Windows XP Weird Crash



I'm new to NTFS systems and Win XP in particular, so I'll just
describe what happened to me, and hope someone may help with a an
advice if not on recovering, at least on preventing future problems
of
this kind.

I'm running a WinXP (5.1) and have a broadband Internet connection,
protected by ZoneAlarm and NOD32's Internet security module. Since I
had my Internet connection installed the computer began working
slower
and slower, often hanging on network I/O requests. Since I've had
similar problems with another computer I decided it was a virus and
ran a scan. It revealed three files infected with some kind of a worm
(unfortunately the logs are now inaccessible due to the reasons I
describe herein; one of the infectedc files for sure was named
EXPLORER.007, but the names of the others, as well as the name of the
worm I forget). Since NOD2 was unable to clean the worm, and none of
the files was an executable, I deleted them. This did not seem to
affect the performance, except that the hangs continued, even more
often and severe. Today I turn the PC on and CHKDSK started
automatically during startup and began fixing a long list of files.
The log is too long, but it comes down to this (these are parts of
the
log entries, just to give you some idea of the problem; these actions
have been performed on multiple files):


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
The multi-sector header signature for VCN 0x7 of index $O
in file 0x19 is incorrect.
09 8b c8 e8 e8 53 00 00 eb 02 33 c0 3b c7 c7 44 .....S....3.;..D
24 24 ff ff ff ff 89 86 b0 00 00 00 0f 84 80 00 $$..............
Correcting error in index $O for file 25.
The index bitmap $O in file 0x19 is incorrect.
Correcting error in index $O for file 25.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff 01 00 00 00 00 00 00 00 ................
00 00 00 00 a2 13 13 1e 31 b0 c7 01 ff ff ff ff ........1.......
Sorting index $O in file 25.
The object id in file 0x3 does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.
The object id in file 0x1d does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.
The object id in file 0x25 does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.
The object id in file 0x26 does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.
The object id in file 0x51 does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.
The object id in file 0xd1 does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.
The object id in file 0x157 does not appear in the object
id index in file 0x19.
Inserting an index entry into index $O of file 25.


---------------------------------------------------------------------------­-------
(Separator is mine, not by CHKDSK)


he multi-sector header signature for VCN 0x3e of index $I30
in file 0x1d is incorrect.
0c 8d 49 00 8a 02 0a c0 74 07 42 0f ab 04 24 eb ..I.....t.B...$.
f3 8b 75 08 83 c9 ff 90 41 8a 06 0a c0 74 07 46 ..u.....A....t.F
Correcting error in index $I30 for file 29.
The index bitmap $I30 in file 0x1d is incorrect.
Correcting error in index $I30 for file 29.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff fb 38 01 00 00 00 00 00 .........8......
08 00 00 00 00 00 00 00 96 72 01 00 00 00 00 00 .........r......
Sorting index $I30 in file 29.
The multi-sector header signature for VCN 0x0 of index $I30
in file 0x1f is incorrect.
50 64 89 25 00 00 00 00 51 83 ec 30 53 56 57 89 Pd.%....Q..0SVW.
65 f0 89 4d c4 81 7d 08 fe ff ff 7f 77 19 8b 45 e..M..}.....w..E
Correcting error in index $I30 for file 31.
The index bitmap $I30 in file 0x1f is incorrect.
Correcting error in index $I30 for file 31.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff fb 38 01 00 00 00 00 00 .........8......
08 00 00 00 00 00 00 00 96 72 01 00 00 00 00 00 .........r......
Sorting index $I30 in file 31.


---------------------------------------------------------------------------­-----------
(Separator is mine)


