Log on/Off File error

[Guest]

I thought I was having a problem with CHKDSK because, even after running it
from Recovery Console, when I would log on to Windows, NU 2002 would still
detect an error, and sure enough, when I restarted from the CD and used
Recovery Console to do another CHKDSK, it would detect and repair one or more
errors. I even did this 4 consecutive times: start from CD, Recovery
Console, run CHKDSK, exit and start Windows; and each time CHKDSK would find
and repair one or more errors.

However, today I started from the CD, etc. but this time I ran CHKDSK twice
without exiting and starting Windows in between. No errors the second time!
So it seems like CHKDSK is finding and fixing errors, but what is causing the
errors in the first place?

Below are details from Winlog files that I copied earlier:

OK, so here's what I've got so far ...

I am using XP Home SP2. My "C" drive is NTFS (or whatever the initials are);
non-partitioned; 120GB Samsung Serial ATA. I use Norton Uitilities 2002. I
normally defrag at 25% fragmented; but cannot do this when there is a disk
error flagged. I checked the Samsung site for a vendor disk scan utility, but
Samsung referred me to a third party site, "Data Advisor" and the description
of that utility said it was for FAT files only. I also have a Maxtor drive,
"F" on my system, and used their PowerMax to scan the Samsung drive. No
problems were reported. (But I'm sure a Maxtor program works properly on a
Samsung drive.)

Norton Disk Doctor report says:

SECURITY DESCRIPTORS STATUS
---------------------------

The 'Fix errors' checkbox was not checked.
Corrective actions indicated below were
not written to the disk.

Correcting errors in the Volume Bitmap.

Norton Disk Doctor found problems with the file system.
Run Norton Disk Doctor and check the Fix Errors option.
-----------------------
I've learned from this forum to use my Windows CD to run the Recovery
Console and from there to use CHKDSK. CHKDSK C: /R takes an average of 90
minutes (which in our househiold is not easy to get).

CHKDSK always indicates that it has found and fixed one or more errors. From
this forum I have also learned about the Event Viewer and WINLOGON files. So
the last time I did a CHKDSK, it reported:

Checking file system on \DosDevices\C:
The type of the file system is NTFS.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.
----------------

Each time I run CHKDSK I get a similar result, the only change in the
message is the number of "Unused ..." (has varied from 2 to 14). The $SII and
$SDH of file 0x9 is constant.

Having discovered the joys of the event viewer, I aslo notice a warning
which was occurring at each shut down: Userenv, Event 1517. I followed the
link in the Properties description window,
go.microsoft.com/fwlink/events.asp, which led me a fix for this particular
problem, UPHClean. I have installed that and it has fixed the Userenv problem
(which UPHClean attributes to svchost(748) and HKCU(0x278) not releasing
handles - or some such thing - I am out of my depth here.)

I have not had a chance to try CHKDSK since installing UPHClean, so can't
tell if the two issues might be connected in some way.

Thanks for help and interest in this.

David E

 

[Rick \Nutcase\ Rogers]

Hi David,

You're running in circles. Norton's disk utility and the native disk checker
use different patterns to check a disk, one will always see the work of the
other as being wrong. Use one or the other, but not both.

--
Best of Luck,

Rick Rogers, aka "Nutcase" - Microsoft MVP

Associate Expert - WindowsXP Expert Zone

Windows help - www.rickrogers.org

 

[David Candy]

These aren't actual errors. It's merely housekeeping that is not required. These are specifically applied permissions where the file (or the user of the file) has been deleted. It is not an error. Don't delete files with specific permissions if you don't want to see it.

 

[Guest]

OK, I'll take your word on that. Thanks.

What got me started on all this tho is that I wanted to defrag the drive;
and as long as these "errors" keep occuring, NU will not defrag the disk. Up
till this point I have had no problems with either CHKDSK resolving disk file
errors and NU defragging.

Any suggestions how to get everything back to the old normal?

David E

These aren't actual errors. It's merely housekeeping that is not required. These are specifically applied permissions where the file (or the user of the file) has been deleted. It is not an error. Don't delete files with specific permissions if you don't want to see it.