[Buddierdl]

I really don't have any experience with hybrid drives. I will point the techs to take a look at it. Did the drive come originally installed or did you upgrade it?

 

Also, did you use the mbam-clean.exe program when you uninstalled MBAM?

[Advertisements]

Hi Buddierdl,

 

Thanks - no I upgraded it to the Hybrid HDD

 

Yes I did use the mbam-clean.exe as requested & per detailed instructions

 

I've found a DOS Seagate set of tools that tells me it might be able to repair it - the Seagate Windoz Tools tells me there are problems with the drive & Firmware is out of date

 

Backups fail using Windoz or my Acronis purchased Software, so I am copying files before trying anything  

 

Just wondering if I should try the Firmware upgrade before or after I run the Seagate repair?

 

 

There is now something blocking a HDD Scan on boot up & one of the ERANT(?) programs is trying to do a registry backup which fails - I'll attach screen shots (Photo's) when I get home.

 

Thanks & Regards

 

Ian

[Cairnsy]

Hi Buddierdl,

 

Thanks - no I upgraded it to the Hybrid HDD

 

Yes I did use the mbam-clean.exe as requested & per detailed instructions

 

I've found a DOS Seagate set of tools that tells me it might be able to repair it - the Seagate Windoz Tools tells me there are problems with the drive & Firmware is out of date

 

Backups fail using Windoz or my Acronis purchased Software, so I am copying files before trying anything  

 

Just wondering if I should try the Firmware upgrade before or after I run the Seagate repair?

 

 

There is now something blocking a HDD Scan on boot up & one of the ERANT(?) programs is trying to do a registry backup which fails - I'll attach screen shots (Photo's) when I get home.

 

Thanks & Regards

 

Ian

[Buddierdl]

Usually a failed HD test means you need to replace the HD as soon as possible. But I don't know if the test is suitable for a hybrid HD. Anyway, definitely back up all important data as soon as possible. 
 
A firmware upgrade might be worth a shot as long as your data is backed up.
 
I would be interested to see the results of a chkdsk:
 
Check Disk

Open a command prompt as administrator (Click start orb, type cmd, then right-click on the command prompt and select "Run as Administrator"). Then type chkdsk C: and press enter. Let the process complete.

After it finishes, download and run this script and the chkdsk log will open. Please post it in your next reply.

EDIT: It seems like SeaTools should be suitable for any Seagate drive, but I'll have to look into it a little more.

Edited by Buddierdl, 14 July 2014 - 07:32 AM.

[Cairnsy]

OK - sounds a bit terminal

 

I think it's been like this for a while, however I've managed to backup most of my Library files now - some (1400 plus) were too long to copy

 

It sometimes tries to do a Check Disk on re-boot, but gets blocked by some program - haven't been able to copy the Photo screen capture onto the PC yet, but will post once I can

 

There is also a program trying to do a Registry backup (maybe the same one) that can't complete on Login - screen shots attached - should I try to uninstall ERUNT?

 

I will try updating the HD Firmware and then the DOS Seatools which suggests it can repair Seagate Disks better than the Windoz version that simply comes back with errors when testing - just like the Windoz & chkdsk does

 

Interesting Chkdsk Results below:

 

ListChkdskResult by SleepyDude v0.1.7 Beta | 21-09-2013

------< Log generate on 16/07/2014 7:21:48 AM >------
Category: 0
Computer Name: Ians-HP-4520s
Event Code: 26213
Record Number: 101315
Source Name: Chkdsk
Time Written: 07-15-2014 @ 21:21:18
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode.  A volume snapshot was not used. Extra errors and warnings may be reported as the volume may have changed during the chkdsk run. 

Checking file system on C:
The type of the file system is NTFS.
The volume is in use by another process. Chkdsk
might report errors when no corruption is present.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xb87b6f for possibly 0x19 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x36172 is already in use.

Attribute record (128, "") from file record segment 221554
is corrupt.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x3e453c for possibly 0x1c clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x36558 is already in use.
Attribute record (128, "") from file record segment 222552
is corrupt.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x3e453a for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x59591 is already in use.

Attribute record (128, "") from file record segment 365969
is corrupt.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x3e4558 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x59667 is already in use.
Attribute record (128, "") from file record segment 366183
is corrupt.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0x11b06c6 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x5b334 is already in use.

