¡ÒáÙé¤×¹à«¡àµÍÃìàÃÔèÁÃкºáºº NTFS º¹¾ÒÃìµÔªÑ¹ NTFS

àÁ×èÍÁÕä´Ã¿ì¢éÍÁÙź¹à«ÔÃì¿àÇÍÃìËÃ×ÍàÇÔÃì¡Ê൪ѹ·ÕèäÁèÊÒÁÒöà¢éÒ¶Ö§ ËÃ×ͼÙé´ÙáÅÃкº´ÔÊ¡ìáÊ´§äÇéà»ç¹ "·ÕèäÁèÃÙé¨Ñ¡" ¤Ø³ÍÒ¨ÁÕà«¡àµÍÃìÊÓËÃѺàÃÔèÁÃкºàÊÕÂËÒ ËÃ×ÍàÊÕÂËÒ º·¤ÇÒÁ¹Õé¨ÐºÍ¡¤Ø³ÇÔ¸Õ¡Òäé¹ËÒÊÓà¹ÒµÑÇ·ÕèÊͧ·Õè NTFS à¡çº áÅСÒä׹¤èÒä»ÂѧµÓá˹觷Õè¶Ù¡µéͧº¹´ÔÊ¡ì

¡ÃسÒà¡çºäÇéã¹ã¨·ÕèÊͧ conditions µéͧà»ç¹ä»µÒÁà¾×èÍãËé¢éÍÁÙŹÕé¨Ð¹Óä»ãªé¡Ñº»Ñ­ËҢͧ¤Ø³:

1. Ãкºá¿éÁµéͧà»ç¹ NTFS fat ã¹¢³Ð¹ÕéäÁèà¡çºÊÓà¹Ò¢Í§ bootsector ¹Ñé¹
2. ¤Ø³µéͧÊÒÁÒöàÃÔèÁÃкº¤ÍÁ¾ÔÇàµÍÃì¢Í§¤Ø³¡Ñº NT

ËÁÒÂà˵Ø: ËÒ¡¤Ø³äÁèÊÒÁÒöàÃÔèÁÃкº NT ËÃ×ÍÂéÒÂä´Ã¿ìÍ×è¹ NT machine áÅéÇ»¯ÔºÑµÔµÒÁº·¤ÇÒÁ Knowledge Base:

àÁ×è͵éͧ¡ÒÃá¡é䢻ѭËÒ¹Ñé¹ àÃÒ¨Óà»ç¹µéͧàÃÕ¡ÊÓà¹Ò¢Í§ bootsector ·ÕèÊÓÃͧ¢éÍÁÙÅ áÅСÒäѴÅÍ¡¡ÅѺä»ÂѧµÓá˹觺¹ÎÒÃì´´ÔÊ¡ì¶Ù¡µéͧ

ã¹ NT 3.5 x ·ÕèÊͧ ÊÓà¹Òà¡çºã¹ÈÙ¹Âì¡ÒÃä´Ã¿ì¢éÍÁÙÅẺÅͨԤÑÅ (ä´Ã¿ì¢éÍÁÙÅ¡ÅÒ§)

ã¹ NT 4.0 áÅÐ Windows 2000 ä´éÁÕ¡ÒÃÂéÒÂ仨شÊÔé¹ÊØ´¢Í§ä´Ã¿ìẺÅͨԤÑÅ¢éÍÁÙÅ (¨ºä´Ã¿ì¢éÍÁÙÅ), «Ö觵éͧãªéà·¤¹Ô¤¡ÒÃàÃÕ¡·ÕèᵡµèÒ§¡Ñ¹ áÊ´§µÑÇÍÂèÒ§¨Ðãªé´ÔÊ¡ìâ¾Ãº (dskprobe.exe) ÊÓËÃѺ NT «Ö觨ѴÊ觺¹ Kit ·ÃѾÂÒ¡Ã V4.0 NT áµè¨ÐÂѧ ·Ó§Ò¹ÀÒÂãµé V3.5x NT ¡Ñºá¿éÁ.dll ·ÕèàËÁÒÐÊÁµÔ´µÑé§

ËÁÒÂà˵Ø::

