It appears that a bug was found!

[RJARRRPCGP]

JKDefrag with

Code:

-a 5

hung at C:\WINNT\system32\config\software.LOG:



I also have the log:

Code:

15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226663, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226664, Size=57
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226664, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226665, Size=56
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226665, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226666, Size=55
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226666, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226667, Size=54
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226667, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226668, Size=53
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226668, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226669, Size=52
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226669, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226670, Size=51
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226670, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226671, Size=50
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226671, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226672, Size=49
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226672, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226673, Size=48
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226673, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226674, Size=47
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226674, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226675, Size=46
15:09:15 C:\WINNT\system32\config\software.LOG
  Moving 1 cluster from 5207797 to 1226675, VCN=14.
15:09:15 Getting cluster bitmap: C:\WINNT\system32\config\software.LOG
15:09:15 Extent: Lcn=2003105, Vcn=0, NextVcn=2
15:09:15 Extent: Lcn=1551413, Vcn=2, NextVcn=3
15:09:15 Extent: Lcn=1599297, Vcn=3, NextVcn=4
15:09:15 Extent: Lcn=1428427, Vcn=4, NextVcn=5
15:09:15 Extent: Lcn=1384682, Vcn=5, NextVcn=6
15:09:15 Extent: Lcn=1384861, Vcn=6, NextVcn=7
15:09:15 Extent: Lcn=1384493, Vcn=7, NextVcn=8
15:09:15 Extent: Lcn=1432703, Vcn=8, NextVcn=10
15:09:15 Extent: Lcn=1493971, Vcn=10, NextVcn=12
15:09:15 Extent: Lcn=1599576, Vcn=12, NextVcn=14
15:09:15 Extent: Lcn=5207797, Vcn=14, NextVcn=15
15:09:15 Extent: Lcn=1384954, Vcn=15, NextVcn=16
15:09:15 Extent: Lcn=5207341, Vcn=16, NextVcn=18
15:09:15 Gap found: LCN=1226676, Size=45

[jeroen]

JKDefrag with -a 5 hung at C:\WINNT\system32\config\software.LOG:

Hmmm, I see. I have taken a quick look at the sources and this problem is not caused by a bug in JkDefrag, but by a bug in the Windows defragmentation API. It is clear from your log that a particular fragment of the software.log file cannot be moved. But the api does not report that, so JkDefrag happily continues. It locates the highest data on disk, which is still the software.log file, and thereby tries again.

I have made a quick an dirty fix. The fragment will not be moved, the api apparently does not allow that, so the fix simply prevents JkDefrag from trying the same fragment again and again. Would you like to test it for me? You can download at JkDefrag-3.27b1.zip. Thanks for your help, I appreciate it!

[RJARRRPCGP]

JKDefrag with -a 5 hung at C:\WINNT\system32\config\software.LOG:

Hmmm, I see. I have taken a quick look at the sources and this problem is not caused by a bug in JkDefrag, but by a bug in the Windows defragmentation API. It is clear from your log that a particular fragment of the software.log file cannot be moved. But the api does not report that, so JkDefrag happily continues. It locates the highest data on disk, which is still the software.log file, and thereby tries again.

I have made a quick an dirty fix. The fragment will not be moved, the api apparently does not allow that, so the fix simply prevents JkDefrag from trying the same fragment again and again. Would you like to test it for me? You can download at JkDefrag-3.27b1.zip. Thanks for your help, I appreciate it!

With 3.27b1, it didn't hang at any file, but it gave warnings about Inodes:

Code:

