Some findings:
a) Reported drive file system corruption: C: (recurrent)
b) Possible problematic user name
c) 10 BSOD in the last 30 days
d) No restore points
e) Disabled Windows RE
f) Microsoft Windows 10 Pro Build 19045
g) Out of date BIOS (9 missed upgrades)
Please perform the following steps:
1) Run GSmart Control (all drives)
Just a moment...
GSmartControl Hard disk drive and SSD health inspection tool GSmartControl is a graphical user interface for smartctl (from smartmontools package),...
gsmartcontrol.shaduri.dev
Click Self-Tests tab > Test type > Extended Self-test > Execute (run overnight)
Copy and paste the results > post a share link
Click Attributes tab > for any entries that are red or pink post share links of the full results window
2) Run Sea Tools Long generic test (all drives) > post images or share links
https://www.seagate.com/content/dam...ds/seatools/_shared/downloads/100869623_B.pdf
https://www.seagate.com/content/dam...shared/downloads/SeaToolsWindowsInstaller.exe
3) Run HD Tune (all drives) (run an old version so that it produces results for the whole drive)
HD Tune website
a) Health
b) Full error scan
4) Open administrative command prompt and copy and paste:
chkdsk /b /v
Run these chkdsk switches on all drives using the syntax: chkdsk /b /v C: or chkdsk /b /v D: or chkdsk /b /v E: etc.
Make sure that the windows drive runs overnight while sleeping.
C:\WINDOWS\system32>chkdsk /b /v
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
Type: Y
Reboot as needed.
5) After completing all chkdsk /b /v run:
https://www.tenforums.com/attachmen...-files-use-bsod-debugging-chkdskfromevent.bat
Batch files for use in BSOD debugging - Windows 10 Help Forums
Batch files for use in BSOD debugging - Windows 10 Help Forums
Make sure that this runs only after the prior three steps for each drive.
6) Run HD Sentinel (all drives) > post images or share links (do not run until posting results for each steps 1 - 5)
Hard Disk Sentinel - HDD health and temperature monitoring
a) Overview
b) Temperature
c) SMART
7) Please make sure that all of the above steps are performed in sequence
These steps / tests can be performed overnight while sleeping:
a) GSmart control extensive
b) Sea Tools Long generic test
c) HD Tune Full error scan
d) Chkdsk /b /v
8) Post images or share links displaying disk management:
How to Post a Screenshot of Disk Management at Ten Forums
www.tenforums.com
9) Next steps pending above results
Code:
------------------------
Disk & DVD/CD-ROM Drives
------------------------
Drive: C:
Free Space: 109.2 GB
Total Space: 475.6 GB
File System: NTFS
Model: CT500P3PSSD8
Drive: E:
Free Space: 442.7 GB
Total Space: 476.9 GB
File System: NTFS
Model: Samsung SSD 970 EVO Plus 500GB
Code:
Event[6762]:
Log Name: System
Source: Ntfs
Date: 2024-11-26T14:46:26.9560000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: 6C.DURBIN.local
Description:
A corruption was discovered in the file system structure on volume C:.
A file system index structure contains entries that violate ordering rules. The file reference number is 0xb3400000002cedf. The name of the file is "\Users\Dan_2\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\AC\INetCache\MR92JMJ1". The corrupted index attribute is ":$I30:$INDEX_ALLOCATION". The corrupted subtree is rooted at entry number 0 of the index block located at Vcn 0x6.
Code:
Event[15655]:
Log Name: System
Source: LsaSrv
Date: 2024-11-27T21:11:53.5400000Z
Event ID: 40970
Task: N/A
Level: Warning
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: 6C.DURBIN.local
Description:
The Security System has detected a downgrade attempt when contacting the 3-part SPN
ldap/TS440-BU.DURBIN.local/DURBIN.local@DURBIN.LOCAL
with error code "The attempted logon is invalid. This is either due to a bad username or authentication information.
(0xc000006d)". Authentication was denied.
Code:
Event[9785]:
Log Name: System
Source: Microsoft-Windows-WindowsUpdateClient
Date: 2024-11-27T17:27:39.7630000Z
Event ID: 19
Task: Windows Update Agent
Level: Information
Opcode: Installation
Keyword: Installation,Success
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: 6C.DURBIN.local
Description:
Installation Successful: Windows successfully installed the following update: 2024-11 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2 for x64 (KB5048292)
Code:
Event[15559]:
Log Name: System
Source: volmgr
Date: 2024-11-27T18:56:37.3690000Z
Event ID: 46
Task: N/A
Level: Error
Opcode: N/A
Keyword: Classic
User: N/A
User Name: N/A
Computer: 6C.DURBIN.local
Description:
Crash dump initialization failed!
Code:
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.
