CHKDSK C: /f didn't work, the mirror has a bitmap error, but the repair needs a restart and it freezes before it can run the repair.Are you running a raid ? If so then there is a drive problem that does need to be repaired
In my last post I meant the mirrored MFT on C: ,
these tests have been with only one drive attached, the SATA drive.
However, yes, under normal circumstances, when I have SATA, SSD and USB drives attached,
I do run with RAID-1 (software) MirrorFolder.
The idea is that if my SSD dies (which it has done in the past) the SATA drive will take over on reboot.
I have just booted into Normal Mode with the old pATA drive OK,
then booted again with pATA (C:) and SSD (H:),
formatted H:, mirrored C: to H:, rebooted (which updates the registry at start-up),
and then disconnected the pATA drive and rebooted from SSD (as C:).
This works more or less OK.
There are some wrinkles though -
- the hard drive light is permanently on dimly, and brightly when disc activity is happening
- a hidden partition of 100 MB has appeared on SSD, I have made it visible as V:, it doesn’t have anything in it apart from System Volume Information. Was it always there ?
- Windows Update gets stuck on 4 updates to .NET Framework 4
- X-lite, which I think uses .NET 4, won’t run or uninstall.
If this makes more sense to you than it does to me, let me know, otherwise I am still working on it.
OK the 100Mb partition is the Vista/7 version of the recovery console, this will allow repairs and analysis without using the CD
Screenshot attached
Dot net has always been a problem, when one update gets stuck then the whole thing crumbles
http://support.microsoft.com/kb/306160
Do you feel it is a problem with the SSD drive ?
The SSD was doing exactly the same thing as SATA, so its unlikely to be anything wrong hardware-wise.
I have several boot disks with Linux on them, and none of them get very far, even in non-install mode - they load for 30 seconds or so and then freeze, and the CD-drive then doesn’t eject until after reset.
Win 7 on SSD plus USB is running usably with the hard drive light on dimly. Resmon can’t detect anything weird happening.
A number of things don’t uninstall properly, and Office 2007 only installs on C: and doesn’t give the option of installing elsewhere.
Out of curiosity, how do you write something that finds rootkits ? And why can’t something like that be built into Windows ?
how do you write something that finds rootkits ?For that you would need to ask the programmers, I just use their tools
And why can't something like that be built into Windows ?MS is continually working to make it more difficult for rootkits to install, but as they need to allow software writers to use the OS they must allow some leeway... Otherwise you will get to the state of Apple, where software is only released for a Mac after apple have looked at it (increasing the price on the way)
I have several boot disks with Linux on them, and none of them get very far, even in non-install mode - they load for 30 seconds or so and then freeze, and the CD-drive then doesn't eject until after reset. Is there a Linux version designed to work on SSD
As it stands at the moment I can see no malware on the system
I just solved the dim HDD light.
To disconnect the old pATA drive, I only removed the power cord. On removing the pATA cable the light went out.
X-lite now uninstalls too.
CHKDSK C: now says the MFT is clean.
.NET 4 updates install OK.
I feel that everything is working properly now on SSD.
I’ll add SATA drive next and mirror to that.
That went OK, so MirrorFolder is mirroring C: on SSD to S: on SATA in RAID-1 mode OK.
I then set up MirrorFolder to mirror C: to K: on USB every 24 hours.
It does its first synchronisation straight away,
and at what I assume was the end of the task, it dies with a BSOD,
“A thread tried to release a resource it did not own”
STOP 0x000000E3 (0x… , 0x… , 0x… , 0x… )
and it did it again when I restarted and retried it.
Switched off mirroring C: to K: .
Event Viewer shows 69 Errors in the last hour, 2,728 in the last 24 hours.
I despair of Windows.
The stop code indicates either an NTFS failure on the drive in question which a chkdsk should cure it or it is related to Microsoft update KB971486
The more probable cause is the NTFS failure
CHKDSK reports everything is OK on both C: on SSD and K: on USB,
although none of the reported statistics agree, which they should if the mirroring had completed ok (shouldn’t they ?).
http://support.microsoft.com/kb/971486 says that fix is not applicable to Win 7.
I tried to get into Windows Update to see if I could see anything like that,
but clicking the shortcut in Start > All Programs > Windows Update it says “C:\windows\system32\wupdmgr.exe is missing” .
It worked OK yesterday.
Windows Explorer confirms this, although looking at my other machines, there is no such file there either.
The shortcut targets “%SystemRoot%\system32\wupdmgr.exe”
whereas on the other machines it points to “%windir%\system32\wuapp.exe startmenu”
From a Command prompt “C:\windows\system32\wuapp.exe startmenu” brings up the dialog.
Looking at Update History, there is no sign of KB971486.
Duh - the error was on S: on SATA.
chkdsk S: /f output attached
Having now reset the index how is it going
Well, its not breaking now, which is a relief.
It will take a while to regain confidence and straighten all the settings which have changed since the old pATA drive was in use, but I think I’ll get there.
