Can't read NTFS MFT

Utiliser TestDisk pour réparer le système de fichier
Locked
Message
Author
bderrien
Posts: 2
Joined: 18 May 2012, 18:29

Can't read NTFS MFT

#1 Post by bderrien »

Bonjour,

Voici le problème qui m'occupe. Il s'agit de récupérer le disque dur d'un ancien PC portable. La structure du disque est toujours celle installée par le fabriquant de pc: le DD fait 320Go avec 2 partitions: une comprenant la restauration du système et une autre, la principale, seule visible en utilisation quand le pc fonctionnait.

Le disque est désormais utilisé en usb, dans un boitier externe.

Depuis aujourd'hui, il n'est plus reconnu lorsqu'on le branche : message "disque dur non formaté". Dans les propriétés, windows indique un système de fichier RAW.

Le fichier log, avec la version testdisk 6.13, est ci-dessous :

Code: Select all


Fri May 18 17:23:47 2012
Command line: TestDisk

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=120031478784
filewin32_getfilesize(\\.\D:) GetFileSize err Fonction incorrecte.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Fonction incorrecte.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=307185582080
file_pread(4,1,buffer,234452609(14593/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,625153409(38913/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - Hitachi HTS541612J9S, FW:SBDO
Disk /dev/sdb - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD32 00BEVT-22ZCT0, FW:0200

Partition table type (auto): Intel
Disk /dev/sdb - 320 GB / 298 GiB - WDC WD32 00BEVT-22ZCT0
Partition table type: Intel
file_pread(5,1,buffer,625153409(38913/254/63)) lseek err Invalid argument

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 1566/160/3
file_pread(5,4096,buffer,31459328(1958/64/27)) read err: Invalid argument
file_pread(5,1,buffer,31459940(1958/74/9)) read err: Invalid argument
NTFS: Can't read MFT
 1 P Windows RE(store)        0  32 33  1566 160  2   25165824
 2 * HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB

ntfs_boot_sector
 2 * HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
NTFS at 1566/160/3
NTFS at 1566/160/3
filesystem size           599971840
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               37498239
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
repair_MFT
NTFS at 1566/160/3
file_pread(5,4096,buffer,31459328(1958/64/27)) read err: Invalid argument
file_pread(5,1,buffer,31459940(1958/74/9)) read err: Invalid argument
NTFS: Can't read MFT
file_pread(5,4096,buffer,31459328(1958/64/27)) read err: Invalid argument
file_pread(5,1,buffer,31459940(1958/74/9)) read err: Invalid argument
Can't read NTFS MFT.
Can't read NTFS MFT.

ntfs_boot_sector
 2 * HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
NTFS at 1566/160/3
NTFS at 1566/160/3
filesystem size           599971840
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               37498239
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Analyse Disk /dev/sdb - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 1566/160/3
file_pread(5,4096,buffer,31459328(1958/64/27)) read err: Invalid argument
file_pread(5,1,buffer,31459940(1958/74/9)) read err: Invalid argument
NTFS: Can't read MFT
Current partition structure:
 1 P Windows RE(store)        0  32 33  1566 160  2   25165824
 2 * HPFS - NTFS           1566 160  3 38913  37 36  599971840
pread: Input/Output error
Failed to calculate number of free clusters: Input/Output error.
Error reading $Mft record(s): Input/Output error.
Failed to read index block: Input/Output error.
Error reading $Mft record(s): Input/Output error.
Error reading $Mft record(s): Input/Output error.
Error reading $Mft record(s): No such file or directory.
Computes LBA from CHS for Disk /dev/sdb - 320 GB / 298 GiB - CHS 38914 255 63
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sdb - 320 GB / 298 GiB - CHS 38914 255 63
NTFS at 0/32/33
filesystem size           25165824
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               1572863
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
NTFS at 1566/160/3
filesystem size           599971840
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               37498239
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(5,4096,buffer,31459328(1958/64/27)) read err: Invalid argument
file_pread(5,1,buffer,31459940(1958/74/9)) read err: Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
file_pread(5,2,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(5,1,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(5,8,buffer,625142528(38913/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,625142528(38913/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,625142656(38913/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,625142784(38913/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,625142912(38913/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,625143040(38913/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,625143168(38913/92/28)) lseek err Invalid argument
file_pread(5,8,buffer,625143296(38913/94/30)) lseek err Invalid argument
file_pread(5,8,buffer,625143424(38913/96/32)) lseek err Invalid argument
file_pread(5,8,buffer,625143552(38913/98/34)) lseek err Invalid argument
file_pread(5,8,buffer,625143680(38913/100/36)) lseek err Invalid argument
file_pread(5,7,buffer,625143809(38913/102/39)) lseek err Invalid argument
file_pread(5,8,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(5,8,buffer,625143816(38913/102/46)) lseek err Invalid argument
file_pread(5,3,buffer,625143824(38913/102/54)) lseek err Invalid argument
file_pread(5,3,buffer,625143871(38913/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,625143887(38913/103/54)) lseek err Invalid argument
file_pread(5,11,buffer,625143934(38913/104/38)) lseek err Invalid argument
file_pread(5,2,buffer,625145856(38913/135/7)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB


dir_partition inode=5
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 .
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 ..
      38 -r--r--r--     0      0         0  8-Jun-2009 22:28 100_CR.DAT
     332 dr-xr-xr-x     0      0         0 16-Jul-2009 21:15 acerBoot
      39 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 boot
      49 -r--r--r--     0      0    333203 18-Jan-2008 16:45 BOOTMGR
      71 dr-xr-xr-x     0      0         0 16-Jul-2009 21:16 D2D
      50 dr-xr-xr-x     0      0         0 16-Jul-2009 21:16 EFI
     408 -r--r--r--     0      0       560  9-Jun-2009 00:29 Flag.log
     435 -r--r--r--     0      0       122 16-Jul-2009 21:18 ImageInfo.dat
      60 -r--r--r--     0      0        66 16-Dec-2008 07:27 NAPP.DAT
      61 dr-xr-xr-x     0      0         0  8-Jun-2009 22:29 NAPP6_TEMPLATES
      35 -r--r--r--     0      0     11872 16-Jul-2009 21:36 Napp7.log
     436 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Program Files
     524 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ProgramData
     164 -r--r--r--     0      0       345 21-May-2009 12:24 RCD.DAT
     409 -r--r--r--     0      0         0 16-Jul-2009 21:36 Restore.dat
      36 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 RyTools
     330 dr-xr-xr-x     0      0         0 19-May-2006 08:51 sources
   18744 dr-xr-xr-x     0      0         0 29-Nov-2009 16:33 System Volume Information
     242 -r--r--r--     0      0      2830  2-Jun-2009 09:01 SystemCD.DAT
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Users
   18738 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 WIM_TEMP
     627 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 Windows
     100 dr-xr-xr-x     0      0         0  8-Jun-2009 22:30 WINRE

dir_partition inode=590
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
Directory /Users
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 ..
     591 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Default
     619 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Public

dir_partition inode=591
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
Directory /Users/Default
     591 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ..
     592 dr-xr-xr-x     0      0         0 19-May-2006 08:51 AppData
     610 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Desktop
     611 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Documents
     612 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Downloads
     613 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Favorites
     614 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Links
     615 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Music
    1531 -r--r--r--     0      0    262144 16-Jul-2009 21:19 NTUSER.DAT
    1532 -r--r--r--     0      0     29696 16-Jul-2009 21:19 NTUSER.DAT.LOG1
   18684 -r--r--r--     0      0         0 19-Jan-2008 09:44 NTUSER.DAT.LOG2
    1533 -r--r--r--     0      0     65536 19-May-2006 00:23 NTUSER.DAT{7d5ec6f2-c5bc-11dc-a02b-0019bbe6a65a}.TM.blf
    1534 -r--r--r--     0      0    524288 19-May-2006 00:23 NTUSER.DAT{7d5ec6f2-c5bc-11dc-a02b-0019bbe6a65a}.TMContainer00000000000000000001.regtrans-ms
    1542 -r--r--r--     0      0    524288 19-Jan-2008 11:02 NTUSER.DAT{7d5ec6f2-c5bc-11dc-a02b-0019bbe6a65a}.TMContainer00000000000000000002.regtrans-ms
     616 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Pictures
     617 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Saved Games
     618 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Videos