µÃǨ¡Òà assure ¡Ùé¤×¹ã¹ÃÐËÇèÒ§¢Ñ鹵͹µèÍ仹Õé àÁ×èͤسÁÕÊͺૡàµÍÃìÊÓËÃѺàÃÔèÁÃкº¢Í§Ãкºä¿Åì NTFS áÅФѴÅÍ¡ä»ÂѧÁռźѧ¤Ñºãªé ºÑ¹·Ö¡à«¡àµÍÃì·Õèä»Âѧá¿éÁã¹¢³Ð·Õè´Ùâ´Â¡ÒÃàÅ×Í¡ "ºÑ¹·Ö¡à»ç¹" ¨Ò¡àÁ¹Ù'á¿éÁ' áÅÐÃкؾҸáÅЪ×èÍá¿éÁ

¡ÒáÙé¤×¹ Bootsectors ¢Í§¾ÒÃìµÔªÑ¹ËÅÑ¡

1. àÅ×Í¡¡ÒÃãªé´ÔÊ¡ìâ¾Ãºä´Ã¿ì ä´Ã¿ì·ÕèÁÕÍÂÙè¨ÃÔ§ àÅ×͡Ẻ PhysicalDriveX ·Õè X = ordinal ¢Í§´ÔÊ¡ì µÑÇÍÂèÒ§àªè¹ ãªé´ÔÊ¡ì Administrator à¾×èͤé¹ËÒÍÐäà ordinal à»ç¹¢Í§´ÔÊ¡ì㹤ӶÒÁ µÑÇÍÂèÒ§àªè¹ ¶éҩѹÁÕ´ÔÊ¡ì SCSI ·ÕèÊÒÁã¹Ãкº¢Í§©Ñ¹´éÇ SCSI ID's 1, 3 áÅÐ 5 ¼Ùé´ÙáÅÃкºã¹´ÔÊ¡ì¨ÐáÊ´§àËÅèÒ¹Ñé¹ã¹ãºÊÑ觢ͧ 0,1,2 ¹Ñé¹ ¹Í¡¨Ò¡¹Õé ËÒ¡©Ñ¹Åº´ÔÊ¡ì ÁÕ SCSI ID #3, SCSI ´ÔÊ¡ì ´éÇÂËÁÒÂàÅ¢#5 ¨ÐÂéÒ¢Öé¹ä»Âѧ´ÔÊ¡ì 1 áÅдѧ¹Ñé¹àÁ×èÍ
2. ¤ÅÔ¡Êͧ¤ÃÑ駺¹ PhysicalDriveX ¤Ø³µéͧ¡ÒëèÍÁá«Á 㹡Åèͧ´éÒ¹ÅèÒ§ ¡àÅÔ¡àÅ×͡ẺÍèÒ¹ÍÂèÒ§à´ÕÂÇ áÅС´»ØèÁµÑ駤èÒ¡ÒÃãªé§Ò¹ ¤Ø³áÅéǨоºÇèÒ ¨Ñ´¡Òà Active ¶Ù¡µÑ駤èÒ¡Òà PhysicalDriveX áÅéÇàÅ×Í¡µ¡Å§
3. ¨Ò¡àÁ¹ÙÀÒ¤ àÅ×Í¡ÍèÒ¹ áÅзÓá·Ã¡ 0 ÊÓËÃѺ¡ÒÃàÃÔèÁµé¹à«¡àµÍÃìáÅÐ 1 ÊÓËÃѺËÁÒÂàÅ¢¢Í§ÀÒ¤ ¤ÅÔ¡¡ÒÃÍèÒ¹
4. ¤Ø³ä´éã¹¢³Ð¹ÕéàÇÅÒËÅÑ¡àÃÔèÁÃкºàÃ硤ÍÃì´ (MBR) ¢Í§´ÔÊ¡ì·ÕèÁÕÍÂÙè¨ÃÔ§¢Í§¤Ø³ ¤Ø³ÊÒÁÒöµÃǨÊͺ¹Õé ´éÇ¢éͤÇÒÁ ASCII º¹´éÒ¹¢ÇÒÁ×ͨشàÃÔèÁµé¹·Õè 8B ÍÍ¿à«çµ«Ö觤ÇÃÍèÒ¹ "äÁè¶Ù¡µéͧ¾ÒÃìµÔªÑ¹µÒÃÒ§...." ¨Ò¡àÁ¹Ù VIEW àÅ×Í¡ "¾ÒÃìµÔªÑ¹µÒÃÒ§" ¨Ò¡¡Åèͧ "´Ñª¹ÕµÒÃÒ§¾ÒÃìµÔªÑ¹" ¡ÒõԴ»éÒª×èÍ ãªéᶺàÅ×è͹à¾×èÍàÅ×Í¡¾ÒÃìµÔªÑ¹áººÊͺ¶ÒÁ áÅФÅÔ¡Êͧ¤ÃÑ駺¹¾ÒÃìµÔªÑ¹¹Ñé¹ ¡Åèͧ·ÕèÁØÁÅèÒ§ ´éÒ¹«éÒÂÁ×ÍáÊ´§ÀÒ¤­ÒµÔ ºÑ¹·Ö¡¤èÒ¹Õé (㹺Ã÷Ѵ¡ÒèѴãËé´éÒ¹ÅèÒ§), áÅéÇàÅ×Í¡á·çº "GO" ÍÂÙèµÔ´¡Ñº¡Åèͧ¹Õé
   
