Comparison of NTFS/MFT recovery software?

G

Guest

There appear to be hundreds of software packages out there to restore
an NTFS partition with a corrupted MFT. Does anybody know of any
reviews with a feature comparison matrix?

What utilities do you recommend?
 
N

Nathan McNulty

I recommend OnTrack's Recovery Software. Their software has saved me
many times even after a repartition/format (which actually doesn't
destroy any data but does make it difficult to get the data back without
specialized software).

Check it out at www.ontrack.com ;)
 
A

Al Dykes

There appear to be hundreds of software packages out there to restore
an NTFS partition with a corrupted MFT. Does anybody know of any
reviews with a feature comparison matrix?

What utilities do you recommend?

If it's corrupted, why do you want to restore it ? Do you mean recover
or repair ? Can you point to one or two packages for example, I'm not
sure what you are referring to.

A google for "NTFS partition with a corrupted MFT" doesn't come up
with any obvious packages.

There's lots of good info in http://www.ntfs.com/.
Under recovery concepts the is nothing about corrupted MFT.

In my experience (many thousands of systems, from the first days of
NFTS file system (NT3.51?)) NTFS is a profoundly reliable file system.
About the only way to kill it is for the underlying hardware to die.
I know that some people with more experience have seen an ocasional
problem. It's vastly superior to FAT32, esp for very large disks.

Do you have a problem, or is this a hypothetical question ?
 
S

Stephen H. Fischer

Hi,


Al said:
If it's corrupted, why do you want to restore it ? Do you mean recover
or repair ? Can you point to one or two packages for example, I'm not
sure what you are referring to.

A google for "NTFS partition with a corrupted MFT" doesn't come up
with any obvious packages.

There's lots of good info in http://www.ntfs.com/.
Under recovery concepts the is nothing about corrupted MFT.

In my experience (many thousands of systems, from the first days of
NFTS file system (NT3.51?)) NTFS is a profoundly reliable file system.
About the only way to kill it is for the underlying hardware to die.

What about when you get from ChkDSK: "Unable to determine Volume Version and
State"

Tools, documentation, help from friendly people all failed to allow for
recovery of two (2) ~50 Gig partitions on a 200 Gig Firewire HD.

I remain convinced that there was a simple error causing my problems, but I
still have no clue as to where it was.

"NTFS is a profoundly reliable file system." ... NOT!!!

Sorry to break in, but loosing a complete partition, perhaps to a corrupted
MFT makes NTFS worthless in most cases.

That is unless you are willing to spend big $$$$. Then paying for one of
the expensive data recovery programs whose "demo's" indicate nothing is
wrong, but without the $$$$ they will recover one file, maybe.
 
R

Robert Moir

Stephen H. Fischer wrote:
[snip]
"NTFS is a profoundly reliable file system." ... NOT!!!

Oh I don't know. I've been running systems on it for years and had very few
problems considering. I run the occasional chkdsk for the sake of good
health and i've never had a file system problem on these system that was not
ultimately down to a hardware fault. Maybe my experiences are not typical,
but that doesn't make them any less true.
Sorry to break in, but loosing a complete partition, perhaps to a
corrupted MFT makes NTFS worthless in most cases.

As opposed to what other file system thats immune to corruption? If a file
system becomes corrupted then you risk losing what is on it, which is why we
always tell people to back up on a regular basis.
 
S

Stephen H. Fischer

Hi,

Robert said:
Stephen H. Fischer wrote:
[snip]
"NTFS is a profoundly reliable file system." ... NOT!!!

Oh I don't know. I've been running systems on it for years and had very
few problems considering. I run the occasional chkdsk for the sake of good
health and i've never had a file system problem on these system that was
not ultimately down to a hardware fault. Maybe my experiences are not
typical, but that doesn't make them any less true.

Well, as to the "normal" problems with file systems, I cannot fault NTFS.

The loss of everything is perhaps more likely to happen with hard drives
connected with FireWire or USB.

Recovery of NTFS may be better supported by "MSDOS" repair programs, but
they (not all) will not run under windows which must be up and running for
Firewire and USB drives to be accessed. I did note that one BIOS did have
booting support, so maybe more help may be possible in the future.

What was so disappointing with most (or all) of the NTFS recovery software I
looked at was they all were just trying to recover your data.