dir_partition inode=611
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
Directory /Users/Default/Documents
     611 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 .
     591 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ..
Directory /Users/Default
     591 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ..
     592 dr-xr-xr-x     0      0         0 19-May-2006 08:51 AppData
     610 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Desktop
     611 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Documents
     612 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Downloads
     613 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Favorites
     614 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Links
     615 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Music
    1531 -r--r--r--     0      0    262144 16-Jul-2009 21:19 NTUSER.DAT
    1532 -r--r--r--     0      0     29696 16-Jul-2009 21:19 NTUSER.DAT.LOG1
   18684 -r--r--r--     0      0         0 19-Jan-2008 09:44 NTUSER.DAT.LOG2
    1533 -r--r--r--     0      0     65536 19-May-2006 00:23 NTUSER.DAT{7d5ec6f2-c5bc-11dc-a02b-0019bbe6a65a}.TM.blf
    1534 -r--r--r--     0      0    524288 19-May-2006 00:23 NTUSER.DAT{7d5ec6f2-c5bc-11dc-a02b-0019bbe6a65a}.TMContainer00000000000000000001.regtrans-ms
    1542 -r--r--r--     0      0    524288 19-Jan-2008 11:02 NTUSER.DAT{7d5ec6f2-c5bc-11dc-a02b-0019bbe6a65a}.TMContainer00000000000000000002.regtrans-ms
     616 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Pictures
     617 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Saved Games
     618 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Videos
Directory /Users
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 ..
     591 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Default
     619 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Public

dir_partition inode=619
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
Directory /Users/Public
     619 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ..
     620 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Desktop
     621 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Documents
     622 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Downloads
     623 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Favorites
     624 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Music
     625 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Pictures
     626 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Videos

