☰

Windows 8 在启动期间无法执行“脱机”chkdsk 扫描

tag-icon • tag-icon windows-8 chkdsk
Windows 8 在启动期间无法执行“脱机”chkdsk 扫描

chkdsk尽管我已使用chkdsk /f C:和请求它，但它无法在我的 Win8（Pro RTM 64 位，来自 MSDN）笔记本电脑启动时运行fsutil dirty set C:。

在我的事件日志中，我得到了以下可能相关的事件（为什么事件查看器按显示顺序而不是按时间顺序复制它们？注意时间戳）：

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          1/28/2013 4:33:15 PM
Event ID:      6
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      redacted
Description:
File System Filter 'npsvctrig' (6.2, ‎2012‎-‎07‎-‎25T20:27:33.000000000Z) has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-28T22:33:15.063347500Z" />
    <EventRecordID>290913</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>redacted</Computer>
    <Security UserID="S-1-5-18" />  that's SECURITY_LOCAL_SYSTEM_RID
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">2</Data>
    <Data Name="DeviceNameLength">9</Data>
    <Data Name="DeviceName">npsvctrig</Data>
    <Data Name="DeviceTime">2012-07-25T20:27:33.000000000Z</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          1/28/2013 4:33:12 PM
Event ID:      6
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      redacted
Description:
File System Filter 'eamonm' (6.0, ‎2012‎-‎03‎-‎07T08:32:36.000000000Z) has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-28T22:33:12.426919700Z" />
    <EventRecordID>290912</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>redacted</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">0</Data>
    <Data Name="DeviceNameLength">6</Data>
    <Data Name="DeviceName">eamonm</Data>
    <Data Name="DeviceTime">2012-03-07T08:32:36.000000000Z</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-Ntfs
Date:          1/28/2013 4:33:12 PM
Event ID:      98
Task Category: None
Level:         Error
Keywords:      (2)
User:          SYSTEM
Computer:      redacted
Description:
Volume C: (\Device\HarddiskVolume2) needs to be taken offline to perform a Full Chkdsk.  Please run "CHKDSK /F" locally via the command line, or run "REPAIR-VOLUME <drive:>" locally or remotely via PowerShell.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Ntfs" Guid="{3FF37A1C-A68D-4D6E-8C9B-F79E8B16C482}" />
    <EventID>98</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000002</Keywords>
    <TimeCreated SystemTime="2013-01-28T22:33:12.036916400Z" />
    <EventRecordID>290911</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="44" />
    <Channel>System</Channel>
    <Computer>redacted</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="DriveName">C:</Data>
    <Data Name="DeviceName">\Device\HarddiskVolume2</Data>
    <Data Name="CorruptionActionState">3</Data>
  </EventData>
</Event>

Log Name:      System
Source:        Microsoft-Windows-FilterManager
Date:          1/28/2013 4:33:11 PM
Event ID:      6
Task Category: None
Level:         Information
Keywords:      
User:          SYSTEM
Computer:      redacted
Description:
File System Filter 'FileInfo' (6.2, ‎2012‎-‎07‎-‎25T20:28:02.000000000Z) has successfully loaded and registered with Filter Manager.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-FilterManager" Guid="{F3C5E28E-63F6-49C7-A204-E48A1BC4B09D}" />
    <EventID>6</EventID>
    <Version>0</Version>
    <Level>4</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8000000000000000</Keywords>
    <TimeCreated SystemTime="2013-01-28T22:33:11.272509200Z" />
    <EventRecordID>290910</EventRecordID>
    <Correlation />
    <Execution ProcessID="4" ThreadID="8" />
    <Channel>System</Channel>
    <Computer>redacted</Computer>
    <Security UserID="S-1-5-18" />
  </System>
  <EventData>
    <Data Name="FinalStatus">0x0</Data>
    <Data Name="DeviceVersionMajor">6</Data>
    <Data Name="DeviceVersionMinor">2</Data>
    <Data Name="DeviceNameLength">8</Data>
    <Data Name="DeviceName">FileInfo</Data>
    <Data Name="DeviceTime">2012-07-25T20:28:02.000000000Z</Data>
  </EventData>
</Event>

Google 表示文件系统驱动程序可能会干扰autochk执行离线扫描所需的独占锁，但FileInfo似乎是 Microsoft 提供的，并且完全正常。另外两个过滤器，luavf并PSI在启动过程中加载得更晚。

关于如何chkdsk扫描该分区（系统分区）的任何指导都将非常有帮助。

答案1

Windows 8 包含一个恢复环境 (WinRE)，其中的命令提示符会加载到 RAM 磁盘并运行，无需锁定系统分区，因此chkdsk /f从那里运行良好。它在 Windows 8 中可从“高级启动选项”中使用（在“开始”屏幕上键入startup并查看“设置”类别）。

如果没有出现“命令提示符”选项，请参阅缺少 Windows 8 高级恢复选项

请注意，WinRE 不会使用受信任的平台模块来解锁 Bitlocker 加密的驱动器，因此您应该使用“管理 BitLocker”将其暂停以进行单次启动。执行修复并重新启动后，您将再次受到保护。

相关内容