"..Disks need to be checked for..."

  • Thread starter Thread starter no one
  • Start date Start date
From: "thomasgraham" <[email protected]>

| Is there a virus that causes Win2k to give this msg on starting the
| computer "One of your disks needs to be checked for consistency..." and
| then when I let it run, it screwed up my D: drive? It "checked" the disk
| and found a bunch of "File00xx.chk" recovered file fragments, each 32k
| in size, and put them in a directory called "found.000", but now I can't
| see any of the other directories, even though the pie chart on "My
| computer" shows the disk has far more than the total of all the 32k
| files. Or is it something other than a virus? How can I get to see the
| large amount of space reported as used on the pie chart? Any help
| GREATLY appreciated.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
start --> settings --> control panel --> internet options --> delete files

Open a Command Prompt.

In the Command Prompt type the following...

CHKDSK C: /F

If it replies..
"Chkdsk cannot run because the volume is in use by another process.
Would you like to schedule this volume to be checked the next time the system restarts?
(Y/N)"

Choose - Y

type; EXIT

Reboot the PC.

A full Check Disk will want to be performed, allow it.

Go to the hard disk manufacturer's web site and download their diagnostic software
respective to your hard disk. After the test, you will know if the hard disk is bad or
not..

Quantum/Maxtor - PowerMax
http://www.maxtor.com/en/support/downloads/powermax.htm

Western Digital - Data LifeGuard Tools (DLGDiag)
http://support.wdc.com/download/

Hitachi/IBM - Drive Fitness Test (DFT)
http://www.hgst.com/hdd/support/download.htm

Seagate - SeaTools
http://www.seagate.com/support/seatools/

Fujitsu - Diagnostic Tool
http://www.fcpa.com/download/hard-drives/

Samsung - Disk manager
http://www.samsung.com/Products/HardDiskDrive/utilities/shdiag.htm
 
David said:
From: "thomasgraham" <[email protected]>

| Is there a virus that causes Win2k to give this msg on starting the
| computer "One of your disks needs to be checked for consistency..." and
| then when I let it run, it screwed up my D: drive? It "checked" the disk
| and found a bunch of "File00xx.chk" recovered file fragments, each 32k
| in size, and put them in a directory called "found.000", but now I can't
| see any of the other directories, even though the pie chart on "My
| computer" shows the disk has far more than the total of all the 32k
| files. Or is it something other than a virus? How can I get to see the
| large amount of space reported as used on the pie chart? Any help
| GREATLY appreciated.

Dump the contents of the IE Temporary Internet Folder cache (TIF)
start --> settings --> control panel --> internet options --> delete files

Open a Command Prompt.

In the Command Prompt type the following...

CHKDSK C: /F
Click to expand...


They Said D:

Do u Sub the C for a D is There an ALL command for all the DRives
 
Is there a virus that causes Win2k to give this msg on starting the
computer "One of your disks needs to be checked for consistency..." and
then when I let it run, it screwed up my D: drive? It "checked" the disk
and found a bunch of "File00xx.chk" recovered file fragments, each 32k
in size, and put them in a directory called "found.000", but now I can't
see any of the other directories, even though the pie chart on "My
computer" shows the disk has far more than the total of all the 32k
files. Or is it something other than a virus? How can I get to see the
large amount of space reported as used on the pie chart? Any help
GREATLY appreciated.
Click to expand...

Well if you were running NTFS instead of FAT32, which is more fault
tolerant, then you would not be running into this problem.

There is no virus that is causing the problem.

Duane :)
 
From: "no one" <[email protected]>

|
| David H. Lipman wrote:
||>> Is there a virus that causes Win2k to give this msg on starting the
|>> computer "One of your disks needs to be checked for consistency..." and
|>> then when I let it run, it screwed up my D: drive? It "checked" the disk
|>> and found a bunch of "File00xx.chk" recovered file fragments, each 32k
|>> in size, and put them in a directory called "found.000", but now I can't
|>> see any of the other directories, even though the pie chart on "My
|>> computer" shows the disk has far more than the total of all the 32k
|>> files. Or is it something other than a virus? How can I get to see the
|>> large amount of space reported as used on the pie chart? Any help
|>> GREATLY appreciated.|
| They Said D:
|
| Do u Sub the C for a D is There an ALL command for all the DRives
|

I screwed that up -- You are right "D:" :-(
 
From: "thomasgraham" <[email protected]>

| Thanks for the replies, guys.
|
| What I'm REALLY looking for is to retrieve my files if they are still
| there. The disk shows almost full, though only the filexxxx.chk files
| show up. (Less than 1% of the disk capacity)

Retrieve them from backup media. You did make backups -- Right ?
 
thomasgraham said:
Thanks for the replies, guys.

What I'm REALLY looking for is to retrieve my files if they are still
there. The disk shows almost full, though only the filexxxx.chk files
show up. (Less than 1% of the disk capacity)
Click to expand...

off the subject ,, But WHAT time zone are u in?

my clock say 8:58pm and ur post says 11:56 pm
I am in EST ( east coast!

Sorry but I never used win2k (Just XP)

and Microsoft told a Friend of Mine That U might just as well Delete
those CHK files.. They are of NO USE..
It was a mistake to Have CHKDSK and Scandisk Say those files. I guess
the mistake Goes way Back to Dos 4.1 days
 
Is there a virus that causes Win2k to give this msg on starting the
computer "One of your disks needs to be checked for consistency..." and
then when I let it run, it screwed up my D: drive? It "checked" the disk
and found a bunch of "File00xx.chk" recovered file fragments, each 32k
in size, and put them in a directory called "found.000", but now I can't
see any of the other directories, even though the pie chart on "My
computer" shows the disk has far more than the total of all the 32k
files. Or is it something other than a virus? How can I get to see the
large amount of space reported as used on the pie chart? Any help
GREATLY appreciated.
 
and Microsoft told a Friend of Mine That U might just as well Delete
those CHK files.. They are of NO USE..
Click to expand...