dir_partition inode=621
   * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
     NTFS, 12 GB / 12 GiB
Directory /Users/Public/Documents
     621 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 .
     619 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ..
Directory /Users/Public
     619 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ..
     620 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Desktop
     621 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Documents
     622 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Downloads
     623 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Favorites
     624 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Music
     625 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Pictures
     626 dr-xr-xr-x     0      0         0 19-Jan-2008 09:45 Videos
Directory /Users
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 .
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 ..
     591 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Default
     619 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Public
Directory /
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 .
       5 dr-xr-xr-x     0      0         0 16-Jul-2009 11:39 ..
      38 -r--r--r--     0      0         0  8-Jun-2009 22:28 100_CR.DAT
     332 dr-xr-xr-x     0      0         0 16-Jul-2009 21:15 acerBoot
      39 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 boot
      49 -r--r--r--     0      0    333203 18-Jan-2008 16:45 BOOTMGR
      71 dr-xr-xr-x     0      0         0 16-Jul-2009 21:16 D2D
      50 dr-xr-xr-x     0      0         0 16-Jul-2009 21:16 EFI
     408 -r--r--r--     0      0       560  9-Jun-2009 00:29 Flag.log
     435 -r--r--r--     0      0       122 16-Jul-2009 21:18 ImageInfo.dat
      60 -r--r--r--     0      0        66 16-Dec-2008 07:27 NAPP.DAT
      61 dr-xr-xr-x     0      0         0  8-Jun-2009 22:29 NAPP6_TEMPLATES
      35 -r--r--r--     0      0     11872 16-Jul-2009 21:36 Napp7.log
     436 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Program Files
     524 dr-xr-xr-x     0      0         0 19-May-2006 08:51 ProgramData
     164 -r--r--r--     0      0       345 21-May-2009 12:24 RCD.DAT
     409 -r--r--r--     0      0         0 16-Jul-2009 21:36 Restore.dat
      36 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 RyTools
     330 dr-xr-xr-x     0      0         0 19-May-2006 08:51 sources
   18744 dr-xr-xr-x     0      0         0 29-Nov-2009 16:33 System Volume Information
     242 -r--r--r--     0      0      2830  2-Jun-2009 09:01 SystemCD.DAT
     590 dr-xr-xr-x     0      0         0 19-May-2006 08:51 Users
   18738 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 WIM_TEMP
     627 dr-xr-xr-x     0      0         0 16-Jul-2009 21:19 Windows
     100 dr-xr-xr-x     0      0         0  8-Jun-2009 22:30 WINRE
file_pread(5,16,buffer,325154064(20239/230/40)) read err: No such file or directory
file_pread(5,16,buffer,325154072(20239/230/48)) read err: No such file or directory
file_pread(5,1,buffer,325154073(20239/230/49)) read err: No such file or directory
file_pread(5,6,buffer,325154074(20239/230/50)) read err: No such file or directory
file_pread(5,16,buffer,325155329(20239/250/45)) read err: No such file or directory
file_pread(5,1,buffer,325155333(20239/250/49)) read err: No such file or directory
file_pread(5,2,buffer,325155334(20239/250/50)) read err: No such file or directory
file_pread(5,16,buffer,325156589(20240/15/45)) read err: No such file or directory
file_pread(5,1,buffer,325156593(20240/15/49)) read err: No such file or directory
file_pread(5,3,buffer,325156594(20240/15/50)) read err: No such file or directory
file_pread(5,16,buffer,325157849(20240/35/45)) read err: No such file or directory
file_pread(5,1,buffer,325157853(20240/35/49)) read err: No such file or directory
file_pread(5,3,buffer,325157854(20240/35/50)) read err: No such file or directory
file_pread(5,16,buffer,325159109(20240/55/45)) read err: No such file or directory
file_pread(5,1,buffer,325159113(20240/55/49)) read err: No such file or directory
file_pread(5,3,buffer,325159114(20240/55/50)) read err: No such file or directory
file_pread(5,16,buffer,325160369(20240/75/45)) read err: No such file or directory
file_pread(5,1,buffer,325160373(20240/75/49)) read err: No such file or directory
file_pread(5,3,buffer,325160374(20240/75/50)) read err: No such file or directory
file_pread(5,16,buffer,325161629(20240/95/45)) read err: No such file or directory
file_pread(5,1,buffer,325161633(20240/95/49)) read err: No such file or directory
file_pread(5,3,buffer,325161634(20240/95/50)) read err: No such file or directory
file_pread(5,16,buffer,325162889(20240/115/45)) read err: No such file or directory
file_pread(5,1,buffer,325162893(20240/115/49)) read err: No such file or directory
file_pread(5,16,buffer,325166865(20240/178/52)) read err: No such file or directory
file_pread(5,1,buffer,325166869(20240/178/56)) read err: No such file or directory
file_pread(5,3,buffer,325166870(20240/178/57)) read err: No such file or directory
file_pread(5,16,buffer,325168125(20240/198/52)) read err: No such file or directory
file_pread(5,1,buffer,325168129(20240/198/56)) read err: No such file or directory
file_pread(5,16,buffer,325169381(20240/218/48)) read err: No such file or directory
file_pread(5,16,buffer,325169389(20240/218/56)) read err: No such file or directory
file_pread(5,1,buffer,325169389(20240/218/56)) read err: No such file or directory
NTFS filesystem need to be repaired.


dir_partition inode=5
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
file_pread(5,16,buffer,31477862(1959/103/39)) read err: No such file or directory
file_pread(5,1,buffer,31477862(1959/103/39)) read err: No such file or directory
ntfs_readdir failed
Directory /
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
    2121 dr-xr-xr-x     0      0         0 16-Dec-2011 11:32 Boot
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 $INPLACE.~TR
      35 dr-xr-xr-x     0      0         0  4-Mar-2012 19:43 $Recycle.Bin
  186853 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 $WINDOWS.~Q
      37 dr-xr-xr-x     0      0         0 18-Oct-2009 15:23 ACER

dir_partition inode=180316
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 Data
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 Machine

dir_partition inode=180592
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 .
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 DATA

dir_partition inode=180593
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180640 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Program Files
  180594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ProgramData
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Users
  180598 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Windows

dir_partition inode=185982
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186306 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Virginie

dir_partition inode=186306
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie
  186306 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186307 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 AppData

dir_partition inode=186307
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData
  186307 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  186306 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Roaming

