Jump to content

Return to Piriform.com

Photo

Disk errors after running Defraggler


  • Please log in to reply
12 replies to this topic

#1 OFFLINE Wooops

Wooops

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 13 May 2011 - 10:35 PM

Hello everyone, I need a fast reply! I had just unlocked with unlocker a removable drive in XP and Defraggler got freezed but is still desfragmenting. So how can I terminate it without damaging the files is currently reallocating??? I can't access to it's window, so what should I do??

Thanks!!

#2 OFFLINE DennisD

DennisD

    Member

  • Moderators
  • 10,011 posts
  • Gender:Male
  • Location:England: NE Coast

Posted 14 May 2011 - 02:22 PM

Defraggler is written to cope with situations such as power cuts, system crashes etc., so terminating it at any time should not have any adverse effect.

http://www.piriform....-is-safe-to-use

You can terminate it using Task Manager.

Hope that helps.

#3 OFFLINE Wooops

Wooops

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 14 May 2011 - 05:49 PM

Thank you! unfortunatelyI already tried entering into sleep mode... when I restarted the session the monitor was black.. so finally I had to reset :S and now Defraggler detects errors in the drive :S

#4 OFFLINE DennisD

DennisD

    Member

  • Moderators
  • 10,011 posts
  • Gender:Male
  • Location:England: NE Coast

Posted 15 May 2011 - 05:22 PM

Hi Wooops.

Some defraggers are designed to prevent the activation of sleep mode while they are operating, but as far as I know, and as you have appeared to find out, Defraggler isn't one of them.

Therefore I can't say what the outcome of Defraggler being interrupted by "sleep mode" would be.

Regarding the errors flagged by Defraggler, give "CheckDisk" a run, which may sort them out. To do that in XP using the simple Windows Explorer GUI method, follow the instructions a little way down this page ...

How to run Chkdsk from My Computer or from Windows Explorer

http://support.microsoft.com/kb/315265


Or use the command line method if you're comfortable with that.

#5 OFFLINE Wooops

Wooops

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 15 May 2011 - 06:59 PM

Thank you DennisD! I ran scandisk on startup and it reported this:

Tipo de suceso:	Información
Origen del suceso:	Winlogon
Categoría del suceso:	Ninguno
Id. suceso:	1001
Fecha:		14/05/2011
Hora:		19:52:23
Usuario:		No disponible
Equipo:	PC
Descripción:
Comprobando el sistema de archivos en C:
El tipo del sistema de archivos es NTFS.

Se ha programado una comprobación del disco.
Windows comprobará ahora el disco.                                         
Limpiar incoherencias sin importancia en la unidad.
Liberando 120 entradas de índice no usadas del índice $SII del archivo 0x9.
Liberando 120 entradas de índice no usadas del índice $SDH del archivo 0x9.
Liberando 120 descriptores de seguridad no usados.
CHKDSK está comprobando el diario USN...
Se ha completado la comprobación del diario USN.
CHKDSK está comprobando los datos de archivo (etapa 4 de 5)...
Comprobación de datos de archivo terminada.
CHKDSK está comprobando el espacio disponible (etapa 5 de 5)...
La comprobación de espacio libre se ha completado.
CHKDSK ha encontrado espacio libre marcado como asignado en el
mapa de bits de la tabla maestra de archivos (MFT).
Windows ha hecho algunas correciones en el sistema de archivos.

 104936548 KB de espacio total en disco.
 103150472 KB en 201048 archivos.
     87380 KB en 22193 índices.
         0 KB en sectores defectuosos.
    397436 KB en uso por el sistema.
El archivo de registro ha ocupado      65536 kilobytes.
   1301260 KB disponibles en disco.

      4096 bytes en cada unidad de asignación.
  26234137 unidades de asignación en disco en total.
    325315 unidades de asignación disponibles en disco.

