Windows 7 Any idea what happened?

zirkoni

Extraordinary Member
Hi

So, after a few years I decided to try Linux again. I chose Puppy Linux because it sounded nice, easy and fast. I made a bootable USB flash drive, booted from the USB and tested Puppy Linux. After the try-out I booted back to Windows and began experiencing some problems:

1. All the USB ports stopped working
- tried a USB mouse and USB flash drives, nothing worked
- tried disabling the USB drivers in the device manager -> it froze and wouldn't disable them

2. This was a laptop and the touchpad began having problems
- a single finger swipe was sometimes detected as a 2 finger swipe (i.e. the scroll wheel) so moving the mouse cursor was quite problematic

3. The system was slower than usual

4. The system wouldn't shut down, I had to force shutdown by pressing the power button


I forced a reboot and selected safe-mode when Windows detected the abnormal shutdown. In safe-mode I was able to disable all the USB drivers that I thought were causing problems. Then I was able to reboot normally.
After the reboot Windows began chkdsk on the system drive automagically. Here's the chkdsk log (with lots of issues):
Code:
TimeCreated : 3.1.2015 16:42:55
Message     :
             
              Checking file system on C:
              The type of the file system is NTFS.
             
             
              One of your disks needs to be checked for consistency. You
              may cancel the disk check, but it is strongly recommended
              that you continue.
              Windows will now check the disk.                        
             