17:13:04 Commandline argument '-a' accepted, optimizemode = 5
17:13:04 Commandline argument '-d' accepted, debug = 6
17:13:04 JkDefrag v3.27b1
17:13:04 Date: 2007/10/01
17:13:04 NtfsDisableLastAccessUpdate is inactive, using LastAccessTime for SpaceHogs.
17:13:04 Analyzing volume 'A:\'
17:13:04 Ignoring volume 'A:\' because it is a removable disk.
17:13:04 Analyzing volume 'C:\'
17:13:04 Starting JkDefrag for 'C:\'
17:13:04 Opening volume '\\?\Volume{9b3514b9-6ebd-11dc-9ba0-806d6172696f}' at mountpoint 'C:'
17:13:04 MftStartLcn=4, MftZoneStart=4800, MftZoneEnd=1220960, Mft2StartLcn=4883756, MftValidDataLength=4808
17:13:04 MftExcludes[0].Start=4, MftExcludes[0].End=4812
17:13:04 MftExcludes[1].Start=4800, MftExcludes[1].End=1220960
17:13:04 MftExcludes[2].Start=4883756, MftExcludes[2].End=4888564
17:13:04 Phase 1: Analyze
17:13:04   Disk cookie: 202020205346544E
17:13:04   BytesPerSector: 512
17:13:04   TotalSectors: 78140096
17:13:04   SectorsPerCluster: 8
17:13:04   SectorsPerTrack: 63
17:13:04   NumberOfHeads: 255
17:13:04   MftStartLcn: 4
17:13:04   Mft2StartLcn: 4883756
17:13:04   BytesPerMftRecord: 1024
17:13:04   ClustersPerIndexRecord: 1
17:13:04   MediaType: F8
17:13:04   VolumeSerialNumber: D4F0C08FF0C078EE
17:13:04 Processing Inode 0...
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 3: $FILE_NAME
17:13:04     Long filename = '$MFT'
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent: Lcn=4, Vcn=0, NextVcn=4808
17:13:04   Attribute 5: $BITMAP
17:13:04     Creating new stream: ':$BITMAP'
17:13:04     Extent: Lcn=2, Vcn=0, NextVcn=1
17:13:04 MftDataBytes = 19693568, MftBitmapBytes = 2408
17:13:04 Reading $MFT::$BITMAP into memory
17:13:04 Reading $MFT::$BITMAP into memory
17:13:04   Extent Lcn=2, RealVcn=0, Size=1
17:13:04     Reading 1 clusters (4096 bytes) from LCN=2
17:13:04 Reading block of 256 Inodes from MFT into memory, 262144 bytes from LCN=4
17:13:04 Processing Inode 1...
17:13:04   Warning: Inode 1 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $FILE_NAME
17:13:04     Long filename = '$MFTMirr'
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent: Lcn=4883756, Vcn=0, NextVcn=1
17:13:04 Processing Inode 2...
17:13:04   Warning: Inode 2 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $FILE_NAME
17:13:04     Long filename = '$LogFile'
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent: Lcn=4883757, Vcn=0, NextVcn=16384
17:13:04 Processing Inode 3...
17:13:04   Warning: Inode 3 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 1: $FILE_NAME
17:13:04     Long filename = '$Volume'
17:13:04   Attribute 6: $OBJECT_ID
17:13:04   Attribute 2: $SECURITY_DESCRIPTOR
17:13:04   Attribute 4: $VOLUME_NAME
17:13:04   Attribute 5: $VOLUME_INFORMATION
17:13:04   Attribute 3: $DATA
17:13:04 Processing Inode 4...
17:13:04   Warning: Inode 4 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $FILE_NAME
17:13:04     Long filename = '$AttrDef'
17:13:04   Attribute 3: $SECURITY_DESCRIPTOR
17:13:04   Attribute 4: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent: Lcn=1539708, Vcn=0, NextVcn=1
17:13:04 Processing Inode 5...
17:13:04   Warning: Inode 5 contains a different MFTRecordNumber 0
17:13:04     Creating new stream: '$I30:$INDEX_ALLOCATION'
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 1: $FILE_NAME
17:13:04     Long filename = '.'
17:13:04   Attribute 2: $SECURITY_DESCRIPTOR
17:13:04   Attribute 6: $INDEX_ROOT
17:13:04   Attribute 8: $INDEX_ALLOCATION
17:13:04     Appending rundata to existing stream: '$I30:$INDEX_ALLOCATION
17:13:04     Extent: Lcn=1220960, Vcn=0, NextVcn=1
17:13:04   Attribute 7: $BITMAP
17:13:04 Processing Inode 6...
17:13:04   Warning: Inode 6 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $FILE_NAME
17:13:04     Long filename = '$Bitmap'
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent: Lcn=4900151, Vcn=0, NextVcn=299
17:13:04 Processing Inode 7...
17:13:04   Warning: Inode 7 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $FILE_NAME
17:13:04     Long filename = '$Boot'
17:13:04   Attribute 3: $SECURITY_DESCRIPTOR
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent (virtual): Vcn=0, NextVcn=2
17:13:04 Processing Inode 8...
17:13:04   Warning: Inode 8 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 3: $FILE_NAME
17:13:04     Long filename = '$BadClus'
17:13:04   Attribute 2: $DATA
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: '$Bad:$DATA'
17:13:04     Extent (virtual): Vcn=0, NextVcn=9767512
17:13:04 Processing Inode 9...