None provided any help to really understand what had gone wrong thus making
the repeating of the failure likely to occur.

With the number of years NTFS has been around, I was disheartened by the low
quality of documentation and the absence of recovery programs that look at
the MBR, the Partition table, the NTFS Boot sectors and the MFT and report
on possible problems. Just presenting all the information arranged on one
screen would be a step up.

What is error "1507"? (PM8)

So much of the non $$$$$$ recovery programs and those supplied with XP and
the various Resource kits just convert the naked bits to hex and build a
display or printout list that only a person who has been working for years
could look at and understand what is wrong.

If chkdsk can find something wrong, surely a program can be written to look
at the same things and provide more information.

Too many Firewire and USB cables will be pulled loose and persons will be
very unhappy. Even more so when they realize that their wonderful 300 Gig
drive cannot be backed up (only viable option, buy another HD that is bigger
to back up the first HD. What about backing up the backup?).

The NTFS recovery software has a ways to go to help the weekend computer
warriors with no money for the $$$$$$$$ recovery programs.

As to a Comparison of NTFS/MFT recovery software, demo's are available for
many so you can get a idea if your data lost by a particular failure can be
recovered before spending your money.

The recovery programs differ in what damage they can get past to get your
data back. "Zero assumptions recovery" looked great with my "almost nothing
wrong at all" failure, but the demo only would recover one file.

One other program produced a huge number of files with made up names but the
price was just as high.

Persons will praise the program that got their data back, but the same
program might not get yours back. Comparison of programs stop for most
people when they get their data back thus no comparison is published.
 
J

Jim Macklin

Check out http://www.ntfs.com/ and http://www.filespecs.com/

--
The people think the Constitution protects their rights;
But government sees it as an obstacle to be overcome.


message
| Hi,
|
| Robert Moir wrote:
| > Stephen H. Fischer wrote:
| > [snip]
| >> "NTFS is a profoundly reliable file system." ... NOT!!!
| >
| > Oh I don't know. I've been running systems on it for
years and had very
| > few problems considering. I run the occasional chkdsk
for the sake of good
| > health and i've never had a file system problem on these
system that was
| > not ultimately down to a hardware fault. Maybe my
experiences are not
| > typical, but that doesn't make them any less true.
|
| Well, as to the "normal" problems with file systems, I
cannot fault NTFS.
|
| The loss of everything is perhaps more likely to happen
with hard drives
| connected with FireWire or USB.
|
| Recovery of NTFS may be better supported by "MSDOS" repair
programs, but
| they (not all) will not run under windows which must be up
and running for
| Firewire and USB drives to be accessed. I did note that
one BIOS did have
| booting support, so maybe more help may be possible in the
future.
|
| What was so disappointing with most (or all) of the NTFS
recovery software I
| looked at was they all were just trying to recover your
data.
|
| None provided any help to really understand what had gone
wrong thus making
| the repeating of the failure likely to occur.
|
| With the number of years NTFS has been around, I was
disheartened by the low
| quality of documentation and the absence of recovery
programs that look at
| the MBR, the Partition table, the NTFS Boot sectors and
the MFT and report
| on possible problems. Just presenting all the information
arranged on one
| screen would be a step up.
|
| What is error "1507"? (PM8)
|
| So much of the non $$$$$$ recovery programs and those
supplied with XP and
| the various Resource kits just convert the naked bits to
hex and build a
| display or printout list that only a person who has been
working for years
| could look at and understand what is wrong.
|
| If chkdsk can find something wrong, surely a program can
be written to look
| at the same things and provide more information.
|
| Too many Firewire and USB cables will be pulled loose and
persons will be
| very unhappy. Even more so when they realize that their
wonderful 300 Gig
| drive cannot be backed up (only viable option, buy another
HD that is bigger
| to back up the first HD. What about backing up the
backup?).
|
| The NTFS recovery software has a ways to go to help the
weekend computer
| warriors with no money for the $$$$$$$$ recovery programs.
|
| As to a Comparison of NTFS/MFT recovery software, demo's
are available for
| many so you can get a idea if your data lost by a
particular failure can be
| recovered before spending your money.
|
| The recovery programs differ in what damage they can get
past to get your
| data back. "Zero assumptions recovery" looked great with
my "almost nothing
| wrong at all" failure, but the demo only would recover one
file.
|
| One other program produced a huge number of files with
made up names but the
| price was just as high.
|
| Persons will praise the program that got their data back,
but the same
| program might not get yours back. Comparison of programs
stop for most
| people when they get their data back thus no comparison is
published.
|
| --
| Stephen H. Fischer
|
|
| >> Sorry to break in, but loosing a complete partition,
perhaps to a
| >> corrupted MFT makes NTFS worthless in most cases.
| >
| > As opposed to what other file system thats immune to
corruption? If a file
| > system becomes corrupted then you risk losing what is on
it, which is why
| > we always tell people to back up on a regular basis.
|
|
 
