Since weekend update, small files up to 4096 bytes get corrupted
flag
Messages 1 - 10 of 31 - Collapse all
/groups/adfetch?adid=npbYNREAAAAtHikD8TBcFF2gV6zTrggKnT3luubDeskUok6AUQ17nQ
The group you are posting to is a Usenet group. Messages posted to this group will make your email address visible to anyone on the Internet.
Your reply message has not been sent.
Your post was successful
 
From:
To:
Cc:
Follow-up To:
Add Cc | Add Follow-up to | Edit Subject
Subject:
Validation:
For verification purposes please type the characters you see in the picture below or the numbers you hear by clicking the accessibility icon. Listen and type the numbers that you hear
 
1.  Andy Schmidt  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 03:33
Newsgroups: microsoft.public.win2000.file_system
From: Andy Schmidt <AndySchm...@discussions.microsoft.com>
Date: Wed, 23 Aug 2006 19:33:01 -0700
Local: Thurs 24 Aug 2006 03:33
Subject: Since weekend update, small files up to 4096 bytes get corrupted
Hi,

I have two different servers (different models and manufacturing years), but
both of them running Windows 2000 server with software mirrored NTFS drives,
which suddenly corrupt small image thumbnail files after an hour or two.

No larger file sizes seem to be effected. The file content is set to all
binary 0xdf.

If we replace those files with valid copies, then those files will appear to
be correct for a while (probably read back from cache) but after some time
they will "revert" back to all 0xdf.

I have since been in contact with another customer who has the exact same
problem with his Windows 2000 server also since around the past weekend. In
the days prior we did install recent security fixes and Microsoft product
updates that were released in the past month.

Is there anyone else out there with the same problem?


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
2.  Pegasus (MVP)  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 03:52
Newsgroups: microsoft.public.win2000.file_system
From: "Pegasus \(MVP\)" <I....@fly.com>
Date: Thu, 24 Aug 2006 12:52:23 +1000
Local: Thurs 24 Aug 2006 03:52
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupted
Multi-posted - see your other posts. Please use cross-posting
if you wish to address several newsgroups. Multiposting wastes
everybody's time.

"Andy Schmidt" <AndySchm...@discussions.microsoft.com> wrote in message

news:D826AFE9-2AB1-4B2F-AE11-CC27702F574A@microsoft.com...


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
3.  KeithMail  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 10:37
Newsgroups: microsoft.public.win2000.file_system
From: "KeithMail" <KeithM...@hiteclabs.co.uk>
Date: Thu, 24 Aug 2006 10:37:44 +0100
Local: Thurs 24 Aug 2006 10:37
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupted
YES I have been in a losing battle with Msoft support since thursday last
week.

For me, Its KB920958 and it can be forced to happen if the data folder is
compressed (with explorer) and trigger it to happen immediately with a
chkdsk c: /f and a reboot
otherwise you have to wait for a while for it to go bad. We assume the
compressoin is done by a LAZY process and sin't immediate.
I don't think its the length as once the file is corrupt I have edited the
contents to other values and replaced it without a problem, there must be a
trigger byte sequence or something.
If you look at the file with the 2000 resource kit dskprobe sector editor it
complains about the length.
Are you using compressed folders for yourr data cos I can't get it to fail
otherwise and that seems to be my key trigger.
We have disabled antivirus and gone through hoops to prove the point.
Keith

"Pegasus (MVP)" <I....@fly.com> wrote in message

news:urNFVhyxGHA.4972@TK2MSFTNGP03.phx.gbl...


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Discussion subject changed to "Since weekend update, small files up to 4096 bytes get corrupt" by Andy Schmidt
4.  Andy Schmidt  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 17:09
Newsgroups: microsoft.public.win2000.file_system
From: Andy Schmidt <AndySchm...@discussions.microsoft.com>
Date: Thu, 24 Aug 2006 09:09:01 -0700
Local: Thurs 24 Aug 2006 17:09
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupt
Hi Keith,

Let's please try to compare commonalities:

- Yes, on both servers those folders and parent folders have the compression
flag on.

- On both effected servers, the disks are defined as "dynamic"
- They are software mirrored (using Windows 2000' Disk Management)
- On both servers the files show all 0xDF characters (which shows up as the
German special 's', looks a little like a B or a beta character.)
- We run NetShield 4.5 with the 5.1.00 scan engine

How does that compare with your environment?

Andy
at Argos.net


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
5.  KeithMail  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 17:58
Newsgroups: microsoft.public.win2000.file_system
From: "KeithMail" <KeithM...@hiteclabs.co.uk>
Date: Thu, 24 Aug 2006 17:58:57 +0100
Local: Thurs 24 Aug 2006 17:58
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupt
The problem has now been seen on over 7 systems here in uk and usa, both
win2000server and Pro across differing machine manufacturers so I have
pretty well eliminated hard disk controllers, device drivers etc.
Simply put if a folder is compressed and one of these (<4096 bytes) files is
dropped into the compressed folder, then either after a period of time
(hence my question of a "lazy" compression process) or by forcing with a
chkdsk it will be corrupt immediately you reboot - this saves time waiting!

I do have mirrored disks on the 2000 server but just standard basic disks on
my 2000pros

If the Kb920958 is removed, then no amount of file placement and chkdsk will
cause the problem, all files already corrupt stay corrupt but no new damage
occurs.
If I confirm my compressed folder is good and then re add the kb920958 ,
followed by chkdsk /f etc the file corruption process occurs again.

