Please perform the following steps:
1) Run Tuneup plus > post a share link
Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first
www.tenforums.com
Information This thread is for use by the BSOD team to store batch files that can be used to collect additional data, fix settings or anything else that is useful in debugging BSOD problems in Windows 10. The way I see it working is the first
www.tenforums.com
2) Uninstall Adguard and Norton software:
This article covers AdGuard for Windows, a multifunctional ad blocker that protects your device at the system level. To see how it works, download the AdGuard app
adguard.com
Norton Remove and Reinstall tool helps to uninstall and reinstall most Norton products such as Norton Security, Norton 360, and Norton Internet Security on Windows computers.
support.norton.com
Get all the support you need for your Norton products. We’ll help you with installation, activation, sales and billing.
support.norton.com
nllstm nllStm c:\windows\system32\drivers\nllstm.sys
adgnetworkwfpdrv adgnetworkwfpdrv c:\windows\system32\drivers\adgnetworkwfpdrv.sys
3) Create a new restore point
This tutorial will show you how to manually create a restore point in Windows 11. Turning on system protection for a drive allows System Restore to include the drive when restore points are created so you can undo undesired system changes by reverting to a previous point in time. System...
www.elevenforum.com
4) Reinstall one of the uninstalled software
5) Reinstall the second software after 24 hrs of stability
6) Microsoft defender can be used instead of Norton AV
7) Run Sea Tools Long generic test (all drives) > post images or share links
https://www.seagate.com/content/dam...ds/seatools/_shared/downloads/100869623_B.pdf
https://www.seagate.com/content/dam...shared/downloads/SeaToolsWindowsInstaller.exe
8) Run HD Tune (all drives) (run an old version so that it produces results for the whole drive)
HD Tune website
a) Health
b) Full error scan
9) Open administrative command prompt and copy and paste:
chkdsk /b /v
Run these chkdsk switches on all drives using the syntax: chkdsk /b /v C: or chkdsk /b /v D: or chkdsk /b /v E: etc.
Make sure that the windows drive runs overnight while sleeping.
C:\WINDOWS\system32>chkdsk /b /v
The type of the file system is NTFS.
Cannot lock current drive.
Chkdsk cannot run because the volume is in use by another
process. Would you like to schedule this volume to be
checked the next time the system restarts? (Y/N)
Type: Y
Reboot as needed.
10) After completing all chkdsk /b /v run:
https://www.tenforums.com/attachmen...-files-use-bsod-debugging-chkdskfromevent.bat
Batch files for use in BSOD debugging - Windows 10 Help Forums
Batch files for use in BSOD debugging - Windows 10 Help Forums
Make sure that this runs only after the prior three steps for each drive.
11) Run HD Sentinel (all drives) > post images or share links (do not run until posting results for each steps 7 and 8, 9 and 10)
Hard Disk Sentinel - HDD health and temperature monitoring
a) Overview
b) Temperature
c) SMART
12) Please make sure that all of the above steps are performed in sequence
These steps / tests can be performed overnight while sleeping:
a) Sea Tools Long generic test
b) HD Tune Full error scan
c) Chkdsk /b /v
Code:
Event[2338]
Log Name: System
Source: Ntfs
Date: 2025-02-24T14:54:02.7650000Z
Event ID: 55
Task: N/A
Level: Error
Opcode: Info
Keyword: N/A
User: S-1-5-18
User Name: NT AUTHORITY\SYSTEM
Computer: DESKTOP-6BAVK1J
Description:
A corruption was discovered in the file system structure on volume E:.
The exact nature of the corruption is unknown. The file system structures need to be scanned online.
Code:
Event[1204]
Log Name: Application
Source: Chkdsk
Date: 2025-02-24T08:05:45.9260000Z
Event ID: 26226
Task: None
Level: Information
Opcode: Info
Keyword: Classic,
User: N/A
User Name: N/A
Computer: DESKTOP-6BAVK1J
Description:
Chkdsk was executed in scan mode on a volume snapshot.
Checking file system on \Device\HarddiskVolume7
Volume label is ELP.
Stage 1: Examining basic file system structure ...