O

Odie Ferrous

*no spam* said:
There appear to be hundreds of software packages out there to restore
an NTFS partition with a corrupted MFT. Does anybody know of any
reviews with a feature comparison matrix?

What utilities do you recommend?

There are hundreds of thousands of permutations from which I
(successfully, normally) choose.

Chipsets, CPU, operating system, slave / master - just to kick off.

Can't tell you how I am so successful, but don't think for one second
it's all down to one or other software package.

Practice is essential - years of it.

I know this is not a commercial group, but I would be happy to do a
fixed-price repair of this drive for £120 plus cost of media to store
recovered data.

I have clients across the globe - not restricted to the UK by any means.

I also consider myself to be better than the "big boys" for almost all
types of recovery - and at less than 10% of the cost.


Odie
 
J

Joep

Stephen H. Fischer said:
The loss of everything is perhaps more likely to happen with hard drives
connected with FireWire or USB.

Loss of everything is often caused by partition table or boot sector
corruption. This can happen on any disk, not only FireWire or USB. Partition
table and boot sector damage can often be fixed in place in a relatively
safe manner. I recommend not to attempt to fix data loss caused by anything
beyond partition table / boot sector damage. By doing so you often enter the
path of no return. Although software exists that claims to be able to undo
for example reformats of NTFS drives, I have found this software to be very
unreliable and dangerous. 'Repairs' could not be undone.
What was so disappointing with most (or all) of the NTFS recovery software I
looked at was they all were just trying to recover your data.

And there's good reason for that.
None provided any help to really understand what had gone wrong thus making
the repeating of the failure likely to occur.

Data recovery software is written with the intent to recover data, not to
lecture you on file system structures. The strength of data recovery
software is often the ability to ignore errors and rebuild a virtual file
system structure regardless present errors. This virtual file system is
often simplified - it holds just enough info to copy lost data, it's not
enough to actually repair a file system in place.

Although I have seen chkdsk bring back lost data (on a clone), in a data
loss scenario chkdsk should be avoided as long as no sector by sector clone
is avalable.
With the number of years NTFS has been around, I was disheartened by the low
quality of documentation and the absence of recovery programs that look at
the MBR, the Partition table, the NTFS Boot sectors and the MFT and report
on possible problems. Just presenting all the information arranged on one
screen would be a step up.

For 9 out of 10 users (but probably more) this info would only be confusing
and intimidating. BTW, there are plenty of tools that look at the partition
tables and boot sectors and repair those if possible.
So much of the non $$$$$$ recovery programs and those supplied with XP and
the various Resource kits just convert the naked bits to hex and build a
display or printout list that only a person who has been working for years
could look at and understand what is wrong.

And yet you are still suprised that people who have spent all that time
looking at all the naked Hex don't give away their software for free?
 
J

Joep

Odie Ferrous said:
*no spam* wrote:
I also consider myself to be better than the "big boys" for almost all
types of recovery - and at less than 10% of the cost.


a.. The initial recovery deposit payable is £65 plus VAT (£76.38.) Please
include the payment with your hard drive. (Cheques must be payable to D
Clarke.)


a.. The first Gigabyte of data recovered is included in the initial deposit.
Thereafter, the recovery process costs £2.00 plus VAT (£2.35) per Gigabyte.

Assume a 80 Gb drive containing 50 Gb of data. 50 x £2.35 = 117.50

a.. Transferring recovered data to CD or DVD costs £1.50 plus VAT (£1.76)
per Gigabyte, which includes the cost of media. Please let us know whether
you would prefer the data on CD or DVD. This is a fairly lengthy process,
which maintains your original directory / folder structure, and is designed
to be absolutely trouble-free to copy the data back once you receive your
returned drive and the CD or DVD media.

