Repair corrupt MFT (and new user feedback)
Posted: Tue Jun 08, 2010 4:09 pm
Environment and background
- R-Studio demo version
- Recent Windows updates caused system to hang and my system now reports that the $MFT is corrupt at times. Print jobs also can't start, so some spool and system related file area seems suspect. Event log shows NTFS event code 55 when the errors occur. Other than that, no known data loss of corruption at this time.
- Drive in question is a RAID1 set.
- System boots and runs fine, but CHKDSK can't fix the problem.
- TestDisk reports that MFT and mirror look OK, but don't match.
New user thoughts
- R-Studio looks great, and inspires confidence from the start. I read a lot of the manual, and looked in the forum, but didn't find anything related to my exact issue (Windows saying $MFT is corrupt or unreadable). While not common, I'm certainly not the first to hit it and if there's a path in R-Studio to deal with this issue, you should definitely point it out for marketing purposes.
- Opening files for the drive enumerates them, but aborts. The message is: "[FileId: 13200] MFT record child's claimed parent mismatch, aborting" The catch is that I can't use that information to find the file by its ID, or locate it, or help it to resolve that problem. It took me a bit to find the option under Find/Mark->Advanced options, but I did. While a context menu entry saying "Find this file" would be great, at least it can be done. If I then select View/Edit, I can see the sector number. I don't know how to use that number to reconcile against the scan results, or if that is even the path I'm looking for.
The file in question is a deleted file. Recovery is not the goal. The main goal is still to repair the MFT. At this point I don't know what to do next, so I'll go back and read the manual again.
I hope this helps. R-Studio looks very nice, and complete. I just need to find the right features to apply for this case, if they exist.
- R-Studio demo version
- Recent Windows updates caused system to hang and my system now reports that the $MFT is corrupt at times. Print jobs also can't start, so some spool and system related file area seems suspect. Event log shows NTFS event code 55 when the errors occur. Other than that, no known data loss of corruption at this time.
- Drive in question is a RAID1 set.
- System boots and runs fine, but CHKDSK can't fix the problem.
- TestDisk reports that MFT and mirror look OK, but don't match.
New user thoughts
- R-Studio looks great, and inspires confidence from the start. I read a lot of the manual, and looked in the forum, but didn't find anything related to my exact issue (Windows saying $MFT is corrupt or unreadable). While not common, I'm certainly not the first to hit it and if there's a path in R-Studio to deal with this issue, you should definitely point it out for marketing purposes.
- Opening files for the drive enumerates them, but aborts. The message is: "[FileId: 13200] MFT record child's claimed parent mismatch, aborting" The catch is that I can't use that information to find the file by its ID, or locate it, or help it to resolve that problem. It took me a bit to find the option under Find/Mark->Advanced options, but I did. While a context menu entry saying "Find this file" would be great, at least it can be done. If I then select View/Edit, I can see the sector number. I don't know how to use that number to reconcile against the scan results, or if that is even the path I'm looking for.
The file in question is a deleted file. Recovery is not the goal. The main goal is still to repair the MFT. At this point I don't know what to do next, so I'll go back and read the manual again.
I hope this helps. R-Studio looks very nice, and complete. I just need to find the right features to apply for this case, if they exist.