Found corrupt basic file structure for "<0xae0,0x24>"
... repaired online.
27904 file records processed.
File verification completed.
Phase duration (File record verification): 1.69 seconds.
19 large file records processed.
Found unused file metadata marked as used
... queued for offline repair.
Phase duration (Orphan file record recovery): 52.61 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.02 milliseconds.
Stage 2: Examining file name linkage ...
Found an unneeded link ($FILE_NAME: "$UsnJrnl") in index "$I30" of directory "\$Extend <0xb,0xb>"
... repaired online.
13704 reparse records processed.
Found an unneeded link ($FILE_NAME: "$Tops") in index "$I30" of directory "\$Extend\$RmMetadata\$TxfLog <0x1,0x1e>"
... repaired online.
Found an unneeded link ($FILE_NAME: "$TxfLog.blf") in index "$I30" of directory "\$Extend\$RmMetadata\$TxfLog <0x1,0x1e>"
... repaired online.
Found an unneeded link ($FILE_NAME: "$TxfLogContainer00000000000000000001") in index "$I30" of directory "\$Extend\$RmMetadata\$TxfLog <0x1,0x1e>"
... repaired online.
Found an unneeded link ($FILE_NAME: "$TxfLogContainer00000000000000000002") in index "$I30" of directory "\$Extend\$RmMetadata\$TxfLog <0x1,0x1e>"
... repaired online.
33536 index entries processed.
Index verification completed.
Phase duration (Index verification): 23.08 seconds.
Phase duration (Orphan reconnection): 1.30 milliseconds.
Found 6 lost files (...\tracking.log <0x1,0x28>, ...\IndexerVolumeGuid <0x2,0x29>, ...); requesting reconnection to index "$I30" of directory "\Device\HarddiskVolume7\found.000"
... repaired online.
Phase duration (Orphan recovery to lost and found): 276.54 milliseconds.
13704 reparse records processed.
Phase duration (Reparse point and Object ID verification): 26.75 milliseconds.
----------------------------------------------------------------------
Stage 1: Examining basic file system structure ...
The multi-sector header signature in file 0x24 is incorrect.
e0 0a e8 1f c3 45 d7 01 ?? ?? ?? ?? ?? ?? ?? ?? α.Φ..E╫.........
Deleting corrupt file record segment 24.
Deleting orphan file record segment 21.
Stage 2: Examining file name linkage ...
Index entry $UsnJrnl of index $I30 in file 0xb points to unused file 0x24.
Deleting index entry $UsnJrnl in index $I30 of file B.
Index entry $Tops of index $I30 in file 0x1e points to unused file 0x20.
Deleting index entry $Tops in index $I30 of file 1E.
Index entry $TxfLog.blf of index $I30 in file 0x1e points to unused file 0x21.
Deleting index entry $TxfLog.blf in index $I30 of file 1E.
Index entry $TxfLogContainer00000000000000000001 of index $I30 in file 0x1e points to unused file 0x22.
Deleting index entry $TxfLogContainer00000000000000000001 in index $I30 of file 1E.
Index entry $TxfLogContainer00000000000000000002 of index $I30 in file 0x1e points to unused file 0x23.
Deleting index entry $TxfLogContainer00000000000000000002 in index $I30 of file 1E.
CHKDSK is scanning unindexed files for reconnect to their original directory.
0 unindexed files recovered to original directory.
CHKDSK is recovering remaining unindexed files.
Lost and found is located at \found.000
Code:
Event[1349]
Log Name: Application
Source: Chkdsk
Date: 2025-02-24T14:54:52.2830000Z
Event ID: 26214
Task: None
Level: Information
Opcode: Info
Keyword: Classic,
User: N/A
User Name: N/A
Computer: DESKTOP-6BAVK1J
Description:
Chkdsk was executed in read/write mode.
Checking file system on E:
Volume label is ELP.
Stage 1: Examining basic file system structure ...
27904 file records processed.
File verification completed.
Phase duration (File record verification): 1.04 seconds.
Deleting orphan file record segment 21.
19 large file records processed.
Phase duration (Orphan file record recovery): 0.88 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 0.34 milliseconds.
