LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Help with 'NTFS signature is missing unrecoverable error' please (https://www.linuxquestions.org/questions/linux-newbie-8/help-with-ntfs-signature-is-missing-unrecoverable-error-please-4175536687/)

bobbydazler 03-13-2015 09:51 PM

Help with 'NTFS signature is missing unrecoverable error' please
 
Hi there,

My laptop with windows refused to load (would attempt to load in safe mode or system recovery tools but never get past a black screen w/ cursor.

I'm happy to buy a new one, but wanted to get the files off my hardrive so I booted from a Knoppix CD. It loads it all just fine and I managed to copy over LOG files to a USB, but when I try to access my hardrive it delivers the following error message:

"NTFS signature is missing unrecoverable error...volume is corrupt you should run chkdsk"

The laptop came preloaded with windows and I either don't have or can't find a disk with Win.

Having read a few similar posts/pages on this, I tried to muck around with TestDisk but still wasn't able to mount it.

Does anyone have any advice? I'd really like to recover the files as not all are backed up.
Would really appreciate any help.

Cheers
bob

Here is a copy of TestDisk log:

OS: Linux, kernel 3.6.11 (#12 SMP PREEMPT Thu Dec 20 04:04:10 CET 2012) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 1465149168 sectors
/dev/sda: user_max 1465149168 sectors
/dev/sda: native_max 1465149168 sectors
/dev/sda: dco 1465149168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
/dev/sr0 is not an ATA disk
Hard disk list
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - TOSHIBA MK7575GSX, S/N:12QDSCPMS, FW:GT001M
Disk /dev/sdb - 8004 MB / 7633 MiB - CHS 1020 247 62, sector size=512 - SanDisk Cruzer Facet, FW:1.26
Disk /dev/sr0 - 731 MB / 697 MiB - 356992 sectors (RO), sector size=2048 - TSSTcorp CDDVDW SN-208AB, S/N:R8QH6GHC1059VY, FW:TO02

Partition table type (auto): Intel
Disk /dev/sda - 750 GB / 698 GiB - TOSHIBA MK7575GSX
Partition table type: Intel

Analyse Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 191/89/27
NTFS at 89452/168/61
Current partition structure:
1 P Windows RE(store) 0 32 33 191 89 26 3072000
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
3 P hid. HPFS/NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
No partition is bootable

search_part()
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 3072000
sectors_per_cluster 8
mft_lcn 128000
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
NTFS at 89452/168/61
filesystem size 28090368
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB

Results
* HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
3 P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 191/89/27
NTFS at 89452/168/61
1 P Windows RE(store) 0 32 33 191 89 26 3072000
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
3 P hid. HPFS/NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB

ntfs_boot_sector
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
NTFS at 191/89/27
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x454c4946 size: 4096 usa_ofs: 48 usa_count: 2: Invalid argument
Actual VCN (0x1003800010004) of index buffer is different from expected VCN (0x0) in inode 0x5.
ntfs_mst_post_read_fixup_warn: magic: 0x1765f29d size: 1024 usa_ofs: 1087 usa_count: 457: Invalid argument
Record 6 has no FILE magic (0x1765f29d)
Failed to open inode FILE_Bitmap: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x78f6b770 size: 1024 usa_ofs: 57562 usa_count: 459: Invalid argument
Record 5 has no FILE magic (0x78f6b770)
repair_MFT
NTFS at 191/89/27
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_readdir failed for cluster 5
NTFS listing using MFT:
Directory /
5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 .
5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 ..
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
NTFS filesystem need to be repaired.
ntfs_dir: ntfs_inode_open failed
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
NTFS at 191/89/27
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x454c4946 size: 4096 usa_ofs: 48 usa_count: 2: Invalid argument
Actual VCN (0x1003800010004) of index buffer is different from expected VCN (0x0) in inode 0x5.
ntfs_mst_post_read_fixup_warn: magic: 0x1765f29d size: 1024 usa_ofs: 1087 usa_count: 457: Invalid argument
Record 6 has no FILE magic (0x1765f29d)
Failed to open inode FILE_Bitmap: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x78f6b770 size: 1024 usa_ofs: 57562 usa_count: 459: Invalid argument
Record 5 has no FILE magic (0x78f6b770)
repair_MFT
NTFS at 191/89/27
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_readdir failed for cluster 5
NTFS listing using MFT:
Directory /
5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 .
5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 ..
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
NTFS filesystem need to be repaired.
ntfs_dir: ntfs_inode_open failed
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
NTFS at 191/89/27
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_device_testdisk_io_ioctl() unimplemented