Assuming all 50 Gb is recovered 50 x £1.76 = 88

BTW ... this is all the Standard service, if you need your data faster it
will be more expensive.

Adds up to:

76.38
117.50
88.00
---
In US Dollars = $ 533,26 ... this means the big boys would ask $5330 (as you
do it for 10% or less)? Or, DiskLabs according to their online quote form
asks $ 690. 10% would mean you'd do it for $ 69?

Either there's something wrong in my calculations (for which I then
appologize) or something is wrong with yours. Assuming my calcualtions are
correct, I find some of your claims hard to believe.
 
O

Odie Ferrous

Joep said:
Either there's something wrong in my calculations (for which I then
appologize) or something is wrong with yours. Assuming my calcualtions are
correct, I find some of your claims hard to believe.

Sorry, Joep - I don't mean to mislead.

For obvious reasons, I need to have plain facts and figures on my
website. There *are* individuals who will try to take advantage of me,
and I need to keep that to a minimum.

However, there has not been one single case where the recovery of more
than 30GB of data has resulted in the total charge being assessed.

Additionally, I will often forego the charge to copy the data to the
media. Certainly if there are only 5GB of data required (a common
volume) the charges will be complete. But for 30GB? No way.

The different service levels are there for a reason but, again, I am not
going to take a Priority Plus fee for something if there is a recovery
machine not busy with someone else's recovery. If the client is
desperate for the data and I don't have to interrupt other processes, I
am not going to charge extra.

This will come as a huge surprise to you and many others, but I am NOT
in the business of stitching people up.

I have never had a complaint from a client, and I intend to keep things
that way.

Sure, any old bad guy can say he's one of the good guys - what's he got
to lose? But me? Well, I *am* one of the good guys!

There is every chance some of my existing clients will be reading this.
I know for a fact that not one will complain or even have cause to raise
an issue. My confidence is valid!


Odie
 
C

cquirke (MVP Win9x)

I'd like to see that, too.
Do you mean recover or repair ?

I'd like tools to do either.
There's lots of good info in http://www.ntfs.com/.
Under recovery concepts the is nothing about corrupted MFT.
In my experience (many thousands of systems, from the first days of
NFTS file system (NT3.51?)) NTFS is a profoundly reliable file system.

All well and good, but it can only be as reliable as the hardware
allows it to be, and it can do nothing against malware attack, if the
malware enjoys the appropriate level of access (see Witty).
About the only way to kill it is for the underlying hardware to die.

Well, that happens. Losing data is not a matter of "Oh, that was
because the hardware was bad. That's OK then!"
I know that some people with more experience have seen an ocasional
problem. It's vastly superior to FAT32, esp for very large disks.
Do you have a problem, or is this a hypothetical question ?

I did find a number of tools, mainly Windows-based (meaning you'd have
to have a recovery PC, and will have to be careful to stop XP writing
SR junk on the at-risk volume). Most purported to pull stuff off,
recover partitions, undelete files etc. One in-place repair tool,
diskette-based, that didn't boot when I tested it.

I'd settle for an equivalent of Norton DiskEdit, i.e. show me the
structures, document them, let me scribble.

Still looking...


--------------- ----- ---- --- -- - - -
Hello DOS mode my old friend
I've come to hack with you again
 
A

Al Dykes

I'd like to see that, too.


I'd like tools to do either.



All well and good, but it can only be as reliable as the hardware
allows it to be, and it can do nothing against malware attack, if the
malware enjoys the appropriate level of access (see Witty).


Well, that happens. Losing data is not a matter of "Oh, that was
because the hardware was bad. That's OK then!"

sh*t happens. hardware dies. NTFS is much more reliable than the
disks we run it on. Your computer could be stolen, or your house
could burn down. One of the rules of this game is; Never Write Over
Your Only Backup. Murphy works overtime when you are screwing with
your disks.

The fact that you've "lost" two NTFS file systems ar once tells me you
don't have an MFR problem. It's partitions and there are tools (which
I've never needed so I have no experience with) to discver the
partition tables.
 