I have checked the files with 3 hex editors (Cygnus, win2kresource kit
dskprobe and our own company proprietary viewer)
The problem as far as I can see is
KB920958
With Compressed folders
and only CERTAIN files smaller than 4096 bytes (interesting match to cluster
size perhaps?) I have dropped in text files of a k or so and they seem to be
impervious.

I have disabled all AV (was sophos), and other adaware checkers etc (that's
the beauty of being in a test lab I can pull systems apart as I see fit)

The most difficult question that our Msoft security case engineer wants
answering is what other file types are affected. Until you popped up I was
dealing with one of our own companies proprietary data storage types which
should, as far as the O/S is concerned, be just a binary file.

Once a file has gone bad then it never seems to "comes back", if I hexedit
the 0xDF file content to another hex value the bad file doesn't seem to get
made bad again (go back to 0xdf). This is why I was looking for a string of
bytes as a trigger. Still , I don't have access to Msoft O/s Code and that's
why I hoped raising a "case" with them would get it fixed.

In answer to your other post (17:16) then
At the moment, the solution for me is to
Take off the kb920958 patch
Go through storage and restore all bad files
Wait for a fix.
If the KB is necessary for you then I have not found corruption on a non
compressed folder so maybe the option would be to remove compression, then
restore the bad files
In essence if you need the 920958 then don't enable compression.

Keith

"Andy Schmidt" <AndySchm...@discussions.microsoft.com> wrote in message

news:048B427E-25F1-471A-93BD-F8922D9C8C4F@microsoft.com...


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Discussion subject changed to "End of Files close multiple of 4096 bytes are corrupted with 0xDF" by Andy Schmidt
6.  Andy Schmidt  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 18:41
Newsgroups: microsoft.public.win2000.file_system
From: Andy Schmidt <AndySchm...@discussions.microsoft.com>
Date: Thu, 24 Aug 2006 10:41:02 -0700
Local: Thurs 24 Aug 2006 18:41
Subject: End of Files close multiple of 4096 bytes are corrupted with 0xDF
Hi Keith,

okay, I will attempt to uninstall Kb920958 tonight! That's the best lead yet.

I will also test the "compression" theory as soon as one of my customers
reports another failure with one of their files.

I definitely have seen at LEAST two files that are larger than 4096.  
However, both are very close to a MULTIPLE of 4096 (close to 8K in one case,
in the other case 167,564 bytes = 163K).  I inspected the files. In each case
the beginning of the files are good, and ONLY the last 4000 or so bytes have
the 0xDF byte pattern.

I too created a small TXT file (just one line) and it never corrupted, while
other files around it repeatedly did.

I can say, that I have seen corruptions with the following file types:
.JPG
.GIF
.SWF

where the vast majority are small .JPG and .GIF thumbnails and so far I've
only found few files that are larger. But that may be deceiving, because you
simply may not notice the end of a larger file being corrupted, because the
it "starts" out correctly!

Best Regards,
Andy


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
Discussion subject changed to "Since weekend update, small files up to 4096 bytes get corrupt" by Andy Schmidt
7.  Andy Schmidt  
View profile   Translate to Translated (View Original)
 More options 25 Aug 2006, 18:20
Newsgroups: microsoft.public.win2000.file_system
From: Andy Schmidt <AndySchm...@discussions.microsoft.com>
Date: Fri, 25 Aug 2006 10:20:03 -0700
Local: Fri 25 Aug 2006 18:20
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupt
Hi Keith,

you were "right on".  Disabling compression on certain folders seem to fix
it temporarily - and after uninstalling the hotfix last night on all servers
with compressed disks I have had no more complaints thus far.

Thank you for sharing your insight and for researching this so thoroughly.

Let's see how long it takes Microsoft to take your bug report and
proactively warn its customers that their hotfix can cause loss of data!

Best Regards,
Andy


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
8.  Andy Schmidt  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 17:16
Newsgroups: microsoft.public.win2000.file_system
From: Andy Schmidt <AndySchm...@discussions.microsoft.com>
Date: Thu, 24 Aug 2006 09:16:02 -0700
Local: Thurs 24 Aug 2006 17:16
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupt
PS:

>> For me, Its KB920958  <<

Does that mean you have removed this Hotfix and your problems disappeared?


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
9.  Heimir  
View profile   Translate to Translated (View Original)
 More options 24 Aug 2006, 22:26
Newsgroups: microsoft.public.win2000.file_system
From: Heimir <Hei...@discussions.microsoft.com>
Date: Thu, 24 Aug 2006 14:26:26 -0700
Local: Thurs 24 Aug 2006 22:26
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupt
I just removed KB920958.
Its has not been more then an hour so its too early to tell.

We are having problems with jpg files.
Small thumbnails that we create is being corrupted.

Heimir


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.
10.  Heimir  
View profile   Translate to Translated (View Original)
 More options 25 Aug 2006, 23:24
Newsgroups: microsoft.public.win2000.file_system
From: Heimir <Hei...@discussions.microsoft.com>
Date: Fri, 25 Aug 2006 15:24:02 -0700
Local: Fri 25 Aug 2006 23:24
Subject: Re: Since weekend update, small files up to 4096 bytes get corrupt
27 hours since I removed the update and we have not have any problems since.

Heimir


    Reply to author    Forward  
You must Sign in before you can post messages.
To post a message, you must first join this group.
Please update your nickname on the subscription settings page before posting.
You do not have the permission required to post.

Create a group - Google Groups - Google Home - Terms of Service - Privacy Policy
©2009 Google