Solved Page fault in a none paged area error

Toshiba / Satellite a100
March 25, 2016 at 22:40:45
Specs: Windows XP, x86 1995 MHz
I got a BS saying: Page fault in a none paged area. That was at start up just after running a chkdsk command. How to trouble shoot?

See More: Page fault in a none paged area error

Report •


✔ Best Answer
March 28, 2016 at 15:50:28
Ok, we now have a record, you now google the error/fail messages & make a decision.

For a third opinion, get the Toshiba disk checking tool.



#1
March 25, 2016 at 23:26:35
Could be bad RAM.

Report •

#2
March 25, 2016 at 23:26:45
More than likely a driver problem, lets find out which one.

Copy & Paste the dump (.dmp ) file onto your desktop & then upload it using ZippyShare. No account/registration needed. Post the link please.
http://www.zippyshare.com/
Instructions on how to use ZippyShare.
http://i.imgur.com/naG6t2T.gif
http://i.imgur.com/Vi9ZdIh.gif
http://i.imgur.com/1IZu5kP.gif
Minidump file is located in C:\Windows\Minidump
How to see hidden files in Windows
http://www.bleepingcomputer.com/tut...


Report •

#3
March 25, 2016 at 23:42:53
The minidump folder was empty although I didnt do any clean up.

message edited by Gentleman


Report •

Related Solutions

#4
March 26, 2016 at 00:17:08
"The minidump folder was empty"

Right click on My Computer and select Properties.
Then select Advanced system settings Tab on the left menu.
Under the Startup and Recovery section, click on Settings.
Make sure "Write an event to the system log" is checked and "Automatically Restart" is unchecked. In the drop down menu under "Write Debugging Information," select Small memory dump (64KB,128kb or 256KB) press OK and OK again.


Report •

#5
March 26, 2016 at 01:07:57
ok done but I got a message that if the page file is less than 3000 MB a dump file may not be created. I couldnt find any dmp file in drive C. It looks like no such file was recorded.

Report •

#6
March 26, 2016 at 03:42:31
Lets see what these logs reveal.

Please download Farbar Recovery Scan Tool and save it onto your Desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop.
http://www.bleepingcomputer.com/dow...
If we have to run Farbar more than once, refer this SS.
http://i.imgur.com/yUxNw0j.gif
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the Desktop.
The first time the tool is run, it makes also another log (Addition.txt)
The logs are large, upload them using Zippy ( No account/registration needed ) or upload to a site of your choosing. Give us the links please.
http://www.zippyshare.com/
Instructions on how to use ZippyShare.
http://i.imgur.com/naG6t2T.gif
http://i.imgur.com/Vi9ZdIh.gif
http://i.imgur.com/1IZu5kP.gif


Report •

#7
Report •

#8
March 26, 2016 at 04:28:23
Ok got them, back in about 20 mins.

I'm here.

http://www.timeanddate.com/worldclo...


Report •

#9
March 26, 2016 at 04:34:39
"Page fault in a none paged area error"
Are you still getting that error?

Report •

#10
March 26, 2016 at 04:42:15
No that happened once at 7:25AM today and hasnt repeated.

Report •

#11
March 26, 2016 at 04:49:54
Lets tackle this side of things next.

Step 1: Run AdwCleaner
http://www.softpedia.com/get/Antivi...
http://www.raymond.cc/blog/adwclean...
http://www.bleepingcomputer.com/dow...
Author's site
http://general-changelog-team.fr/en...
Tutorial
http://general-changelog-team.fr/en...
Close all open programs and internet browsers.
Double click on AdwCleaner.exe to run the tool.
Click Scan
In the results tabs, uncheck anything you don't want to remove.
Click on Cleaning.
Confirm each time with Ok.
Your computer will be rebooted automatically. A text file will open after the restart.
Please Copy & Paste the contents of that logfile with your next answer.
You can find the logfile at C:\AdwCleaner[S1].txt as well.
http://i.imgur.com/r3PoAEG.gif


Report •

#12
March 26, 2016 at 07:11:06

Report •

#13
March 26, 2016 at 12:22:48
I already have adwcleaner and I run it frequently. you can say there is no findings of malware here.

