Weird CHKDSK Output?

  • Thread starter Kristan Kenney [Nighthawk]
  • Start date
K

Kristan Kenney [Nighthawk]

NOTE: I've cross posted this because I'm not quite sure where the heck a
problem like this would go...

I've been doing alot of research into this and I can't tell if this is
really a problem or if this is one of those informal messages that I should
just ignore.

This issue is occuring on all of my computers, which are all running Windows
XP Service Pack 2.

When I run chkdsk /f in Windows XP on the boot volume, I am prompted to
reboot so CHKDSK can run. When CHKDSK runs on reboot, it finds no errors.
However, when reviewing the Event Viewer "Application" log, I noticed a
Winlogon entry for running CHKDSK. The contents of it have me a bit worried:

----

Cleaning up minor inconsistencies on the drive.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.

----

The number "2" varies every time CHKDSK is run, but it's the same message -
on one computer, "Cleaning up minor inconsistencies on the drive." doesn't
always show up.

Any help would be greatly appreciated!
 
W

Wesley Vogel

Those are the results from the chkdsk.exe log (Bootex.log).

Event ID: 1001
Source: Winlogon
[[Description: This includes file system type; drive letter or GUID, and
volume name or serial number to help determine what volume Chkdsk ran
against. Also included is whether Chkdsk ran because a user scheduled it or
because the dirty bit was set.]]

[[When Autochk runs against a volume at boot time it records its output to a
file called Bootex.log in the root of the volume being checked. The Winlogon
service then moves the contents of each Bootex.log file to the Application
Event log.]]

[[This file states whether Chkdsk encountered any errors and, if so,
whether they were fixed.]]

It is housecleaning and housecleaning is going to happen if you run
chkdsk.exe. Think Merry Maids with brooms. None of these are of any
concern.
Cleaning up minor inconsistencies on the drive.

[[In the above error message, "minor inconsistencies" refers to a state
where redundant information stored in different places is "out of synch."
This is a natural and expected condition whenever there are open files on
the volume that have undergone modification. The redundant information is
not brought into synchronization until the files are closed. Typically, this
error message occurs when CHKDSK is run against the volume containing
Windows NT system files (including active user profiles and the pagefile).

WORKAROUND
You can usually safely ignore this error message even if the message appears
without there being open files, because it is only the redundant information
that is out of synchronization. The only side effect you may see as a result
of this message is an incorrect reading of free disk space or something
similar. ]]
from...
"CHKDSK detected minor inconsistencies" error message in Windows 2000 and in
Windows NT
http://support.microsoft.com/kb/109524
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.

[[Chkdsk.exe reports only unused index and security descriptor entries that
were removed. ]]
[[Chkdsk.exe just reclaims the unused security descriptors as a housekeeping
activity, and it does not actually fix any kind of problem. ]]
from...
Windows 2000 Chkdsk Reports Cleaning Unused Security Descriptors
http://support.microsoft.com/kb/255008
Cleaning up 2 unused security descriptors.

[[When you delete a file or folder with permissions that you've set by hand
rather than allowed to be automatically inherited from its parent, the ACL
(Access Control List, the security descriptor) isn't deleted, but cached.
Running CHKDSK against these "dead" items cleans up the ACLs that are no
longer in use and frees up space. ]]
from...
Tip: Don't Panic At CHKDSK "Security Descriptor" Cleanup
http://www.winmag.com/columns/powerw2k/2000/46.htm#tip

[[This problem occurs because if Chkdsk is run against an NTFS volume,
Chkdsk.exe may report that security descriptors are in the database that are
no longer referenced by any file or folder and that it is removing them.
However, Chkdsk.exe just reclaims the unused security descriptors as a
housekeeping activity, and it does not actually fix any kind of problem. ]]
from...
Windows 2000 Chkdsk Reports Cleaning Unused Security Descriptors
http://support.microsoft.com/kb/255008

See also...
Understanding what CHKDSK does
http://support.microsoft.com/kb/314835/en-us#XSLTH3154121123120121120120

From...
An explanation of the new /C and /I Switches that are available to use with
Chkdsk.exe
http://support.microsoft.com/kb/314835

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
K

Kristan Kenney [Nighthawk]

Thanks for all the information, it helps alot! I'm curious though, in one of
the KB articles it explains how CHKDSK removes in-use security descriptors
in certain conditions (IE: A whole LOT of files - I only have about 60,000
files - not 4,000,000), so I'm assuming it's not removing anything too
important to my system then if im not meeting that criteria?

--
Kristan M. Kenney
"Nighthawk"
Windows Vista x86 Beta Tester
http://www.digitalfive.org


Wesley Vogel said:
Those are the results from the chkdsk.exe log (Bootex.log).

Event ID: 1001
Source: Winlogon
[[Description: This includes file system type; drive letter or GUID, and
volume name or serial number to help determine what volume Chkdsk ran
against. Also included is whether Chkdsk ran because a user scheduled it
or
because the dirty bit was set.]]