J

Joep

cquirke (MVP Win9x) said:
I did find a number of tools, mainly Windows-based (meaning you'd have
to have a recovery PC

Not perse ... some run from BartPE (http://www.nu2.nu/pebuilder/), for
example iRecover (http://www.diydatarecovery.nl/~tkuurstra/irecoverpe.htm).
If you can still download recovery software, then it may be assumed you have
access to an additional PC anyway.
, and will have to be careful to stop XP writing
SR junk on the at-risk volume). Most purported to pull stuff off,
recover partitions, undelete files etc. One in-place repair tool,
diskette-based, that didn't boot when I tested it.

Maybe the DOS or Linux version on the diskette didn't boot - that doesn't
tell you much about the tool itself. The tool itself probably doesn't boot,
it needs to be started once the OS (DOS/Linux) runs.
 
J

Jan van Wijk

I'd settle for an equivalent of Norton DiskEdit, i.e. show me the
structures, document them, let me scribble.

Still looking...

In that case you might want to check out my DFSee tool:

http://www.dfsee.com/dfsee.htm

That will display many filestructures (including most NTFS stuff)
is a readable (decoded) format, or when needed as HEX dumps.

Apart from displaying, it has lots of specific 'fix' commands to
repair 'common' problems like damaged bootsectors
or partition-table problems.

It also has file copy/recover commands for undeleting
and saving data from damaged filesystems.

The program is NOT free, but it is not that expensive either.

You can download the evaluation version and play with that
for a month or so to see what it can do.

There is a Windows (console, NT/W2K/XP only), plus a DOS
and an OS2 version in the same package, and a native Linux
one will be added to the package shortly ...

Regards, JvW
 
O

Odie Ferrous

The program is NOT free, but it is not that expensive either.

You can download the evaluation version and play with that
for a month or so to see what it can do.

Top man - you could never know what it means to be able to test software
properly.

Programs that supposedly let you "see" what they could deliver with the
full version suck.


Odie
 
S

Stephen H. Fischer

Hi,

The current state of NTFS recovery software (I.E. supplied with the O.S.)
appears to me to violate "The Goal of Trustworthy Computing", Reliability:
The customer can depend on the product to fulfill its functions.

There appears to be a dichotomy in the handling of file system errors.

CHKDSK will run or CHKDSK will not run is the dividing point.

If CHKDSK will run, it does its work and repairs the file system with
minimal reporting. The decision apparently has been made to have it do its
work now behind a blank screen during the boot process. Thus it has passed
into to the realm of programs that to weekend computer warriors will always
succeed as it is started and runs without input from the user.

As the years have gone by, less and less information on what it has done is
being reported. This has been mirrored by Norton, appearing to long term
Norton users that they are getting less and less for their money.

If CHKDSK will not run, then there is no path to recover. That is the
violation.

Persons who are trying to protect their rice bowl think this is just fine
and apparently are stifling any improvement in documentation, reporting of
what is wrong and actually doing the repair.

To those who say that the only method of repair if CHKDSK will not run is to
hire a person who has many years of experience and makes a living doing data
recovery just adds to the dichotomy. CHKDSK is trusted (and Norton) to
repair the file system all by its self for the second case.

That it cannot be trusted for the first case is a false position. The rules
for discovering what is wrong and what to do to repair the file system can
be included in the CHKDSK program and need not as data recovery persons say,
be kept only in the human brain. The rules for finding what is wrong when
CHKDSK will run were transferred from the human brain, why not the rules for
when it will not run.

Repair in place I have stated is the only viable solution for gargantuan
sized external hard drives that cannot be backed up currently. Until sugar
cubes holding more data bits than grains of sand in the universe are
perfected, this will be the case.

It may be useful to keep copies of various data structures to aid in the
recovery by CHKDSK., that is what I wish to do now but my list is incomplete
I suspect.

The argument that confusing and intimidating information must not be shown
to the users is an strong argument towards eliminating the dichotomy and
doing the job without the user being involved.

Furthermore, keeping information from all persons because some may not
understand is elitist and should not be condoned.

The recording of what CHKDSK has done behind the blank screen when booting
is being done is perhaps a model of presenting the information to persons
who can understand it and not showing it to others.

-----------------------------------------

What will follow now I suspect will be a massive attempt by persons wishing
to stop their rice bowls from being broken.

I am not saying that they do not provide a useful, needed and valuable
service.