Stage 2: Examining file name linkage ...
The file reference 0x1000000000024 of index entry $UsnJrnl of index $I30
with parent 0xb is not the same as 0xae1000000000024.
Deleting index entry $UsnJrnl in index $I30 of file B.
13707 reparse records processed.
33538 index entries processed.
Index verification completed.
Phase duration (Index verification): 16.14 seconds.
Phase duration (Orphan reconnection): 2.56 milliseconds.
Phase duration (Orphan recovery to lost and found): 1.60 milliseconds.
13707 reparse records processed.
Phase duration (Reparse point and Object ID verification): 20.92 milliseconds.
Stage 3: Examining security descriptors ...
Cleaning up 27 unused index entries from index $SII of file 0x9.
Cleaning up 27 unused index entries from index $SDH of file 0x9.
Cleaning up 27 unused security descriptors.
Security descriptor verification completed.
Phase duration (Security descriptor verification): 20.72 milliseconds.
2817 data files processed.
Phase duration (Data attribute verification): 0.48 milliseconds.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.
No further action is required.
1953513559 KB total disk space.
1709913860 KB in 23134 files.
10396 KB in 2819 indexes.
153483 KB in use by the system.
65536 KB occupied by the log file.
243435820 KB available on disk.
4096 bytes in each allocation unit.
488378389 total allocation units on disk.
60858955 allocation units available on disk.
Total duration: 17.26 seconds (17261 ms).
Code:
Event[9563]
Log Name: Application
Source: Microsoft-Windows-Wininit
Date: 2025-03-19T16:05:46.5090000Z
Event ID: 1001
Task: N/A
Level: Information
Opcode: N/A
Keyword: Classic,
User: N/A
User Name: N/A
Computer: DESKTOP-6BAVK1J
Description:
Checking file system on C:
The type of the file system is NTFS.
A disk check has been scheduled.
Windows will now check the disk.
Stage 1: Examining basic file system structure ...
Cleaning up instance tags for file 0x2a13d.
Cleaning up instance tags for file 0x2a477.
1140736 file records processed.
File verification completed.
Phase duration (File record verification): 5.44 seconds.
43134 large file records processed.
Phase duration (Orphan file record recovery): 10.64 milliseconds.
0 bad file records processed.
Phase duration (Bad file record checking): 1.19 milliseconds.
Stage 2: Examining file name linkage ...
562 reparse records processed.
1282698 index entries processed.
Index verification completed.
Phase duration (Index verification): 20.72 seconds.
0 unindexed files scanned.
Phase duration (Orphan reconnection): 608.59 milliseconds.
0 unindexed files recovered to lost and found.
Phase duration (Orphan recovery to lost and found): 29.24 seconds.
562 reparse records processed.
Phase duration (Reparse point and Object ID verification): 6.46 milliseconds.
Stage 3: Examining security descriptors ...
Cleaning up 6112 unused index entries from index $SII of file 0x9.
Cleaning up 6112 unused index entries from index $SDH of file 0x9.
Cleaning up 6112 unused security descriptors.
CHKDSK is compacting the security descriptor stream
Security descriptor verification completed.
Phase duration (Security descriptor verification): 176.49 milliseconds.
70982 data files processed.
Phase duration (Data attribute verification): 1.36 milliseconds.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.
No further action is required.
1952675831 KB total disk space.
255232372 KB in 460485 files.
314360 KB in 70985 indexes.
0 KB in bad sectors.
1278711 KB in use by the system.
65536 KB occupied by the log file.
1695850388 KB available on disk.
4096 bytes in each allocation unit.
488168957 total allocation units on disk.
423962597 allocation units available on disk.
Total duration: 56.24 seconds (56245 ms).
Internal Info:
00 68 11 00 16 1c 08 00 4f c4 0e 00 00 00 00 00 .h......O.......
5b 01 00 00 d7 00 00 00 00 00 00 00 00 00 00 00 [...............
nllStm.sys Tue Feb 25 07:25:42 2025 (67BDC4D6)
adgnetworkwfpdrv.sys Wed Mar 5 07:03:33 2025 (67C84BA5)
