My friend R has a 1GB USB drive, partitioned in a single NTFS chunk. First
thing on discovering its failure to mount was imaging the drive. He ran
ddrescue (which is not the same as dd_rescue) on the image, and it got a
read error at 465M, but no other errors. On testing the resulting image:
(08:39:36 PM) R: testdisk says MFT and MFT mirror are bad.
(08:40:03 PM) R:
http://www.cgsecurity.org/wiki/Advanced_NTFS_Boot_and_MFT_Repair
says
If both MFT and MFTMirr are damaged and thus cannot be repaired using
TestDisk, you might want to try commercial software like Zero Assumption
Recovery, GetDataBack for NTFS or Restorer 2000.
(08:40:09 PM) me: So when you mount -o loop, does df -h . say the right
amount is free?
(08:41:07 PM) R: use % 49
(08:41:19 PM) R: That sounds right
(08:42:04 PM) me: cd mount_point
find . -type f -print0 | xargs -0 ls -lh
(08:42:21 PM) me: Are your files hidden?
(08:45:29 PM) R: ls: reading directory .: Input/output error
What other software should he try? Thanks.
extra data from him:
[root@krebrock bigpapa]# mount -o loop,offset=32256
1TB.img /mnt
Incomplete multi-sector transfer: magic: 0x58444e49 size: 4096 usa_ofs: 40
usa_count: 6 data: 0 usn: 1211: Input/output error
Zero length index entry in inode 5
Incomplete multi-sector transfer: magic: 0x58444e49 size: 4096 usa_ofs: 40
usa_count: 6 data: 0 usn: 1211: Input/output error
Zero length index entry in inode 5
------------------------------------
[root@krebrock bigpapa]# cd /mnt
[root@krebrock mnt]# ls
ls: reading directory .: Input/output error
[root@krebrock mnt]# find -type f |xargs -0 ls -lh
ls: reading directory .: Input/output error
total 0
------------------------------------
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
MFT and MFT mirror are bad. Failed to repair them.
------------------------------------
[root@krebrock bigpapa]# ddrescue --no-split /dev/sdc
/media/bigpapa/1TB.img /media/bigpapa/1TB.log
had 0 errors up top / 1 down below, but replace first arg with --direct
--max-retries=3 , --retrim --max-retries=3, --direct, or --retrim and you
get 1 error in both places.
-- -eben QebWenE01R@vTerYizUonI.nOetP royalty.mine.nu:81Only two things are infinite, the universe and human stupidity, and I'm not sure about the former." -- Albert Einstein ----------------------------------------------------------------------- This list is provided as an unmoderated internet service by Networked Knowledge Systems (NKS). Views and opinions expressed in messages posted are those of the author and do not necessarily reflect the official policy or position of NKS or any of its employees.
This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 15:01:37 EDT