Report •

#14
March 26, 2016 at 14:37:44
Extract from your logs.
"AV: AVG Anti-Virus Free Edition 2011 (Enabled - Up to date) {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: Avira Antivirus (Enabled - Up to date) {AD166499-45F9-482A-A743-FDD3350758C7}"
You should only have one AV installed. Uninstall one.
AVG Download Center
http://www.avg.com/au-en/utilities
Download Avira AntiVir Removal Tool
http://www.avira.com/en/support-dow...
http://www.avira.com/en/support-for...

////////////////////////////////////////////////////

Make sure ALL your Regional and Language Options settings are Ok. They will be something similar to this, the main point being, you should have at least 3 places to make sure you have your country displayed.

How do I change the system locale so I can use my language of choice?
http://windows.microsoft.com/en-gb/...
http://moosenose.com/Enabling%20Int...
http://java.com/en/download/help/lo...
http://www.lipikaar.com/unicode-and...

Screen 4: 2 instances of Australia or whatever your area is.

Screen 5: 2 instances of Australia or whatever your area is.

Scroll down to > Changing Language for non-Unicode Programs
Advanced > 2 instances of Australia or whatever your area is ( may only have 1 available )


Report •

#15
March 27, 2016 at 02:39:06
Don't know why some programs indicate that I have AVG antivirus installed. It was removed several years ago. I am going to use the removal tool to remove its remains.

What is the significance of the location with error happened? If it is just for sites to locate me that is insignificant.


Report •

#16
March 27, 2016 at 05:37:41
"It was removed several years ago. I am going to use the removal tool to remove its remains"
Good one, remnants can cause problems.

"What is the significance of the location with error happened?"
If those settings are wrong, all sorts of problems can arise, I haven't a record of what they were.

Copy & Paste the text in Blue below & save it into Notepad on your Desktop & name it fixlist.txt
NOTE: It is important that Notepad is used. The fix will not work if Word or some other program is used.
NOTE: It is important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system.

CreateRestorePoint:
emptytemp:
closeprocesses:
cmd: netsh winsock reset
cmd: ipconfig /flushdns
Winlogon\Notify\WgaLogon: [X]
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: O - O:\Autorun.exe
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: P - P:\SETUP.EXE /AUTORUN
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: {85e8c99a-bef3-11e1-a933-00037ae900cb} - F:\AutoRun.exe
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: {a450bf2f-b7e9-11e1-a918-00037ae900cb} - F:\AutoRun.exe
ShellExecuteHooks: - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No File [ ]
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts\User: Restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1659004503-1801674531-839522115-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S3 ASFWHide; \??\C:\DOCUME~1\Mulham\LOCALS~1\Temp\ASFWHide [X]
S3 easytether; system32\DRIVERS\easytthr.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S0 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S4 IntelIde; no ImagePath
S3 NETwLx32; system32\DRIVERS\NETwLx32.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 RTLWUSB; system32\DRIVERS\RTL8187.sys [X]
S1 SASDIFSV; \??\C:\Utilities\SuperAntiSpyWare\SASDIFSV.SYS [X]
S1 SASKUTIL; \??\C:\Utilities\SuperAntiSpyWare\SASKUTIL.SYS [X]
S3 smscdfu; System32\DRIVERS\SMSCDFU.sys [X]
S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]
AlternateDataStreams: C:\WINDOWS\system32\TDispVol.exe: SummaryInformation [43]
AlternateDataStreams: C:\WINDOWS\system32\TDispVol.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:4B7BEAFF [103]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:C671BC00 [242]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 [226]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:E965A533 [161]

Open FRST and press the Fix button just once and wait.
If for some reason the tool needs a restart, please make sure you let the system restart normally. After that, let the tool complete its run.
When finished FRST will generate a log on the Desktop (Fixlog.txt). Please Copy & Paste the contents into your reply.