Attribute record (128, "") from file record segment 373556
is corrupt.
  375808 file records processed.                                        

File verification completed.
  984 large file records processed.                                  

Errors found.  CHKDSK cannot continue in read-only mode.

-----------------------------------------------------------------------
Category: 0
Computer Name: Ians-HP-4520s
Event Code: 26212
Record Number: 101298
Source Name: Chkdsk
Time Written: 07-15-2014 @ 21:14:36
Event Type: Information
User:
Message: Chkdsk was executed in read-only mode on a volume snapshot. 

Checking file system on C:
The type of the file system is NTFS.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xb87b6f for possibly 0x19 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x36172 is already in use.

Attribute record (128, "") from file record segment 221554
is corrupt.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x3e453c for possibly 0x1c clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x36558 is already in use.
Attribute record (128, "") from file record segment 222552
is corrupt.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x3e453a for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x59591 is already in use.

Attribute record (128, "") from file record segment 365969
is corrupt.
Attribute record of type 0x80 and instance tag 0x4 is cross linked
starting at 0x3e4558 for possibly 0x3 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x4
in file 0x59667 is already in use.
Attribute record (128, "") from file record segment 366183
is corrupt.
Attribute record of type 0x80 and instance tag 0x1 is cross linked
starting at 0x11b06c6 for possibly 0x1 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x1
in file 0x5b334 is already in use.
Attribute record (128, "") from file record segment 373556
is corrupt.
  375808 file records processed.                                        

File verification completed.
  984 large file records processed.                                  

Errors found.  CHKDSK cannot continue in read-only mode.

-----------------------------------------------------------------------

Attached Thumbnails

• 
• 

[Buddierdl]

I'm thinking the disk will need to be replaced. Go ahead and try the firmware + SeaTools and let me know how it goes, but make sure all data is backed up because the disk may go at any time. Would you like some help with those long file names that wouldn't copy? Do you make a complete disk image or just back up files?

For ERUNT, did you install it and set it to make a registry backup on boot? The first thing to do with that would be uninstall/reinstall, but I would focus on the disk errors first.

We can also do a chkdsk C: /x to fix disk errors on boot, but it can cause an ailing disk to fail completely, so let me know about your backups first.

[Cairnsy]

Hi Buddierdl,

 

I eventually gave up trying for a full Copy backup & "went for it" with the SeaTools for DOS repair options offered after the disk scan

 

I didn't know about this & found this bit in the SeaTools Manual interesting...

 

"**** NOTE ****

The following information applies only to Seagate Technology or Maxtor brand disk drives:

 

By design, modern disk drives maintain spare sectors for reallocation purposes. Usually, sectors become

 

difficult to read long before they become impossible to read. In this situation the actual data bytes in the

sector are preserved and transferred to the new spare during a sector reallocation. Similarly, when a disk

drive writes data and encounters a problem, the drive firmware retires the problem sector and activates a

replacement before giving successful write status."....

 

"If you give permission to overwrite a bad sector SeaTools will attempt to write a pattern of zeros to that

sector. Usually, this action will assist the disk drive firmware in managing the problem by retiring the

problem LBA and activating a spare in its place."

 

After the SeaTools repair (which didn't take long, but the scan took ages) I MANAGED TO DO A FULL ACRONIS IMAGE BACKUP

 

This took overnight & some of Saturday... horary!

 

In my quest for copying over the long files I managed to download cbsidlm-cbsi188-Long_File_Path_Lister-SEO-10823078.exe from CBS Interactive which managed to add some crap ware to my IE - even though I carefully chose NOT to install anything extra

 

I uninstalled something that looked suspicious & all seems OK now

 

It would probably be a good thing if I could rename those long files - what would you recommend?

 

I uninstalled ERUNT & that message hasn't returned either - not sure if the Windows check disk problem is still there

 

THANKS for all your help

 

Kind Regards

Ian

[SleepyDude]

Hi Cairnsy,

 

Buddierdl is on vacations and he ask me to assist you.

 

It seems the HDD is now more stable, did you notice how many sectors got relocated?

 

Many of those supposedly free programs are bundled with lots of junk and to make it worst some websites add their junk to otherwise clean installs!

 

Can you run Malwarebytes and do a scan to make sure you got rid of all the extra junk affecting the browser? Please post the MBAM log.

 

About the log file names I need to know if the problem is with the source or with the destination, can you post an example of a file path (full path including drive + file name) you can't copy and also the destination folder (full path including drive)?