dir_partition inode=186594
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming
  186594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  186307 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186714 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Microsoft

dir_partition inode=186714
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming/Microsoft
  186714 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  186594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186722 dr-xr-xr-x     0      0         0  6-Dec-2009 15:30 Internet Explorer
  186731 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Windows

dir_partition inode=186722
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming/Microsoft/Internet Explorer
  186722 dr-xr-xr-x     0      0         0  6-Dec-2009 15:30 .
  186714 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186723 dr-xr-xr-x     0      0         0  6-Dec-2009 16:08 Quick Launch

dir_partition inode=186723
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming/Microsoft/Internet Explorer/Quick Launch
  186723 dr-xr-xr-x     0      0         0  6-Dec-2009 16:08 .
  186722 dr-xr-xr-x     0      0         0  6-Dec-2009 15:30 ..
    4924 -r--r--r--     0      0       258 21-Jan-2008 03:42 Shows Desktop.lnk
    4923 -r--r--r--     0      0       240 21-Jan-2008 03:42 Window Switcher.lnk
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming/Microsoft/Internet Explorer
  186722 dr-xr-xr-x     0      0         0  6-Dec-2009 15:30 .
  186714 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186723 dr-xr-xr-x     0      0         0  6-Dec-2009 16:08 Quick Launch
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming/Microsoft
  186714 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  186594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186722 dr-xr-xr-x     0      0         0  6-Dec-2009 15:30 Internet Explorer
  186731 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Windows
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData/Roaming
  186594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  186307 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186714 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Microsoft
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie/AppData
  186307 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  186306 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Roaming
Directory /$INPLACE.~TR/Machine/DATA/Users/Virginie
  186306 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186307 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 AppData
Directory /$INPLACE.~TR/Machine/DATA/Users
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
  186306 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Virginie
Directory /$INPLACE.~TR/Machine/DATA
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180640 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Program Files
  180594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ProgramData
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Users
  180598 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Windows

dir_partition inode=180640
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
file_pread(5,16,buffer,39461216(2456/88/33)) read err: No such file or directory
file_pread(5,1,buffer,39461220(2456/88/37)) read err: No such file or directory
file_pread(5,3,buffer,39461221(2456/88/38)) read err: No such file or directory
ntfs_readdir failed
Directory /$INPLACE.~TR/Machine/DATA/Program Files
  180640 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ..
Directory /$INPLACE.~TR/Machine/DATA
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 .
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180640 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Program Files
  180594 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 ProgramData
  185982 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Users
  180598 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 Windows
Directory /$INPLACE.~TR/Machine
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 .
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180593 dr-xr-xr-x     0      0         0  6-Dec-2009 16:10 DATA
Directory /$INPLACE.~TR
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 Data
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 Machine

dir_partition inode=180417
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Data
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 .
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180418 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 DATA

dir_partition inode=180418
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Data/DATA
  180418 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 .
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 ..
  180421 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 Windows

dir_partition inode=180421
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
Directory /$INPLACE.~TR/Data/DATA/Windows
  180421 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 .
  180418 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 ..
  180457 dr-xr-xr-x     0      0         0  6-Dec-2009 16:15 Media
  180429 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 System32
Directory /$INPLACE.~TR/Data/DATA
  180418 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 .
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 ..
  180421 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 Windows
Directory /$INPLACE.~TR/Data
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 .
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 ..
  180418 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 DATA
Directory /$INPLACE.~TR
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
  180417 dr-xr-xr-x     0      0         0  6-Dec-2009 15:25 Data
  180592 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 Machine
file_pread(5,16,buffer,31477862(1959/103/39)) read err: No such file or directory
file_pread(5,1,buffer,31477862(1959/103/39)) read err: No such file or directory
ntfs_readdir failed
Directory /
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
    2121 dr-xr-xr-x     0      0         0 16-Dec-2011 11:32 Boot
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 $INPLACE.~TR
      35 dr-xr-xr-x     0      0         0  4-Mar-2012 19:43 $Recycle.Bin
  186853 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 $WINDOWS.~Q
      37 dr-xr-xr-x     0      0         0 18-Oct-2009 15:23 ACER

