Check disk on startup

T

Tim C

I have a client running Windows XP Home. He was badly infested with
spyware, which I cleaned out. TCP/IP was not working properly, so I
reinstalled it. I upgraded him from XP SP1 to SP2.

Every time Windows starts up, it goes to the "check the consistency of one
of your drives" screen. It runs chkdsk. It finds an error and deletes a
"corrupt attribute." Windows then starts normally.

It does this at every startup, and appears to delete the same "corrupt
attribute" every time. It was doing this before my changes, fixes and
upgrades, and it continues to do so.

Any idea what is wrong and how to fix it?

Thanks,
Tim C
MCDST, MCSE
 
M

Malke

Tim said:
I have a client running Windows XP Home. He was badly infested with
spyware, which I cleaned out. TCP/IP was not working properly, so I
reinstalled it. I upgraded him from XP SP1 to SP2.

Every time Windows starts up, it goes to the "check the consistency of
one
of your drives" screen. It runs chkdsk. It finds an error and
deletes a
"corrupt attribute." Windows then starts normally.

It does this at every startup, and appears to delete the same "corrupt
attribute" every time. It was doing this before my changes, fixes and
upgrades, and it continues to do so.

Any idea what is wrong and how to fix it?
Try this:

http://support.microsoft.com/?kbid=316506 - Chkdsk Runs Each Time That
You Start Your Computer [Q316506]

And of course, I assume you checked the drive with a diagnostic utility
from the drive mftr.? So you know the drive is really healthy?

Malke
 
W

Will Denny

Hi

What is referenced in respect to the "corrupt attribute"? How did you
reinstall TCP/IP?

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups
 
R

R. McCarty

If the volume is marked "Dirty", then your reboot Chkdsk's will
likely continue, until you queue up a Chkdsk C: /R . Click Start,
Run (type) Chkdsk C: /R [Press Enter]. System will indicate that
disk cannot be locked - would you like to run at next Startup,
Press Y and then reboot.

Most likely something in the $MFT area is inconsistent.
 
T

Tim C

The the only description of the corrupt attribute was two numbers in
parenthesis. I did not write them down, but (160, 0) would be my first
guess.

The computer was using an APIPA address, and would display the message, "an
operation was attempted on something that is not a socket," whenever an
attempt was made to connect to a network. This was the third time I have
seen these symptoms on a spyware-infested machine, and following the
instructions in
http://support.microsoft.com/default.aspx?scid=kb;en-us;811259, I deleted
the registry keys
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Winsock and Winsock2.
I then went to Network Properties/Install/Protocol/Add/Have
Disk/C:\Windows\INF/OK/TCP/IP/OK to reinstall TCP/IP and recreate the
registry keys.

Tim C
 
W

Will Denny

Your posting should have gone to the OP, not me.

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups


R. McCarty said:
If the volume is marked "Dirty", then your reboot Chkdsk's will
likely continue, until you queue up a Chkdsk C: /R . Click Start,
Run (type) Chkdsk C: /R [Press Enter]. System will indicate that
disk cannot be locked - would you like to run at next Startup,
Press Y and then reboot.

Most likely something in the $MFT area is inconsistent.

Will Denny said:
Hi

What is referenced in respect to the "corrupt attribute"? How did you
reinstall TCP/IP?

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups
 
R

R. McCarty

Sorry about that - Will pay closer attention next time.

Will Denny said:
Your posting should have gone to the OP, not me.

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups


R. McCarty said:
If the volume is marked "Dirty", then your reboot Chkdsk's will
likely continue, until you queue up a Chkdsk C: /R . Click Start,
Run (type) Chkdsk C: /R [Press Enter]. System will indicate that
disk cannot be locked - would you like to run at next Startup,
Press Y and then reboot.

Most likely something in the $MFT area is inconsistent.

Will Denny said:
Hi

What is referenced in respect to the "corrupt attribute"? How did you
reinstall TCP/IP?

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups


I have a client running Windows XP Home. He was badly infested with
spyware, which I cleaned out. TCP/IP was not working properly, so I
reinstalled it. I upgraded him from XP SP1 to SP2.

Every time Windows starts up, it goes to the "check the consistency of
one of your drives" screen. It runs chkdsk. It finds an error and
deletes a "corrupt attribute." Windows then starts normally.

It does this at every startup, and appears to delete the same "corrupt
attribute" every time. It was doing this before my changes, fixes and
upgrades, and it continues to do so.

Any idea what is wrong and how to fix it?

Thanks,
Tim C
MCDST, MCSE
 
W

Will Denny

It seems to happen quite often - then the OP may not read the posting. I do
it every now & again!!

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups


R. McCarty said:
Sorry about that - Will pay closer attention next time.

Will Denny said:
Your posting should have gone to the OP, not me.

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups


R. McCarty said:
If the volume is marked "Dirty", then your reboot Chkdsk's will
likely continue, until you queue up a Chkdsk C: /R . Click Start,
Run (type) Chkdsk C: /R [Press Enter]. System will indicate that
disk cannot be locked - would you like to run at next Startup,
Press Y and then reboot.

Most likely something in the $MFT area is inconsistent.

Hi

What is referenced in respect to the "corrupt attribute"? How did you
reinstall TCP/IP?

--


Will Denny
MS-MVP Windows Shell/User
Please reply to the News Groups


I have a client running Windows XP Home. He was badly infested with
spyware, which I cleaned out. TCP/IP was not working properly, so I
reinstalled it. I upgraded him from XP SP1 to SP2.

Every time Windows starts up, it goes to the "check the consistency of
one of your drives" screen. It runs chkdsk. It finds an error and
deletes a "corrupt attribute." Windows then starts normally.

It does this at every startup, and appears to delete the same "corrupt
attribute" every time. It was doing this before my changes, fixes and
upgrades, and it continues to do so.

Any idea what is wrong and how to fix it?

Thanks,
Tim C
MCDST, MCSE
 
G

GTS

Tim,

Kelly's site provides a superb summary of troubleshooting advice (as
always), but I'd like to add one point. There are rare file system problems
with NTFS that chkdsk simply can't repair, usually involving a corrupt
attribute or index. I've serviced a few client machines where I was able
to stop the chkdsk running on bootup, but the problem would be reintroduced
if chkdsk were subsequently manually run (in the way of routine
maintenance), because there was actually a file system error that couldn't
be repaired. In the end there was no alternative but to do a full backup,
reformat the hard drive, and then restore. The only other option was to
live with suppressing the startup autocheck and then not being able to check
the disk ongoing, not an acceptable alternative in my view.

Note that in addition to the repairs already discussed, I tried slaving the
client's drive in a service machine and running chkdsk there with no
success.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top