Welcome, Guest. Please login or register.
Did you miss your activation email?
September 26, 2017, 10:12:43 AM
Home Help Search Login Register
News:

+  DIY DataRecovery.nl Support forum
|-+  Support
| |-+  General Data Recovery (Moderators: Tom, Joep)
| | |-+  Seeking NTFS Recovery Steps
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: Seeking NTFS Recovery Steps  (Read 4280 times)
johnywhy
member

Posts: 2


« on: May 15, 2015, 09:34:37 PM »

hi

can someone direct me to a guide for recovering an ntfs volume?

i'm using linux.

the drive can mount, and reports nearly full, but appears to be empty in file-manager.

it's an external usb ntfs-formatted 500 GB HD. Last time i checked, the disk had a couple hundred GB of files on it (but NOT almost full as now reporting).

now all the files are gone, and the drive reports "68 GB" free. the partition is visible, but it's empty.

really appreciate any help, these are my only backups of some important files.

at first, gparted info reported "cluster accounting failed".

then i tried the following:

Code:
# e2fsck -n /dev/sdb1
e2fsck 1.42.8 (20-Jun-2013)
ext2fs_open2: Bad magic number in super-block
e2fsck: Superblock invalid, trying backup blocks...
e2fsck: Bad magic number in super-block while trying to open /dev/sdb1

The superblock could not be read or does not describe a correct ext2
filesystem.  If the device is valid and it really contains an ext2
filesystem (and not swap or ufs or something else), then the superblock
is corrupt, and you might try running e2fsck with an alternate superblock:
    e2fsck -b 8193 <device>

# ntfsfix /dev/sdb1
Mounting volume... OK
Processing of $MFT and $MFTMirr completed successfully.
Checking the alternate boot sector... OK
NTFS volume version is 3.1.
NTFS partition /dev/sdb1 was processed successfully.

# fsck /dev/sdb1
fsck from util-linux 2.21.2
fsck: fsck.ntfs: not found
fsck: error 2 while executing fsck.ntfs for /dev/sdb1

# fsck /dev/sdb
fsck from util-linux 2.21.2
e2fsck 1.42.8 (20-Jun-2013)
ext2fs_open2: Bad magic number in super-block
fsck.ext2: Superblock invalid, trying backup blocks...
fsck.ext2: Bad magic number in super-block while trying to open /dev/sdb

The superblock could not be read or does not describe a correct ext2
filesystem.  If the device is valid and it really contains an ext2
filesystem (and not swap or ufs or something else), then the superblock
is corrupt, and you might try running e2fsck with an alternate superblock:
    e2fsck -b 8193 <device>

i made sure the drive was not mounted when i ran e2fsck.

after the above, and before mounting the drive, gparted displays an exclamation icon and says:
Quote
Unable to read the contents of this file system!
Because of this some operations may be unavailable.
The cause might be a missing software package.
The following list of software packages is required for ntfs file system support:  ntfsprogs / ntfs-3g.

but, i can mount it. after mounting, gparted says:


perhaps i need to find a windows machine to run  chhdsk. already tried the ntfsprogs and testdisk wout success.

thx!
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #1 on: May 16, 2015, 02:55:10 PM »

Are you asking for help here or spamming (illegally obtained) recovery tools? I assumed the first so I've removed the links from your posting.

Also, if these files are your "only backups" you have originals, right?

If not, I suggest running iRecover on a Windows machine with the problem disk attached. You can run iRecover as a trial version (free to use) to see if the files can be found. Try that first. The iRecover manual will help you through, or you can use this guide:
http://www.diydatarecovery.nl/forum/index.php/topic,368.0.html

Given that you've already tried some "repair" options things may not go as well as they could have (without running the repair options). We warn against running chkdsk on just about every page and in every manual; chkdsk destroys more than it repairs, so don't run it.
Logged

johnywhy
member

Posts: 2


« Reply #2 on: May 16, 2015, 07:26:56 PM »

Illegally obtained? Advertising? That makes no sense:

- All the tools I listed except 1 are free. You cannot "illegally obtain" something that's free to begin with.

- if I was "advertising", i would not promote competing products at the same time. 

I offered the links as a service to other readers.

I've read chkdsk is the recommended solution in several places. I've not seen any mention of problems with it. Can you reference any additional info about that?

Is this forum connected with the product you recommended, iRecover?

Thx!
Logged
Joep
Developer and Support Tech
Administrator
member
*****
Posts: 1457


WWW
« Reply #3 on: May 17, 2015, 08:39:04 AM »

Hello,

You have already met the headmaster I see.

- On running chkdsk (Windows): In general this isn't recommended unless you have another backup. Chkdsk is a file system repair tool, not a data recovery tool. It's goal is a consistent file system. Under conditions it may delete data to achieve consistency.

In general it is not a good idea to try to repair a (NTFS) volume from which data has gone missing because it is very much a one way street. You can't back out if things go worse. Various data recovery tools may be able to recover data, using a largely intact MFT, the chkdsk actions may have made that impossible. You can try iRecover or a similar program, but it requires Windows to run.

I can't really comment on the various tools you are using because I'm not familiar with them. These forums are primarely for supporting the diydatarecovery.nl products and utilities.
Logged

--
Kind regards,
Joep
Pages: [1] Go Up Print 
« previous next »
Jump to:  


Login with username, password and session length

Powered by MySQL Powered by PHP Powered by SMF 1.1.20 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!