Report •

#17
March 27, 2016 at 22:00:23
But what is the error to be fixed with this script and how does it fix it?

Report •

#18
March 27, 2016 at 22:27:47
If you are having trouble following the instructions, best you print them.

Report •

#19
March 27, 2016 at 22:59:44
I am not having any troubles. This is the fixlog:

Fix result of Farbar Recovery Scan Tool (x86) Version:05-03-2016 01
Ran by Mulham (2016-03-28 08:55:04) Run:1
Running from C:\Documents and Settings\Mulham\Desktop
Loaded Profiles: Mulham (Available Profiles: Mulham)
Boot Mode: Normal

==============================================

fixlist content:
*****************
CreateRestorePoint:
emptytemp:
closeprocesses:
cmd: netsh winsock reset
cmd: ipconfig /flushdns
Winlogon\Notify\WgaLogon: [X]
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: O - O:\Autorun.exe
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: P - P:\SETUP.EXE /AUTORUN
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: {85e8c99a-bef3-11e1-a933-00037ae900cb} - F:\AutoRun.exe
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\...\MountPoints2: {a450bf2f-b7e9-11e1-a918-00037ae900cb} - F:\AutoRun.exe
ShellExecuteHooks: - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No File [ ]
GroupPolicyScripts: Restriction <======= ATTENTION
GroupPolicyScripts\User: Restriction <======= ATTENTION
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1659004503-1801674531-839522115-1003 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
S3 rpcapd; "%ProgramFiles%\WinPcap\rpcapd.exe" -d -f "%ProgramFiles%\WinPcap\rpcapd.ini" [X]
S3 ASFWHide; \??\C:\DOCUME~1\Mulham\LOCALS~1\Temp\ASFWHide [X]
S3 easytether; system32\DRIVERS\easytthr.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 ew_hwusbdev; system32\DRIVERS\ew_hwusbdev.sys [X]
S0 ew_usbenumfilter; system32\DRIVERS\ew_usbenumfilter.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
S3 hwdatacard; system32\DRIVERS\ewusbmdm.sys [X]
S4 IntelIde; no ImagePath
S3 NETwLx32; system32\DRIVERS\NETwLx32.sys [X]
S3 RTL8192su; system32\DRIVERS\RTL8192su.sys [X]
S3 RTLWUSB; system32\DRIVERS\RTL8187.sys [X]
S1 SASDIFSV; \??\C:\Utilities\SuperAntiSpyWare\SASDIFSV.SYS [X]
S1 SASKUTIL; \??\C:\Utilities\SuperAntiSpyWare\SASKUTIL.SYS [X]
S3 smscdfu; System32\DRIVERS\SMSCDFU.sys [X]
S2 SSPORT; \??\C:\WINDOWS\system32\Drivers\SSPORT.sys [X]
AlternateDataStreams: C:\WINDOWS\system32\TDispVol.exe: SummaryInformation [43]
AlternateDataStreams: C:\WINDOWS\system32\TDispVol.exe:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:4B7BEAFF [103]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:C671BC00 [242]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:D1B5B4F1 [226]
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\TEMP:E965A533 [161]

*****************

Restore point was successfully created.
Processes closed successfully.

========= netsh winsock reset =========


Sucessfully reset the Winsock Catalog.
You must restart the machine in order to complete the reset.


========= End of CMD: =========


========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.


