Windows 10 system suicide

kongking · 03 May 2016

Hi. havent found a working solution yet. Via MiniTool Power Data I was able to move the needed files to a different HD but I am not able to access them. I do not have permission to do anything. It is also not possible to open those files. Windows 10 itself doesnt let me change Attributes or do anything to fix this problem. Most services aren't working, recovery, secure mode and all the other options are just breaking down, so via Win 10 I cant do anything. How can I gain permission or ownership for my files and folder via Knoppix?

DeaconFrost · 03 May 2016

I'm not sure if this works for Windows 10, but in previous versions, I would connect the hard drive as an external to another working computer with the same username and password, and the files would be accessible. I would think that even if the username and password are different, you would still be able to take ownership of the files and move them.

Moilleadoir · 04 May 2016

Maybe the reason you can’t access the files from Linux is that the file system wasn’t closed properly by Windows (assuming it’s NTFS). If it’s marked as being in an inconsistent state then the Linux driver won’t mount it to avoid corrupting data. Have you tried accessing the copied files from Linux?

You should also try to check the health of your hard drive. It could be a physical problem with the drive or the file system itself could be corrupted. A virus could also be involved.

It’s a little mystifying that Linux is asking you for authentication to mount the drive. If you’re doing it from a file manager (e.g. Nautilus, Nemo, Thunar) then it should just mount when you click on the device. Just to be clear, the drive isn’t encrypted with BitLocker is it?

kongking · 04 May 2016

Moilleadoir said:

Maybe the reason you can’t access the files from Linux is that the file system wasn’t closed properly by Windows (assuming it’s NTFS). If it’s marked as being in an inconsistent state then the Linux driver won’t mount it to avoid corrupting data. Have you tried accessing the copied files from Linux?

You should also try to check the health of your hard drive. It could be a physical problem with the drive or the file system itself could be corrupted. A virus could also be involved.

It’s a little mystifying that Linux is asking you for authentication to mount the drive. If you’re doing it from a file manager (e.g. Nautilus, Nemo, Thunar) then it should just mount when you click on the device. Just to be clear, the drive isn’t encrypted with BitLocker is it?

Knoppix also told me that Windows wasnt closed properly but even if I get rid off the Hibernate File I am not able to do things. Its a SSD Drive NTFS. However I was able to mount it but not able to copy my files. The Harddrive is healthy as it says and I am 99% sure that this is not a virus. So, even though I can see the files, names and sizes correctly - I am not able to copy/move/access them - also not the copied files - not via Knoppix neither via Tails or Win 7. Knoppix keeps telling me that I don't have permission. Tails keeps telling me that I don't have Authorization and ask for a Password (which I never used). None of my files have ever been encrypted. Does Windows 10 happen to do that by itself?

Seems like Knoppix is getting me the closest to what I need but still that Permission issue gives me a headache. Not sure what other options there are to fix this......thank you for your help!!!!!!!

The screenshot below shows Tails Error Message when trying to access the partition.

Moilleadoir · 05 May 2016

Edit: Duh! The error message above does offer you a solution.

Assuming your drive is still /dev/sdc2…

From a terminal make a folder somewhere to mount to (shouldn’t really matter where but different distros have their peculiarities) and mount the drive read-only. On Ubuntu I would use the newer ntfs-3g driver, but from your screenshot maybe only the ntfs driver is available.

Code:

mkdir ~/win
sudo mount -t ntfs /dev/sdc2 ~/win -o ro

Then open ~/win (or ls ~/win) and see if you can access the files.

Original message:

The NTFS improper shutdown issue can only be fixed by Windows. Perhaps if you attach the drive to a system running a recent version of Windows, check the drive is assigned a letter and is readable and then shutdown cleanly, it might fix that issue. But if you’ve already used the recovery tools USB you might have already done this — did you shutdown or just reset?

I’m not familiar with either Tails or Knoppix, but it might help to manually mount the drive rather than use a file manager. I’m guessing the screenshot is from mounting the original drive. What response do you get when you try to see the copied files? Where are they copied to? Another NTFS filesystem? FAT32?