CHKDSK: unused index entries and security descriptors.

[Guest]

Every time I scan my disks (partitions) for errors, more of these types of
errors are found:

Cleaning up 928 unused index entries from index $SII of file 0x9.
Cleaning up 928 unused index entries from index $SDH of file 0x9.
Cleaning up 928 unused security descriptors.

This applies to all 4 of my partitions on one disk, plus 2 partitions on
another disk when it is connected.
CHKDSK may be fixing stuff, but the problems keep arising! What on earth is
going on?
What do these security descriptors do? Do they have anything to do with my
not using Simple File Sharing?

For those of you who haven't seen these messages before, these are generated
when scanning the partitions at boot time, and the logs are viewed with Event
Viewer under Application with the Source "Winlogon". (Event Viewer is found
by going to My Computer \ Manage \ Computer Management \ System Tools \ Event
Viewer.)


Also of interest in Event Viewer under System are entries with the Source
"disk".
In the last 10 days, I've seen:
The device, \Device\Harddisk3\D, has a bad block. 10 times and
The device, \Device\Harddisk4\D, has a bad block. 1 time.

This is really disconcerting. I have used various disk testing programs,
many running from boot floppy disks, and these haven't been able to fault the
hardware, only the NTFS File System.

I'm running Windows XP Professional with SP2, fully patched.
I've also tried running System File Checker (sfc /scannow) to try to ensure
that the operating system's files haven't become corrupted.


Gerry has already shown me that the problem isn't related to
http://support.microsoft.com/default.aspx/kb/831374/en-us
because each of my partitions doesn't have more than 4,194,303 files, or a
master file table larger than 4 gigabytes (GB).

I hate not being able to trust nor fix my file system. I'm hoping I don't
need to trash the whole installation and start from scratch. I'm out of
ideas. Any help?

 

[Zoidberg]

Right about now I'd be buying Symantec Ghost and a new hard drive or
two.

You *could* try replacing the ribbon cable/s to the drive/s to ensure
that isn't the problem first, however in my experience that is not
very likely.

-Martin

Every time I scan my disks (partitions) for errors, more of these types of
errors are found:

--- Snip ---

 

[Gerry]

Martin

Unless I have been fed misinformation you may find Ghost is no longer
supported by Symantec!

--



Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Gerry]

Stephen

I would try HD Tune (freeware).
Download and run it and see what it turns up.
http://www.hdtune.com/

Select the Info tabs and place the cursor on the drive under Drive
letter and then double click the two page icon ( copy to Clipboard )
and copy into a further message.

Select the Health tab and then double click the two page icon ( copy
to Clipboard ) and copy into a further message. Also do a full surface
scan with HD Tune.



--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Ken Blake, MVP]

Martin

Unless I have been fed misinformation you may find Ghost is no longer
supported by Symantec!

Gerry, I think you're mistaken. See
http://www.symantec.com/themes/ghost/index.jsp?src=symsug_us

 

[Gerry]

Ken

I was passing on this misinformation "I called Symantec, "We don't
support Ghost 7.0 anymore, call Microsoft and get different Restore XP
software"."

Ghost 7.0 is now quite old but it may still be supported notwithstanding
what was said in XP Performance newsgroup today. There are, however, a
number of versions not supported. Symantec are dropping established
programmes with the advent of Vista e.g. Winfax Pro is the latest
casualty. Still my writing off Ghost may be premature. We shall see <G>!

--
Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Ken Blake, MVP]

Ken

I was passing on this misinformation "I called Symantec, "We don't
support Ghost 7.0 anymore, call Microsoft and get different Restore XP
software"."

Ghost 7.0 is now quite old but it may still be supported notwithstanding
what was said in XP Performance newsgroup today. There are, however, a
number of versions not supported. Symantec are dropping established
programmes with the advent of Vista e.g. Winfax Pro is the latest
casualty. Still my writing off Ghost may be premature. We shall see <G>!

*I* hope you're right. Writing off anything Symantec sounds good to
me.

 

[Tecknomage]

Ken

I was passing on this misinformation "I called Symantec, "We don't
support Ghost 7.0 anymore, call Microsoft and get different Restore XP
software"."

Ghost 7.0 is now quite old but it may still be supported notwithstanding
what was said in XP Performance newsgroup today. There are, however, a
number of versions not supported. Symantec are dropping established
programmes with the advent of Vista e.g. Winfax Pro is the latest
casualty. Still my writing off Ghost may be premature. We shall see <G>!

Ghost 7 and other old versions are not supported because Ghost 12 is
the current version.
http://www.symantec.com/home_homeoffice/products/overview.jsp?pcid=br&pvid=ghost12

 

[Tecknomage]

Every time I scan my disks (partitions) for errors, more of these types of
errors are found:

Cleaning up 928 unused index entries from index $SII of file 0x9.
Cleaning up 928 unused index entries from index $SDH of file 0x9.
Cleaning up 928 unused security descriptors.

This almost looks like the "lost chains" in a FAT system, but I'm not
sure.

This applies to all 4 of my partitions on one disk, plus 2 partitions on
another disk when it is connected.
CHKDSK may be fixing stuff, but the problems keep arising! What on earth is
going on?
What do these security descriptors do? Do they have anything to do with my
not using Simple File Sharing?

