Solved

How do i find a file that chkdsk says has a bad index entry

Posted on 2011-09-09
3
535 Views
Last Modified: 2012-05-12
Windows 2003 server suddenly getting a NTFS error (system event ID 55) requiring that chkdsk be run.  The process always gives 'deleting an index entry from index $0 of file 25". Then it inserts an index entry into the same file.   How can I tell which file 'file 25' is ?  No more info about that particular file is given.

When this happens there are a lot of SRV error 2000, which I have not been able to find a resolution for, and the spooler service stops and restarts.  The service is used by our scanning solution.  Not sure whether the spooler is causing the corruption or the corruption is causing the service to stop.  Has anyone had this combination of issues?  Any help would be appreciated.
0
Comment
Question by:quaybj
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 24

Expert Comment

by:Sandeshdubey
ID: 36515368
Know way to know for sure what file is being deleted, in a windows file system, the files all have numbers, that particular one is file number 25, trying to translate that back to the name of the file is very hard to do.
More than likely that file was open and being written to when the power failed, so it gets scrambled, if chkdsk cannot reassemble/recover the file, then it will delete it so the entire file system does not have issues, but some times chkdsk will delete a critical system file, but it has no choice but to correct the file system.
You should let chkdsk run to completion.
I doubt the hard drive is failing, unless you start seeing "Sectors" being recovered during chkdsk.

Anyway, backup your critical data immediately. Then run chkdsk /f. To be on the safe side.
Also install the latest hotfix and Service Pack on the server.Get the SCSI/RAID firmware updated also check the h/w health from the vendor.

Refer this link also if it helps:
http://www.eventid.net/display.asp?eventid=55&eventno=1210&source=Ntfs&phase=1
0
 

Author Comment

by:quaybj
ID: 36523925
Sandeshdubey,

Thanks for your response.  I was afraid there would not be an easy way.  
I have run chkdsk /f several time, same file has the same problem, but so do others.  We are backed up.  No sectors being recovered.  Service pack is up to date, will check the firmware. It's not a cluster , and the file allocation size is ok, so i did not apply the hotfix from the article.

My next move is to move all the data off to a NAS, format the volume, and hope the corruption does not travel with it.
0
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 500 total points
ID: 36526892
Before you proceed with formating the volume you can proceed with chkdsk /r and check if the corruption is fixed.

Take the full server backup before you proceed with chkdsk /r.
0

Featured Post

Edgartown IT Case Study

Learn about Edgartown's quest to ensure the safety and security of the entire town's employee and citizen data. Read the case study!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
Learn about cloud computing and its benefits for small business owners.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question