From: Arno on
Ant <ant(a)zimage.comant> wrote:
> Hello.

> I am fixing a client's old Dell Optiplex PC with updated Windows 2000
> SP4. Its event logs showed a bunch of "The device,
> \Device\Harddisk0\DR0, has a bad block." like:
[...]
> Vendor Specific SMART Attributes with Thresholds:
> ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE
> UPDATED WHEN_FAILED RAW_VALUE
> 3 Spin_Up_Time 0x0027 227 221 063 Pre-fail
> Always - 5826
> 4 Start_Stop_Count 0x0032 253 253 000 Old_age
> Always - 1454
> 5 Reallocated_Sector_Ct 0x0033 252 252 063 Pre-fail
> Always - 9
> 6 Read_Channel_Margin 0x0001 253 253 100 Pre-fail
> Offline - 0
> 7 Seek_Error_Rate 0x000a 253 252 000 Old_age
> Always - 0
> 8 Seek_Time_Performance 0x0027 246 239 187 Pre-fail
> Always - 35175
> 9 Power_On_Minutes 0x0032 239 239 000 Old_age
> Always - 655h+56m
> 10 Spin_Retry_Count 0x002b 253 252 157 Pre-fail
> Always - 0
> 11 Calibration_Retry_Count 0x002b 253 252 223 Pre-fail
> Always - 0
> 12 Power_Cycle_Count 0x0032 250 250 000 Old_age
> Always - 1451
> 192 Power-Off_Retract_Count 0x0032 252 252 000 Old_age Always
> - 1448
> 193 Load_Cycle_Count 0x0032 253 253 000 Old_age Always
> - 3200
> 194 Temperature_Celsius 0x0032 253 253 000 Old_age Always
> - 30
> 195 Hardware_ECC_Recovered 0x000a 253 252 000 Old_age Always
> - 10331
> 196 Reallocated_Event_Count 0x0008 251 251 000 Old_age
> Offline - 2
> 197 Current_Pending_Sector 0x0008 253 253 000 Old_age
> Offline - 2
> 198 Offline_Uncorrectable 0x0008 252 251 000 Old_age
> Offline - 1
> 199 UDMA_CRC_Error_Count 0x0008 199 199 000 Old_age
> Offline - 0
> 200 Multi_Zone_Error_Rate 0x000a 253 252 000 Old_age Always
> - 0
> 201 Soft_Read_Error_Rate 0x000a 253 252 000 Old_age Always
> - 19
> 202 Data_Address_Mark_Errs 0x000a 253 251 000 Old_age Always
> - 0
> 203 Run_Out_Cancel 0x000b 253 252 180 Pre-fail Always
> - 63
> 204 Soft_ECC_Correction 0x000a 253 251 000 Old_age Always
> - 0
> 205 Thermal_Asperity_Rate 0x000a 253 252 000 Old_age Always
> - 0
> 207 Spin_High_Current 0x002a 253 252 000 Old_age Always
> - 0
> 208 Spin_Buzz 0x002a 253 252 000 Old_age Always
> - 0
> 209 Offline_Seek_Performnce 0x0024 188 187 000 Old_age
> Offline - 0
> 99 Unknown_Attribute 0x0004 253 253 000 Old_age
> Offline - 0
> 100 Unknown_Attribute 0x0004 253 253 000 Old_age
> Offline - 0
> 101 Unknown_Attribute 0x0004 253 253 000 Old_age
> Offline - 0

[...]
> Those errors look bad. I also realized that this chkdsk was on a FAT
> (not NTFS) and tiny. So I checked Disk Management and saw a no-letter
> drive before C: --
> http://img243.imageshack.us/img243/4301/diskmanagement.jpg ... I can't
> see what is in this tiny partition. :(

> I did another chkdsk on C:. I saw no problems this time in the event
> logs. Weird.

> Is the drive failing from the SMART and symptoms? Thank you in advance. :(

Impossible so say. It has some not yet reallocated bad sectors, which
will cause problems until they have been written. On the other hand,
11 reallocated (including the 2 pending ones) may just be a sign
of sectors that have not been written for a very long time.

You may want to backup the disk, do a complete overwrite, run a
long SMART selftest, and only if that fails throw it away. Otherwise
it could run fine after reinstalling the backup for a few additional
years.

Arno
--
Arno Wagner, Dr. sc. techn., Dipl. Inform., CISSP -- Email: arno(a)wagner.name
GnuPG: ID: 1E25338F FP: 0C30 5782 9D93 F785 E79C 0296 797F 6B50 1E25 338F
----
Cuddly UI's are the manifestation of wishful thinking. -- Dylan Evans
From: Ant on
Thanks for the confirmation, Rod. :) I wanted to double check that the
old HDD was indeed dying from SMART's long test results, chkdsk, and
W2K's event logs. :)

Yesterday afternoon, I did do a data backup just in case. I will do a
full Ghost image soon, so I can restore to a working HDD. Do companies
still sell new IDE HDDs these days? Or do I have to get a(n)
used/old/refurbished one?
--
/\___/\ Phil./Ant @ http://antfarm.ma.cx (Personal Web Site)
/ /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net
| |o o| |
\ _ / If crediting, then use Ant nickname and AQFL URL/link.
( ) If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.
From: Franc Zabkar on
On Sun, 09 May 2010 14:34:16 -0700, Ant <ant(a)zimage.comANT> put finger
to keyboard and composed:

>Read failure with status 0xc000009c at offset 0x183f600 for 0xd800 bytes.
>Read failure with status 0xc000009c at offset 0x1847e00 for 0x800 bytes.

