My NTFS drive is corrupt, how do I recover?

John Savill

January 8, 2000

2 Min Read
ITPro Today logo in a gray background | ITPro Today

A. To restore an NTFS drive using the information below, itmust have been created using Windows NT 4.0, if it was not created using NT 4.0you should see Knowledge base article Q121517. To restore an NTFS partition youmust locate the spare copy of the boot sector and copy it to the correctposition on the drive. You need the NTdiskedit utility (you can also use DiskProbe that comes with the resource kit and instructions for Disk Probe can befound athttp://support.microsoft.com/support/kb/articles/q153/9/73.aspor Norton disk edit) which is available from Microsoft Support Services.

  1. Using NTdiskedit for Windows NT 4.0, on the File menu, click Open.

  2. Type the Volume Name as
    \.PhysicaldriveX
    where X=the ordinal of the disk that appears in Disk
    Administrator)

  3. Click OK.

  4. On the Read menu, click Sectors. Select 0 for Starting Sectors and select 1for Run Length. Click OK.

  5. On the View menu, click Partition Table. You should see a table that hasfour sections, Entry 0 through Entry 3. This refers to the order of partitions.If the partition in question is Partition 2 on the Disk, you need the data inEntry 1. If the Partition in question is the Partition 1 on the disk, you needthe data from Entry 0 and so on.

  6. Write down the values of Starting Sector and Sectors.
    NOTE: all of the values you see will be in hexadecimal format. Do not convertto decimal.

  7. Using a Calculator (you can use the one from the Accessories group if oneis available) that can add hexadecimal numbers, add the values for StartingSector and Sectors, and subtract 1 from the sum. For example:
    STARTING SECTOR=Ox3F
    SECTORS=0x201c84 +
    ----------
    0x201CC3
    Less 1 0x1 -
    ----------
    Copy of NTFS bootsector=0x201CC2

  8. On the Read menu, click Sectors. In Starting Sectors, type the value fromthe equation above. Type 1 in Run Length. Click OK.
    You now should be at your copy of the NTFS bootsector. Visually inspect theboot sector for completeness, NTFS header at first line, text in the lowerregion (for example, "A kernel file is missing from the disk"), andso forth.

  9. Click Relocate Sectors. This is the Sector you are going to write thebootsector. This will be the value of your Starting Sector with the Run Lengthof 1. Click OK.

  10. Quit Ntdiskedit. Use Disk Administrator to assign a drive letter if notalready assigned. Restart the computer; the file system should be recognized asNTFS.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like