Re: EWF Commit Question: What if file is corrupted in the overlay?

No problem, Kevin. =)

CHKDSK will do one of several different actions on the file, depending on
the nature of the corruption. If the file is "lost" (common problem in FAT
when data is partially written but the FAT table isn't updated), CHKDSK will
create a file entry for that data usually called FILEXXXX.CHK and place it
in either the C: root or a specially named folder for lost clusters. NTFS
has a similar mechanism for lost data.

If the file entry exists but does not match the actual data, the data is
truncated. If this affects binary data, this usually means that the data in
the file is invalid and unusable.

File entries can also be deleted if that's what CHKDSK determines is the
best resolution. Also, file entries can be truncated, moved or deleted in
the case of cross-linked files. There are all sorts of types of data
corruption, so it's really not very easy to tell what will happen.

A more general rule of thumb, though, is that if CHKDSK finds a corrupted
file and does anything with it, you can usually (but not always) count on
the file no longer being usable. This would be the case with or without
EWF, though with an EWF Disk Overlay, you at least have the option of
discarding the overlay and reverting to your original file.

Hope this helps. =)

--
Matt Kellner (mattkell@xxxxxxxxxxxxxxxxxxxx)
STE, Windows Embedded Group

This posting is provided "AS IS" with no warranties, and confers no rights.
===============================

"Kevin W" <megism@xxxxxxxxx> wrote in message
news:1119555270.678674.106240@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
> Hello Matt:
>
> Excellent blog! It clarifies a lot of my questions and definitely saved
> me a lot of time. One more question if anyone knows the answer:
>
> If XP chkdsk detected a corrupted file, does it delete it? I know for
> sure that NT chkdsk delete corrupted files, but what about XP?
>
> Thanks again Matt. BTW, anyone can point me to a stress tool to create
> disk corruption?
>


.

Relevant Pages

  • Re: chkdsk log
    ... or files and / or you have a limited amount of free disk space. ... The logging of chkdsk operations is through Event Viewer but the ... to file corruption. ... Try HD Tune only gives information and does not fix any ...
    (microsoft.public.windowsxp.hardware)
  • Re: EWF Commit Question: What if file is corrupted in the overlay?
    ... CHKDSK for the most part has no way of telling ... > the nature of the corruption. ... > and place it in either the C: root or a specially named folder for lost ... > Matt Kellner ...
    (microsoft.public.windowsxp.embedded)
  • Re: windowssystem32configsystem
    ... If you are certain that you are entering the *exact* right command it is usually a sign of corruption when the message that you mentioned is returned. ... If you want to keep on trying to fix the installation the next step will be to run chkdsk /r on the drive, the command can be run from the Recovery Console. ... Depending on the condition of the disk or file system and on the size of the drive it may take a while to run chkdsk, ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: file security slow
    ... When the file system detects corruption, ... run Chkdsk. ... indicate folder structure is correct. ...
    (microsoft.public.windows.server.general)
  • Re: CHKDSK hangs -- HDD failing?
    ... proceeded to boot Windows normally. ... CHKDSK is checking the volume... ... Disk corruption the very low quality MS chkdsk just cannot deal ... with from any of the above sources or from software sources. ...
    (comp.sys.ibm.pc.hardware.storage)
Quantcast