Switch to full style
Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Corrupt files NTFS

October 30th, 2020, 9:32

Hello, guys! I faced with a problem: I had the "Storage Spaces" on Windows Server, but suddenly a disk broke, therefore to remain only RAID1, which was created early. In this case should have considered redundancy for OS but unfortunately this setting had had before I knew about this decision, i.e. this equipment was configured not by me. And then when I attempt to open any file it doesn't open properly, it doesn't even open at all. I opened this files by DMDE, and discovered files filled up nulls. However, files which less 50-60 kilobyte open properly. Suggest any idea, please. Sorry for my English. Thanks a lot!
Attachments
2020-10-30_162056.png
This is quite large file. Can't open.
2020-10-30_162159.png
This is the small file. It opens properly.

Re: Corrupt files NTFS

October 30th, 2020, 19:42

I don't know a lot about storage spaces, but the file from the 2nd screenshot is a resident file. As long as you find the MFT entry for it, you'll be able to recover it as it's stored inside the MFT entry - even if you managed to detect the MFT entry from a broken RAID.

For the rest I personally have some trouble following your story.

Re: Corrupt files NTFS

October 31st, 2020, 10:15

First of all, clone the healthy drive and work with the clone.

Re: Corrupt files NTFS

November 2nd, 2020, 7:17

mr_spokk, I've already made a copy of disk. Thanks!

Arch, thanks! I have only two disks which consist of RAID1 Storage Spaces. I've noticed that files which have "s" (NTFS Sparse Files) attributes don't open and these files consist of nulls. When I opened the MFT file I found some information. This information seems right excluding both #3($DATA) and #4($Other Attribute). Files without "s" attribute open properly and have a valid structure, but files with "s" attribute consist of nulls and have the different MFT record. Could you suggest any idea? Thanks a lot!
Attachments
2020-11-02_133935.png
Extended MFT record #3 of the file without attributes.
2020-11-02_131920.png
Extended MFT record of the file with an "s" attribute.
2020-11-02_131906.png
Extended MFT record of the file with an "s" attribute.
2020-11-02_131906.png (10.92 KiB) Viewed 13843 times
2020-11-02_131759.png
Extended MFT record of the file with an "s" attribute.
2020-11-02_131744.png
Extended MFT record of the file with an "s" attribute.
2020-11-02_131744.png (12.17 KiB) Viewed 13843 times
2020-11-02_131725.png
Extended MFT record of the file with an "s" attribute.
2020-11-02_131725.png (11.18 KiB) Viewed 13843 times
2020-11-02_125855.png
MFT record with an "s" attribute.
Post a reply