   àÃ硤ÍÃìà«¡àµÍÃìÊÑÁ¾Ñ·¸ì¤èÒ__________
5. ¢³Ð¹Õé ¨Ò¡àÁ¹Ù VIEW àÅ×Í¡ "亵ì" à¾×èÍãËé¤Ø³ÊÒÁÒöµÃǨÊͺµÓá˹觢ͧ¤Ø³ ¢Öé¹ÍÂÙè¡ÑºÅѡɳРBootsector ·ÕèàÊÕÂËÒ ¤Ø³ÊÒÁÒöÅͧºÒ§ÊÒÂÍÑ¡¢ÃÐ ASCII àªè¹ NTFS ã¹ÁØÁ´éÒ¹¢ÇÒÁ×Í·Õè´éÒ¹º¹ËÃ×Í "à¡Ô´¢éͼԴ¾ÅҴ㹡ÒÃÍèÒ¹´ÔÊ¡ìẺ¢Öé¹..." ÃкبشàÃÔèÁµé¹·ÕèÍͿ૵ 130 ¨Ò¡àÁ¹Ù VIEW àÅ×Í¡ "NTFS bootsector" ã¹ÁØÁÁͧ¹Õé àÅ×Í¡»ØèÁ "ä´Ã¿ì¢éÍÁÙÅ·Õè¨Ø´ÊÔé¹ÊØ´" ·Õè V4.0 NT ËÃ×Í "ä´Ã¿ì¢éÍÁÙÅ¡ÅÒ§" ÊÓËÃѺ NT V3.5x ¤Ø³ã¹¢³Ð¹Õé¤ÇÃà»ç¹·Õè bootsector ÊÓà¹ÒÊÓÃͧ¢Í§¤Ø³ ¶éҤسä´éÃѺ¢éͼԴ¾ÅÒ´·ÕèÃÐºØ "ÍèÒ¹¢éÍÁÙÅäÁèÊÁºÙóì" ËÃ×ÍËÅѧ¨Ò¡¡ÒõÃǨÊÍºäºµì µÃǨÊͺ¹ÕéäÁèä´éÊÓà¹ÒÊÓÃͧ¢Í§ bootsector, bootsector ËÅÑ¡¢Í§¤Ø³äÁèàÊÕ´ѧ¹Ñ鹤èÒàÃÒ¨Óà»ç¹ÊÓËÃѺ¡ÒáÃÐâ´´ä»ÊÓà¹ÒÊÓÃͧä´éäÁè¶Ù¡µéͧ Please go ahead to the next section showing how to recover the bootsector when it is missing or heavily corrupted, otherwise continue with step 6.
6. From the VIEW menu, select Bytes and verify that this is the NTFS bootsector. Once verified, From the SECTORS menu, select Write, make sure the dialog box shows the correct Handle and PhysicalDrive. In box Starting Sector to write Data, type in the number of Relative sectors you noted in step #4 and select the Button Write it.
7. Go to the SECTORS menu and type in the Relative sector from step #4 while keeping Number of sectors to 1, select Read. Here, please verify that the data was written.
8. Close Disk Probe and reboot your system.

Recovering Backup bootsector if original copy is missing, heavily corrupted, or does contain any usable data.