Cleaning up minor inconsistencies on the drive.
CHKDSK is recovering lost files.
Recovering orphaned file RP5 (32) into directory file 31.
Recovering orphaned file BOC314~1.MP3 (37) into directory file 29.
Recovering orphaned file BON JOVI - QUEEN OF NEW ORLEANS.mp3 (37)
into
directory file 29.
Recovering orphaned file STYLES~1.MP3 (38) into directory file 29.
Recovering orphaned file Styles of Beyond - Nine Thou (Superstars
Remix).mp3 (38) into directory file 29.
Recovering orphaned file 4_CLUB~1.MP3 (39) into directory file 29.
Recovering orphaned file 4_clubbers_-
_let_me_be_your_fantasy_(extended_mix).mp3 (39) into directory file
29.
Recovering orphaned file 01_DAV~1.MP3 (40) into directory file 29.
Recovering orphaned file 01_david_morales_-_how_would_u_feel-idc.mp3
(40) into directory file 29.
Recovering orphaned file 02-NOT~1.MP3 (41) into directory file 29.
Recovering orphaned file 02 - Not Enuff Love.mp3 (41) into directory
file 29.
Recovering orphaned file 02FAIT~1.MP3 (42) into directory file 29.
Recovering orphaned file 02 Faithless - God Is A DJ.mp3 (42) into
directory file 29.
Recovering orphaned file 02-BAM~1.MP3 (43) into directory file 29.
Recovering orphaned file 02-Bamboo - Bamboogie (Radio Edit).mp3 (43)
into directory file 29.
Recovering orphaned file 02GABR~1.MP3 (44) into directory file 29.
Recovering orphaned file 02.Gabrielle - Rise.mp3 (44) into directory
file 29.
Recovering orphaned file 02YOUG~1.MP3 (45) into directory file 29.
Recovering orphaned file 02.You Give Love A Bad Name.mp3 (45) into
directory file 29.
Recovering orphaned file 03-FAI~1.MP3 (46) into directory file 29.
Recovering orphaned file 03-Faithless-Take The Long Way Home (End Of
The Road Mix).mp3 (46) into directory file 29.
Recovering orphaned file 03-FAI~2.MP3 (47) into directory file 29.
Recovering orphaned file 03-faithless_-_miss_u_less_see_u_more_-rmx-
alc.mp3 (47) into directory file 29.
Recovering orphaned file 03-FUN~1.MP3 (48) into directory file 29.
Recovering orphaned file 03-Funky Green Dogs - Cant Help It (Rosabel
Big Boom).mp3 (48) into directory file 29.
Recovering orphaned file 03-LEF~1.MP3 (49) into directory file 29.
Recovering orphaned file 03-Leftfield_And_Lydon-Open_Up-pl.mp3 (49)
into directory file 29.
Recovering orphaned file 03I'LL~1.MP3 (50) into directory file 29.
Recovering orphaned file 03. I'll Sleep When I'm Dead.mp3 (50) into
directory file 29.
Recovering orphaned file 03VOOD~1.MP3 (51) into directory file 29.
Recovering orphaned file 03. Voodoo People.mp3 (51) into directory
file 29.


---------------------------------------------------------------------------­-------------------------------------------


When I tried to play one of the MP3 files that have been marked in
the
log as "orphaned" I found out that WinAMP will not recognize the ID
tags or the track lenght. At this point I thought it was the WinAMP
that couldn't handle the rearranged files, so I decided to restart
it,
and when this didn't work, I tried reinstalling it. However, when I
tried to open the Add/Remove Programs wizard from Control PAnel, I
got
a missing DLL message and a note that I should run CHKDSK as fast as
possible. Since all the changes made hitherto were made to the
logical
drive, which is not in my system partition, I ran a CHKDSK on C: (the
system partition).


The log is like the first one, except that EXE files and registry
entries have been marked as orphaned. However, when I tried to
restart
I got the login screen, and I could not continue, because Windows
couldn't read my license information. I then restarted the computer
in
safe mode and made an upgrade install of the XP, hoping it would fix
whatever missing files and/or registry keys there might be. It helped
to the extent of allowing me to start Windows, but still almost no
program will work, the MP3 files in the logical drive are still
unreadable and there are EXE files that are present, but Explorer
does
not show their icons or run them. It all looks like the entire
information on the disk has been garbled, so the OS cannot find
anything where it looks it is.


Once again, I excuse myself for the stupid and probably irrelevant
explanation. I'd appreciate if someone can tell me what's the reason
for this problem and how can I prevent it in the future.


Thank you in advance.

.



Relevant Pages

  • Re: Chkdsk & Missing Files
    ... Unable to locate the file name attribute of index entry Backups ... Deleting index entry Backups in index $I30 of file 5. ... Recovering orphaned file ZIPS into directory file 5273. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Chkdsk & Missing Files
    ... Unable to locate the file name attribute of index entry Backups ... Deleting index entry Backups in index $I30 of file 5. ... Recovering orphaned file ZIPS into directory file 5273. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Windows XP Weird Crash
    ... The down pointer of current index entry with length 0x18 is invalid. ... Correcting error in index $I30 for file 29. ... Recovering orphaned file RP5 into directory file 31. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Consistency check
    ... select other drives. ... Correcting error in index $I30 for file 29. ... Recovering orphaned file IME into directory file 29. ...
    (microsoft.public.windowsxp.perform_maintain)
  • Re: Consistency check
    ... If you have more than one drive use the scroll bar to the right to select other drives. ... Windows will now check the disk. ... Recovering orphaned file IME into directory file 29. ...
    (microsoft.public.windowsxp.perform_maintain)