Windows goes in Scandisk after reboot...

hi there, i'm new on this forum.

ok here's my problem:

most of the time, when i boot/reboot my computer, it goes in a Scandisk without warning, and then reboot and goes in Windows normally.

i thought it was Ad-Aware scheduling a Scandisk after a reboot, but i tried, without doing an Ad-Aware scan, i closed the computer for the day, and then when i opened it the next day, it went into a Scandisk, and i didn't even wanted that.

i scanned my Windows and Program Files folder with my antivirus, and it didn't detected any virus. I scanned my whole computer with Ad-Aware, removed the bad items displayed in the list, and it still do that "random Scandisk after reboot" thing.

when it gets in Scandisk, i have to wait 5 minutes so it completes the process (i don't want to take any chance, i don't want to cancel the process).

i didn't even went in the Scandisk process in Windows XP, it didn't asked me to schedule a Scandisk after a reboot.

is there a way to fix that? i hope so...because it's sick to wait all that time lost for (useless?) Scandisks...

is there a way to see if there's a Scandisk scheduled for next reboot?

i use Windows XP Home edition with SP2

 

Hi RaptorZX and welcome!

Follow the instructions here and hopefully you will get some relief.

Substitute your own drive identifier as needed. ( C: no doubt)

 

well i checked the dirty bit, and it says the hard disk is not dirty (

it says "n'est pas intègre ", in french

 

That's not such good news since it may be trying to tell you something is going wrong with the HD.

Run eventvwr.msc from the Start > Run window and check for any entries labeled "Winlogon" in the Applications events. Read the full results of the scan to see if anything looks untoward. You can copy the error to your Clipboard and post it here if you choose. Just punch the button you see there in the Event Viewer screen.

There should be a Winlogon event in the Application area for each time chkdsk.exe runs.

 

BTW, since you didn't mention it, even though the querie answer was that the drive was not dirty, continue to run the other commands in the sequence given in that link.

 

Another little gem to try is line 294 here. There is an undo version there as well. I suppose you would want to undo it if it didn't solve the problem.

 

i've done, the whole 5-steps scandisk, and something strange, it have done it twice, i wonder why... (i closed my LCD monitor since it's a static image for an extended period) and i went out to buy some McDonald's...

so i didn't see the message from the first scandisk

well, after the 2 scandisks, it told me "your hard disk is clean ", and then went in Windows XP normally.

i don't think something's wrong with my hard disk, the whole computer is only nearly 1 year old...and i take care of it...


i checked "eventvwr" as you told me, but the informations are in french

here are the infos:

and after the reboot, it's there that it told me the hard disk is clean, and proceeded normally in Windows

 

That's good news. Your HD is likely OK.

Now download the two items at line 294 of that link I posted earlier. Double click on the one named bootexe.reg and OK it to add the information to the registry.

If that doesn't end your problem, post back.

 

this registry entry is, somewhat, the same thing as typing "chkntfs /x c:" in Start-Run-CMD?

 

Yeah, somewhat, but moreover, it's global. All drives are affected. From what I understand, it prevents XP from checking any drives for the "dirty" flag by default. It's no big loss and all the better if it's causing a problem that can't easily be fixed otherwise.


Sometimes the cure or the prevention is worse than the disease. This seems to be one of those cases. You can always run chkdsk as part of your usual routine of maintenance without having it forced upon you when it isn't needed.

 

ok i got this yellow triangle in my task bar with a "!" in it, i tried scanning with Ad-Aware, removed the detected items and removed them, i decided to reboot the computer, but before, i've done a "chkntfs /x c:" in Start-Run-CMD, and then when it was booting up, in the Windows Welcome screen, my main board beeped and told me something about the system files are damaged and i should run the Chkdsk utility to fix the problem, it told me something about a "$SDH" damaged folder/file, i think it's the same that i reported in the log above.

i wasn't able to see this for a long time, since it proceeded in the booting process like it doesn't bother Windows....

i check the "eventvwr" program too, and it says a warning about the hard-disk (it says "ntfs ") and that i should run CHKDSK to fix the problem.

 

ok i check the "eventvwr" again, and checked on the latest events in the System section, the 4 entries give this to me (french):

i scanned for a file/folder called like this, and there's no such file/folder on my hard disk...

BUT

i searched my registry (regedit) for "$MFT" and i've found an entry called like this, located in:

HKEY_CURRENT_USER/Software/Microsoft/Search Assistant/ACMru/5603

the file is called "000 ", type is "REG_SZ ", and values ( "données" in french) is "$MFT "

could it be some kind of bogus registry value or some kind of undetected (yet) spyware/malware?

 

Did you recently install IE7? If so, uninstall it. I think that may be the heart of your problem.

You really should backup your valuable files on the outside chance that the problem isn't related to IE7 and is actually MFT corruption. The Master File Table being corrupt is a death blow in most cases. I doubt you have that problem but let's be safe. Backup your critical data.

 

at first, IE7 didn't caused me problem...so if you say IE7 cause this problem, maybe it's caused by a newly-released patch?

but it's strange, i'm still able to get in Windows normally...without any problem going on the net, i can still do my things normally, except i get these messages in "Eventvwr" and a yellow triangle icon in the task bar when i use certain programs

i checked on other forums about that problem, and someone posted about a program called "TestDisk ", here's the info on this tool:

http://www.cgsecurity.org/wiki/Advanced_NTFS_Boot_and_MFT_Repair

do you think i should try this tool?

 

No, I would not use TestDisk until I determined that IE7 was not at fault. It is not worth the risk of manipulating the MFT if the error happens to be a false indicator. Read some of the comments here and it may help you decide.

 

i would like to know if uninstalling IE7 would ***** up Windows, please.

if it doesn't, i now have a good reason to use Firefox!

 

No, it won't mess up Windows since the only way to properly uninstall it is to roll back to IE6. You can't get out of the MS net that easy.

By uninstalling, I mean using the uninstall utility that the update placed in your Windows directory. Using that will reverse the effects and make for a good test.

 

so by using the "Windows Internet Explorer 7" uninstall tool in the "install/uninstall programs ", it will roll back to Explorer 6 without messing anything in Windows XP Home SP2?

 

That's the way it's supposed to work. It's not a perfect world so there are never any guarantees. As I stated earlier,

Consider disk imaging for your future backup method.

 

but what i don't understand is i get this yellow triangle (look like the icon i took for this reply) in my task bar, but i'm still able to do anything i want in Windows.