How are NTFS partitions mounted

Question

0.00/5 (No votes)

See more:

Currently I'm struggling with a damaged Partition. The issue is the MFT and the MFTmirror both are damaged (by CHKDSK /f) and the Partition won't boot. I can't seem to find an easy documentation on the web, so I'm asking about help here.
I studied MBR and the particular Partition Boot Sector and managed to locate the MFT through the Extended BPB. So the very next steps I'm looking for are how the File System mounts the Partition for browsing!
This is the content of the MFT. I am hoping to modify some bytes to get the Partition back ready.

Offset        0  1  2  3  4  5  6  7  8  9  A  B  C  D  E  F  0123456789ABCDEF

00C0100000   46 49 4C 45 30 00 03 00 00 00 00 00 00 00 00 00  FILE0...........
00C0100010   01 00 00 00 38 00 01 00 F0 00 00 00 00 04 00 00  ....8...........
00C0100020   00 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00  ................
00C0100030   03 00 00 00 00 00 00 00 10 00 00 00 48 00 00 00  ............H...
00C0100040   00 00 18 00 00 00 00 00 30 00 00 00 18 00 00 00  ........0.......
00C0100050   73 9C D8 D7 CA F8 D3 01 73 9C D8 D7 CA F8 D3 01  s.......s.......
00C0100060   73 9C D8 D7 CA F8 D3 01 73 9C D8 D7 CA F8 D3 01  s.......s.......
00C0100070   06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100080   30 00 00 00 68 00 00 00 00 00 18 00 00 00 01 00  0...h...........
00C0100090   4A 00 00 00 18 00 01 00 05 00 00 00 00 00 05 00  J...............
00C01000A0   73 9C D8 D7 CA F8 D3 01 73 9C D8 D7 CA F8 D3 01  s.......s.......
00C01000B0   73 9C D8 D7 CA F8 D3 01 73 9C D8 D7 CA F8 D3 01  s.......s.......
00C01000C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01000D0   06 00 00 00 00 00 00 00 04 03 24 00 4D 00 46 00  ..........$.M.F.
00C01000E0   54 00 00 00 00 00 00 00 FF FF FF FF 00 00 00 00  T...............
00C01000F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100100   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100110   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100120   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100130   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100140   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100150   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100160   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100170   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100180   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C0100190   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01001A0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01001B0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01001C0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01001D0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01001E0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
00C01001F0   00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00  ................

What I have tried:

I have tried TestDisk, but it didn't solve the problem.

Posted 9-Jul-18 9:34am

User 11061201

Updated 9-Jul-18 11:50am

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

MadMyche · Answer 1 · 2018-07-09T11:50:00

Solution 1

Try

Easy Recovery Essentials

Posted 9-Jul-18 11:50am

MadMyche

Comments

[no name] 11-Jul-18 14:45pm

Thanks but I'm looking to a programmatic approach.