dir_partition inode=37
   P HPFS - NTFS           1566 160  3 38913  37 36  599971840
     NTFS, 307 GB / 286 GiB
file_pread(5,16,buffer,31488634(1960/19/38)) read err: No such file or directory
file_pread(5,1,buffer,31488634(1960/19/38)) read err: No such file or directory
ntfs_readdir failed
Directory /ACER
      37 dr-xr-xr-x     0      0         0 18-Oct-2009 15:23 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
   96213 -r--r--r--     0      0      1939 16-Jul-2009 11:59 eRyInstallerV4.log
file_pread(5,1,buffer,31477863(1959/103/40)) read err: No such file or directory
ntfs_readdir failed
Directory /
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 .
       5 dr-xr-xr-x     0      0         0 25-Mar-2012 17:07 ..
    2121 dr-xr-xr-x     0      0         0 16-Dec-2011 11:32 Boot
  180316 dr-xr-xr-x     0      0         0  6-Dec-2009 15:27 $INPLACE.~TR
      35 dr-xr-xr-x     0      0         0  4-Mar-2012 19:43 $Recycle.Bin
  186853 dr-xr-xr-x     0      0         0  6-Dec-2009 16:16 $WINDOWS.~Q
      37 dr-xr-xr-x     0      0         0 18-Oct-2009 15:23 ACER

interface_write()
 1 * HPFS - NTFS              0  32 33  1566 160  2   25165824 [PQSERVICE]
 2 P HPFS - NTFS           1566 160  3 38913  37 36  599971840
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Les partitions actuellement existantes, d'après testdisk, indiquent que la 2ème partition de 307Go est la partition bootable et la 1ère de 12Go est une partition principale.
Quand je fais une analyse, testdisk semble indiquer que c'est l'inverse: la 1ère doit être la partition bootable et la seconde une partition principale.
Avec la touche "p" les fichiers sont accessible mais on dirait qu'ils ne sont pas tous là, je n'ai notamment pas trouvé les fichiers utilisateurs auxquels on accédait avant.

Dans le log il est noté le message "Can't read NTFS MFT" avec des erreurs de lecture.
J'ai essayé dans le menu avancé de testdisk de lancer la commande "repair MFT" mais ça n'a pas fonctionné (ligne 67 du fichier log).

La question que je me pose avant de continuer: est-ce que je vais jusqu'au bout de la procédure liée à la poartition, pour remettre la bonne partition bootable, alors que je ne peux pas voir tous les fichiers normalement ? Je me dis que c'est la première étape et que je devrai réessayer ensuite de réparer à nouveau la MFT...

Si quelqu'un peut m'aider...! Merci :) .
Benoît

User avatar
remy
Posts: 457
Joined: 25 Mar 2012, 10:21
Location: Strasbourg, France.
Contact:

Re: Can't read NTFS MFT

#2 Post by remy »

Il semble qu'il y ait des erreurs physiques sur le disque, il me paraît plus sage de commencer par une duplication bit à bit et travailler sur une copie.

bderrien
Posts: 2
Joined: 18 May 2012, 18:29

Re: Can't read NTFS MFT

#3 Post by bderrien »

Ok, merci beaucoup pour la réponse.
Je posterai la suite "des aventures" au fur et à mesure que j'avancerai... ;)
Je vais me mettre en quête d'une appli (je crois que ça ne manque pas) et surtout d'espace disque pour lancer la duplication...

En passant, est-ce également risqué d'utiliser photorec pour récupérer certaines données avant de faire la duplication ?

User avatar
remy
Posts: 457
Joined: 25 Mar 2012, 10:21
Location: Strasbourg, France.
Contact:

Re: Can't read NTFS MFT

#4 Post by remy »

Toute sollicitation d'un disque malade est risquée...
Pour faire la duplication, le mieux que je connaisse est ddrescue (paquet gddrescue) sous linux. Tu peux le lancer depuis un liveCD. Si tu veux de l'aide à ce sujet, direction le forum ubuntu, et cherches "rmy", ou le topic de centralisation des cas de récupération de données. Je fais aussi de l'assistance par là bas, en plus de faire de la récup' mon métier.

Locked