[m8dman]

This error started popping up a few days ago. I booted up my computer and Chkdsk ran, I thought that was odd so I looked in event viewer and found this.

Log Name: System
Source: Ntfs
Date: 1/30/2012 4:45:14 PM
Event ID: 55
Task Category: (2)
Level: Error
Keywords: Classic
User: N/A
Computer: Desktop-PC
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolume2.
Event Xml:
<Event xmlns="http://schemas.micro.../events/event">
<System>
<Provider Name="Ntfs" />
<EventID Qualifiers="49156">55</EventID>
<Level>2</Level>
<Task>2</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2012-01-30T22:45:14.822981700Z" />
<EventRecordID>191728</EventRecordID>
<Channel>System</Channel>
<Computer>Desktop-PC</Computer>
<Security />
</System>
<EventData>
<Data>
</Data>
<Data>\Device\HarddiskVolume2</Data>
<Binary>00000C000200380002000000370004C000000000020100C000000000000000000000000000000000EE0C1400BFE7010000000200</Binary>
</EventData>
</Event>

I have ran both Chkdsk and Chkntfs, both keep saying my drive is fine. What could be causing these errors?

Edited by Macboatmaster, 04 February 2012 - 11:43 AM.

[Advertisements]

1. Is the O/S Windows 7 64 bit please and which - eg. Professional Ultimate etc.

2. Which Chkdsk did you run please - I presume when you issued the cmd chkntfs C:
the response was that it was not dirty

3. Which is Volume 2 please

4. In Control panel, Power Options and then Advanced settings when the window opens allowing you to choose the options, check what is set for the hard drive please.
If the settings applicable to your basic plan selected allow the computer to turn off the hard drive, then what period of time is that set to please. - either increase OR select NEVER.
This will not effect any setting you have for for hibernation etc which overrides that indiviudal setting.
This may be of help - basically if you are on the preferred plan the balanced plan which you will be unless you have set it differently - that is what you want
http://support.microsoft.com/kb/935799

5. Are you by any chance using Avira as an anti-virus.

[Macboatmaster]

1. Is the O/S Windows 7 64 bit please and which - eg. Professional Ultimate etc.

2. Which Chkdsk did you run please - I presume when you issued the cmd chkntfs C:
the response was that it was not dirty

3. Which is Volume 2 please

4. In Control panel, Power Options and then Advanced settings when the window opens allowing you to choose the options, check what is set for the hard drive please.
If the settings applicable to your basic plan selected allow the computer to turn off the hard drive, then what period of time is that set to please. - either increase OR select NEVER.
This will not effect any setting you have for for hibernation etc which overrides that indiviudal setting.
This may be of help - basically if you are on the preferred plan the balanced plan which you will be unless you have set it differently - that is what you want
http://support.microsoft.com/kb/935799

5. Are you by any chance using Avira as an anti-virus.

[m8dman]

1. Is the O/S Windows 7 64 bit please and which - eg. Professional Ultimate etc.

2. Which Chkdsk did you run please - I presume when you issued the cmd chkntfs C:
the response was that it was not dirty

3. Which is Volume 2 please

4. In Control panel, Power Options and then Advanced settings when the window opens allowing you to choose the options, check what is set for the hard drive please.
If the settings applicable to your basic plan selected allow the computer to turn off the hard drive, then what period of time is that set to please. - either increase OR select NEVER.
This will not effect any setting you have for for hibernation etc which overrides that indiviudal setting.
This may be of help - basically if you are on the preferred plan the balanced plan which you will be unless you have set it differently - that is what you want
http://support.microsoft.com/kb/935799

5. Are you by any chance using Avira as an anti-virus.

It's Windows 7 64bit home premium

I ran Chkdsk/r

I'm not sure, How do I find out?

Okay I switched the Hard drive power option to never.

No. I use MSE.

Edited by m8dman, 30 January 2012 - 10:15 PM.

[Macboatmaster]

1.There is no need to quote the whole of my post., in your reply.
Please only quote any aspect you wish to highlight.

2

I presume when you issued the cmd chkntfs C:
the response was that it was not dirty

Was it that response please.?

3.

preferred plan the balanced plan which you will be unless you have set it differently - that is what you want

Which plan are you on please?

4. Please check in Device Manager for any warnings against any devices.
When in device Manager click the View tab and click to shown hidden devices.

5.How many hard drives are there in the computer please and is the drive partitioned.
Control Panel, administrative tools, computer management, disk management.

6. Was this error also a BSOD.
If so download WHO CRASHED - free edition please and click the analyse tab and then scroll for the results and copy and paste them please as that, not as a file which I have to open.
http://www.resplendence.com/downloads

[m8dman]

Yes chkntfs said the drive wasn't dirty.

There are no warnings in Device Manager.

I'm using the the balanced plan.

My PC only has one hard drive. Disk management says the drive is partitioned and healthy.


No, this error didn't come with a BSOD.