I also have several boot CDs and flash drives for various Linux systems, some of which I have used many times in the past successfully, but none of them work now.
But that is a puzzle for another forum.
So thank you so much for all your help and perseverance , and I think we can leave it at that.
Dave
Are you happy for me to remove the tools now
Yes.
Subject to no further problems 
I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems
Now the best part of the day ----- Your log now appears clean 
A good workman always cleans up after himself so…The following will implement some cleanup procedures as well as reset System Restore points:
Run OTL
[*]Under the Custom Scans/Fixes box at the bottom, paste in the following
:Commands [resethosts] [emptytemp] [Reboot]
[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
Remove ComboFix
[*]Hold down the Windows key + R on your keyboard. This will display the Run dialogue box
[*]In the Run box, type in ComboFix /Uninstall (Notice the space between the “x” and “/”) then click OK
http://i1224.photobucket.com/albums/ee362/Essexboy3/Misc%20screen%20shots/CF_Uninstall-1.jpg
[]Follow the prompts on the screen
[]A message should appear confirming that ComboFix was uninstalled
Run OTL and hit the cleanup button. It will remove all the programmes we have used plus itself.
We will now confirm that your hidden files are set to that, as some of the tools I use will change that
[*]Go to control panel
[*]Select folder options (Appearance > Folder options in category view)
[*]Select the View Tab.
[*]Under the Hidden files and folders heading select Do not show hidden files and folders.
[]Click Yes to confirm.
[]Click OK.
http://users.telenet.be/bluepatchy/miekiemoes/images/javaicon.gif
Your Java is out of date. Older versions have vulnerabilities that malware can use to infect your system.
Please follow these steps to remove older version of Java components and upgrade the application.
Upgrading Java:
[] Go to this site and click Do I have Java
[] It will check your current version and then offer to update to the latest version
SPRING CLEAN
To manually create a new Restore Point
[*]Go to Control Panel and select System
[*]Select System
[*]On the left select System Protection and accept the warning if you get one
[*]Select System Protection Tab
[*]Select Create at the bottom
[*]Type in a name i.e. Clean
[*]Select Create
Now we can purge the infected ones
[*]GoStart > All programs > Accessories > system tools
[*]Right click Disc cleanup and select run as administrator
[*]Select Your main drive and accept the warning if you get one
[*]For a few moments the system will make some calculations
[*]Select the More Options tab
[*]In the System Restore and Shadow Backups select Clean up
[*]Select Delete on the pop up
[]Select OK
[]Select Delete
Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:
http://img233.imageshack.us/img233/7729/mbamicontw5.gif
Malwarebytes. Update and run weekly to keep your system clean
Download and install FileHippo update checker and run it monthly it will show you which programmes on your system need updating and give a download link
It is critical to have both a firewall and anti virus to protect your system and to keep them updated. To keep your operating system up to date visit
To learn more about how to protect yourself while on the internet read our little guide How did I get infected in the first place ?
Keep safe 
Cleaned up OK.
Java updated.
Installed Malwarebytes.
Installed FileHippo - that’s handy, especially when the system was recovered from an old drive.
Updated lots of things.
Malwarewarebytes scan - clean.
There’s still lots of things every reboot on the Event Log to do with Peer Networking, but I will eventually get that sorted.
Thanks again.
Do you have an example event log for that error ?
Event Log from latest start attached.
The curious thing is my network is working fine, except for one wrinkle.
When Truecrypt “virtual drives” are mounted and made network shares, after the next reboot they are reset to Not Shared.
A feature “refresh network shares” would be good, like happens with removable hard drives that aren’t attached at startup.
OK could you do the following :
Copy C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetworking\idstore.sst to your desktop
Delete C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\PeerNetworking\idstore.sst
Reboot
If that does not resolve it then do the following :
Go to Control Panel\All Control Panel Items\HomeGroup
Select Trouble shoot and follow the prompts
Together they should cure the problem
I’ve done that already.
I was expecting the file to be rebuilt using idstore.sst.new , bit it is missing (not hidden).
The troubleshooter first checks network diagnostics and finds PNRPsvc was not running and couldn’t be started.
It then goes on to Homegroup diagnostics, and finds the same thing.
No other problems identified.
I have downloaded PNRP.txt (.reg) from https://avnzfa.bay.livefilestore.com/y1pOKvfZXsDi-RaNYFFHRfNE6cY2d6jHkipSJ7iU6WdNI-wqc2NPIJvjDXWHJQLy8h5O6uekU-1xwyfQ8F2hsSw8g/PRNP.txt?download&psid=1
linked from https://skydrive.live.com/?cid=6df3bca839e981ef&id=6DF3BCA839E981EF!134
but I am reluctant to apply that because I am not sure that is my problem.
Meanwhile if I right-click on the target folder on virtual drive and click Share With > Homegroup read/write
it gets around the problem, although it is not automatic.