W2K's event logs showed \\?\Volume{107944b6-439b-11d7-9e57-806d6172696f}? Failing HDD?
in [Storage]
|
Prev: W2K's event logs showed \\?\Volume{107944b6-439b-11d7-9e57-806d6172696f}?Failing HDD?
Next: Best SATA to IDE adapter.
From: Arno on 9 May 2010 21:47 Ant <ant(a)zimage.comant> wrote: > Hello. > I am fixing a client's old Dell Optiplex PC with updated Windows 2000 > SP4. Its event logs showed a bunch of "The device, > \Device\Harddisk0\DR0, has a bad block." like: [...] > Vendor Specific SMART Attributes with Thresholds: > ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE > UPDATED WHEN_FAILED RAW_VALUE > 3 Spin_Up_Time 0x0027 227 221 063 Pre-fail > Always - 5826 > 4 Start_Stop_Count 0x0032 253 253 000 Old_age > Always - 1454 > 5 Reallocated_Sector_Ct 0x0033 252 252 063 Pre-fail > Always - 9 > 6 Read_Channel_Margin 0x0001 253 253 100 Pre-fail > Offline - 0 > 7 Seek_Error_Rate 0x000a 253 252 000 Old_age > Always - 0 > 8 Seek_Time_Performance 0x0027 246 239 187 Pre-fail > Always - 35175 > 9 Power_On_Minutes 0x0032 239 239 000 Old_age > Always - 655h+56m > 10 Spin_Retry_Count 0x002b 253 252 157 Pre-fail > Always - 0 > 11 Calibration_Retry_Count 0x002b 253 252 223 Pre-fail > Always - 0 > 12 Power_Cycle_Count 0x0032 250 250 000 Old_age > Always - 1451 > 192 Power-Off_Retract_Count 0x0032 252 252 000 Old_age Always > - 1448 > 193 Load_Cycle_Count 0x0032 253 253 000 Old_age Always > - 3200 > 194 Temperature_Celsius 0x0032 253 253 000 Old_age Always > - 30 > 195 Hardware_ECC_Recovered 0x000a 253 252 000 Old_age Always > - 10331 > 196 Reallocated_Event_Count 0x0008 251 251 000 Old_age > Offline - 2 > 197 Current_Pending_Sector 0x0008 253 253 000 Old_age > Offline - 2 > 198 Offline_Uncorrectable 0x0008 252 251 000 Old_age > Offline - 1 > 199 UDMA_CRC_Error_Count 0x0008 199 199 000 Old_age > Offline - 0 > 200 Multi_Zone_Error_Rate 0x000a 253 252 000 Old_age Always > - 0 > 201 Soft_Read_Error_Rate 0x000a 253 252 000 Old_age Always > - 19 > 202 Data_Address_Mark_Errs 0x000a 253 251 000 Old_age Always > - 0 > 203 Run_Out_Cancel 0x000b 253 252 180 Pre-fail Always > - 63 > 204 Soft_ECC_Correction 0x000a 253 251 000 Old_age Always > - 0 > 205 Thermal_Asperity_Rate 0x000a 253 252 000 Old_age Always > - 0 > 207 Spin_High_Current 0x002a 253 252 000 Old_age Always > - 0 > 208 Spin_Buzz 0x002a 253 252 000 Old_age Always > - 0 > 209 Offline_Seek_Performnce 0x0024 188 187 000 Old_age > Offline - 0 > 99 Unknown_Attribute 0x0004 253 253 000 Old_age > Offline - 0 > 100 Unknown_Attribute 0x0004 253 253 000 Old_age > Offline - 0 > 101 Unknown_Attribute 0x0004 253 253 000 Old_age > Offline - 0 [...] > Those errors look bad. I also realized that this chkdsk was on a FAT > (not NTFS) and tiny. So I checked Disk Management and saw a no-letter > drive before C: -- > http://img243.imageshack.us/img243/4301/diskmanagement.jpg ... I can't > see what is in this tiny partition. :( > I did another chkdsk on C:. I saw no problems this time in the event > logs. Weird. > Is the drive failing from the SMART and symptoms? Thank you in advance. :( Impossible so say. It has some not yet reallocated bad sectors, which will cause problems until they have been written. On the other hand, 11 reallocated (including the 2 pending ones) may just be a sign of sectors that have not been written for a very long time. You may want to backup the disk, do a complete overwrite, run a long SMART selftest, and only if that fails throw it away. Otherwise it could run fine after reinstalling the backup for a few additional years. Arno -- Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno(a)wagner.name GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F ---- Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans
From: Ant on 10 May 2010 14:19 Thanks for the confirmation, Rod. :) I wanted to double check that the old HDD was indeed dying from SMART's long test results, chkdsk, and W2K's event logs. :) Yesterday afternoon, I did do a data backup just in case. I will do a full Ghost image soon, so I can restore to a working HDD. Do companies still sell new IDE HDDs these days? Or do I have to get a(n) used/old/refurbished one? -- /\___/\ Phil./Ant @ http://antfarm.ma.cx (Personal Web Site) / /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net | |o o| | \ _ / If crediting, then use Ant nickname and AQFL URL/link. ( ) If e-mailing, then axe ANT from its address if needed. Ant is currently not listening to any songs on this computer.