Thanks for taking the time to help me Macboatmaster.

[Macboatmaster]

How many hard drives are there in the computer please and is the drive partitioned.
Control Panel, administrative tools, computer management, disk management.

Your reply

Disk management says the drive is partitioned and healthy.

What are the partitions please in otherwords in My Computer how many Hard drives are lsted.
In Disk management - what is shown for the hard drive in the lower window.
ie Disk 0 etc.

NB I am ofline until late about 2330 hrs.

[m8dman]

My hard drive is listed as Disk 0.


Disk O
Basic
931.51GB
online
Both System Reserved and (C:)are listed as Healthy. Both are listed under primary partition.

Edited by m8dman, 01 February 2012 - 03:28 PM.

[Macboatmaster]

The vitally important informatkion in this problem IS

The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\HarddiskVolume2.

We must first establish which volume 2 WAS.
This is nothing to do with the label you may give a volume when you first install a hard disk. or install an O/S on a disk

This refers to the allocation in Disk Management.
If your hard drive WAS partitioned for instance C, D and E which is ONLY an exmaple as D may already be allocated to the optical drive in which case the partitions would be allocated the letters C, E and F.
Then volume 2 would be E.
I have provided a link to this article for you, NOT to MAKE any changes but to try and show you what I am explaining

http://windows.micro...-disk-partition

To further complicate the issue, the event mmessage DOES not actaully mean that the file system is corrupt. I appreciate that seems illogical, but it is actually the case.

If the drive received a request for a write operation and that operation could not for some reason be completed, then it is very possible for you to receive that error.

The same aspect applies to a read operation.

So to develop the explanation a little further, apologising for the length of the post, but attemtping to explain so that you understand better how you may address the issue.

If for instance you had a scheduled task, such as backup, disk defrag, disk cleanup, Acronis back up etc. and that operation was interruped OR that operation was ongoing and you made another demand for a write operation, then it is entirely possible to receive that message.

NOW to how you may progress.

1. YOU need firstly to establish ASAP what volume 2 was. Do you have an external drive, do you have memory card in your printer shown on My Computer as a drive.
When you next receive the message immediately look at the time and date and examine what you had connected or what instruction YOU were giving or Task Scheduler was issuing.
Also establish if your anti-virus etc was being updated.

2. Check in Device manager for any warnings, including the View tab and click to show hidden devices.

3. Run a System File check.
Here is how
Start
in the search box type
cmd
when that appears above RIGHT CLICK and click run as adminisrator
when the window opens
and at a C prompt
type
sfc /scannow - note space bewteen sfc and the /scannow

4. In case there is MORE to this, than the suspected cause as outlined above and in spite of the fact that chkdsk /r - you say returns NO BAD SECTORS etc , I would STILL take ALL possible steps to backup your data to an external drive.
If you do NOT already have ONE I would make a repair disc - WHICH of course you should already HAVE
that is under
Start
Programs
Maintenance

5. I would make a full system image that is also under maintenance - backup and restore.
ALWAYS remember please that an image is a backup, but a backup is not necessarily an image.

MAKE the repair disc AFTER the image.

I think that is enough for now, I apologise if I have stated what you already know.

[m8dman]

1. YOU need firstly to establish ASAP what volume 2 was. Do you have an external drive, do you have memory card in your printer shown on My Computer as a drive.
When you next receive the message immediately look at the time and date and examine what you had connected or what instruction YOU were giving or Task Scheduler was issuing.
Also establish if your anti-virus etc was being updated.

My External drive shows up as E: in Disk Mangagement. Could it be HarddiskVolume2? Also I just ran SFC /scannow it said that it didn't find any integrity violations.


Still no warnings in device manager.

[Macboatmaster]

External drive - If there is no chance that any other drive was connected and C drive has ONLY the single partition - then yes Vol 2 may well have referred to your external drive.

If you have backups and images on that drive - DO NOT defrag it.
BACKUP images should NEVER be defragged.
http://www.sevenforu...very-drive.html

The milliseconds or nanoseconds gained by the defrag are far outweighed many times by the chance of the image being corrupted.

I would see if the dirty bit is set on the external
If the file system on the external is NTFS it could be, I think that this is the refenced Volume 2.

If of course there is ANY evidence whatsover that the files are corrupted then clearly you must consider making NEW backups. - image and please remember that a backup is not necessarily an image.

[m8dman]

I think I figured out what Harddisk 2 is. It's the Dell USB HS-xD/SM USB device, it shows up as disk 2 in disk management.