              CHKDSK is verifying files (stage 1 of 3)...
              Attribute record of type 0x80 and instance tag 0x3 is cross linked
              starting at 0x113bab7 for possibly 0x1 clusters.
              Some clusters occupied by attribute of type 0x80 and instance tag 0x3
              in file 0xca32 is already in use.
              Deleting corrupt attribute record (128, "")
              from file record segment 51762.
              Attribute record of type 0x80 and instance tag 0x4 is cross linked
              starting at 0x3d7d08 for possibly 0x1 clusters.
              Some clusters occupied by attribute of type 0x80 and instance tag 0x4
              in file 0xcc37 is already in use.
              Deleting corrupt attribute record (128, "")
              from file record segment 52279.
              Attribute record of type 0x80 and instance tag 0x4 is cross linked
              starting at 0x11320fe for possibly 0x1 clusters.
              Some clusters occupied by attribute of type 0x80 and instance tag 0x4
              in file 0x1084f is already in use.
              Deleting corrupt attribute record (128, "")
              from file record segment 67663.
                521984 file records processed.                                        
              File verification completed.
                355 large file records processed.                                  
                0 bad file records processed.                                    
                2 EA records processed.                                          
                63 reparse records processed.                                     
              CHKDSK is verifying indexes (stage 2 of 3)...
              Index entry tmp.edb of index $I30 in file 0x30 points to unused file 0xe49f.
              Deleting index entry tmp.edb in index $I30 of file 48.
              The file reference 0xb300000000048a of index entry FontCache3.0.0.0.dat of index $I30
              with parent 0x6b9 is not the same as 0xb400000000048a.
              Deleting index entry FontCache3.0.0.0.dat in index $I30 of file 1721.
              The file reference 0xb300000000048a of index entry FONTCA~2.DAT of index $I30
              with parent 0x6b9 is not the same as 0xb400000000048a.
              Deleting index entry FONTCA~2.DAT in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry lastalive0.dat
              of index $I30 with parent 0x6b9 in file 0xca32.
              Deleting index entry lastalive0.dat in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry lastalive1.dat
              of index $I30 with parent 0x6b9 in file 0xcb8a.
              Deleting index entry lastalive1.dat in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry LASTAL~1.DAT
              of index $I30 with parent 0x6b9 in file 0xca32.
              Deleting index entry LASTAL~1.DAT in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry LASTAL~2.DAT
              of index $I30 with parent 0x6b9 in file 0xcb8a.
              Deleting index entry LASTAL~2.DAT in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry ~FontCache-FontFace.dat
              of index $I30 with parent 0x6b9 in file 0x5b9.
              Deleting index entry ~FontCache-FontFace.dat in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry ~FontCache-System.dat
              of index $I30 with parent 0x6b9 in file 0x79d3e.
              Deleting index entry ~FontCache-System.dat in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry ~FONTC~1.DAT
              of index $I30 with parent 0x6b9 in file 0x5b9.
              Deleting index entry ~FONTC~1.DAT in index $I30 of file 1721.
              Unable to locate the file name attribute of index entry ~FONTC~2.DAT
              of index $I30 with parent 0x6b9 in file 0x79d3e.
              Deleting index entry ~FONTC~2.DAT in index $I30 of file 1721.
              The file reference 0x1d000000011061 of index entry etilqs_GmeA87r977HY6Tt of index $I30
              with parent 0x6d20 is not the same as 0x1f000000011061.
              Deleting index entry etilqs_GmeA87r977HY6Tt in index $I30 of file 27936.
              The file reference 0x190000000110a9 of index entry etilqs_Hhwn7E7SB1yHsgk of index $I30
              with parent 0x6d20 is not the same as 0x1b0000000110a9.
              Deleting index entry etilqs_Hhwn7E7SB1yHsgk in index $I30 of file 27936.
              The file reference 0x1d000000011061 of index entry ETILQS~1 of index $I30
              with parent 0x6d20 is not the same as 0x1f000000011061.
              Deleting index entry ETILQS~1 in index $I30 of file 27936.
              The file reference 0x190000000110a9 of index entry ETILQS~2 of index $I30
              with parent 0x6d20 is not the same as 0x1b0000000110a9.
              Deleting index entry ETILQS~2 in index $I30 of file 27936.
              The file reference 0x5900000000ec18 of index entry WebCacheV01.tmp of index $I30
              with parent 0x7bb8 is not the same as 0x5b00000000ec18.
              Deleting index entry WebCacheV01.tmp in index $I30 of file 31672.
              The file reference 0x5900000000ec18 of index entry WEBCAC~1.TMP of index $I30
              with parent 0x7bb8 is not the same as 0x5b00000000ec18.
              Deleting index entry WEBCAC~1.TMP in index $I30 of file 31672.
              Index entry {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000038.db of index $I30 in file 0x7bb
              e points to unused file 0xc11a.
              Deleting index entry {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000038.db in index $I30 of f
              ile 31678.
              Index entry {AFBF9~2.DB of index $I30 in file 0x7bbe points to unused file 0xc11a.
              Deleting index entry {AFBF9~2.DB in index $I30 of file 31678.
              The file reference 0x3b00000000e497 of index entry 4820defa-8de3-4b69-aff7-4b4bb0f806c1.png of index $I30
              with parent 0xbd20 is not the same as 0x3c00000000e497.
              Deleting index entry 4820defa-8de3-4b69-aff7-4b4bb0f806c1.png in index $I30 of file 48416.
              The file reference 0x3b00000000e497 of index entry 4820DE~1.PNG of index $I30
              with parent 0xbd20 is not the same as 0x3c00000000e497.
              Deleting index entry 4820DE~1.PNG in index $I30 of file 48416.
              The file reference 0xfc000000000635 of index entry tmp.edb of index $I30
              with parent 0xd995 is not the same as 0xfd000000000635.
              Deleting index entry tmp.edb in index $I30 of file 55701.
              Unable to locate the file name attribute of index entry IMpServiceEDB4FA23-53B8-4AFA-8C5D-99752CCA7094.lo
              ck
              of index $I30 with parent 0x17c04 in file 0xcc37.
              Deleting index entry IMpServiceEDB4FA23-53B8-4AFA-8C5D-99752CCA7094.lock in index $I30 of file 97284.
              Unable to locate the file name attribute of index entry IMPSER~1.LOC
              of index $I30 with parent 0x17c04 in file 0xcc37.
              Deleting index entry IMPSER~1.LOC in index $I30 of file 97284.
              The file reference 0xa5000000003e8f of index entry prefs.js of index $I30
              with parent 0x17c7a is not the same as 0xa2000000003e8f.
              Deleting index entry prefs.js in index $I30 of file 97402.
              The file reference 0xa9000000003e5a of index entry sessionCheckpoints.json of index $I30
              with parent 0x17c7a is not the same as 0xa8000000003e5a.
              Deleting index entry sessionCheckpoints.json in index $I30 of file 97402.
              The file reference 0xa9000000003e5a of index entry SESSIO~1.JSO of index $I30
              with parent 0x17c7a is not the same as 0xa8000000003e5a.
              Deleting index entry SESSIO~1.JSO in index $I30 of file 97402.
              Index entry recovery.bak of index $I30 in file 0x17ca4 points to unused file 0x113c4.
              Deleting index entry recovery.bak in index $I30 of file 97444.
                625408 index entries processed.                                       
              Index verification completed.
              CHKDSK is scanning unindexed files for reconnect to their original directory.
              Recovering orphaned file FONTCA~2.DAT (1162) into directory file 1721.
              Recovering orphaned file FontCache3.0.0.0.dat (1162) into directory file 1721.
              Recovering orphaned file FONTCA~4.DAT (1465) into directory file 1721.
              Recovering orphaned file FontCache-FontFace.dat (1465) into directory file 1721.
              Recovering orphaned file 0001000A.wid (1589) into directory file 1346.
              Recovering orphaned file prefs.js (15962) into directory file 97402.
              Recovering orphaned file {AFBF9~1.DB (66833) into directory file 31678.
              Recovering orphaned file {AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000003a.db (66833) into d
              irectory file 31678.
                8 unindexed files scanned.                                       
              Recovering orphaned file FO8B1D~1.DAT (499006) into directory file 1721.
              Recovering orphaned file FontCache-System.dat (499006) into directory file 1721.
              CHKDSK is recovering remaining unindexed files.
                2 unindexed files recovered.                                     
              CHKDSK is verifying security descriptors (stage 3 of 3)...
                521984 file SDs/SIDs processed.                                       
              Cleaning up 604 unused index entries from index $SII of file 0x9.
              Cleaning up 604 unused index entries from index $SDH of file 0x9.
              Cleaning up 604 unused security descriptors.
              Security descriptor verification completed.
              Inserting data attribute into file 51762.
              Inserting data attribute into file 52279.
              Inserting data attribute into file 67663.
                51716 data files processed.                                          
              CHKDSK is verifying Usn Journal...
                34755744 USN bytes processed.                                           
              Usn Journal verification completed.
              Correcting errors in the master file table's (MFT) BITMAP attribute.
              CHKDSK discovered free space marked as allocated in the volume bitmap.
              Windows has made corrections to the file system.
             