Información interna:
40 5b 04 00 15 68 03 00 9d a2 05 00 00 00 00 00  @[...h..........
e7 06 00 00 04 00 00 00 2d 03 00 00 00 00 00 00  ........-.......
c8 17 a8 04 00 00 00 00 16 7e 0b 56 00 00 00 00  .........~.V....
ca 21 cf 03 00 00 00 00 c4 4e f1 63 06 00 00 00  .!.......N.c....
5e 8c 26 35 00 00 00 00 e0 fd 8b 02 07 00 00 00  ^.&5............
99 9e 36 00 00 00 00 00 40 3a 07 00 58 11 03 00  ..6.....@:..X...
00 00 00 00 00 20 ce 97 18 00 00 00 b1 56 00 00  ..... .......V..
It's in spanish but if needed I will translate them.

Afterwards I ran again defraggler to check the drive and it returned again an error.
Checked the event viewer and noticed two errors on the system
Tipo de suceso:	Error
Origen del suceso:	sr
Categoría del suceso:	Ninguno
Id. suceso:	1
Fecha:		14/05/2011
Hora:		17:37:49
Usuario:		No disponible
Equipo:	PC
Descripción:
El filtro de Restaurar sistema encontró el error inesperado "0xC0000056" mientras procesaba el archivo "oembios.bin.new" en el volumen "HarddiskVolume1". Se ha detenido la supervisión del volumen.

Para obtener más información, vea el Centro de ayuda y soporte técnico en http://go.microsoft.com/fwlink/events.asp.
Datos:
0000: 04 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Tipo de suceso:	Error
Origen del suceso:	sr
Categoría del suceso:	Ninguno
Id. suceso:	1
Fecha:		15/05/2011
Hora:		0:34:57
Usuario:		No disponible
Equipo:	PC
Descripción:
El filtro de Restaurar sistema encontró el error inesperado "0xC0000056" mientras procesaba el archivo "gm.dls.new" en el volumen "HarddiskVolume1". Se ha detenido la supervisión del volumen.

Para obtener más información, vea el Centro de ayuda y soporte técnico en http://go.microsoft.com/fwlink/events.asp.
Datos:
0000: 04 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

So I cleaned all restore points and temp files, still Defraggler detected an error. I set the assigned space for system restore to "0" mb and Defraggler reported that it didn't detect any major errors... If I re-enable system restore I get errors from the event viewer and from defraggler again...

Therefore I can't say what the outcome of Defraggler being interrupted by "sleep mode" would be.

uh what's the worst thing that could happen, data corruption of files being reallocated? If so any way I can detect them (more concerned about my personal data rather than my system)...

Thanks DennisD again for all the help, very appreciated.

#6 OFFLINE DennisD

DennisD

    Member

  • Moderators
  • 10,011 posts
  • Gender:Male
  • Location:England: NE Coast

Posted 16 May 2011 - 08:52 AM

A translation would help, as would some input from our more technical guys which is why I've moved your problem to its own thread.

In the meantime, I'll check out further the error number shown in your post above ...

"0xC0000056"

... it does seem to appear in quite a few System Restore problems.

Edited by DennisD, 16 May 2011 - 09:24 AM.


#7 OFFLINE Wooops

Wooops

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 18 May 2011 - 10:54 PM

A translation would help, as would some input from our more technical guys which is why I've moved your problem to its own thread.

Thanks again, yes it makes more sense.
Hopefully someone can tell if I should worry / if there is any chance of corrupted files, and if there is how can I find/know which ones are corrupted.

Here are the translated reports

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.
Cleaning up minor inconsistencies on the drive.
Cleaning up 120 unused index entries from index $SII of file 0x9.
Cleaning up 120 unused index entries from index $SDH of file 0x9.
Cleaning up 120 unused security descriptors.

USN diary and file system check finished.
CHKDSK has found free space marked as assigned in the bit map of the master table of files (MFT).
Windows has done some corrections in the file system.

