Big corruption issue or virus?

Whitestorm

Honorable
Sep 7, 2013
46
0
10,540
Hi all! It's been awhile since I've been here on TH but I've run into a pretty big problem that I can't seem to fix. I have a massive problem going on and I have no idea what it is caused by.

BACKGROUND INFO
Windows 8.1 - i7-4790k - Strix GTX 1080 - 1TB Seagate HDD - 16GB 2133mhz G.Skill DDR3

I do have a blue screen problem from what I believe it a bad RAM stick. It is completely random and somewhat infrequent. I have not had troubles from it before, this all happened today. I did BSOD when logging in today so my problem may actually be Windows corruption.

PROBLEM
I first noticed the problem when I tried to save an image from Chrome by dragging it to my desktop. Windows says, "The file or directory is corrupted and unreadable". I tried creating a new folder on the desktop and I also received an error saying, "An unexpected error is keeping you from creating the folder. Error 0x80070570: The file directory is corrupted and unreadable." As I am writing this I tried it again and the folder was created... then I tried to delete it and windows said, "An unexpected error is keeping you from deleting the folder. Error 0x80070570..." Anyways, opening images no longer works. I get, "Windows Photo Viewer can't open the picture because either Photo Viewer doesn't support this file format, or you don't have the latest updates to Photo Viewer." (The new built in photo viewer does seem to work) Earlier some would open, and some wouldn't, now it seems like they all wont. I can still get into all of the directories on my hard drive and everything seems to be there and all thumbnails (including images) display properly. I tried downloading Avira but the download instantly fails (Chrome works fine BTW).

TRIED SOLUTIONS
First thing I tried is running check disk and it quickly said that it couldn't check the disk or something similar to that. I also tried an elevated CMD using chkdsk and it would say that problems were detected but that it could not continue in read only mode. Now it is suddenly running, so I'll report back if it finishes.
I tried using SFC in an elevated CMD and it also wouldn't work. It quickly said, "Windows Resource Protection could not preform the requested operation."
I also tried using DISM in an elevated CMD and in Powershell but neither would work...
I'm currently doing a full Windows Defender scan, If it turns nothing up I'll try getting Avira on a flashdrive.

CONCERNS
My biggest concern is loosing any of my data. I have nearly a full TB of stuff on this computer and no backup (I know, I know). I don't want to shutdown for fear of Windows not starting properly. I do have the original install disk and I am capable of doing the most advanced things you guys can think of. If anyone could help it would mean a ton!

If there is anything else you want to know or if you want to see some dump files just ask!
 
Here's the log from check disk:
Log Name: Application
Source: Chkdsk
Date: 6/5/2017 5:34:19 PM
Event ID: 26226
Task Category: None
Level: Information
Keywords: Classic
User: N/A
Computer: Whitestorm
Description:
Chkdsk was executed in scan mode on a volume snapshot.

Checking file system on C:

Stage 1: Examining basic file system structure ...
Found 0x2 clusters allocated to file "\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.214_x64__8wekyb3d8bbwe\Platform.winmd <0x5,0x5a1b8>" at offset "0x1" marked as free
... repaired online.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x105da03 for possibly 0x21 clusters.
Found corrupt basic file structure for "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\ge\07_performance\slipstream_3.raw <0x1,0x9a6e6>"
... repaired online.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x105da25 for possibly 0x1b clusters.
Found corrupt basic file structure for "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\sp\Names_AI\Chief_AI_115.raw <0x1,0x9a899>"
... repaired online.
File "\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.214_x64__8wekyb3d8bbwe\Platform.winmd <0x5,0x5a1b8>" and file "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\ge\07_performance\slipstream_3.raw <0x1,0x9a6e6>" both own logical clusters [0x105da03, 0x105da24)
... queued for offline repair.
File "\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.214_x64__8wekyb3d8bbwe\Platform.winmd <0x5,0x5a1b8>" and file "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\sp\Names_AI\Chief_AI_115.raw <0x1,0x9a899>" both own logical clusters [0x105da25, 0x105da40)
... queued for offline repair.

740864 file records processed.

File verification completed.

14352 large file records processed.

Found unused file metadata marked as used
... repaired online.

0 bad file records processed.