Stephen H. Fischer
 
J

Joep

Stephen H. Fischer said:
Hi,

The current state of NTFS recovery software (I.E. supplied with the O.S.)
appears to me to violate "The Goal of Trustworthy Computing",

I think this is a far fetched point. I don't understand how my car works in
great detail, still I trust it. Also it appears to me, the main focus of
"Trustworthy Computing" is privacy: I don't want my information to become
available to others without my approval. And beside that, I don't appreciate
it that much, IMO it's mainly marketing.
Reliability:
The customer can depend on the product to fulfill its functions.

Wake up call: There is no softeware in the world that will under all
circumstances deliver what it is intended for. This can be due to software
bugs or external factors. Chkdsk's main purpose is file system consistency
and integrity, not data recovery per se. File system structures can simply
be beyond repair.
There appears to be a dichotomy in the handling of file system errors.

CHKDSK will run or CHKDSK will not run is the dividing point.

If CHKDSK will run, it does its work and repairs the file system with
minimal reporting.

You're making a mistake. The fact that chkdsk runs does not mean by
defintion it delivers and actually will repair the file system. In a data
loss scenario chkdsk may be the last thing you want ...
The decision apparently has been made to have it do its
work now behind a blank screen during the boot process.

If you want you can see chkdsk run and you can also learn what it actually
does. Just search the MS KB.
Thus it has passed
into to the realm of programs that to weekend computer warriors will always
succeed as it is started and runs without input from the user.

To weekend computer warriors (who ever they are) software will always
succeed. Unfortunely this is not the case.
As the years have gone by, less and less information on what it has done is
being reported. This has been mirrored by Norton,

Many weekend PC warriors actually prefer this. Many people are actually able
to use a PC because it's complexity is hidden from them. Many people say,
spare me the techno babble, I don't care how you do it, just do it. And they
want it to be as easy as possible. And this is normal, we all probably use
many machines, devices and techniques all day we do not have a very deep
understanding of, of how they work.
appearing to long term
Norton users that they are getting less and less for their money.

The problem with Norton is that they make you pay for non substantial
upgrades, but that is a different matter. Besides that, millions don't seem
to care as they happily upgrade every year.
If CHKDSK will not run, then there is no path to recover.

Yes there is ...
That is the
violation.

Untrue. In every simple PC magazine, in every manual it is repeated over and
over again to make backups. So no one can claim he wasn't warned that
something may go wrong.
Persons who are trying to protect their rice bowl think this is just fine
and apparently are stifling any improvement in documentation, reporting of
what is wrong and actually doing the repair.

Bull. I have a Saab, if there's something wrong, the car's computer will
tell me there's "engine trouble" and advises me to take it to the garage. I
am fine with that, I don't want it to talk about parts being broken I don't
know what they do anyway. If I take in my car for repairs, I want it
repaired, I don't want to be lectured in car maintenance. So the mechanic
hooks up the car to a computer which will give much more info. I pay the guy
for the service to interpret the info and do something about it. I can not
be knowledgable on every possible subject.

If I do want to know about car maintenance, I buy a book or do a course on
the subject. If I study the subject enough I can fix other peoples cars and
get payed for that or maybe even create tools allowing other to fix their
own car.

So if you insist of fixing your NTFS trouble yourself; happy reading!
To those who say that the only method of repair if CHKDSK will not run is to
hire a person who has many years of experience and makes a living doing data
recovery just adds to the dichotomy.

You can be stuborn, but that won't change the truth. Some scenarios require
extensive knowledge. See car example.
CHKDSK is trusted (and Norton) to
repair the file system all by its self for the second case.

I don't trust them to that. In data loss scenarios I'd even be against
running any of those 2.
That it cannot be trusted for the first case is a false position. The rules
for discovering what is wrong and what to do to repair the file system can
be included in the CHKDSK program and need not as data recovery persons say,
be kept only in the human brain.

There are books on NTFS and there is extensive open source and free NTFS
documentation available (http://linux-ntfs.sourceforge.net/ntfs/). Still,
many rather pay someone who studied that documentation and provides software
based on the knowledge.
The rules for finding what is wrong when
CHKDSK will run were transferred from the human brain, why not the rules for
when it will not run.

It did tell why it didn't run: "Unable to determine Volume Version and
State".
Repair in place I have stated is the only viable solution for gargantuan
sized external hard drives that cannot be backed up currently.

Any disk can be backed up, just buy a same size disk.
It may be useful to keep copies of various data structures to aid in the
recovery by CHKDSK., that is what I wish to do now but my list is incomplete
I suspect.

