Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Automatic ownership of Start Menu items/Warning 1909


  • Please log in to reply
25 replies to this topic

#16 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,690 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:11:18 AM

Posted 16 November 2017 - 04:55 AM

Something for you to check:

 

Error: (11/14/2017 12:23:05 PM) (Source: Windows Search Service)(User: )
Description:
Details:
    The Temp folder is on a drive that is full or is inaccessible. Free up space on the drive or verify that you have write permission on the Temp folder.   (0x80070660)
 


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


BC AdBot (Login to Remove)

 


m

#17 ray5450

ray5450
  • Topic Starter

  • Members
  • 415 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:18 AM

Posted 16 November 2017 - 07:12 AM

Does that mean the Temp folder in the Windows folder...or some other Temp folder?



#18 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,690 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:11:18 AM

Posted 16 November 2017 - 09:19 AM

Most likely c:\windows\temp usually your user temp folder is also on the C: drive

 

On the Run box type %temp% to access your temp folder.


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#19 ray5450

ray5450
  • Topic Starter

  • Members
  • 415 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:18 AM

Posted 16 November 2017 - 09:44 PM

Both temp folders exist and have files in them dated today and before.  The hard drive is hardly full.



#20 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,690 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:11:18 AM

Posted 18 November 2017 - 12:19 PM

» Check the Disk for Errors

  • open the Command Prompt as Administrator (Tutorial)
  • type the command:

    chkdsk /f /x C:
    Note: When it ask if you want to checked the volume next time the system restarts answer Yes
  • Restart the Computer and let the check run during boot.


Next,
  • download ListChkdskResult
  • execute the file and accept all the windows prompts to authorize the program to run
  • Notepad will open with a report showing the chkdsk result
  • copy & paste the log to your reply

• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#21 ray5450

ray5450
  • Topic Starter

  • Members
  • 415 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:18 AM

Posted 18 November 2017 - 07:21 PM

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 11/18/2017 7:15:06 PM >------
Category: 0
Computer Name: R-PC
Event Code: 1001
Record Number: 5388
Source Name: Microsoft-Windows-Wininit
Time Written: 11-19-2017 @ 00:04:57
Event Type: Information
User:
Message:

Checking file system on C:
The type of the file system is NTFS.
Volume label is ACER.


A disk check has been scheduled.
Windows will now check the disk.                         
  124352 file records processed.                                    677 large file records processed.                              0 bad file records processed.                                0 EA records processed.                                      44 reparse records processed.                                 160184 index entries processed.                                   0 unindexed files processed.                                 124352 security descriptors processed.                          Cleaning up 15420 unused index entries from index $SII of file 0x9.
Cleaning up 15420 unused index entries from index $SDH of file 0x9.
Cleaning up 15420 unused security descriptors.
CHKDSK is compacting the security descriptor stream...
  17917 data files processed.                                    CHKDSK is verifying Usn Journal...
  36422832 USN bytes processed.                                     Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

  78148160 KB total disk space.
  34202000 KB in 103076 files.
     59676 KB in 17920 indexes.
         0 KB in bad sectors.
    228688 KB in use by the system.
     65536 KB occupied by the log file.
  43657796 KB available on disk.

      4096 bytes in each allocation unit.
  19537040 total allocation units on disk.
  10914449 allocation units available on disk.

Internal Info:
c0 e5 01 00 ae d8 01 00 bb 58 03 00 00 00 00 00  .........X......
61 00 00 00 2c 00 00 00 00 00 00 00 00 00 00 00  a...,...........
42 00 00 00 e2 73 29 77 78 e4 23 00 78 dc 23 00  B....s)wx.#.x.#.

Windows has finished checking your disk.
Please wait while your computer restarts.

-----------------------------------------------------------------------
Category: 0
Computer Name: R-PC
Event Code: 26214
Record Number: 4417
Source Name: Chkdsk
Time Written: 11-13-2017 @ 17:33:45
Event Type: Information
User:
Message: Chkdsk was executed in read/write mode.  