Stage 2: Examining file name linkage ...

904460 index entries processed.

Index verification completed.





Stage 3: Examining security descriptors ...
Security descriptor verification completed.

81801 data files processed.

CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Windows has found problems and some were fixed online;
the remaining problems must be fixed offline.
Please run chkdsk /spotfix to fix the issues.

966964223 KB total disk space.
947098428 KB in 639171 files.
359444 KB in 81800 indexes.
844827 KB in use by the system.
65536 KB occupied by the log file.
18661524 KB available on disk.

4096 bytes in each allocation unit.
241741055 total allocation units on disk.
4665381 allocation units available on disk.

----------------------------------------------------------------------


Stage 1: Examining basic file system structure ...
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x9a6e6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 632550.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x9a899 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 632985.
Deleting orphan file record segment 410238.

Stage 2: Examining file name linkage ...

Stage 3: Examining security descriptors ...
Inserting data attribute into file 632550.
Inserting data attribute into file 632985.

Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Chkdsk" />
<EventID Qualifiers="0">26226</EventID>
<Level>4</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-06-05T21:34:19.000000000Z" />
<EventRecordID>3920889</EventRecordID>
<Channel>Application</Channel>
<Computer>Whitestorm</Computer>
<Security />
</System>
<EventData>
<Data>

Checking file system on C:

Stage 1: Examining basic file system structure ...
Found 0x2 clusters allocated to file "\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.214_x64__8wekyb3d8bbwe\Platform.winmd &lt;0x5,0x5a1b8&gt;" at offset "0x1" marked as free
... repaired online.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x105da03 for possibly 0x21 clusters.
Found corrupt basic file structure for "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\ge\07_performance\slipstream_3.raw &lt;0x1,0x9a6e6&gt;"
... repaired online.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x105da25 for possibly 0x1b clusters.
Found corrupt basic file structure for "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\sp\Names_AI\Chief_AI_115.raw &lt;0x1,0x9a899&gt;"
... repaired online.
File "\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.214_x64__8wekyb3d8bbwe\Platform.winmd &lt;0x5,0x5a1b8&gt;" and file "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\ge\07_performance\slipstream_3.raw &lt;0x1,0x9a6e6&gt;" both own logical clusters [0x105da03, 0x105da24)
... queued for offline repair.
File "\Program Files\WindowsApps\Microsoft.BingWeather_3.0.4.214_x64__8wekyb3d8bbwe\Platform.winmd &lt;0x5,0x5a1b8&gt;" and file "\Program Files (x86)\Steam\SteamApps\common\Grid\audio\speech\sp\Names_AI\Chief_AI_115.raw &lt;0x1,0x9a899&gt;" both own logical clusters [0x105da25, 0x105da40)
... queued for offline repair.

740864 file records processed.

File verification completed.

14352 large file records processed.

Found unused file metadata marked as used
... repaired online.

0 bad file records processed.


Stage 2: Examining file name linkage ...

904460 index entries processed.

Index verification completed.





Stage 3: Examining security descriptors ...
Security descriptor verification completed.

81801 data files processed.

CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Windows has found problems and some were fixed online;
the remaining problems must be fixed offline.
Please run chkdsk /spotfix to fix the issues.

966964223 KB total disk space.
947098428 KB in 639171 files.
359444 KB in 81800 indexes.
844827 KB in use by the system.
65536 KB occupied by the log file.
18661524 KB available on disk.

4096 bytes in each allocation unit.
241741055 total allocation units on disk.
4665381 allocation units available on disk.

----------------------------------------------------------------------


Stage 1: Examining basic file system structure ...
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x9a6e6 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 632550.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x9a899 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 632985.
Deleting orphan file record segment 410238.

Stage 2: Examining file name linkage ...

Stage 3: Examining security descriptors ...
Inserting data attribute into file 632550.
Inserting data attribute into file 632985.
</Data>
<Binary>004E0B0056000B00351A1400000000000F1C00004D0000000000000000000000</Binary>
</EventData>
</Event>
Random audio files from Grid, a game I haven't played for months... and Bing weather files, something I neither use nor knew existed. Ok Windows, whatever!

I'm going to repair the drive offline now, hopefully that will fix it and that enormous write-up was a waste of time! XD