QTParted damaged my ntfs partition!
I have an external usb Hard Drive that I have been using to store movies and musis in Windows on an ntfs partition. I wanted to make a little space on the drive in order to store backups of my linux installation, so I ran QTParted off of Systemrescuecd. Everything seemed to run fine without any errors, but after the process completed, my ntfs partition showed up as an unknown filesystem. When I tried to mount the partition read-only as an ntfs partition, I got an error saying that the superblock is bad. I've tried to find information on the forums and google about how to fix this, but I haven't found anything that works. I haven't touched the drive or written anything to it or formatted it at all, so I assume my files are at least still intact on the drive. Can anyone give me some help in recovering the partition and the data on it?
Thank you EDIT: I should probably also add that this drive has a few partitions on it already, there's one other NTFS partition for backing up my windows installation, one HFS+ that I have used to store my data from an old Powerbook, and at the end was my NTFS partition for storing movies and music. I can mount both of the other partitions just fine, but I cannot get my other partition to mount. It shows up as an HPFS/NTFS partition when I run fdisk -l on the device however. |
Since you backed up all the data, you can just delete the last couple of partitions and recreate them, right?
|
That's the problem. I don't have any backups of the media partition, since it had about 80 GBs of stuff on it, and I am out of drive to backup to. I need to figure out what exactly happened, and what I can do to get the files back. Something like the magicrescue program looks like it could have potential, but I'd need another drive to recover the data to. I wish there was a known way to fix a problem partition, but I haven't found anything useful in my case.
|
How about showing us the output of fdisk -l, and mount, and cat /etc/fstab, the exact mount command you ran to attempt to mount the thing manually, and the specific error messages you received from the failed mount attempt? Like they say, "A picture is worth a thousand words."
|
Ok, makes sense to me.
output of fdisk -l /dev/sda: Code:
Disk /dev/sda: 250.0 GB, 250059349504 bytes and cat /etc/fstab: Code:
/dev/hda6 swap swap defaults 0 0 the output: Code:
mount: wrong fs type, bad option, bad superblock on /dev/sda3, and just to cover all bases, dmesg | tail: Code:
[fglrx] total FB = 0 |
I don't have a usb external drive with multiple partitions on it, so I don't know how these things are typically mounted. But it seems that this:
Quote:
Quote:
Quote:
|
Owie. Try looking at gpart (_not_ gparted). It got me out of a jam once where Windows thought it recognised a ext3 partition but didn't and ended up breaking it. If you're lucky and it saves you then be stoked but something to remember for future, if you don't have the space to back up the data, at least use somethign to back up the partition table ;) It's small and could save your ass.
|
haertig: I actually have the entry in my /etc/fstab in order to quickly mount a flash drive. I have used the mount -i... command several times to mount both the ntfs and hfs+ partitions on the /mnt/usb point, so I don't think that's the origin of the problem. Now, when running QTParted from Knoppix, it has the filesystem of /dev/sda3 marked as unknown. It leads me to think that something went wrong with the ntfs_resize program but I'm not sure what.
cs-cam: Well, I tried using gpart to scan my drive, but it has /dev/sda3 marked as unused space, though it seems to be convinced that my hfs+ partition is NTFS or advanced UNIX. I'm not quite sure what to do know. At least some of the data should be salvagable using forensics tools, right? |
Try this link: http://www.redhat.com/archives/fedor.../msg00908.html
Another thread exists where somehow the partition table of the drive got screwed up and the thread starter managed to fix it by following this article... |
Ok, sorry for taking so long to post a reply, but I have been busy. I've finally managed to get my hands on an identical HD from Tigerdirect and made a clone of the broken drive with dd (that does make an exact copy, right?),
pljvaldez, I read the message you linked to, and also managed to find a thread on here that looks to be nearly the exact same problem here that I have had with QTParted, and from both of these I surmise that the problem is indeed something wrong in the partition table itself. Here's the problem: I try the sfdisk command: Code:
sfdisk -d /dev/sda | sfdisk -H254 /dev/sda Code:
Checking that no-one is using this disk right now ... Code:
bash-3.1# sfdisk -g /dev/sda Code:
bash-3.1# sfdisk -G /dev/sda Code:
bash-3.1# sfdisk -d /dev/sda | sfdisk -H16 -C16383 /dev/sda Thank you |
resolved!!!
I just want to let people know that the issue has been resolved. For anyone who faces a similar issue, I recommend the first thing you do is look into testdisk. It is absolutely amazing! It worked so fast that I can't believe it took me this long to fix this.
Thanks everyone for the help Resolved |
QtParted can indeed corrupt the partition table, independently of the filesystem, if the partition doesn't start at cylinder boundary. Fix is to restore the partition table (not the filesystem!!!) or let TestDisk to do it.
GParted shouldn't have this problem. |
All times are GMT -5. The time now is 10:27 AM. |