform a Spot Fix. Please run "CHKDSK /SPOTFIX" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Code:
Event[13480]
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2025-12-05T22:44:16.4510000Z
Event ID: 41
Task: N/A
Level: Critical
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Code:
Event[13444]
Log Name: System
Source: EventLog
Date: 2025-12-05T22:44:35.7110000Z
Event ID: 6008
Task: None
Level: Error
Opcode: N/A
Keyword: Classic,
User: N/A
User Name: N/A
Computer: Rhino-NoteBook5
Description:
The previous system shutdown at 10:41:35 PM on ?12/?5/?2025 was unexpected.
Code:
Event[13082]
Log Name: System
Source: Microsoft-Windows-Ntfs
Date: 2025-12-04T08:24:55.7130000Z
Event ID: 98
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
Volume D: (\Device\HarddiskVolume9) needs to be taken offline for a short time to perform a Spot Fix. Please run "CHKDSK /SPOTFIX" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Code:
Event[13018]
Log Name: System
Source: Microsoft-Windows-Kernel-Power
Date: 2025-12-04T08:24:30.7210000Z
Event ID: 41
Task: N/A
Level: Critical
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: Rhino-NoteBook5
Description:
The system has rebooted without cleanly shutting down first. This error could be caused if the system stopped responding, crashed, or lost power unexpectedly.
Code:
Event[12991]
Log Name: System
Source: EventLog
Date: 2025-12-04T08:24:55.0420000Z
Event ID: 6008
Task: None
Level: Error
Opcode: N/A
Keyword: Classic,
User: N/A
User Name: N/A
Computer: Rhino-NoteBook5
Description:
The previous system shutdown at 7:36:06 AM on ?12/?4/?2025 was unexpected.