 104936548 KB total disk space.
 103150472 KB in 70499 files.
 87380 KB in 26948 indexes.
 0 KB in bad sectors.
 397436 KB in use by the system.
 65536 KB occupied by the log file.
 1301260 KB available on disk.



4096 bytes in each allocation unit.
26234137 total allocation units on disk.
325315 allocation units available on disk.

Internal Info:
40 5b 04 00 15 68 03 00 9d a2 05 00 00 00 00 00  @[...h..........
e7 06 00 00 04 00 00 00 2d 03 00 00 00 00 00 00  ........-.......
c8 17 a8 04 00 00 00 00 16 7e 0b 56 00 00 00 00  .........~.V....
ca 21 cf 03 00 00 00 00 c4 4e f1 63 06 00 00 00  .!.......N.c....
5e 8c 26 35 00 00 00 00 e0 fd 8b 02 07 00 00 00  ^.&5............
99 9e 36 00 00 00 00 00 40 3a 07 00 58 11 03 00  ..6.....@:..X...
00 00 00 00 00 20 ce 97 18 00 00 00 b1 56 00 00  ..... .......V..

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 15/05/2011
User: Not avaliable
Computer: PC
Description:
The System Restore filter encountered the unexpected error "0xC0000056" while processing the file "oembios.bin.new" in the volume "HarddiskVolume1". The supervision of the volume has stopped.
Data:
0000: 04 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
User: Not avaliable
Computer: PC
Description:
The System Restore filter encountered the unexpected error "0xC0000056" while processing the file "gm.dls.new" in the volume "HarddiskVolume1". The supervision of the volume has stopped.
Data:
0000: 04 00 00 00 04 00 4e 00   ......N.
0008: 00 00 00 00 01 00 00 c0   .......À
0010: 00 00 00 00 00 00 00 00   ........
0018: 00 00 00 00 00 00 00 00   ........
0020: 00 00 00 00 00 00 00 00   ........

Thank you.

#8 OFFLINE hazelnut

hazelnut

    try to stay calm

  • Moderators
  • 12,627 posts
  • Gender:Female
  • Location:Huddersfield uk

Posted 19 May 2011 - 12:48 AM

Found an old thread here from another forum it seems to be what you are experiencing. perhaps you could give the 'radio button' fix a try.

http://www.pcreview....le-t622664.html

What service pack do you have by the way?
CCLEANER, RECUVA, DEFRAGGLER AND SPECCY DOCUMENTATION CAN BE FOUND HERE

http://www.piriform.com/docs

#9 OFFLINE DennisD

DennisD

    Member

  • Moderators
  • 10,011 posts
  • Gender:Male
  • Location:England: NE Coast

Posted 21 May 2011 - 11:42 AM

Good find hazel.

I'll wait and see if that link does the trick before I make another suggestion.

#10 OFFLINE Wooops

Wooops

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 22 May 2011 - 11:12 PM

Hello hazel, I've service pack 3 and hum it doesn't seem to be any 'radio button' (maybe that's in older service packs), anyway I disabled completely system restore and restarted the computer. I haven't got more "0xC0000056" errors though Defraggler still reports that the drive fails the verification if system restore is enabled.

What worries me more than system restore is what does this error means:
"CHKDSK discovered free space marked as allocated in the volume bitmap (MFT)." (I guess this is a better translation...)

From Microsoft:

NTFS File System Corruption
In very rare circumstances, the NTFS $MFT or $BITMAP metafiles may become corrupted and result in lost disk space. To identify and fix this issue, run the chkdsk /F command against the volume in question. Toward the end of chkdsk process, you receive the following message if the $BITMAP metafile needs to be adjusted:
Correcting errors in the master file table's (MFT) BITMAP attribute. CHKDSK discovered free space marked as allocated in the volume bitmap. Windows has made corrections to the file system.

Should I be concerned about possible corruption of some files?
Thank you.

#11 OFFLINE DennisD

DennisD

    Member

  • Moderators
  • 10,011 posts
  • Gender:Male
  • Location:England: NE Coast

Posted 23 May 2011 - 06:59 AM

There's a lot of information out there which you can find by googling ...

