From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-user+bounces-105995-garchives=archives.gentoo.org@lists.gentoo.org>) id 1NTgzZ-0006rP-DH for garchives@archives.gentoo.org; Sat, 09 Jan 2010 19:28:57 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2290AE0930; Sat, 9 Jan 2010 19:27:41 +0000 (UTC) Received: from smtpout.karoo.kcom.com (smtpout.karoo.kcom.com [212.50.160.34]) by pigeon.gentoo.org (Postfix) with ESMTP id CF6ACE0930 for <gentoo-user@lists.gentoo.org>; Sat, 9 Jan 2010 19:27:40 +0000 (UTC) X-IronPort-AV: E=Sophos;i="4.49,248,1262563200"; d="scan'208";a="162620396" Received: from unknown (HELO compaq.stroller.uk.eu.org) ([213.152.39.90]) by smtpout.karoo.kcom.com with ESMTP; 09 Jan 2010 19:27:39 +0000 Received: from funf.stroller.uk.eu.org (funf.stroller.uk.eu.org [192.168.1.71]) by compaq.stroller.uk.eu.org (Postfix) with ESMTP id 14FDB1268F for <gentoo-user@lists.gentoo.org>; Sat, 9 Jan 2010 19:27:36 +0000 (GMT) Message-Id: <22D5EF94-B5BB-4404-8983-908C93B269D7@stellar.eclipse.co.uk> From: Stroller <stroller@stellar.eclipse.co.uk> To: gentoo-user@lists.gentoo.org In-Reply-To: <201001091649.50224.peter@humphrey.ukfsn.org> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes Content-Transfer-Encoding: 7bit Precedence: bulk List-Post: <mailto:gentoo-user@lists.gentoo.org> List-Help: <mailto:gentoo-user+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-user.gentoo.org> X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 (Apple Message framework v936) Subject: Re: [gentoo-user] OT: Rebuilding an NTFS directory structure Date: Sat, 9 Jan 2010 19:27:37 +0000 References: <201001091148.35575.peter@humphrey.ukfsn.org> <201001091234.38364.michaelkintzios@gmail.com> <201001091649.50224.peter@humphrey.ukfsn.org> X-Mailer: Apple Mail (2.936) X-Archives-Salt: c132b57e-9197-4020-b80f-60dbe4619ff8 X-Archives-Hash: a562415391e99cf99b82a9fc5b6fb79e On 9 Jan 2010, at 16:49, Peter Humphrey wrote: > On Saturday 09 January 2010 12:34:26 Mick wrote: > ... >> It resets the ntfs journal and when the drive is booted into >> MSWindows >> it'll run a chkdsk - make sure you do not interrupt this! > > The disk in question is an external USB disk. > >> In your friend's case you can force a chkdsk by right-clicking on the >> drive in Windows Explorer/Properties/Tools/Error-checking. > > The only Windows system I can run at the moment is on my laptop; as > soon as > I plug the disk in I get a BSoD, so that's no help. I _believe_ that if you leave the USB drive, with the corrupt filesystem, plugged in when the laptop boots, then during the boot process the `chkdsk` will be performed. I was not aware of `ntfsfix`, and have been of the opinion that the best way to repair a corrupt NTFS filesystem was to use `chkdsk`, this being MS's own tool for the job. If the `chkdsk` does indeed run during boot, I would probably do a second one, just to be sure. If you initiate `chkdsk` at the command line, instead of using the UI as described by Mick, you get some extra options. `chkdsk /?` >> Other than that I think we're into a file recovery mode involving >> tools >> like photorec and dd_rescue. > > Photorec is what I've used to extract a few thousand files - the > ones I > mentioned with the unhelpful names. Maybe dd_rescue will help. The problem with dd_rescue (GNU ddrescue is better, if I am remembering the underscore spelling correctly) is that it will produce an exact image of the disk, with the filesystem intact and (in your case) still corrupt. However you might use this as a backup image of your starting point, to give you multiple chances at repairing the fs using different approaches. Stroller.