Tools you referred to (Norton) do keep copies of some structures, though
they may simply not be enough. NTFS itself keeps copies of some structures.
Don't you understand? Anything man made can be broken. And some things
simply can not be fixed or forseen. To increase your chances keep copies of
all structures and data, it's called a backup.

The argument that confusing and intimidating information must not be shown
to the users is an strong argument towards eliminating the dichotomy and
doing the job without the user being involved.

Nonsense. For years end users have asked to hide the techno babble - Linux
will grow as soon as they start to understand that. Those interested in the
techno side of stuff can do so. Try Linux. BTW, XP comes with loads of
command line tools that allow you to configure chkdsk and every thing else
you can't do from behind a nice GUI.

In Linux, everything is open source. It is however a misconception that all
people will know be able to understand how everything works. There's simply
too much info, plus many people don't even care.
Furthermore, keeping information from all persons because some may not
understand is elitist and should not be condoned.

Nothing to do with elite. It sounds good though, but it is a statement and
not a valid argument.

Well, I do not feel like attempting to do *that* at all. I am not afraid of
that all. It's really easy to make statements like your last statement; to
anyone responding you can now say: "you see, told you so! He's trying to
protect his rice bowl, no matter what he says".
 
J

J. S. Pack

Hi,

The current state of NTFS recovery software (I.E. supplied with the O.S.)
appears to me to violate "The Goal of Trustworthy Computing", Reliability:
The customer can depend on the product to fulfill its functions.

Under normal circumstances. Which it does quite well, better than FAT32
ever did, so there's no violation.
There appears to be a dichotomy in the handling of file system errors.

As well there should be.
CHKDSK will run or CHKDSK will not run is the dividing point.

If CHKDSK will run, it does its work and repairs the file system with
minimal reporting. The decision apparently has been made to have it do its
work now behind a blank screen during the boot process. Thus it has passed
into to the realm of programs that to weekend computer warriors will always
succeed as it is started and runs without input from the user.

As the years have gone by, less and less information on what it has done is
being reported. This has been mirrored by Norton, appearing to long term
Norton users that they are getting less and less for their money.

Norton users were never able to understand anything of what they were
seeing. It was just a sort of lavalight show of technospeak. Then support
lines got tied up as Norton users tried tediously and pointlessly to repeat
the useless information that they'd seen passing by on their screens.

The bottom line was, and still is, was it fixed or was it not? And any
filesystem can get screwed up so badly that a 'bot can't fix it. FAT32
certainly did!
If CHKDSK will not run, then there is no path to recover. That is the
violation.

That's not a violation at all. That merely means that the problem is beyond
the ability of some mindless little automatic recovery program to fix and
the path to recovery lies in a manual fix by an informed human who can
bring real intelligence to bear.
Persons who are trying to protect their rice bowl think this is just fine
and apparently are stifling any improvement in documentation, reporting of
what is wrong and actually doing the repair.

This is just uninformed, silly, and naive nonsense. You need to undertake a
thorough study of advanced filesystems yourself. There's a wealth of
documentation readily available, though understandably you may not find it
on the racks at your nearest truckstop.

That it cannot be trusted for the first case is a false position. The rules
for discovering what is wrong and what to do to repair the file system can
be included in the CHKDSK program

No they cannot.
and need not as data recovery persons say,
be kept only in the human brain. The rules for finding what is wrong when
CHKDSK will run were transferred from the human brain, why not the rules for
when it will not run.

Ridiculous. So why aren't robots doing heart bypass operations? Could you
do your own? Why have health insurance or pay doctors when you can do it
all yourself?
Repair in place I have stated is the only viable solution for gargantuan
sized external hard drives that cannot be backed up currently. Until sugar
cubes holding more data bits than grains of sand in the universe are
perfected, this will be the case.

Well, you just get a hard drive the same size as you have and with
compression you should have at least 30% left over, assuming the original
drive is full.

Gag. I can't stand to continue reading and responding to this silly
nonsense, sorry. And I have no rice bowl interest in the matter.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads

address of mft 17
$Mft is missing error 3
Fix corrupt NTFS partition? 9
Master File Table (MFT) 2
Image backups 20
Recreate Missing MBR & MFT 2
corrupt MFT in harddisc 14
Chkdsik wiped entire disk contents 2

Top