CHKDSK discovered free space marked as allocated in the volume bitmap (MFT):

I'm not suggesting that's what you should have done, simply stating how many results came up when I started researching your problem.

One thing I discovered was that the issue could have already been there, and Defraggler simply picked it up, and it could possibly be a false positive result by chkdsk, which can happen.

An interesting, very brief piece of advise from Microsoft TechNet in line with this ...

http://technet.micro...y/cc975391.aspx

In other words, you're data may not be at risk at all, and you've lived quite happily with that reported error.

I'll let you have a trawl through the rest of the results of that google search, which is easier than me picking out what may be the most relevant and linking you just to those entries, and in the meantime if any of the members have any experience of this issue I'm sure they'll contribute.

Come back of course if you don't get any joy as there may be other suggestions or ideas.


EDIT: Do you do any "backing up" of your data and/or system drive by the way?

#12 OFFLINE Wooops

Wooops

    Newbie

  • Members
  • Pip
  • 9 posts

Posted 28 May 2011 - 03:06 PM

Most likely is that everything is alright (as presented through google results - most cases and advices were that there was no problem however there were some others in unusual scenarios that actually have - not sure how this one aplicates/qualifies), now since I do have a backup a week old, I'm just trying to make sure that there are no corrupt files whatsoever. If there are, I may be able to replace them with the backup files. I've delayed the next back-up for this reason, if there are any corrupt files this would override the good copy in the backup.

So IMHO I prefer to check and put myself in the worst possible scenario at risk of being paranoid as far as it's not daunting.
If there were any corrupt files a simple size of files comparison would detect them?
If so FFS just introduced this functionality so it would take only some minutes. Another option could be to do a content comparison bit-by-bit but that would take me some days... And I would have to filter may updated files/by differences in the modification date that would naturally have different size/content.

If you tell me there's no chance of corrupt files, I won't do any further check.

#13 OFFLINE DennisD

DennisD

    Member

  • Moderators
  • 10,011 posts
  • Gender:Male
  • Location:England: NE Coast

Posted 30 May 2011 - 11:13 AM

Hi Wooops.

It would be really foolish of me to tell you something like that, as it's an error I haven't came across before, and I suspect it's an error the other guys on here haven't seen before otherwise there would have been some positive input from any who had.

What I can say is that I've been trying to find some kind of answer that may give you piece of mind.

Firstly, the initial error you placed in quotes above, and the one that bothers you ...

CHKDSK has found (MFT).
Windows has done some corrections in the file system.


... probably contains the best solution you could get for that issue ...

Windows has done some corrections in the file system.


... I'm not a techie, but it would seem that Windows has put that right as far as it can be put right.

The other errors involving problems with two files, "oembios.bin.new" and "gm.dls.new", suggest that there may be or may have been problems with the two original files "oembios.bin" and "gm.dls".

What kind of problem resulted in the creation of two files carrying the .new extension I have no idea, although some googling may provide that answer.

It's possible those two files may have been corrupted, resulting in the .new variety being created. Those two files may be cause of the error report, and I wonder what would be the result of a search for those files.

I'm sorry I can't give you anything better, but it would need some one with experience of that problem, and subsequently what they did to fix things to give you something more positive. Personally, I would do a search for those two files and find out what I could as to what they are.

Regarding the "free space marked as assigned .." issue, I would personally just accept that Windows has corrected that and carry on as normal. But that decision has to be yours based upon the information you have.

Post back of course if you find anything positive, or if you want to discuss things further.

Hoping that helps.


EDIT: "gm.dls" is general MIDI collection of DLS instruments for Microsoft DirectMusic Producer.

http://www.h-desk.co...de=quote&p=5783

"oembios.bin" is part of the Windows Activation procedure containing mobo specific BIOS string info. The files are part of the corporate license.

http://www.techsuppo...html#post798021