Help with 'NTFS signature is missing unrecoverable error' please
Hi there,
My laptop with windows refused to load (would attempt to load in safe mode or system recovery tools but never get past a black screen w/ cursor. I'm happy to buy a new one, but wanted to get the files off my hardrive so I booted from a Knoppix CD. It loads it all just fine and I managed to copy over LOG files to a USB, but when I try to access my hardrive it delivers the following error message: "NTFS signature is missing unrecoverable error...volume is corrupt you should run chkdsk" The laptop came preloaded with windows and I either don't have or can't find a disk with Win. Having read a few similar posts/pages on this, I tried to muck around with TestDisk but still wasn't able to mount it. Does anyone have any advice? I'd really like to recover the files as not all are backed up. Would really appreciate any help. Cheers bob Here is a copy of TestDisk log: OS: Linux, kernel 3.6.11 (#12 SMP PREEMPT Thu Dec 20 04:04:10 CET 2012) i686 Compiler: GCC 4.7 Compilation date: 2012-12-16T16:55:56 ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226 /dev/sda: LBA, HPA, LBA48, DCO support /dev/sda: size 1465149168 sectors /dev/sda: user_max 1465149168 sectors /dev/sda: native_max 1465149168 sectors /dev/sda: dco 1465149168 sectors Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512 /dev/sr0 is not an ATA disk Hard disk list Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - TOSHIBA MK7575GSX, S/N:12QDSCPMS, FW:GT001M Disk /dev/sdb - 8004 MB / 7633 MiB - CHS 1020 247 62, sector size=512 - SanDisk Cruzer Facet, FW:1.26 Disk /dev/sr0 - 731 MB / 697 MiB - 356992 sectors (RO), sector size=2048 - TSSTcorp CDDVDW SN-208AB, S/N:R8QH6GHC1059VY, FW:TO02 Partition table type (auto): Intel Disk /dev/sda - 750 GB / 698 GiB - TOSHIBA MK7575GSX Partition table type: Intel Analyse Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63 Geometry from i386 MBR: head=255 sector=63 check_part_i386 1 type 27: no test NTFS at 191/89/27 NTFS at 89452/168/61 Current partition structure: 1 P Windows RE(store) 0 32 33 191 89 26 3072000 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] 3 P hid. HPFS/NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] No partition is bootable search_part() Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63 NTFS at 0/32/33 filesystem size 3072000 sectors_per_cluster 8 mft_lcn 128000 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS, blocksize=4096, 1572 MB / 1500 MiB NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB NTFS at 89452/168/61 filesystem size 28090368 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB Results * HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS, blocksize=4096, 1572 MB / 1500 MiB P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB interface_write() 1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System] 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] 3 P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] simulate write! write_mbr_i386: starting... write_all_log_i386: starting... No extended partition Interface Advanced Geometry from i386 MBR: head=255 sector=63 check_part_i386 1 type 27: no test NTFS at 191/89/27 NTFS at 89452/168/61 1 P Windows RE(store) 0 32 33 191 89 26 3072000 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB 3 P hid. HPFS/NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB ntfs_boot_sector 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB NTFS at 191/89/27 NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 Boot sector Status: OK Backup boot sector Status: OK Sectors are identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. ntfs_mst_post_read_fixup_warn: magic: 0x454c4946 size: 4096 usa_ofs: 48 usa_count: 2: Invalid argument Actual VCN (0x1003800010004) of index buffer is different from expected VCN (0x0) in inode 0x5. ntfs_mst_post_read_fixup_warn: magic: 0x1765f29d size: 1024 usa_ofs: 1087 usa_count: 457: Invalid argument Record 6 has no FILE magic (0x1765f29d) Failed to open inode FILE_Bitmap: Input/output error ntfs_mst_post_read_fixup_warn: magic: 0x78f6b770 size: 1024 usa_ofs: 57562 usa_count: 459: Invalid argument Record 5 has no FILE magic (0x78f6b770) repair_MFT NTFS at 191/89/27 ntfs_device_testdisk_io_ioctl() unimplemented ntfs_readdir failed for cluster 5 NTFS listing using MFT: Directory / 5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 . 