               488282111 KB total disk space.
               181548980 KB in 435783 files.
                  174832 KB in 51715 indexes.
                       0 KB in bad sectors.
                  638579 KB in use by the system.
                   65536 KB occupied by the log file.
               305919720 KB available on disk.
             
                    4096 bytes in each allocation unit.
               122070527 total allocation units on disk.
                76479930 allocation units available on disk.
             
              Internal Info:
              00 f7 07 00 57 70 07 00 11 58 0b 00 00 00 00 00  ....Wp...X......
              7e 03 00 00 3f 00 00 00 00 00 00 00 00 00 00 00  ~...?...........
              14 00 00 00 00 00 00 00 03 00 00 00 00 00 00 00  ................
             
              Windows has finished checking your disk.
              Please wait while your computer restarts.

After the chkdsk was finished I rebooted and enabled the USB drivers that I had disabled earlier. Everything seems to be back to normal again. My USB devices and touchpad are behaving normally and the system seems to be stable and fast. I also ran sfc /scannow but it didn't detect any problems.

So, I don't really need any help solving this problem since I seem to have managed to do it myself.
I would just like to know what happened.
What caused these problems (well, obviously it was because I ran Puppy Linux, but why)?
What do all the issues in the chkdsk log mean?
Is the system OK or should I worry something might be wrong?
 
Linux does have the means to detect ntfs errors and to flag the drive for error checking on reboot. Whatever has caused the errors may have been caused by something executed under Linux but the errors tend to look more like corruption which can occur at disk level under any Op sys. I'd run regular disk checks over the next few weeks to see if any significant number of further errors are reported which could point to possible disk failure.
 
The USB problem could have come from mounting usb devices in Puppy without properly dismounting them. When Windows got a hold of the ports, they may have still be assigned to Puppy.

Puppy is not a very sophisticated OS and may have all kinds of flaws. Next time I suggest to use Mint Mate which is a full blown OS.

This is for the stick version

This is for the virtual version
 
Linux does have the means to detect ntfs errors and to flag the drive for error checking on reboot.
But chkdsk kicked in only after I had booted into safe-mode, I did a few normal reboots before trying safe-mode. Makes me think Windows flagged the drive for checking.

The USB problem could have come from mounting usb devices in Puppy without properly dismounting them. When Windows got a hold of the ports, they may have still be assigned to Puppy.
How can an OS assign USB ports (or any devices) for itself after the OS has been shut down? Wouldn't that mean the OS made some changes to the motherboard firmware?

Anyway, thank you for your replies. I'll keep an eye on that hard drive.
 
Back
Top