17:13:04   Inode 9 has Flags = 9
17:13:04   Warning: Inode 9 contains a different MFTRecordNumber 57658
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 7: $FILE_NAME
17:13:04     Long filename = '$Secure'
17:13:04   Attribute 15: $ATTRIBUTE_LIST
17:13:04     Processing AttributeList for Inode 9, 344 bytes
17:13:04     List attribute: $DATA
17:13:04       LowestVcn = 0, RefInode = 9349, InodeSequence = 1, Instance = 0
17:13:04       AttributeList name = '$SDS'
17:13:04       Processing Inode 9349 Instance 0
17:13:04   Attribute 0: $DATA
17:13:04     Creating new stream: '$SDS:$DATA'
17:13:04     Extent: Lcn=1364553, Vcn=0, NextVcn=92
17:13:04     Extent: Lcn=2003073, Vcn=92, NextVcn=93
17:13:04       Finished processing Inode 9349 Instance 0
17:13:04     List attribute: $INDEX_ROOT
17:13:04       LowestVcn = 0, RefInode = 9349, InodeSequence = 1, Instance = 1
17:13:04       AttributeList name = '$SDH'
17:13:04       Processing Inode 9349 Instance 1
17:13:04   Attribute 1: $INDEX_ROOT
17:13:04       Finished processing Inode 9349 Instance 1
17:13:04     List attribute: $INDEX_ROOT
17:13:04       LowestVcn = 0, RefInode = 11449, InodeSequence = 2, Instance = 0
17:13:04       AttributeList name = '$SII'
17:13:04       Processing Inode 11449 Instance 0
17:13:04   Attribute 0: $INDEX_ROOT
17:13:04       Finished processing Inode 11449 Instance 0
17:13:04     List attribute: $INDEX_ALLOCATION
17:13:04       LowestVcn = 0, RefInode = 11449, InodeSequence = 2, Instance = 1
17:13:04       AttributeList name = '$SDH'
17:13:04       Processing Inode 11449 Instance 1
17:13:04   Attribute 1: $INDEX_ALLOCATION
17:13:04     Creating new stream: '$SDH:$INDEX_ALLOCATION'
17:13:04     Extent: Lcn=1619655, Vcn=0, NextVcn=8
17:13:04       Finished processing Inode 11449 Instance 1
17:13:04     List attribute: $INDEX_ALLOCATION
17:13:04       LowestVcn = 0, RefInode = 11449, InodeSequence = 2, Instance = 2
17:13:04       AttributeList name = '$SII'
17:13:04       Processing Inode 11449 Instance 2
17:13:04   Attribute 2: $INDEX_ALLOCATION
17:13:04     Creating new stream: '$SII:$INDEX_ALLOCATION'
17:13:04     Extent: Lcn=1619714, Vcn=0, NextVcn=7
17:13:04       Finished processing Inode 11449 Instance 2
17:13:04     List attribute: $BITMAP
17:13:04       LowestVcn = 0, RefInode = 11449, InodeSequence = 2, Instance = 3
17:13:04       AttributeList name = '$SDH'
17:13:04       Processing Inode 11449 Instance 3
17:13:04   Attribute 3: $BITMAP
17:13:04       Finished processing Inode 11449 Instance 3
17:13:04     List attribute: $BITMAP
17:13:04       LowestVcn = 0, RefInode = 11449, InodeSequence = 2, Instance = 4
17:13:04       AttributeList name = '$SII'
17:13:04       Processing Inode 11449 Instance 4
17:13:04   Attribute 4: $BITMAP
17:13:04       Finished processing Inode 11449 Instance 4
17:13:04 Processing Inode 10...
17:13:04   Warning: Inode 10 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $FILE_NAME
17:13:04     Long filename = '$UpCase'
17:13:04   Attribute 1: $DATA
17:13:04     Creating new stream: ':$DATA'
17:13:04     Extent: Lcn=1619158, Vcn=0, NextVcn=32
17:13:04 Processing Inode 11...
17:13:04   Warning: Inode 11 contains a different MFTRecordNumber 1
17:13:04     Creating new stream: '$I30:$INDEX_ALLOCATION'
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 3: $FILE_NAME
17:13:04     Long filename = '$Extend'
17:13:04   Attribute 4: $INDEX_ROOT
17:13:04 Processing Inode 12...
17:13:04   Warning: Inode 12 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $SECURITY_DESCRIPTOR
17:13:04   Attribute 1: $DATA
17:13:04 Processing Inode 13...
17:13:04   Warning: Inode 13 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $SECURITY_DESCRIPTOR
17:13:04   Attribute 1: $DATA
17:13:04 Processing Inode 14...
17:13:04   Warning: Inode 14 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $SECURITY_DESCRIPTOR
17:13:04   Attribute 1: $DATA
17:13:04 Processing Inode 15...
17:13:04   Warning: Inode 15 contains a different MFTRecordNumber 0
17:13:04   Attribute 0: $STANDARD_INFORMATION
17:13:04   Attribute 2: $SECURITY_DESCRIPTOR
17:13:04   Attribute 1: $DATA
17:13:04 Inode 16 is not in use.
17:13:04 Inode 17 is not in use.
17:13:04 Inode 18 is not in use.
17:13:04 Inode 19 is not in use.
17:13:04 Inode 20 is not in use.
17:13:04 Inode 21 is not in use.
17:13:04 Inode 22 is not in use.
17:13:04 Inode 23 is not in use.
17:13:04 Processing Inode 24...
17:13:04   Warning: Inode 24 contains a different MFTRecordNumber 0