我大约 10 年前买了一台笔记本电脑,它预装的是 Windows 7(我几乎从来没用过),当时我安装了双启动的 Ubuntu(上次更新是 Ubuntu 16.04)。所以它有三个主要分区:一个只用于 Windows,第二个只用于 Ubuntu,第三个两个操作系统都可以读写(我不确定当时我用的是哪个文件系统)。分区的实际数量实际上更大,因为还有一个用于 Linux Swap,还有几个 Windows/Vendor(Lenovo)恢复等:
经过几年的良好使用后,我已经好几年没有使用这台笔记本电脑了。最近我打开它 - 启动到 Windows,我可以看到共享分区(称为“媒体”)。然后我再次重新启动到 Windows(为了安装一些更新),在启动过程中它执行了 ScanDisk(或类似程序)。之后,媒体分区似乎被清除了!
我已经尝试使用 TestDisk (使用本指南),但它无法列出任何已删除的文件。但是,我确实注意到,当 TestDisk 列出现已擦除的媒体分区(下面附加屏幕截图中的分区 7)时,就在它之前 - 还有另一个(丢失的?)分区(在下面的屏幕截图中突出显示),它以与分区 7 相同的扇区结束,但在其前面几个扇区开始。
我感觉 Windows 的磁盘扫描程序对该分区的主文件表 (或类似内容) 做了一些操作,比如重置或以某种方式跳过/忽略它(如果这有意义的话)。那么,我是否应该将分区 7 移到这个神秘的 X 分区的起始位置,这样可能会恢复媒体分区的整个文件系统映射?我该怎么做,在此之前我应该备份什么/如何备份?
或者如果您有任何其他想法,我们也将非常感激。
编辑 - 在擦除的媒体分区中,我发现了一个名为“Chkdsk20220324123958.log”的文件,其中包含以下消息:
One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
Unable to query LCN from VCN 0x4 for attribute of type 0x80.
The non resident attribute of type 0x80 is inconsistent. The valid data
length is 0xb658000, file size 0xb658000, and allocated length 0x4000.
The non resident attribute of type 0x80 is inconsistent. The valid data
length is 0xb658000, file size 0x4000, and allocated length 0x4000.
CHKDSK is verifying files (stage 1 of 3)...
Deleted corrupt attribute list entry
with type code 48 in file 0.
Unable to find child frs 0x10 with sequence number 0x10.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x11 with sequence number 0x11.
The attributes with same type code 0x80 but different instance tags
0x1 and 0x0 have non-contiguous VCN numbers 0x4 and 0xaa64
respectively in file 0x0.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to locate attribute with instance tag 0x1 and segment
reference 0x1000000000000. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 0.
Unable to locate attribute with instance tag 0x0 and segment
reference 0xf00000000000f. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 15.
16 file records processed.
File verification completed.
0 large file records processed.
0 bad file records processed.
0 EA records processed.
Correcting file name errors in system file record segment 0.
0 reparse records processed.
CHKDSK is verifying indexes (stage 2 of 3)...
An index entry of index $I30 in file 0x5 points to file 0x25
which is beyond the MFT.
Deleting index entry $RECYCLE.BIN in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1f1b
which is beyond the MFT.
Deleting index entry .Trash-1000 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xd9b8
which is beyond the MFT.
( !! ... and it goes on and on for what seems to be almost every folder in that partition... !! )
Index entry $Quota of index $I30 in file 0xb points to unused file 0x18.
Deleting index entry $Quota in index $I30 of file 11.
22 index entries processed.
Index entry $Reparse of index $I30 in file 0xb points to unused file 0x1a.
Deleting index entry $Reparse in index $I30 of file 11.
Index entry $RmMetadata of index $I30 in file 0xb points to unused file 0x1b.
Deleting index entry $RmMetadata in index $I30 of file 11.
Index entry $UsnJrnl of index $I30 in file 0xb points to unused file 0x28.
Deleting index entry $UsnJrnl in index $I30 of file 11.
Index verification completed.
CHKDSK is scanning unindexed files for reconnect to their original directory.
1 unindexed files scanned.
CHKDSK is recovering remaining unindexed files.
1 unindexed files recovered.
Creating object id file.
Inserting an index entry into index $I30 of file 11.
Creating index $O for file 18.
The object id in file 0x3 does not appear in the object
id index in file 0x12.
Inserting an index entry into index $O of file 18.
Creating reparse point file.
Inserting an index entry into index $I30 of file 11.
Creating index $R for file 19.
Creating quota file.
Inserting an index entry into index $I30 of file 11.
Creating index $O for file 20.
Creating index $Q for file 20.
Inserting default quota record into index $Q in file 20.
CHKDSK is verifying security descriptors (stage 3 of 3)...
24 file SDs/SIDs processed.
Cleaning up 21 unused index entries from index $SII of file 0x9.
Cleaning up 21 unused index entries from index $SDH of file 0x9.
Cleaning up 21 unused security descriptors.
Security descriptor verification completed.
Inserting data attribute into file 0.
Inserting data attribute into file 15.
5 data files processed.
The MFT mirror is different from the MFT.
Correcting errors in the Master File Table (MFT) mirror.
Correcting errors in the master file table's (MFT) DATA attribute.
Correcting errors in the master file table's (MFT) BITMAP attribute.
CHKDSK discovered free space marked as allocated in the volume bitmap.
Windows has made corrections to the file system.
84165628 KB total disk space.
16 KB in 9 indexes.
0 KB in bad sectors.
68552 KB in use by the system.
65536 KB occupied by the log file.
84097060 KB available on disk.
4096 bytes in each allocation unit.
21041407 total allocation units on disk.
21024265 allocation units available on disk.