win7: chkdisk log truncated -- where is the rest?

win7: chkdisk log truncated -- where is the rest?

i had chkdisk run before windows starts. Looking into the event log i only see part of the log that chkdisk produced:

...
c0 04 f0 79 53 12 80 fa c0 04 f0 79 53 12 80 fa  ...yS......yS...
The multi-sector header signature for VCN 0x1 of index $I30
in file 0x196ae is incorrect.
41 b0 04 48 8b cb c7 44 24 28 04 20 53 56 c7 44  A..H...D$(. SV.D
24 20 00 02 00 00 e8 85 e7 ff ff 44 8b f8 85 c0  $ .........D....
The

this is how it ends, so its not the full picture. Googleing around I found a few having the same problem but without an answer, e.g. here:

What I'm almost certain is that chkdisk is most likely writing to a normal text file that and that gets put (partially) into the event log. this is based on the fact that source is Wininit and not chkdisk and happens when windows booted after chkdisk completed. Searching all files with a modification time in question (between shutdown and before windows start) yielded no result.

So can anyone help on this front?

Respuesta1

ok, just found it myself thru this post: https://superuser.com/a/817920/521813

Its located in

drive:\System Volume Information\Chkdsk

Also:

  1. you must give yourself access to System Volume Information first.
  2. the file format is UTF 16 LE which is not handled automatically in CMD

información relacionada