5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 .. ntfs_device_testdisk_io_ioctl() unimplemented ntfs_device_testdisk_io_ioctl() unimplemented NTFS filesystem need to be repaired. ntfs_dir: ntfs_inode_open failed MFT and MFT mirror are bad. Failed to repair them. MFT and MFT mirror are bad. Failed to repair them. ntfs_boot_sector 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB NTFS at 191/89/27 NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 Boot sector Status: OK Backup boot sector Status: OK Sectors are identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. ntfs_mst_post_read_fixup_warn: magic: 0x454c4946 size: 4096 usa_ofs: 48 usa_count: 2: Invalid argument Actual VCN (0x1003800010004) of index buffer is different from expected VCN (0x0) in inode 0x5. ntfs_mst_post_read_fixup_warn: magic: 0x1765f29d size: 1024 usa_ofs: 1087 usa_count: 457: Invalid argument Record 6 has no FILE magic (0x1765f29d) Failed to open inode FILE_Bitmap: Input/output error ntfs_mst_post_read_fixup_warn: magic: 0x78f6b770 size: 1024 usa_ofs: 57562 usa_count: 459: Invalid argument Record 5 has no FILE magic (0x78f6b770) repair_MFT NTFS at 191/89/27 ntfs_device_testdisk_io_ioctl() unimplemented ntfs_readdir failed for cluster 5 NTFS listing using MFT: Directory / 5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 . 5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 .. ntfs_device_testdisk_io_ioctl() unimplemented ntfs_device_testdisk_io_ioctl() unimplemented NTFS filesystem need to be repaired. ntfs_dir: ntfs_inode_open failed MFT and MFT mirror are bad. Failed to repair them. MFT and MFT mirror are bad. Failed to repair them. ntfs_boot_sector 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB NTFS at 191/89/27 NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 Boot sector Status: OK Backup boot sector Status: OK Sectors are identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. ntfs_device_testdisk_io_ioctl() unimplemented Directory / 5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 . 5 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 .. 45919 dr-xr-xr-x 0 0 0 28-Oct-2012 10:33 $RECYCLE.BIN 10136 -r--r--r-- 0 0 24 10-Jun-2009 21:42 autoexec.bat 55 dr-xr-xr-x 0 0 0 9-Apr-2011 03:16 Boot 10139 -r--r--r-- 0 0 383786 20-Nov-2010 21:29 bootmgr 10140 -r--r--r-- 0 0 8192 9-Apr-2011 03:16 BOOTSECT.BAK 10143 -r--r--r-- 0 0 10 10-Jun-2009 21:42 config.sys 10195 dr-xr-xr-x 0 0 0 14-Jul-2009 04:53 Documents and Settings 67302 dr-xr-xr-x 0 0 0 18-Feb-2013 10:55 f8a3d548ba44d12966 38 -r--r--r-- 0 0 2206617600 13-Feb-2015 10:09 hiberfil.sys 45233 dr-xr-xr-x 0 0 0 28-Jun-2013 03:08 MSOCache 39 -r--r--r-- 0 0 2942156800 13-Feb-2015 10:09 pagefile.sys 74929 -r--r--r-- 0 0 105 14-Jun-2012 09:18 prefs.js 80 dr-xr-xr-x 0 0 0 21-Jan-2015 10:41 Program Files 739 dr-xr-xr-x 0 0 0 1-Jan-2015 06:42 ProgramData 84539 -r--r--r-- 0 0 510 15-Mar-2012 15:12 settings.ini 35 dr-xr-xr-x 0 0 0 13-Feb-2015 13:02 System Volume Information 46121 dr-xr-xr-x 0 0 0 28-Feb-2012 14:44 TOSHIBA 84894 -r--r--r-- 0 0 453 21-May-2012 08:00 user.js 851 dr-xr-xr-x 0 0 0 8-Apr-2012 06:20 Users 1035 dr-xr-xr-x 0 0 0 27-Feb-2014 08:20 Windows ntfs_boot_sector 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB NTFS at 191/89/27 NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 Boot sector Status: OK Backup boot sector Status: OK Sectors are identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. Analyse Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63 Geometry from i386 MBR: head=255 sector=63 check_part_i386 1 type 27: no test NTFS at 191/89/27 NTFS at 89452/168/61 Current partition structure: 1 P Windows RE(store) 0 32 33 191 89 26 3072000 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] 3 P hid. HPFS/NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] No partition is bootable Backup partition structure partition_save search_part() Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63 NTFS at 0/32/33 filesystem size 3072000 sectors_per_cluster 8 mft_lcn 128000 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS, blocksize=4096, 1572 MB / 1500 MiB NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB NTFS at 89452/168/61 filesystem size 28090368 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB Results * HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS, blocksize=4096, 1572 MB / 1500 MiB P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB interface_write() 1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System] 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] 3 P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] search_part() Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63 NTFS at 0/32/33 filesystem size 3072000 sectors_per_cluster 8 mft_lcn 128000 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS, blocksize=4096, 1572 MB / 1500 MiB NTFS at 191/89/26 filesystem size 3072000 sectors_per_cluster 8 mft_lcn 128000 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS found using backup sector, blocksize=4096, 1572 MB / 1500 MiB NTFS at 191/89/27 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB file_pread(4,16,buffer,22184015(1380/227/15)) read err: Partial read file_pread(4,1,buffer,22184016(1380/227/16)) read err: Input/output error NTFS at 45431/208/26 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 45431 208 26 134693 32 59 1433982976 NTFS, blocksize=4096, 734 GB / 683 GiB This partition ends after the disk limits. (start=729862144, size=1433982976, end=2163845119, disk end=1465149168) NTFS at 89452/168/60 filesystem size 1433982976 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB NTFS at 89452/168/61 filesystem size 28090368 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB file_pread(4,16,buffer,1465126991(91199/238/63)) read err: Partial read NTFS at 91201/52/51 filesystem size 28090368 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS found using backup sector, blocksize=4096, 14 GB / 13 GiB Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63 Check the harddisk size: HD jumpers settings, BIOS detection... The harddisk (750 GB / 698 GiB) seems too small! (< 1107 GB / 1031 GiB) The following partition can't be recovered: HPFS - NTFS 45431 208 26 134693 32 59 1433982976 NTFS, blocksize=4096, 734 GB / 683 GiB Results * HPFS - NTFS 0 32 33 191 89 26 3072000 [System] NTFS, blocksize=4096, 1572 MB / 1500 MiB P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] NTFS, blocksize=4096, 734 GB / 683 GiB P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] NTFS, blocksize=4096, 14 GB / 13 GiB interface_write() 1 * HPFS - NTFS 0 32 33 191 89 26 3072000 [System] 2 P HPFS - NTFS 191 89 27 89452 168 60 1433982976 [S3A4488D002] 3 P HPFS - NTFS 89452 168 61 91201 52 51 28090368 [HDDRECOVERY] simulate write! write_mbr_i386: starting... write_all_log_i386: starting... No extended partition TestDisk exited normally. |
Because NTFS is a 'proprietary' file system, the only way to repair an NTFS drive is thru windows.
So you have to boot somehow with windows, ( CD or USB boot etc ) or try taking the drive out of the laptop and put it in a usb drive enclosure and plug it into a windows system for repair. There may be other methods, but I am not aware of them after my research. I personally use the usb drive enclosure method. Be aware that there is the possibility that you will loose it all though. There are professional outfits that will do this for you, but they give the same warning. Good luck. |
bobbydazler,
Download Hiren's Boot CD: http://www.hirensbootcd.org/download/ Scroll down to below Troubleshoot and click on the zip file. Burn .iso file to CD/DVD. Switch on computer. Insert HBCD, close CD tray and switch off PC. Switch on PC and look at the HBCD menu. Choose the Mini Windows XP option. Using the Mini XP, you can access the internet, navigate around your system, search for files, copy files, replace files, run various scans for malicious software, edit text files etc. More info on using Mini Windows XP: http://us.informatiweb.net/tutoriels...indows-xp.html Copy all your documents, photos etc to an external hard drive. Then I suggest that you download and burn a Linux distro onto a DVD (or USB flash drive) and wipe Windows. Lots of Linux distros reviewed here on Linuxed: http://mylinuxexplore.blogspot.co.uk...-contents.html My preference is for Linux Mint MATE or Zorin OS 9. It's your choice. The alternative suggestion (+1) by ceyx is to put the laptop's hard drive in a USB enclosure and then copy the data to a working PC, either Linux or Windows. |
All times are GMT -5. The time now is 02:49 PM. |