========= End of CMD: =========

"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon" => key removed successfully.
"HKU\S-1-5-21-1659004503-1801674531-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\O" => key removed successfully.
"HKU\S-1-5-21-1659004503-1801674531-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\P" => key removed successfully.
"HKU\S-1-5-21-1659004503-1801674531-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{85e8c99a-bef3-11e1-a933-00037ae900cb}" => key removed successfully.
HKCR\CLSID\{85e8c99a-bef3-11e1-a933-00037ae900cb} => key not found.
"HKU\S-1-5-21-1659004503-1801674531-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a450bf2f-b7e9-11e1-a918-00037ae900cb}" => key removed successfully.
HKCR\CLSID\{a450bf2f-b7e9-11e1-a918-00037ae900cb} => key not found.
HKLM\Software\Microsoft\Windows\CurrentVersion\explorer\ShellExecuteHooks\\{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} => value removed successfully.
HKCR\CLSID\{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} => key not found.
C:\WINDOWS\system32\GroupPolicy\Machine => moved successfully
C:\WINDOWS\system32\GroupPolicy\GPT.ini => moved successfully
C:\WINDOWS\system32\GroupPolicy\User => moved successfully
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value restored successfully
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
"HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{c99fdc39-a1ae-4b24-8d71-e5274f8d7c54}" => key removed successfully.
HKCR\CLSID\{c99fdc39-a1ae-4b24-8d71-e5274f8d7c54} => key not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
HKU\S-1-5-21-1659004503-1801674531-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully.
"HKLM\SOFTWARE\Google\Chrome\Extensions\flliilndjeohchalpbbcdekjklbdgfkk" => key removed successfully.
rpcapd => service removed successfully.
ASFWHide => service removed successfully.
easytether => service removed successfully.
ewusbnet => service removed successfully.
ew_hwusbdev => service removed successfully.
ew_usbenumfilter => service removed successfully.
huawei_enumerator => service removed successfully.
hwdatacard => service removed successfully.
IntelIde => service removed successfully.
NETwLx32 => service removed successfully.
RTL8192su => service removed successfully.
RTLWUSB => service removed successfully.
SASDIFSV => service removed successfully.
SASKUTIL => service removed successfully.
smscdfu => service removed successfully.
SSPORT => service removed successfully.
"C:\WINDOWS\system32\TDispVol.exe" => ": SummaryInformation" ADS not found.
C:\WINDOWS\system32\TDispVol.exe => ":{4c8cc155-6c1e-11d1-8e41-00c04fb9386d}" ADS removed successfully..
C:\Documents and Settings\All Users\Application Data\TEMP => ":4B7BEAFF" ADS removed successfully..
C:\Documents and Settings\All Users\Application Data\TEMP => ":C671BC00" ADS removed successfully..
C:\Documents and Settings\All Users\Application Data\TEMP => ":D1B5B4F1" ADS removed successfully..
C:\Documents and Settings\All Users\Application Data\TEMP => ":E965A533" ADS removed successfully..
EmptyTemp: => 512.6 MB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 08:58:12 ====


Report •

#20
March 27, 2016 at 23:24:28
I don't know if you googled your Event errors in the Farbar logs. Here is that info.

Extracts from your log.

"Event log errors: =========================
Application errors:
==================
Error: (03/26/2016 07:30:28 AM) (Source: crypt32) (EventID: 8) (User: )
Description: Failed auto update retrieval of third-party root list sequence number from: <http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt> with error: A connection with the server could not be established"
Google result.
https://support.microsoft.com/en-us...
https://support.microsoft.com/en-us...

System errors:
=============
Error: (03/26/2016 07:25:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The SSPORT service failed to start due to the following error:
%%2
Error: (03/26/2016 07:25:47 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The DgiVecp service failed to start due to the following error:
%%20
Googling shows it is related to your printer.

(EventID: 7) (User: )
Description: \Device\Harddisk0\D
That usually means you have a bad block on your hard drive, refer your chkdsk log.
For a second opinion.
GSmartControl
http://www.softpedia.com/get/System...
http://gsmartcontrol.sourceforge.ne...
http://gsmartcontrol.sourceforge.ne...
http://gsmartcontrol.sourceforge.ne...
Download GSmartControl for Windows and save it to your desktop. If your default download location is not the Desktop, drag it out of it's location onto the Desktop
Unzip the folder to your desktop.
Double click gsmartcontrol.exe
Allow the program to search for and list your hard drive(s)
Double click your drive.
Go to the PERFORM TESTS tab.
Make sure that the TEST TYPE is set to SHORT SELF-TEST.
Click the EXECUTE button.
After the test completes, click the VIEW OUTPUT button and copy and paste the contents in your reply.

