Partição NTFS desapareceu após o windows chkdsk

1

Eu dual boot Ubuntu e Windows 7, e compartilho (d) uma partição NTFS GUID de 3 TB entre os dois. Isso funcionou bem por muito tempo.

Ontem fiz uma grande cópia de arquivo de uma partição ext3 suspeita (talvez com falha):

sudo cp -rp /media/user/failing_ext3/* /media/user/3TB/tmp/
sudo cp -rp /media/user/3TB/tmp/* /media/user/new_ext4_drive/

Isso funcionou bem, mas estou pensando agora que copiar do ext3 - > NTFS - > O ext4 foi uma ideia idiota e causou a execução do chkdsk. Eu iniciei no windows 7 mais tarde, e mal notei que o chkdsk estava rodando na inicialização. O Windows e o Linux agora vêem uma partição (quase) vazia na unidade de 3 TB. De um pouco de pesquisa, imaginei que o chkdsk provavelmente afastou a partição e a árvore de arquivos mestre. Há um único log do Chkdsk em uma pasta chamada / System Volume Information / Chkdsk:

Checking file system on I:
The type of the file system is NTFS.
Volume label is 3TB.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         
Unable to query LCN from VCN 0x5 for attribute of type 0x80.
The non resident attribute of type 0x80 is inconsistent.  The valid data
length is 0x1f380000, file size 0x1f380000, and allocated length 0x4000.
The non resident attribute of type 0x80 is inconsistent.  The valid data
length is 0x1f380000, file size 0x4000, and allocated length 0x4000.

CHKDSK is verifying files (stage 1 of 3)...
Deleted corrupt attribute list entry
with type code 48 in file 0.
Unable to find child frs 0x10 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x17 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x11 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x12 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x13 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x14 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x15 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x16 with sequence number 0x1.
The attribute of type 0x80 and instance tag 0x1 in file 0x0
has allocated length of 0x1f380000 instead of 0x4000.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to locate attribute with instance tag 0x1 and segment
reference 0x1000000000000.  The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 0.
  16 file records processed.                                         

File verification completed.
  0 large file records processed.                                   

  0 bad file records processed.                                     

  0 EA records processed.                                           

Correcting file name errors in system file record segment 0.
  0 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
An index entry of index $I30 in file 0x5 points to file 0x47aa5
which is beyond the MFT.
Deleting index entry $RECYCLE.BIN in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x23
which is beyond the MFT.
Deleting index entry 1TB in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x47aa1
which is beyond the MFT.
Deleting index entry System Volume Information in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x47aa1
which is beyond the MFT.
Deleting index entry SYSTEM~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x47f78
which is beyond the MFT.
Deleting index entry tmp in index $I30 of file 5.
Index entry $ObjId of index $I30 in file 0xb points to unused file 0x19.
Deleting index entry $ObjId in index $I30 of file 11.
Index entry $Quota of index $I30 in file 0xb points to unused file 0x18.
Deleting index entry $Quota in index $I30 of file 11.
  22 index entries processed.                                        

Index entry $Reparse of index $I30 in file 0xb points to unused file 0x1a.
Deleting index entry $Reparse in index $I30 of file 11.
Index entry $RmMetadata of index $I30 in file 0xb points to unused file 0x1b.
Deleting index entry $RmMetadata in index $I30 of file 11.
Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

Creating object id file.
Inserting an index entry into index $I30 of file 11.
Creating index $O for file 17.
The object id in file 0x3 does not appear in the object
id index in file 0x11.
Inserting an index entry into index $O of file 17.
Creating reparse point file.
Inserting an index entry into index $I30 of file 11.
Creating index $R for file 18.
Creating quota file.
Inserting an index entry into index $I30 of file 11.
Creating index $O for file 19.
Creating index $Q for file 19.
Inserting default quota record into index $Q in file 19.
CHKDSK is verifying security descriptors (stage 3 of 3)...
  24 file SDs/SIDs processed.                                        

Cleaning up 27 unused index entries from index $SII of file 0x9.
Cleaning up 27 unused index entries from index $SDH of file 0x9.
Cleaning up 27 unused security descriptors.
Security descriptor verification completed.
Inserting data attribute into file 0.
  4 data files processed.                                           

The MFT mirror is different from the MFT.
Correcting errors in the Master File Table (MFT) mirror.
Correcting errors in the master file table's (MFT) DATA attribute.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

   2861458 MB total disk space.
        12 KB in 8 indexes.
         0 KB in bad sectors.
    155403 KB in use by the system.
     65536 KB occupied by the log file.
   2861307 MB available on disk.

      4096 bytes in each allocation unit.
 732533503 total allocation units on disk.
 732494650 allocation units available on disk.