From: Franc Zabkar on 10 May 2010 17:14 On Sun, 09 May 2010 14:34:16 -0700, Ant <ant(a)zimage.comANT> put finger to keyboard and composed: >Read failure with status 0xc000009c at offset 0x183f600 for 0xd800 bytes. >Read failure with status 0xc000009c at offset 0x1847e00 for 0x800 bytes. > After command completion occurred, registers were: > ER ST SC SN CL CH DH > -- -- -- -- -- -- -- > 40 51 01 7e c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27e = 49790 > 40 51 25 3a c2 00 e0 Error: UNC 37 sectors at LBA = 0x0000c23a = 49722 > 40 51 01 7a c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27a = 49786 ISTM that the CHKDSK errors on the NTFS volume are correcting inconsistencies in the file system. However, the errors in the 31MB FAT volume appear to be flagging bad sectors. This is confirmed by the SMART error log in smartctl. The read failures at offsets 0x183f600 and 0x1847e00 occur at 25,425,408 bytes and 25,460,224 bytes, respectively. LBAs 49722 and 49790 occur at 25,457,664 and 25,492,480 bytes. These are located within the FAT partition. AFAIK, Dell uses a small, hidden, 32MB FAT volume for recovery purposes. If you examine the boot sector, you will probably find a reference to RECOVERY. The partition ID byte will probably be "DE", for DELL. You can see this with Microsoft's Sector Inspector: http://www.users.on.net/~fzabkar/SecInspect.zip Extract the above archive to the one folder and execute the SIrun.bat file. The procedure will generate a report file named SIout.txt. - Franc Zabkar -- Please remove one 'i' from my address when replying by email.
From: Ant on 10 May 2010 20:19 In comp.sys.ibm.pc.hardware.storage Franc Zabkar <fzabkar(a)iinternode.on.net> wrote: > On Sun, 09 May 2010 14:34:16 -0700, Ant <ant(a)zimage.comANT> put finger > to keyboard and composed: > >>Read failure with status 0xc000009c at offset 0x183f600 for 0xd800 bytes. >>Read failure with status 0xc000009c at offset 0x1847e00 for 0x800 bytes. > >> After command completion occurred, registers were: >> ER ST SC SN CL CH DH >> -- -- -- -- -- -- -- >> 40 51 01 7e c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27e = 49790 > >> 40 51 25 3a c2 00 e0 Error: UNC 37 sectors at LBA = 0x0000c23a = 49722 > >> 40 51 01 7a c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27a = 49786 > > > ISTM that the CHKDSK errors on the NTFS volume are correcting > inconsistencies in the file system. However, the errors in the 31MB > FAT volume appear to be flagging bad sectors. This is confirmed by the > SMART error log in smartctl. > > The read failures at offsets 0x183f600 and 0x1847e00 occur at > 25,425,408 bytes and 25,460,224 bytes, respectively. LBAs 49722 and > 49790 occur at 25,457,664 and 25,492,480 bytes. These are located > within the FAT partition. Thanks for confirming the failing/dying HDD. :) > AFAIK, Dell uses a small, hidden, 32MB FAT volume for recovery > purposes. If you examine the boot sector, you will probably find a > reference to RECOVERY. The partition ID byte will probably be "DE", > for DELL. > > You can see this with Microsoft's Sector Inspector: > http://www.users.on.net/~fzabkar/SecInspect.zip > > Extract the above archive to the one folder and execute the SIrun.bat > file. The procedure will generate a report file named SIout.txt. OK, I will check this tool out next time I am that PC. I tried it on a new Dell PC at work with 64-bit W7, but I don't think it works since it said error denied in its text file. Just wondering when I make an image backup. Do I assume I need both of these partitions onto a HDD replacement? Or can I just copy the W2K's C: drive? -- /\___/\ Phil./Ant @ http://antfarm.ma.cx (Personal Web Site) / /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net | |o o| | \ _ / If crediting, then use Ant nickname and AQFL URL/link. ( ) If e-mailing, then axe ANT from its address if needed. Ant is currently not listening to any songs on this computer.
From: Rod Speed on 11 May 2010 01:55
Ant wrote: > Thanks for the confirmation, Rod. :) I wanted to double > check that the old HDD was indeed dying from SMART's > long test results, chkdsk, and W2K's event logs. :) > Yesterday afternoon, I did do a data backup just in case. > I will do a full Ghost image soon, so I can restore to a working > HDD. Do companies still sell new IDE HDDs these days? Yes. But not that size anymore. > Or do I have to get a(n) used/old/refurbished one? Nope. |