Dhcp) (EventID: 1000)
Check your Event logs in a week.

message edited by Johnw


Report •

#21
March 28, 2016 at 10:07:47
Ok this is the view output contents:

smartctl 5.43 2012-06-30 r3573 [i686-w64-mingw32-xp-sp3] (sf-5.43-1)
Copyright (C) 2002-12 by Bruce Allen, http://smartmontools.sourceforge.net

=== START OF INFORMATION SECTION ===
Model Family: Toshiba 2.5" HDD MK..76GSX
Device Model: TOSHIBA MK5076GSX
Serial Number: 32K3C2QJT
LU WWN Device Id: 5 000039 3e340b4ef
Firmware Version: GS001A
User Capacity: 500,107,862,016 bytes [500 GB]
Sector Size: 512 bytes logical/physical
Device is: In smartctl database [for details use: -P show]
ATA Version is: 8
ATA Standard is: Exact ATA specification draft version not indicated
Local Time is: Mon Mar 28 19:36:47 2016 AST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

General SMART Values:
Offline data collection status: (0x00) Offline data collection activity
was never started.
Auto Offline Data Collection: Disabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: ( 120) seconds.
Offline data collection
capabilities: (0x5b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
No Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 2) minutes.
Extended self-test routine
recommended polling time: ( 187) minutes.
SCT capabilities: (0x003d) SCT Status supported.
SCT Error Recovery Control supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000b 100 100 050 Pre-fail Always - 0
2 Throughput_Performance 0x0005 100 100 050 Pre-fail Offline - 0
3 Spin_Up_Time 0x0027 100 100 001 Pre-fail Always - 2073
4 Start_Stop_Count 0x0032 100 100 000 Old_age Always - 2227
5 Reallocated_Sector_Ct 0x0033 100 100 050 Pre-fail Always - 9
7 Seek_Error_Rate 0x000b 100 100 050 Pre-fail Always - 0
8 Seek_Time_Performance 0x0005 100 100 050 Pre-fail Offline - 0
9 Power_On_Minutes 0x0032 064 064 000 Old_age Always - 240h+33m
10 Spin_Retry_Count 0x0033 144 100 030 Pre-fail Always - 0
12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 2203
191 G-Sense_Error_Rate 0x0032 100 100 000 Old_age Always - 2308
192 Power-Off_Retract_Count 0x0032 100 100 000 Old_age Always - 103
193 Load_Cycle_Count 0x0032 097 097 000 Old_age Always - 31770
194 Temperature_Celsius 0x0022 100 100 000 Old_age Always - 54 (Min/Max 19/63)
196 Reallocated_Event_Count 0x0032 100 100 000 Old_age Always - 9
197 Current_Pending_Sector 0x0032 100 100 000 Old_age Always - 10
198 Offline_Uncorrectable 0x0030 100 100 000 Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x0032 200 200 000 Old_age Always - 0
220 Disk_Shift 0x0002 100 100 000 Old_age Always - 43
222 Loaded_Hours 0x0032 066 066 000 Old_age Always - 13821
223 Load_Retry_Count 0x0032 100 100 000 Old_age Always - 0
224 Load_Friction 0x0022 100 100 000 Old_age Always - 0
226 Load-in_Time 0x0026 100 100 000 Old_age Always - 290
240 Head_Flying_Hours 0x0001 100 100 001 Pre-fail Offline - 0

SMART Error Log Version: 1
ATA Error Count: 599 (device log contains only the most recent five errors)
CR = Command Register [HEX]
FR = Features Register [HEX]
SC = Sector Count Register [HEX]
SN = Sector Number Register [HEX]
CL = Cylinder Low Register [HEX]
CH = Cylinder High Register [HEX]
DH = Device/Head Register [HEX]
DC = Device Command Register [HEX]
ER = Error register [HEX]
ST = Status register [HEX]
Powered_Up_Time is measured from power on, and printed as
DDd+hh:mm:SS.sss where DD=days, hh=hours, mm=minutes,
SS=sec, and sss=millisec. It "wraps" after 49.710 days.

