Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations TouchToneTommy on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

please just one file ! NTFS a bit corrupt

Status
Not open for further replies.

bilfast

IS-IT--Management
Sep 22, 2002
17


hi everyone. i've got a dodgy computer and
windows 2000 on it. the computer hangs up
and we have to reboot. somewhere along the
line the MFT got corrupt. so chkdsk tried
to solve some problems (inconsistencies) and
it usually deletes data in order to fix them.

its approach kill, bury, deny !!

on last run this is what happened



Code:
C:\>chkdsk /?
Checks a disk and displays a status report.


CHKDSK [volume[[path]filename]]] [/F] [/V] [/R] [/X] [/I] [/C] [/L[:size]]


  volume          Specifies the drive letter (followed by a colon),
                  mount point, or volume name.
  filename        FAT only: Specifies the files to check for fragmentation.
  /F              Fixes errors on the disk.
  /V              On FAT/FAT32: Displays the full path and name of every file
                  on the disk.
                  On NTFS: Displays cleanup messages if any.
  /R              Locates bad sectors and recovers readable information
                  (implies /F).
  /L:size         NTFS only:  Changes the log file size to the specified number
                  of kilobytes.  If size is not specified, displays current
                  size.
  /X              Forces the volume to dismount first if necessary.
                  All opened handles to the volume would then be invalid
                  (implies /F).
  /I              NTFS only: Performs a less vigorous check of index entries.
  /C              NTFS only: Skips checking of cycles within the folder
                  structure.

The /I or /C switch reduces the amount of time required to run Chkdsk by
skipping certain checks of the volume.

C:\>chkdsk d: /x /i /c
The type of the file system is NTFS.
Volume label is Sixty Gig.

WARNING!  I parameter specified.
WARNING!  C parameter specified.
Your drive may still be corrupt even after running CHKDSK.

CHKDSK is verifying files (stage 1 of 3)...
Deleted corrupt attribute list entry
with type code 128 in file 73959.
Deleting corrupt attribute record (128, "") from file record segment 73960.

>>>>>>>>>>>>>>>repeated lines up until the next record

Deleting corrupt attribute record (128, "") from file record segment 74027.
File verification completed.
Deleting orphan file record segment 73960.

>>>>>>>>>>>>>>>repeated lines up until the next record

Deleting orphan file record segment 74027.
CHKDSK is verifying indexes (stage 2 of 3)...
Index verification completed.
CHKDSK is verifying security descriptors (stage 3 of 3)...
Security descriptor verification completed.
Inserting data attribute into file 73959.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

  66083345 KB total disk space.
  35595480 KB in 44816 files.
     18180 KB in 4019 indexes.
         0 KB in bad sectors.
    167861 KB in use by the system.
     65536 KB occupied by the log file.
  30301824 KB available on disk.

      4096 bytes in each allocation unit.
  16520836 total allocation units on disk.
   7575456 allocation units available on disk.

C:\>

C:\>chkdsk d:
The type of the file system is NTFS.
Volume label is Sixty Gig.

WARNING!  F parameter not specified.
Running CHKDSK in read-only mode.

CHKDSK is verifying files (stage 1 of 3)...
File verification completed.
CHKDSK is verifying indexes (stage 2 of 3)...
Index verification completed.
CHKDSK is verifying security descriptors (stage 3 of 3)...
Security descriptor verification completed.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows found problems with the file system.
Run CHKDSK with the /F (fix) option to correct these.

  66083345 KB total disk space.
  35595480 KB in 44816 files.
     18180 KB in 4019 indexes.
         0 KB in bad sectors.
    167869 KB in use by the system.
     65536 KB occupied by the log file.
  30301816 KB available on disk.

      4096 bytes in each allocation unit.
  16520836 total allocation units on disk.
   7575454 allocation units available on disk.

C:\>chkdsk d: /f
The type of the file system is NTFS.
Volume label is Sixty Gig.

CHKDSK is verifying files (stage 1 of 3)...
File verification completed.
CHKDSK is verifying indexes (stage 2 of 3)...
Index verification completed.
CHKDSK is verifying security descriptors (stage 3 of 3)...
Security descriptor verification completed.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Insufficient disk space to fix volume bitmap.  CHKDSK aborted.

C:\>



So i guess ntfs is corrupt because i cannot create
any files in the partition. although the
directory structure and file content is mostly preserved.
one of the files acerdisk.gho about 3.5GB is
reported as 0 bytes which i'm trying to fix.
any tools that can do that ?

i've tried active file recovery and this is the screenshot.
notice it says zero bytes. but i'm sure the huge file
is still on the volume.

Please help !!



activefilerecoveryreportzs5.png
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top