For those of you who haven't seen these messages before, these are generated
when scanning the partitions at boot time, and the logs are viewed with Event
Viewer under Application with the Source "Winlogon". (Event Viewer is found
by going to My Computer \ Manage \ Computer Management \ System Tools \ Event
Viewer.)


Also of interest in Event Viewer under System are entries with the Source
"disk".
In the last 10 days, I've seen:
The device, \Device\Harddisk3\D, has a bad block. 10 times and
The device, \Device\Harddisk4\D, has a bad block. 1 time.

How old are these hard drives?

This is an indication of a hardware problem, the hard drives
themselves, and cannot be corrected by software. Somehow blocks
(specific track-sector location) have become physically damaged.

Consider replacing these drives if they continue to give you problems.

In addition, the bad block problem _may_ be causing your other
problems _if_ the bad blocks contain index/security data.

 

[Gerry]

Any comments on this link?
http://service1.symantec.com/SUPPOR...db98b4fccddd9de585256ee500610bbb?OpenDocument


--
Regards.

Gerry
~~~~
FCA
Stourport, England
Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Guest]

Stephen

I would try HD Tune (freeware).
Download and run it and see what it turns up.
http://www.hdtune.com/

Select the Info tabs and place the cursor on the drive under Drive
letter and then double click the two page icon ( copy to Clipboard )
and copy into a further message.

Select the Health tab and then double click the two page icon ( copy
to Clipboard ) and copy into a further message. Also do a full surface
scan with HD Tune.

Hi Gerry,

Thanks for the tip. HD Tune is a useful utility!
Here are my test results (needs courier font ):


HD Tune: ST3200827AS Information

Firmware version : 3.AAE
Serial number : 4ND2YPAK
Capacity : 186.3 GB (~200.0 GB)
Buffer size : 8192 KB
Standard : ATA/ATAPI-7 - SATA II
Supported mode : UDMA Mode 6 (Ultra ATA/133)
Current mode : UDMA Mode 5 (Ultra ATA/100) <-- I will look into this

S.M.A.R.T : yes
48-bit Address : yes
Read Look-Ahead : yes
Write Cache : yes
Host Protected Area : yes
Device Configuration Overlay : yes
Automatic Acoustic Management: no
Power Management : yes
Advanced Power Management : no
Power-up in Standby : no
Security Mode : yes
Firmware Upgradable : yes

Partition : 1
Drive letter : C:\
Label : Grainger2 OS
Capacity : 19610 MB
Usage : 74.57%
Type : NTFS
Bootable : Yes

Partition : 2
Drive letter : D:\
Label : User Data
Capacity : 23532 MB
Usage : 78.23%
Type : NTFS
Bootable : No

Partition : 3
Drive letter : E:\
Label : Shared Data
Capacity : 86286 MB
Usage : 83.82%
Type : NTFS
Bootable : No

Partition : 4
Drive letter : F:\
Label : S200-log3
Capacity : 61341 MB
Usage : 58.85%
Type : NTFS
Bootable : No

Partition : 5
Drive letter :
Label :
Capacity : 7 MB
Usage : 0.00%
Type : unknown (78h)
Bootable : No


HD Tune: ST3200827AS Health

ID Current Worst ThresholdData
Status
(01) Raw Read Error Rate 108 92 6 17847001 Ok

(03) Spin Up Time 98 98 0 0 Ok

(04) Start/Stop Count 100 100 20 966 Ok

(05) Reallocated Sector Count 100 100 36 0 Ok

(07) Seek Error Rate 79 60 30 87041145 Ok

(09) Power On Hours Count 97 97 0 2751 Ok

(0A) Spin Retry Count 100 100 97 0 Ok

(0C) Power Cycle Count 100 100 20 1015 Ok

(BB) (unknown attribute) 100 100 0 0 Ok

(BD) (unknown attribute) 100 100 0 0 Ok

(BE) Airflow Temperature 61 48 45 690225191 Ok

(C2) Temperature 39 52 0 39 Ok

(C3) Hardware ECC Recovered 51 49 0 19606679 Ok

(C5) Current Pending Sector 100 100 0 0 Ok

(C6) Offline Uncorrectable 100 100 0 0 Ok

(C7) Ultra DMA CRC Error Count 200 200 0 0 Ok

(C8) Write Error Rate 100 253 0 0 Ok

(CA) TA Counter Increased 100 253 0 0 Ok


Power On Time : 2751
Health Status : Ok



HD Tune: ST3200827AS Error Scan

Scanned data : 190705 MB
Damaged Blocks : 0.0 %
Elapsed Time : 61:56


In summary, it seems that the hard disk is in good health. Wouldn't you
agree?
These results agree with the other hard drive diagnositcs that I have run,
so it seems that it is the OS installation which is a bit flakey. Any
further ideas on what I can do to fix it?

Incidentilly, the computer system was purchased in Sep '04, and this hard
disk and this installation of Windows XP Professional (Grainger2 OS) are both
exactly one year old.

 

[frodo]

Every time I scan my disks (partitions) for errors, more of these types of
this is completely normal, that's what chkdsk does in xp. Run chkdsk from
within the Recovery Console and that version of it will "unlink" the
unused entries rather than simply marking them as "free". either is just
fine, there is nothing wrong w/ your drive.

and yes, they will reappear, it's nothing to worry about.