Couldn't open $Bitmap / Record is in use by the mft

Using TestDisk to undelete files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
jbreitbart
Posts: 3
Joined: 25 Apr 2015, 13:44

Couldn't open $Bitmap / Record is in use by the mft

#1 Post by jbreitbart »

I am currently trying to restore a NTFS partition of which the start of the patition has been overwritten. I rebuilt the boot sector and the mft using testdisk. Only some of my files showed up after the rebuild. However, a lot / all(?) of them are shown under undelete. I tried to undelete the deleted files, but again only a very small fraction gets copied. The testdisk log file is filled with

Couldn't open $Bitmap
and
Record is in use by the mft

I could not find any information on what this actually means. Can someone give me a hand?

jbreitbart
Posts: 3
Joined: 25 Apr 2015, 13:44

Re: Couldn't open $Bitmap / Record is in use by the mft

#2 Post by jbreitbart »

Anyone got a pointer on what the log messages mean?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Couldn't open $Bitmap / Record is in use by the mft

#3 Post by Fiona »

Info:
https://msdn.microsoft.com/en-us/librar ... 85%29.aspx
$Bitmap contains data about used and free space of your file system.
Chkdsk driveletter: /r might be able to repair a corrupted file system.
Note, chkdsk is a try to repair a file system bit it's not intended to recover data.

Fiona

jbreitbart
Posts: 3
Joined: 25 Apr 2015, 13:44

Re: Couldn't open $Bitmap / Record is in use by the mft

#4 Post by jbreitbart »

Thanks for the link. I'll be trying some other tools, as I don't see a fundamental problem on why hardly any of the files can be restored, based on the information in the link. Maybe I'll be lucky.

Locked