In some cases, those chk files may be the only source for
recovering lost data.

If you have proper backups, dump them. If not, browsing each
of the files may help you find documents, etc. that would
otherwise be lost.

Regards, Dave Hodgins
 
Thanks for the replies, guys.

What I'm REALLY looking for is to retrieve my files if they are still
there. The disk shows almost full, though only the filexxxx.chk files
show up. (Less than 1% of the disk capacity)
Click to expand...

You get down to that kind of capacity, then it is disk space mismanagement.
You should never get yourself in that kind of situation.

Duane :)
 
thomasgraham said:
Is there a virus that causes Win2k to give this msg on starting the
computer "One of your disks needs to be checked for consistency..." ......
Click to expand...
Thanks for the replies, guys.

What I'm REALLY looking for is to retrieve my files if they are still
there. The disk shows almost full, though only the filexxxx.chk files
show up. (Less than 1% of the disk capacity)
 
per Microsoft..
There is No program to READ .CHK files
Click to expand...

Hexedit works fine. Once you figure out which files contain data
you want, rename them back to their original type (.txt, .doc, etc.),
and then use the regular M$ crapware.

Regards, Dave Hodgins
 
You get down to that kind of capacity, then it is disk space mismanagement.
You should never get yourself in that kind of situation.
Click to expand...

He's probably showing a full hard drive due to the corrupted FAT rather
than the other way around.
 
Is there a virus that causes Win2k to give this msg on starting the
computer "One of your disks needs to be checked for consistency..." and
then when I let it run, it screwed up my D: drive? It "checked" the disk
and found a bunch of "File00xx.chk" recovered file fragments, each 32k
in size, and put them in a directory called "found.000", but now I can't
see any of the other directories, even though the pie chart on "My
computer" shows the disk has far more than the total of all the 32k
files. Or is it something other than a virus? How can I get to see the
large amount of space reported as used on the pie chart? Any help
GREATLY appreciated.
Click to expand...

Well, not exactly. I know of no viruses that display that message
themselves then create the files. That message is a normal Windows
message when it decides it needs to run the WinXP version of ScanDisk. It
will decide it needs to do this if the File Allocation Table (FAT) gets
corrupted. By default it will save lost file fragments using file names
like you have seen.

There are some viruses that will corrupt your FAT which then causes this
to happen but the damage was actually done earlier. If the FAT is really
corrupted then ScanDisk can actually cause more harm than good by writing
copies of all these file fragments all over the drive and overwriting
what it thinks is empty space but is actually where a file is supposed to
be. Since the FAT doesn't list that space as taken any more it will let
ScanDisk overwrite that space.

The first thing you need to do is not write a single additional thing on
this hard drive. Any file you save on it will likely overwrite your old
data. Take a complete image of the hard disk using a good disk imaging
program (about $89). Set it to copy every cluster and not skip empty
clusters. Since your FAT is corrupted any cluster could actually contain
data even if it is marked as empty. This image will need to be stored on
a separate hard drive. Then use a good undelete program like Active@
Undelete from www.lsoft.net ($40) to attempt recovery of files. I don't
think it will automatically recover the .CHK files but it may be able to
reconstruct the files from the lost fragments that the .CHK files are
copies of providing that they weren't overwritten.

P.S. If you aren't comfortable doing all of this yourself then enlist the
services of a GOOD technician. Be prepared to pay quite a bit of money
and accept that you may not get all of your files back. If you can't
afford it then you have to chalk it up to experience and learn how to do
backups.
 
no one said:
[snip] Microsoft told a Friend of Mine That U might just as well Delete
those CHK files.. They are of NO USE..
Click to expand...

Nonsense. I recovered many gigs-worth of jpegs for a client using
Unchk from http://www.ericphelps.com/uncheck/. They were pictures of
their newborn child, taken with since-deceased grandfather. No backups
or prints available, either.

Larry
 
thomasgraham said:
Is there a virus that causes Win2k to give this msg on starting the
computer "One of your disks needs to be checked for consistency..." and
then when I let it run, it screwed up my D: drive? It "checked" the disk
and found a bunch of "File00xx.chk" recovered file fragments, each 32k
in size, and put them in a directory called "found.000", but now I can't
see any of the other directories, even though the pie chart on "My
computer" shows the disk has far more than the total of all the 32k
files. Or is it something other than a virus? How can I get to see the
large amount of space reported as used on the pie chart? Any help
GREATLY appreciated.
Click to expand...

I've seen this behaviour brought on by installing a large hard disk and
failing to enable 48-bit LBA. If this is the case, then simply enabling
48-bit LBA should eventually get you most, if not all, of your files back.
 
I've seen this behaviour brought on by installing a large hard disk and
failing to enable 48-bit LBA. If this is the case, then simply enabling
48-bit LBA should eventually get you most, if not all, of your files back.
Click to expand...

A thought: Could this also be caused by a low CMOS battery that made the
CMOS lose its 48-bit LBA setting?
 
per Microsoft..
There is No program to READ .CHK files
Click to expand...

I find Notepad does fairly well. And if it shows me a Word or
Excel file header, I know what to use to open it "properly".

However, the .chk files are the broken remnants of files you
used to have. You only use them if you can't get your data back
any other way. It's a lot of pain trying to stitch the right
ones back into complete files.

Hmmm: anybody know of a FAT export utility? It'd be handy to
have a copy in a file someplace for when both production copies
go bad.
 
Back
Top