[Cairnsy]

Hi Sleepy Dude,

 

Hope Buddierdl has a great break

 

Sure is more stable, MBAM scan didn't BSOD this time Yee Ha! - There were 17 errors detected

 

The log is here:

 

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 22/07/2014
Scan Time: 9:15:24 PM
Logfile:
Administrator: Yes

Version: 2.00.2.1012
Malware Database: v2014.07.22.03
Rootkit Database: v2014.07.17.01
License: Free
Malware Protection: Disabled
Malicious Website Protection: Disabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: Ian

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 384426
Time Elapsed: 13 min, 23 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 1
PUP.Optional.SuperFish.A, HKU\S-1-5-21-4005721135-716239972-1406188448-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\DOMSTORAGE\superfish.com, , [6922fba7fa81ad8937836e5b61a1a957],

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

 

 

I'll have to run my manual backup again to find out the long file details, but there were about 25 of them from memory

 

Thanks & Regards

Ian

[SleepyDude]

Hi,

 

I would like to check the Hard Disk diagnostic information...

 

• Download HDDScan
• Extract the zip file HDDScan-3.3.zip to the Desktop
• You should have now a new folder on the Desktop called HDDScan-3.3
• open the folder and execute HDDScan (Accept the security prompt on Windows Vista and higher)
  
• using the Select Drive list box select the Hard Disk you want to check
• click the S.M.A.R.T. button
• press the Save to File button and save the file to the Desktop
• a new file named HDD-model-serial.mht will be created, please compress the file to zip and attach the zip to your post

 

- Make sure you run Malwarebytes and instruct the program to quarantine everything detected.

 

- What type of backup are you doing and which tool you use when the error long file path is generated?

[Cairnsy]

Hi Sleepy Dude,

 

HDDScan log attached

 

OK, I quarantined the SuperFish that MAB found - I re-scanned and MAB didn't find anything

 

 

The original problem was not being able to use Acronis True Image Home for backups - even the Windoz Backup failed to lock the HDD

 

The long filename problem happened when I resorted to Copying my Libraries as a last backup resort before attempting to repair the HDD - there were about 25 too long to copy onto my USB HDD

 

Thanks & Regards

Cairnsy

Edited by Cairnsy, 22 July 2014 - 03:21 PM.

[SleepyDude]

Hi,
 

Hi Sleepy Dude,
 
HDDScan log attached

The attach is missing!
 

OK, I quarantined the SuperFish that MAB found - I re-scanned and MAB didn't find anything

Good.
 

The original problem was not being able to use Acronis True Image Home for backups - even the Windoz Backup failed to lock the HDD
 
The long filename problem happened when I resorted to Copying my Libraries as a last backup resort before attempting to repair the HDD - there were about 25 too long to copy onto my USB HDD

 

Windows have a limit around 254 characters on the full path c:\users\<user>\Documents\....\Taxes.docx if the full path is around this limit when you copy them to the external drive to some path like:

F:\My BackupCopy - 22_July_2014\... the final destination path will need more than 254 chars and windows will throw the error.

 

Hope I'm explaining this correctly...   If this is the problem you have to reduce the folders/file names or alternatively zip the source files and folders and copy the zip files to the USB HDD.

Compressing the files will reduce the disk space used and as bonus you get a easy way to check the files integrity...

[Cairnsy]

Hi Sleepy Dude,

 

Wondered if the attachment attached OK or not... I'll try again

Attached Files

•  2014-07-23 Log ST95005620AS-5YX0JLVH-SMART_mht.rar   2.26KB   141 downloads

[SleepyDude]

Hi,

 

Hi Sleepy Dude,

 

Wondered if the attachment attached OK or not... I'll try again

 

Now it worked.

 

Not sure if the tool failed to get the information from the Hard Disk drive because it doesn't show any relocated sectors.

When the HDD have bad sectors that got relocated we never know if the drive will develop more problems in the future, to be safe make sure you keep backups of your data. If the disk is new and under warranty I would try to ask for a replacement.

 

Did my explanation about the long paths make sense for you?

[Cairnsy]

Hi Sleepy Dude,

 

Interesting - I couldn't make sense of the results & thought there were HEAPS of errors

 

Yes thanks - I understood your long file names explanation

 

Thanks & Regards

Cairnsy