Checking file system on G:
The type of the file system is NTFS.
  14080 file records processed.                                    1246 large file records processed.                              0 bad file records processed.                                0 EA records processed.                                      0 reparse records processed.                                 15392 index entries processed.                                   0 unindexed files processed.                                 14080 security descriptors processed.                            656 data files processed.                                    Windows has checked the file system and found no problems.

 141693951 KB total disk space.
 130379692 KB in 10547 files.
     12412 KB in 658 indexes.
         0 KB in bad sectors.
     84435 KB in use by the system.
     65536 KB occupied by the log file.
  11217412 KB available on disk.

      4096 bytes in each allocation unit.
  35423487 total allocation units on disk.
   2804353 allocation units available on disk.

-----------------------------------------------------------------------

 


Edited by ray5450, 18 November 2017 - 07:23 PM.


#22 ray5450

ray5450
  • Topic Starter

  • Members
  • 415 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:18 AM

Posted 21 November 2017 - 08:18 AM

Did you find anything in the check disk info?



#23 SleepyDude

SleepyDude

  • Malware Response Team
  • 2,690 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Portugal
  • Local time:11:18 AM

Posted 21 November 2017 - 08:54 AM

Chkdsk did some small corrections.

 

Download TFC by OldTimer to your Desktop

  • Please double-click TFC.exe to run it. (Note: If you are running on Vista or above accept the Security Warning).
  • It will close all programs when run, so make sure you have saved all your work before you begin.
  • Click the Start button to begin the process. Depending on how often you clean temp files, execution time should be anywhere from a few seconds to a minute or two.  Let it run uninterrupted to completion.
  • Once it's finished it should reboot your machine. If it does not, please manually reboot the machine yourself to ensure a complete clean.

 


• Please do not PM me asking for support. Post on the forums instead it will increases the chances of getting help for your problem by one of us.
• Posts in the Malware section that are not replied to within 4 days will be closed. PM me or a moderator to reactivate.
• Please post your final results, good or bad. We like to know! Thank you!

 
Proud graduate of GeekU and member of UNITE
___
Rui

 
 


#24 lmacri

lmacri

  • Members
  • 368 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:05:18 AM

Posted 21 November 2017 - 12:54 PM

When installing programs, this error occurs:  "Warning 1909  Could not create Shortcut"...

 

Hi ray5450:

Are these problems on the same Toshiba hard drive you recently re-imaged with the Microsoft ImageX tool? The latest 13-Nov-2017 post in your thread imagex image/sfc indicates you're having multiple problems after applying your .wim image to this new hard drive.
-----------
32-bit Vista Home Premium SP2 * Firefox ESR v52.5.0 * NS Premium v22.11.2.7 * MB Premium v3.3.1 * Speccy Portable v1.31.732 * Macrium Reflect Free v7.1.2722



#25 ray5450

ray5450
  • Topic Starter

  • Members
  • 415 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:18 AM

Posted 21 November 2017 - 03:02 PM

SleepyDude:  TFC ran, rebooted.

 

Imacri:  Yes and no.  I'll make another post there to explain, but first, I need to look at a few things myself that are rather time consuming.  I'll try and do it today or tomorrow.


Edited by ray5450, 21 November 2017 - 03:02 PM.


#26 lmacri

lmacri

  • Members
  • 368 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:05:18 AM

Posted Yesterday, 02:21 PM

Hi ray5450:
Are these problems on the same Toshiba hard drive you recently re-imaged with the Microsoft ImageX tool? ....

...Imacri:  Yes and no.  I'll make another post there to explain, but first, I need to look at a few things myself that are rather time consuming....

 

Hi SleepyDude:

 

Just an FYI that OP ray5450 replied to my question in post # 15 of their previous thread imagex image/sfc. I don't want to interfere with your troubleshooting and suggested that ray5450 post all relevant information over here in this thread to avoid any possible confusion.

-----------
32-bit Vista Home Premium SP2 * Firefox ESR v52.5.0 * NS Premium v22.11.2.7 * MB Premium v3.3.1 * Speccy Portable v1.31.732 * Macrium Reflect Free v7.1.2722


Edited by lmacri, Yesterday, 02:21 PM.





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users