If the bootsector is missing or corrupted in such a manner that the information in the Primary Boot sector pointers were incorrect, usually the number of sectors are wrong, use the following steps to recover.

1. Using Disk Probe choose DRIVES, Physical Drive. Select the PhysicalDriveX where X = the ordinal of the disk. For example, Use Disk Administrator to find what the ordinal is of the disk in question.
2. Double click on the PhysicalDriveX you wish to view. In the box below, uncheck Read Only and select the button Set Active. You will then notice that the Active Handle has been set to PhysicalDriveX, then select OK.
3. From the SECTORS Menu, select Read and insert 0 for STARTING SECTORS and 1 for Number of Sectors, Click Read.
4. You are now at the MBR of your Physical disk. You can verify this by the ASCII text on the right hand side beginning at Offset 8b which should read "Invalid Partition Table....". From the VIEW menu, select view Partition Table. Select the correct partition number which is in question.
5. We will need two values; Total Sectors, Relative sectors. Please note the Relative sectors value since this is where the bootsector should be located. To find the backup copy of the bootsector, perform the following calcualtion:
   
   Record Total Sectors: _________
   Record Relative Sectors: _________
   
   EXAMPLE #1: FOR NT V4.0 WHERE THE BACKUP COPY IS AT THE END OF THE VOLUME:
   
   

                      Total Sectors  -->  1062880
                  + relative Sectors -->       32 +
                                         ---------
                                          1062912
                  - Minus one sector -->        1 -
                                         ---------
                   Backup bootsector -->  1062911
   					

   
   
   
   
   EXAMPLE #2: FOR NT V3.5x WHERE THE BACKUP COPY IS IN THE MIDDLE OF THE VOLUME:
   
   

                      Total Sectors  -->  1062880
                       Divided by 2  -->   531440
                  + relative Sectors -->       32 +
                                         ---------
                   Backup bootsector -->   531472
   					

   
   
   
6. Select SECTORS, Read and input Starting sector as the value calculated in Step #5, Number of sectors to 1. Select Read and you should be at the location of your backup bootsector.
7. From the VIEW menu, select Bytes and verify that this is the NTFS bootsector. Once verified, from the SECTORS menu, select Write, make sure the dialog box shows the correct Handle and PhysicalDrive. In box Starting Sector to write Data, type in the number of Relative sectors you noted in step #5 and select the Buttion Write it.
8. Go to the SECTORS menu and type in the Relative sector from step #5 while keeping Number of sectors to 1, select Read. Here, please verify that the data was written.
9. Close Disk Probe and reboot your system.

Recovering Bootsectors of extended partitions:

1. Using Disk Probe choose DRIVES, Physical Drive. Select the PhysicalDriveX where X = the ordinal of the disk. For example, Use Disk Administrator to find what the ordinal is of the disk in question.
2. Double click on the PhysicalDriveX you wish to view. In the box below, uncheck Read Only and select the button Set Active. You will then notice that the Active Handle has been set to PhysicalDriveX, then select OK.
3. From the SECTORS Menu, select Read and insert 0 for STARTING SECTORS and 1 for Number of Sectors, Click Read.
4. You are now at the MBR of your Physical disk. You can verify this by the ASCII text on the right hand side beginning at Offset 8b which should read "Invalid Partition Table....". From the VIEW menu, select view Partition Table. Select VIEW , As Partition Table.
5. In this view, in the Partition Table Index box, select your partition that contains your Extended partition. Once done, the System ID box should read "Extended". If the partition in question is the fourth logical drive in the Extended partition, click the Next partition button 4 times. The System ID box should now read "NTFS"
6. At this point, in the Partition Table Index box, select (double-click) your partition that contains your Extended partition. Once done, the System ID box should read "Extended."
   
   Now, navigate to the logical volume that needs repair within the extended partition. If the damaged volume is the second volume in the partition, click the "Next Partition" button twice. As you navigate through volumes in the extended partition, the System ID field should indicate the file system of each partition.
   
   Once you have found the partition that needs repair, record the current sector (from the title bar of Disk Probe), the relative sector, and total sectors of this volume. This information will be used to calculate the location of the backup copy of the boot sector.
   
   Current Sector ________________________
   Relative Sector _______________________
   Total Sectors _________________________
   
   Click the Go button to go to the boot sector of the damaged volume. Note the location of this sector from the title bar.
   