[Macboatmaster]

Harddisk 2 IS NOT the same as

volume \Device\HarddiskVolume2

Here is an example of what I mean
As an example, here are mappings from a system that has two floppy drives, one hard disk with two partitions, a CDROM, an external USB hard drive and an USB pen drive/thumb drive

A: -> \Device\Floppy0 (internal floppy drive)
B: -> \Device\Floppy1 (external USB floppy drive)
C: -> \Device\HarddiskVolume1 (a partition on an internal hard drive)
D: -> \Device\HarddiskVolume2 (a partition on an internal hard drive)
E: -> \Device\CdRom0 (an internal CD/DVD drive)
F: -> \Device\HarddiskVolume3 (an external USB hard drive, not a thumb drive)
G: -> \Device\Harddisk2\DP(1)0-0+10 (a USB thumb drive)

Do this please
To ID the drive, you can:

• Open an elevated cmd prompt
• In the command prompt, type diskpart and press Enter. - WAIT for the cmd prompt to change to DISKPART
• Type list volume and press Enter.
• Make note of which drive is listed as volume 3. You should see the drive letter and size to help ID it.
• Type exit and press Enter.
• Close elevated command prompt. by typing exit again, as the first exit will exit from Diskaprt back to cmd promt.

[m8dman]

Here's a screencap of diskpart.

[attachment=55895:Untitled.jpg]

[Macboatmaster]

I would recommend that you do the following.as it is important to bear in mind this

Consider the following scenario. You run the List Volume command in the Diskpart.exe command-line utility to display all the volumes on a Microsoft Windows-based computer. (This command also displays the drive letters that correspond to these volumes.) Then, you exit the Diskpart.exe utility. Next, you restart the Diskpart.exe utility, and then you run the List Volume command again to display all the volumes on the computer.

In this scenario, the volume-numbering scheme that appears in the Volume ### column the first time that you run the List Volume command may not match the volume-numbering scheme from the second time that you run the command.

I was hoping that it may NOT report it as C Drive.
As this extract from your original log of event viewer
Please run the chkdsk utility on the volume \Device\HarddiskVolume2
I would have expected it to report it as C in otherwords Device\Harddisk\C:

This one link here will show you how common this problem is and on many occasions it is a spurious error report and the file system is NOT corrupt.
http://social.techne...5a-f5a87f2a914e

HOWEVER to simply ignore it is possibly NOT the best course.
1. Use this please and ascertain what other error reports were listed on 30 Jan around the time of the error at 4.45pm.

Please follow this guidance for event viewer.

Change the dates please to as required to cover the problem

• Please download the Event Viewer Tool by Vino Rosso VEW and save it to your Desktop:
• Double-click VEW.exe
• Under 'Select log to query', select (as appropriate):
  • Application
  • System
  ON THE FIRST RUN please select System with ERROR from the list below
  
  
• Under 'Select type to list', select (as appropriate):
  • Error
  • Information
  • Warning

IN THIS SECTION please use the DATE selection and confine yourself to that DATE the 30 Jan
Then use the 'Date of events' or 'Number of events' as follows:

Either:

• Click the radio button for 'Number of events'
  Type 3 in the 1 to 20 box (or any number from 1 to 20)
  Then click the Run button.
  Notepad will open with the output log.
• Click the radio button for 'Date of events'
  In the From: boxes type today's date (presuming the crash happened today) say a week ago pls.
  In the To: boxes type today's date (presuming the crash happened today)
  Then click the Run button.
  Notepad will open with the output log.

Please post the Output log in your next reply
as a copy and paste pls of the opened log.



2. Then do this please
Please Run the PCPitstop.com OverDrive Full Tests

Here's how:

You must use your Internet Explorer for this procedure. (doesn't work so well in Firefox or others).

Go to: http://www.pCPitstop.com
Click on "Free Computer Check-up" listed below PC Pitstop OverDrive
In the User Login - Click on "Sign up FREE!" OR YOU CAN RUN THE TEST ANON. without signing up. - you will see that at the end of that screen. The results will still be saved long enough for me to look at them.
You'll need to submit a valid email address and create your own password, then click - Create Account(button)

Now enter your email address and password to Log in, Select - Scan this system Now!(button)
You will then be asked to download an ActiveX component and allow it to install.
It is safe and does not compromise your privacy.
Follow the on-screen prompts to install the ActiveX and to allow the Full Tests to be run on your machine.

The Full Tests take about 2 1/2 - 3 minutes on most machines.
When complete, a Results - Summary - Recommended Fixes will be displayed.

Please post the URL internet address, from your Results, back here into this Topic Thread so that we can review the configuration.

Note: During the graphics 2D and graphics 3D testing, your screen will display some rapidly moving objects.
If you are sensitive to visual flashing, it may cause dizziness. Therefore, look away from the screen during that portion of the testing.


While PCPitstop does offer a variety of Paid Products, the PCPitstop OverDrive testing is FREE. Please ignore the references to Paid Products. We prefer to provide manual solution instructions that you can apply directly to your machine.

PLEASE DO NOT RUN ANY other tests on offer

[m8dman]

Here's the PC pitstop scan log. I'll do the event viewer thing when I have more time.

http://www.pcpitstop...?conid=24781472

So this error could be a false flag correct?

Edited by m8dman, 05 February 2012 - 05:11 AM.