Location of XP restart chkdsk log file.

You can find the report in the event viewer as a "Winlogon" event.  I can't remember right now if it is application or system. System I believe.

I only found an application in \WINDOWS\system32. What good does that do me?

Sorry, you need to be in the event viewer, not looking for the actual winlogon program.

Go to Start>Settings>Control Panel or just Start>Control Panel depending on which view you are using.  Then, if using the new view in XP go to Performance and monitoring>Administrative Tools or if in classic view, just click on Administrative tools.  Then start the Event Viewer.  I believe it is a winlogon event source, but check all of the logs for the time you previously ran chkdsk and it should give you a report.  I'll try running a chkdsk now and make any changes if it is not.

The event should look something like this.

Event Type:      Information
Event Source:      Winlogon
Event Category:      None
Event ID:      1001
Date:            2/29/2004
Time:            11:44:36 PM
User:            N/A
Computer:      ******
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is WinXPSP2.


A disk check has been scheduled.
Windows will now check the disk.                        
Cleaning up minor inconsistencies on the drive.
Cleaning up 127 unused index entries from index $SII of file 0x9.
Cleaning up 127 unused index entries from index $SDH of file 0x9.
Cleaning up 127 unused security descriptors.

  10265503 KB total disk space.
   4754412 KB in 32877 files.
     10060 KB in 1211 indexes.
         0 KB in bad sectors.
     89135 KB in use by the system.
     53376 KB occupied by the log file.
   5411896 KB available on disk.

      4096 bytes in each allocation unit.
   2566375 total allocation units on disk.
   1352974 allocation units available on disk.

Internal Info:
60 88 00 00 33 85 00 00 62 be 00 00 00 00 00 00  `...3...b.......
45 00 00 00 00 00 00 00 9c 01 00 00 00 00 00 00  E...............
ae a6 8f 02 00 00 00 00 62 5a b1 0f 00 00 00 00  ........bZ......
34 b5 ff 02 00 00 00 00 00 00 00 00 00 00 00 00  4...............
00 00 00 00 00 00 00 00 f6 51 14 1c 00 00 00 00  .........Q......
90 12 07 ce 00 00 00 00 90 12 07 ce 00 00 00 00  ................
6d 80 00 00 00 00 00 00 00 b0 2f 22 01 00 00 00  m........./"....

Windows has finished checking your disk.
Please wait while your computer restarts.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Is this telling me that Windows found three bad files (urgent.gif, Al-RoboForm Plug-In,AL-ROB~1) and recovered them? Did I loose anything else?

Event Type:      Information
Event Source:      Winlogon
Event Category:      None
Event ID:      1001
Date:            2/28/2004
Time:            8:00:05 PM
User:            N/A
Computer:      KEITH
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is System Disk.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                        
Cleaning up instance tags for file 0x64fc.
The USA check value, 0x0, at block 0x3 is incorrect.
The expected value is 0x26f.
The multi-sector header signature in file 0x6b1c is incorrect.
42 41 41 44 30 00 03 00 2d ad 2b 43 03 00 00 00  BAAD0...-.+C....
f8 d4 01 00 38 00 01 00 58 01 00 00 00 04 00 00  ....8...X.......
Deleting corrupt file record segment 27420.
The USA check value, 0x1c3, at block 0x3 is incorrect.
The expected value is 0x248.
The multi-sector header signature in file 0x12f3c is incorrect.
42 41 41 44 30 00 03 00 67 0b 04 dd 04 00 00 00  BAAD0...g.......
9d cb 02 00 38 00 03 00 d0 02 00 00 00 04 00 00  ....8...........
Deleting corrupt file record segment 77628.
Index entry urgent.gif of index $I30 in file 0x6823 points to unused file 0x6b1c.
Deleting index entry urgent.gif in index $I30 of file 26659.
Index entry Al-RoboForm Plug-In of index $I30 in file 0x12f37 points to unused file 0x12f3c.
Deleting index entry Al-RoboForm Plug-In in index $I30 of file 77623.
Index entry AL-ROB~1 of index $I30 in file 0x12f37 points to unused file 0x12f3c.
Deleting index entry AL-ROB~1 in index $I30 of file 77623.
Cleaning up minor inconsistencies on the drive.
CHKDSK is recovering lost files.
Cleaning up 112 unused index entries from index $SII of file 0x9.
Cleaning up 112 unused index entries from index $SDH of file 0x9.
Cleaning up 112 unused security descriptors.
Correcting errors in the master file table's (MFT) BITMAP attribute.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

  45022130 KB total disk space.
  30408912 KB in 100383 files.
     31812 KB in 7208 indexes.
         0 KB in bad sectors.
    176982 KB in use by the system.
     65536 KB occupied by the log file.
  14404424 KB available on disk.

      4096 bytes in each allocation unit.
  11255532 total allocation units on disk.
   3601106 allocation units available on disk.

Internal Info:
43 ab 01 00 51 a4 01 00 b9 3f 02 00 00 00 00 00  C...Q....?......
7b 04 00 00 00 00 00 00 c1 01 00 00 00 00 00 00  {...............
20 23 db 03 00 00 00 00 20 69 73 50 00 00 00 00   #...... isP....
30 65 04 04 00 00 00 00 00 00 00 00 00 00 00 00  0e..............
00 00 00 00 00 00 00 00 c0 ec 4a 60 00 00 00 00  ..........J`....
99 9e 36 00 00 00 00 00 1f 88 01 00 00 00 00 00  ..6.............
00 40 03 40 07 00 00 00 28 1c 00 00 00 00 00 00  .@.@....(.......

Windows has finished checking your disk.
Please wait while your computer restarts.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.