Ntfs Event ID 55

[Bankesy]

Good evening all,

 

Hoping somebody out there has seen this before and successfully dealt with it, the Ntfs event ID in the title comes with the following from the general tab in Event Viewer:

 

"A corruption was discovered in the file system structure on volume <correctnameofvolume>.

The Master File Table (MFT) contains a corrupted file record.  The file reference number is <somenumbers>.  The name of the file is "<unable to determine file name>"."

 

Can share details from the details tab if needed.

 

In our case it seems to have affected a bunch of XML reports in the SIMS DocStorage location but other than that everything appears to be working normally. At this point there are no hardware\drive faults that I am aware of.

 

I guess restoring from backup without the issue is the easiest fix but just wondered about troubleshooting further or resolving without restoring.

 

Thanks in advance for any suggestions.

[Fazza]

I assume you've run chkdsk?

[Bankesy]

@Fazza

 

No, I was reading about that and the various switches but I did not want to accidentally start a process of repairing the disk that might make things worse during production hours.

 

Trying to find the safest set of commands to tell me what the issue might be without breaking anything because to the end user there is no issue and I don't want to create one.

[Fazza]

Unless you use the /f (fix) switch chkdsk on it's own, chkdsk runs in read-only mode and does not in any way shape or form do a repair.

 

You have an NTFS file system issue.  The only way to sort it is to analyse the NTFS volume and then instigate a fix/repair should a fault be found.

 

At an elevated command prompt simply run chkdsk on the volume drive letter with the issue.

 

Chkdsk with then say if there is a problem or not.

 

If there is a problem you can then run chkdsk /f out of hours to attempt to repair the issue(s).