Internal Info:
10 00 00 00 10 00 00 00 0b 00 00 00 00 00 00 00  ................
01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
sudo cp -rp /media/user/failing_ext3/* /media/user/3TB/tmp/
sudo cp -rp /media/user/3TB/tmp/* /media/user/new_ext4_drive/
Checking file system on I:
The type of the file system is NTFS.
Volume label is 3TB.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.                         
Unable to query LCN from VCN 0x5 for attribute of type 0x80.
The non resident attribute of type 0x80 is inconsistent.  The valid data
length is 0x1f380000, file size 0x1f380000, and allocated length 0x4000.
The non resident attribute of type 0x80 is inconsistent.  The valid data
length is 0x1f380000, file size 0x4000, and allocated length 0x4000.

CHKDSK is verifying files (stage 1 of 3)...
Deleted corrupt attribute list entry
with type code 48 in file 0.
Unable to find child frs 0x10 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x17 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x11 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x12 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x13 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x14 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x15 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x16 with sequence number 0x1.
The attribute of type 0x80 and instance tag 0x1 in file 0x0
has allocated length of 0x1f380000 instead of 0x4000.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to locate attribute with instance tag 0x1 and segment
reference 0x1000000000000.  The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 0.
  16 file records processed.                                         

File verification completed.
  0 large file records processed.                                   

  0 bad file records processed.                                     

  0 EA records processed.                                           

Correcting file name errors in system file record segment 0.
  0 reparse records processed.                                      

CHKDSK is verifying indexes (stage 2 of 3)...
An index entry of index $I30 in file 0x5 points to file 0x47aa5
which is beyond the MFT.
Deleting index entry $RECYCLE.BIN in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x23
which is beyond the MFT.
Deleting index entry 1TB in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x47aa1
which is beyond the MFT.
Deleting index entry System Volume Information in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x47aa1
which is beyond the MFT.
Deleting index entry SYSTEM~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x47f78
which is beyond the MFT.
Deleting index entry tmp in index $I30 of file 5.
Index entry $ObjId of index $I30 in file 0xb points to unused file 0x19.
Deleting index entry $ObjId in index $I30 of file 11.
Index entry $Quota of index $I30 in file 0xb points to unused file 0x18.
Deleting index entry $Quota in index $I30 of file 11.
  22 index entries processed.                                        

Index entry $Reparse of index $I30 in file 0xb points to unused file 0x1a.
Deleting index entry $Reparse in index $I30 of file 11.
Index entry $RmMetadata of index $I30 in file 0xb points to unused file 0x1b.
Deleting index entry $RmMetadata in index $I30 of file 11.
Index verification completed.
  0 unindexed files scanned.                                        

  0 unindexed files recovered.                                      

Creating object id file.
Inserting an index entry into index $I30 of file 11.
Creating index $O for file 17.
The object id in file 0x3 does not appear in the object
id index in file 0x11.
Inserting an index entry into index $O of file 17.
Creating reparse point file.
Inserting an index entry into index $I30 of file 11.
Creating index $R for file 18.
Creating quota file.
Inserting an index entry into index $I30 of file 11.
Creating index $O for file 19.
Creating index $Q for file 19.
Inserting default quota record into index $Q in file 19.
CHKDSK is verifying security descriptors (stage 3 of 3)...
  24 file SDs/SIDs processed.                                        

Cleaning up 27 unused index entries from index $SII of file 0x9.
Cleaning up 27 unused index entries from index $SDH of file 0x9.
Cleaning up 27 unused security descriptors.
Security descriptor verification completed.
Inserting data attribute into file 0.
  4 data files processed.                                           

The MFT mirror is different from the MFT.
Correcting errors in the Master File Table (MFT) mirror.
Correcting errors in the master file table's (MFT) DATA attribute.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.

   2861458 MB total disk space.
        12 KB in 8 indexes.
         0 KB in bad sectors.
    155403 KB in use by the system.
     65536 KB occupied by the log file.
   2861307 MB available on disk.

      4096 bytes in each allocation unit.
 732533503 total allocation units on disk.
 732494650 allocation units available on disk.

Internal Info:
10 00 00 00 10 00 00 00 0b 00 00 00 00 00 00 00  ................
01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%
%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%%pre%

Este problema foi perguntado sobre antes, consulte:

Tudo na minha partição NTFS desapareceu

Pastas vazias após a recuperação do sistema de arquivos NTFS

Estou executando o TestDisk / PhotoRec e ele está localizando arquivos, embora sem nomes de arquivos ou diretórios; com 1,2 TB de dados, vai demorar um pouco para percorrer toda a unidade. O TestDisk não encontrou nenhuma partição NTFS excluída (porcaria!). Alguns dos dados são copiados, mas seria muito bom recuperar a árvore de arquivos intacta. Existem algumas ferramentas de recuperação decentes que podem inferir a árvore de arquivos de milhões de arquivos intactos? Não estou esperançoso, mas talvez algum bom samaritano possa sugerir o que poderia funcionar nessa situação em particular.

    
por Rooke 04.03.2015 / 21:28

1 resposta

-1

Eu tive bons resultados com o "MiniTool Power Data Recovery 6.8". Cerca de 90% dos nomes de arquivos com sua estrutura de pastas apropriada foram recuperados.

    
por 05.03.2015 / 17:05