Windows 10: My Norton AV tells me: "dm_log_collector.exe is not safe and has been

It was part of the package. Standard for that model I believe ... I'm sure I didn't have any options. Just thought it looked good ... high-end.

 

JDU, it does not appear the 100MB partition is used by the system. Are you installed in UEFI mode or Legacy? If you don't know, look in your boot options in Bios and tell me if you SSD is listed as boot device or if it says Windows Boot Manager. In any case that was not the system restore partition, it would house the boot files. In a legacy installed, it would be named System Reserved, in a UEFI Install it would be called EFI System Partition.

Please post a screenshot of disk management Disk Management - How to Post a Screenshot of

Also, please right click on the start flag, select Command Prompt (Admin) and copy/paste this in the window and let it run sfc /scannow
We want the results to say Windows found no integrity violations. If it says it found corrupt files but could not repair them, reboot and run it again. You may have to run it 3 times to get the desired results.

 

Also, make sure system protection is turned on for your C drive and make sure to allocate enough space for it. https://www.tenforums.com/tutorials/4...dows-10-a.html

 

Hello essenbe,

Without looking at my BIOS options I believe I can safely say this is not a UEFI install. This 4 year old computer came from HP with Windows 7 Pro installed. A month or so ago I moved all non system and program files (i.e. my personal files) from C:\ to the 2 partitions of the secondary 1 TB Hard Drive: E:\ & Z:\. Then my IT Guy installed the 250 GB SSD (Samsung) and using Samsung Magician Application imaged the SSD from the original Primary Hard Drive. From the factory the 100 MB partition (D:\) was named System Reserved. That was deleted before or after imaging the SSD. On my request it was attempted to remove the D:\ partition from the original Hard Drive to free-up that space for my use. A glitch (or misstep) deleted everything from the Hard Drive. Thus, everything was dragged-dropped back from the SSD except the System Reserved D:\ [I renamed that partition to "Data Q:"] since it was unusable by me.
-
Bottom line: I'm sure I have a Legacy install.

Sorry if that was more information than you needed. I'm trying to be as helpful as possible.

Screenshots of disk management and 2 System Protection views are attached. FWIW: I run Restore Points first thing every morning and before/after important events. e.g. after Windows Updates.

**************************************
run sfc /scannow:
Microsoft Windows [Version 10.0.10586]
(c) 2015 Microsoft Corporation. All rights reserved.

C:\WINDOWS\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\WINDOWS\system32>
********************

Best,
/jdU
-

 

JDF, Create and verify a good system Image of your SSD with Macrium. Create a restore point as well. Then Enable Driver Verifier https://www.tenforums.com/tutorials/5...dows-10-a.html
Please don't force a BSOD in your case, at least not yet. See how it runs first.

*YouTube video player

 

Hello essenbe,
Looks like an interesting approach ... but, might it actually take 24 hours (or stop it at 48 hours?)
I'd need to schedule that time and can I assume it will run okay unattended?
It rarely happens, but what if I have a power failure from the electric company? Re-image the disk from the Macrium image file?
Thanks
/jdU

 

If you have a power failure, it will be no different than usual. Your computer will shut down. All it is doing is putting additional stress on all non Microsoft drivers, everything else is pretty much the same. It is a reasonable assumption it is not a system file. That is what the DISM and sfc scans we did are supposed to check for. The sfc means System File Checker and is supposed to verify all protected system files and repair/replace any corrupted/missing files. It showed nothing wrong. It is not always correct, but usually is. So, we can reasonably assume it is a third party driver causing your problem.

Verifier will run until you turn it off. I recommend you run it for 24 hours but no more than 48 hours. Everything will still work just fine and you can do anything you want to do with your computer. You just may notice it being a little sluggish.

We created the image and restore point because rarely we have a driver so bad the computer will not boot under any circumstances. In that case we can use the restore point or the Macrium image to restore the system. That is an extremely rare circumstance, but better safe than sorry. I hope that answers your questions. But, again verifier will run until you turn it off, it will not automatically disable itself.

 

As we know, from Advanced Options I can't run System Restore. And when I reach this window, attached, I don't see Safe Mode specified. Perhaps it has a different name in Windows 10 (?).
-
I want to make sure I will have access to running a Restore Point or otherwise starting the computer. I always have a Macrium Rescue Disk, but ... (?)
Thx
/jdU

BTW: What's the maximum file size for an attachment?

 

safe mode is one of the recovery options https://www.tenforums.com/tutorials/2...a.html#option1

Max file size depends on file type. It is 2 MB for most files and 8 MB for zip files.

 

Trying Safe Mode failed. Attached. Is this normal as Administer? Doesn't sound right.

Do I need to set up a non-Administer user? Strange.
Thx
/jdU

 

No, that is not normal.

 

See if your account is corrupted, add another account https://www.tenforums.com/tutorials/5...dows-10-a.html

Then change it to an Administrator Account https://www.tenforums.com/tutorials/6...dows-10-a.html

set up dump files and system restore from it and use it and see if it works any better.

 

Short note: I'll have to 'practice' this. (Really) I've never had a 2 user machine. I gave it a try and set up a new local user, administrator. Then both users required passwords. NBD, but spent some time with netplwiz .... ending up restarting with my main user and got netplwiz to give me no pw required login.
-
That's when I noticed a strange blank space on my task bar. No calculator. Well, I found out it was really there but the icon was gone.
That's when I decided to Restore to this morning's Restore Point. All was good, but (of course) the 2nd user was gone.
Anyway, I can see 'something' isn't right with this machine, though - on the whole - Win 10 impresses me.
-
Moving on in the morning.
Thx
/jdU

 

If this additional user account does not work, I am pretty much out of ideas other than trying a repair install or better yet, a clean install. You are right, something is wrong. The X10 application we know is causing problems and history has shown that Norton is responsible for things such as this. How we proceed depends pretty much on if this new Admin account works for you. Also remember, a new account is not going to be set up exactly as the old account was. In theory, this account would be for a different user who may not want the same taskbar or desktop icons you have. It is a brand new account. If it works right, you will have to set it up as you would like it. Before going to that effort I would make sure your problems are resolved with the new account first.

 

Thanks, ... my thinking as well.
I'll be trying the new account again. I was a bit lost not having access to all the programs and files I'm used to have at my fingertips.
Indeed, my thanks go out to you.
Please stay tuned as I move through this learning curve.
I'll be back!
/jdU