Error 599 occurred at disk power-on lifetime: 14388 hours (599 days + 12 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 c8 58 3a a7 e2 Error: UNC 200 sectors at LBA = 0x02a73a58 = 44513880

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 d8 00 20 3a a7 e0 00 00:00:28.379 READ DMA EXT
25 d8 00 20 39 a7 e0 00 00:00:28.378 READ DMA EXT
25 d8 00 20 38 a7 e0 00 00:00:28.374 READ DMA EXT
25 d8 00 20 37 a7 e0 00 00:00:28.373 READ DMA EXT
25 d8 00 20 36 a7 e0 00 00:00:28.371 READ DMA EXT

Error 598 occurred at disk power-on lifetime: 14383 hours (599 days + 7 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 04 64 ae 9e e2 Error: UNC 4 sectors at LBA = 0x029eae64 = 43953764

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 04 64 ae 9e e0 00 15:18:57.736 READ DMA EXT
25 00 04 60 ae 9e e0 00 15:18:57.736 READ DMA EXT
25 00 04 5c ae 9e e0 00 15:18:57.736 READ DMA EXT
25 00 04 58 ae 9e e0 00 15:18:57.736 READ DMA EXT
25 00 04 54 ae 9e e0 00 15:18:57.736 READ DMA EXT

Error 597 occurred at disk power-on lifetime: 14383 hours (599 days + 7 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 1c 64 ae 9e e2 Error: UNC 28 sectors at LBA = 0x029eae64 = 43953764

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 40 40 ae 9e e0 00 15:18:53.585 READ DMA EXT
25 00 40 00 ae 9e e0 00 15:18:53.582 READ DMA EXT
25 00 40 c0 ad 9e e0 00 15:18:53.582 READ DMA EXT
25 00 40 80 ad 9e e0 00 15:18:53.582 READ DMA EXT
25 00 40 40 ad 9e e0 00 15:18:53.581 READ DMA EXT

Error 596 occurred at disk power-on lifetime: 14383 hours (599 days + 7 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 02 46 a8 9e e2 Error: UNC 2 sectors at LBA = 0x029ea846 = 43952198

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 04 44 a8 9e e0 00 15:18:49.499 READ DMA EXT
25 00 01 00 00 00 e0 00 15:18:49.467 READ DMA EXT
25 00 40 44 a8 9e e0 00 15:18:45.389 READ DMA EXT
25 00 24 20 a8 9e e0 00 15:18:45.389 READ DMA EXT
25 00 20 00 a8 9e e0 00 15:18:45.388 READ DMA EXT

Error 595 occurred at disk power-on lifetime: 14383 hours (599 days + 7 hours)
When the command that caused the error occurred, the device was active or idle.

After command completion occurred, registers were:
ER ST SC SN CL CH DH
-- -- -- -- -- -- --
40 51 3e 46 a8 9e e2 Error: UNC 62 sectors at LBA = 0x029ea846 = 43952198

Commands leading to the command that caused the error were:
CR FR SC SN CL CH DH DC Powered_Up_Time Command/Feature_Name
-- -- -- -- -- -- -- -- ---------------- --------------------
25 00 40 44 a8 9e e0 00 15:18:45.389 READ DMA EXT
25 00 24 20 a8 9e e0 00 15:18:45.389 READ DMA EXT
25 00 20 00 a8 9e e0 00 15:18:45.388 READ DMA EXT
25 00 18 e8 a7 9e e0 00 15:18:45.388 READ DMA EXT
25 00 10 d8 a7 9e e0 00 15:18:45.387 READ DMA EXT

SMART Self-test log structure revision number 1
Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error
# 1 Short offline Completed without error 00% 14433 -

SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.


Report •

#22
March 28, 2016 at 15:50:28
✔ Best Answer
Ok, we now have a record, you now google the error/fail messages & make a decision.

For a third opinion, get the Toshiba disk checking tool.


Report •

Ask Question