[[When Autochk runs against a volume at boot time it records its output to
a
file called Bootex.log in the root of the volume being checked. The
Winlogon
service then moves the contents of each Bootex.log file to the Application
Event log.]]

[[This file states whether Chkdsk encountered any errors and, if so,
whether they were fixed.]]

It is housecleaning and housecleaning is going to happen if you run
chkdsk.exe. Think Merry Maids with brooms. None of these are of any
concern.
Cleaning up minor inconsistencies on the drive.

[[In the above error message, "minor inconsistencies" refers to a state
where redundant information stored in different places is "out of synch."
This is a natural and expected condition whenever there are open files on
the volume that have undergone modification. The redundant information is
not brought into synchronization until the files are closed. Typically,
this
error message occurs when CHKDSK is run against the volume containing
Windows NT system files (including active user profiles and the pagefile).

WORKAROUND
You can usually safely ignore this error message even if the message
appears
without there being open files, because it is only the redundant
information
that is out of synchronization. The only side effect you may see as a
result
of this message is an incorrect reading of free disk space or something
similar. ]]
from...
"CHKDSK detected minor inconsistencies" error message in Windows 2000 and
in
Windows NT
http://support.microsoft.com/kb/109524
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.

[[Chkdsk.exe reports only unused index and security descriptor entries
that
were removed. ]]
[[Chkdsk.exe just reclaims the unused security descriptors as a
housekeeping
activity, and it does not actually fix any kind of problem. ]]
from...
Windows 2000 Chkdsk Reports Cleaning Unused Security Descriptors
http://support.microsoft.com/kb/255008
Cleaning up 2 unused security descriptors.

[[When you delete a file or folder with permissions that you've set by
hand
rather than allowed to be automatically inherited from its parent, the ACL
(Access Control List, the security descriptor) isn't deleted, but cached.
Running CHKDSK against these "dead" items cleans up the ACLs that are no
longer in use and frees up space. ]]
from...
Tip: Don't Panic At CHKDSK "Security Descriptor" Cleanup
http://www.winmag.com/columns/powerw2k/2000/46.htm#tip

[[This problem occurs because if Chkdsk is run against an NTFS volume,
Chkdsk.exe may report that security descriptors are in the database that
are
no longer referenced by any file or folder and that it is removing them.
However, Chkdsk.exe just reclaims the unused security descriptors as a
housekeeping activity, and it does not actually fix any kind of
problem. ]]
from...
Windows 2000 Chkdsk Reports Cleaning Unused Security Descriptors
http://support.microsoft.com/kb/255008

See also...
Understanding what CHKDSK does
http://support.microsoft.com/kb/314835/en-us#XSLTH3154121123120121120120

From...
An explanation of the new /C and /I Switches that are available to use
with
Chkdsk.exe
http://support.microsoft.com/kb/314835

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
Kristan Kenney said:
NOTE: I've cross posted this because I'm not quite sure where the heck a
problem like this would go...

I've been doing alot of research into this and I can't tell if this is
really a problem or if this is one of those informal messages that I
should just ignore.

This issue is occuring on all of my computers, which are all running
Windows XP Service Pack 2.

When I run chkdsk /f in Windows XP on the boot volume, I am prompted to
reboot so CHKDSK can run. When CHKDSK runs on reboot, it finds no errors.
However, when reviewing the Event Viewer "Application" log, I noticed a
Winlogon entry for running CHKDSK. The contents of it have me a bit
worried:

----

Cleaning up minor inconsistencies on the drive.
Cleaning up 2 unused index entries from index $SII of file 0x9.
Cleaning up 2 unused index entries from index $SDH of file 0x9.
Cleaning up 2 unused security descriptors.

----

The number "2" varies every time CHKDSK is run, but it's the same message
- on one computer, "Cleaning up minor inconsistencies on the drive."
doesn't always show up.

Any help would be greatly appreciated!

--
Kristan M. Kenney
"Nighthawk"
Windows Vista x86 Beta Tester
http://www.digitalfive.org
 
S

Sharon F

Thanks for all the information, it helps alot! I'm curious though, in one of
the KB articles it explains how CHKDSK removes in-use security descriptors
in certain conditions (IE: A whole LOT of files - I only have about 60,000
files - not 4,000,000), so I'm assuming it's not removing anything too
important to my system then if im not meeting that criteria?

Security descriptors are markers regarding access rights and permissions.
Simplified example: If a user deletes a file or folder, its corresponding
security descriptors are no longer valid or needed. Chkdsk cleans them up.
 
K

Kristan Kenney [Nighthawk]

Thanks for all your help! I was getting a bit paranoid there for a while
that my hard drive was dying or something, as this is my third Western
Digital WD1600-JB in my main machine, the two previous ones failed within 60
days. So far so good with this one, got it from a different store.

Have a great day!
 
S

Sharon F

Thanks for all your help! I was getting a bit paranoid there for a while
that my hard drive was dying or something, as this is my third Western
Digital WD1600-JB in my main machine, the two previous ones failed within 60
days. So far so good with this one, got it from a different store.

Have a great day!

You're most welcome, Kristan!
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top