> After command completion occurred, registers were:
> ER ST SC SN CL CH DH
> -- -- -- -- -- -- --
> 40 51 01 7e c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27e = 49790

> 40 51 25 3a c2 00 e0 Error: UNC 37 sectors at LBA = 0x0000c23a = 49722

> 40 51 01 7a c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27a = 49786


ISTM that the CHKDSK errors on the NTFS volume are correcting
inconsistencies in the file system. However, the errors in the 31MB
FAT volume appear to be flagging bad sectors. This is confirmed by the
SMART error log in smartctl.

The read failures at offsets 0x183f600 and 0x1847e00 occur at
25,425,408 bytes and 25,460,224 bytes, respectively. LBAs 49722 and
49790 occur at 25,457,664 and 25,492,480 bytes. These are located
within the FAT partition.

AFAIK, Dell uses a small, hidden, 32MB FAT volume for recovery
purposes. If you examine the boot sector, you will probably find a
reference to RECOVERY. The partition ID byte will probably be "DE",
for DELL.

You can see this with Microsoft's Sector Inspector:
http://www.users.on.net/~fzabkar/SecInspect.zip

Extract the above archive to the one folder and execute the SIrun.bat
file. The procedure will generate a report file named SIout.txt.

- Franc Zabkar
--
Please remove one 'i' from my address when replying by email.
From: Ant on
In comp.sys.ibm.pc.hardware.storage Franc Zabkar <fzabkar(a)iinternode.on.net> wrote:
> On Sun, 09 May 2010 14:34:16 -0700, Ant <ant(a)zimage.comANT> put finger
> to keyboard and composed:
>
>>Read failure with status 0xc000009c at offset 0x183f600 for 0xd800 bytes.
>>Read failure with status 0xc000009c at offset 0x1847e00 for 0x800 bytes.
>
>> After command completion occurred, registers were:
>> ER ST SC SN CL CH DH
>> -- -- -- -- -- -- --
>> 40 51 01 7e c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27e = 49790
>
>> 40 51 25 3a c2 00 e0 Error: UNC 37 sectors at LBA = 0x0000c23a = 49722
>
>> 40 51 01 7a c2 00 e0 Error: UNC 1 sectors at LBA = 0x0000c27a = 49786
>
>
> ISTM that the CHKDSK errors on the NTFS volume are correcting
> inconsistencies in the file system. However, the errors in the 31MB
> FAT volume appear to be flagging bad sectors. This is confirmed by the
> SMART error log in smartctl.
>
> The read failures at offsets 0x183f600 and 0x1847e00 occur at
> 25,425,408 bytes and 25,460,224 bytes, respectively. LBAs 49722 and
> 49790 occur at 25,457,664 and 25,492,480 bytes. These are located
> within the FAT partition.

Thanks for confirming the failing/dying HDD. :)


> AFAIK, Dell uses a small, hidden, 32MB FAT volume for recovery
> purposes. If you examine the boot sector, you will probably find a
> reference to RECOVERY. The partition ID byte will probably be "DE",
> for DELL.
>
> You can see this with Microsoft's Sector Inspector:
> http://www.users.on.net/~fzabkar/SecInspect.zip
>
> Extract the above archive to the one folder and execute the SIrun.bat
> file. The procedure will generate a report file named SIout.txt.

OK, I will check this tool out next time I am that PC. I tried it on a
new Dell PC at work with 64-bit W7, but I don't think it works since it
said error denied in its text file.

Just wondering when I make an image backup. Do I assume I need both of
these partitions onto a HDD replacement? Or can I just copy the W2K's C:
drive?
--
/\___/\ Phil./Ant @ http://antfarm.ma.cx (Personal Web Site)
/ /\ /\ \ Ant's Quality Foraged Links: http://aqfl.net
| |o o| |
\ _ / If crediting, then use Ant nickname and AQFL URL/link.
( ) If e-mailing, then axe ANT from its address if needed.
Ant is currently not listening to any songs on this computer.
From: Rod Speed on
Ant wrote:

> Thanks for the confirmation, Rod. :) I wanted to double
> check that the old HDD was indeed dying from SMART's
> long test results, chkdsk, and W2K's event logs. :)

> Yesterday afternoon, I did do a data backup just in case.
> I will do a full Ghost image soon, so I can restore to a working
> HDD. Do companies still sell new IDE HDDs these days?

Yes. But not that size anymore.

> Or do I have to get a(n) used/old/refurbished one?

Nope.