   Boot Sector ___________________________
   
   àÁ×è͵éͧ¡ÒõÃǨÊͺÇèÒ ¤Ø³¡ÓÅѧ´Ù·Õèà«¡àµÍÃì¶Ù¡µéͧ 亵ì·ÕèàÅ×Í¡¨Ò¡ÁØÁÁͧàÁ¹Ù ¶éÒà«¡àµÍÃìàÊÕÂËÒ·ÕèàÅ硹éÍÂà·èÒ¹Ñé¹ ¤Ø³¨ÐàËç¹¢éͤÇÒÁ¢éͼԴ¾ÅÒ´ ASCII 㹤ÍÅÑÁ¹ì´éÒ¹¢ÇÒÁ×Í (¶éÒà«¡àµÍÃìä´éÃѺ·Ñé§ËÁ´á·¹ ¤Ø³¨ÐäÁèä´éÃѺ»ÃСѹ¹Õé)
   
   ËÁÒÂà˵صÓá˹觷ÕèµÑ駹Õéà¾×èÍãËéàÃÒ·ÃÒºµÓá˹觷Õè¨Ð¤Ñ´ÅÍ¡ bootsector ·ÕèÊÓÃͧ¢éÍÁÙÅ

                 Current sector    __________
                 Relative sectors  __________
                 Total Sectors     __________
   					

7. àÁ×è͵éͧ¡Òäé¹ËÒÊÓà¹ÒÊÓÃͧ ¤Ø³¨ÐµéͧÊÒÁ¤èÒ ÀÒ¤­ÒµÔ ÀÒ¤ÃÇÁ áÅÐà«¡àµÍÃì»Ñ¨¨ØºÑ¹·Õè¤Ø³¨´ºÑ¹·Ö¡äÇéã¹¢Ñ鹵͹·Õè#6 ·Ó¡ÒäӹdzµèÍ仹Õé·Õèâ´Âãªé¤èҢͧ¤Ø³:
   
   µÑÇÍÂèÒ§·Õè#1: ÊÓËÃѺ v4.0 nt ·Õè·ÕèÊÓà¹ÒÊÓÃͧ¢éÍÁÙÅÍÂÙè㹵͹·éÒ¢ͧä´Ã¿ì¢éÍÁÙÅ:
   
   

                            Current sector:   819200
                            Total Sectors:    243680 +
                                              ======
                                             1062880
                          Relative Sectors        32 +
                                              ======
                                             1062912
                               Less one            1 -
                                              ======
                          Backup Bootsector  1062911
   					

   
   
   
   
   µÑÇÍÂèÒ§·Õè#2: FOR V3.5x NT «Ö觡ÒÃÊÓÃͧ¢éÍÁÙÅÊÓà¹Ò·ÕèÁÕ㹡Ö觡ÅÒ§¢Í§ä´Ã¿ì¢éÍÁÙÅ:
   
   

                            Current sector:   819200
     + Total Sectors: 243680 divided by 2 :   121840 +
                                              ======
                                              941040
                        + Relative Sectors        32 +
                                              ======
                          Backup Bootsector   941072
   					

   
   
   
8. Select SECTORS, Read and input Starting sector as the value calculated in Step #7, Number of sectors to 1. Select Read and you should be at the location of your backup bootsector.
9. From the VIEW menu, select Bytes and verify that this is the NTFS bootsector. You should see ASCII error text in the right hand column. If this sector does not appear to be a valid boot sector, do not continue. Start the process over and find the correct sector that contains the backup copy o the bootsector.
   
   Once you have verified that this is the backup copy of the bootsector, write this sector to the location of the original boot sector you discovered in step 6. From the Sectors menu, select Write. Make sure the dialog box shows the correct Handle and PhysicalDrive. In the Starting Sector box, enter the location of the original bootsector. Click "Write it" to write this information to the disk.
10. Go to the SECTORS menu and select Read. In the starting sector, type in the Sector to which you wrote the backup copy, while keeping Number of sectors to 1. Select Read, and verify that the data was written.
11. Close Disk Probe and reboot your system.

Norton Diskedit is manufactured by Symantec Corporation, a vendor independent of Microsoft; we make no warranty, implied or otherwise, regarding this product's performance or reliability.