Directory /
5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 .
5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 ..
45919 dr-xr-xr-x 0 0 0 28-Oct-2012 10:33 $RECYCLE.BIN
10136 -r--r--r-- 0 0 24 10-Jun-2009 21:42 autoexec.bat
55 dr-xr-xr-x 0 0 0 9-Apr-2011 03:16 Boot
10139 -r--r--r-- 0 0 383786 20-Nov-2010 21:29 bootmgr
10140 -r--r--r-- 0 0 8192 9-Apr-2011 03:16 BOOTSECT.BAK
10143 -r--r--r-- 0 0 10 10-Jun-2009 21:42 config.sys
10195 dr-xr-xr-x 0 0 0 14-Jul-2009 04:53 Documents and Settings
67302 dr-xr-xr-x 0 0 0 18-Feb-2013 10:55 f8a3d548ba44d12966
38 -r--r--r-- 0 0 2206617600 13-Feb-2015 10:09 hiberfil.sys
45233 dr-xr-xr-x 0 0 0 28-Jun-2013 03:08 MSOCache
39 -r--r--r-- 0 0 2942156800 13-Feb-2015 10:09 pagefile.sys
74929 -r--r--r-- 0 0 105 14-Jun-2012 09:18 prefs.js
80 dr-xr-xr-x 0 0 0 21-Jan-2015 10:41 Program Files
739 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 ProgramData
84539 -r--r--r-- 0 0 510 15-Mar-2012 15:12 settings.ini
35 dr-xr-xr-x 0 0 0 13-Feb-2015 13:02 System Volume Information
46121 dr-xr-xr-x 0 0 0 28-Feb-2012 14:44 TOSHIBA
84894 -r--r--r-- 0 0 453 21-May-2012 08:00 user.js
851 dr-xr-xr-x 0 0 0 8-Apr-2012 06:20 Users
1035 dr-xr-xr-x 0 0 0 27-Feb-2014 08:20 Windows

ntfs_boot_sector
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
NTFS at 191/89/27
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Analyse Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 191/89/27
NTFS at 89452/168/61
Current partition structure:
1 P Windows RE(store) 0 32 33 191 89 26 3072000
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
3 P hid. HPFS/NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
No partition is bootable
Backup partition structure
partition_save

search_part()
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 3072000
sectors_per_cluster 8
mft_lcn 128000
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
NTFS at 89452/168/61
filesystem size 28090368
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB

Results
* HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
3 P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]

search_part()
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 3072000
sectors_per_cluster 8
mft_lcn 128000
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
NTFS at 191/89/26
filesystem size 3072000
sectors_per_cluster 8
mft_lcn 128000
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS found using backup sector, blocksize=4096, 1572 MB / 1500 MiB
NTFS at 191/89/27
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
file_pread(4,16,buffer,22184015(1380/227/15)) read err: Partial read
file_pread(4,1,buffer,22184016(1380/227/16)) read err: Input/output error
NTFS at 45431/208/26
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 45431 208 26 134693 32 59 1433982976
NTFS, blocksize=4096, 734 GB / 683 GiB
This partition ends after the disk limits. (start=729862144, size=1433982976, end=2163845119, disk end=1465149168)
NTFS at 89452/168/60
filesystem size 1433982976
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
NTFS at 89452/168/61
filesystem size 28090368
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB
file_pread(4,16,buffer,1465126991(91199/238/63)) read err: Partial read
NTFS at 91201/52/51
filesystem size 28090368
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS found using backup sector, blocksize=4096, 14 GB / 13 GiB
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (750 GB / 698 GiB) seems too small! (< 1107 GB / 1031 GiB)
The following partition can't be recovered:
HPFS - NTFS 45431 208 26 134693 32 59 1433982976
NTFS, blocksize=4096, 734 GB / 683 GiB

Results
* HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
NTFS, blocksize=4096, 1572 MB / 1500 MiB
P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
NTFS, blocksize=4096, 734 GB / 683 GiB
P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
NTFS, blocksize=4096, 14 GB / 13 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System]
2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002]
3 P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

ceyx 03-13-2015 11:23 PM

Because NTFS is a 'proprietary' file system, the only way to repair an NTFS drive is thru windows.
So you have to boot somehow with windows, ( CD or USB boot etc ) or try taking the drive out of the laptop and put it in a usb drive enclosure and plug it into a windows system for repair.

There may be other methods, but I am not aware of them after my research. I personally use the usb drive enclosure method.

Be aware that there is the possibility that you will loose it all though.
There are professional outfits that will do this for you, but they give the same warning.

Good luck.

beachboy2 03-14-2015 10:20 AM

bobbydazler,

Download Hiren's Boot CD:

http://www.hirensbootcd.org/download/

Scroll down to below Troubleshoot and click on the zip file.

Burn .iso file to CD/DVD.

Switch on computer.

Insert HBCD, close CD tray and switch off PC.

Switch on PC and look at the HBCD menu.

Choose the Mini Windows XP option.

Using the Mini XP, you can access the internet, navigate around your system, search for files, copy files, replace files, run various scans for malicious software, edit text files etc.

More info on using Mini Windows XP:
http://us.informatiweb.net/tutoriels...indows-xp.html

Copy all your documents, photos etc to an external hard drive.

Then I suggest that you download and burn a Linux distro onto a DVD (or USB flash drive) and wipe Windows.

Lots of Linux distros reviewed here on Linuxed:

http://mylinuxexplore.blogspot.co.uk...-contents.html

My preference is for Linux Mint MATE or Zorin OS 9.

It's your choice.

The alternative suggestion (+1) by ceyx is to put the laptop's hard drive in a USB enclosure and then copy the data to a working PC, either Linux or Windows.


All times are GMT -5. The time now is 02:49 PM.