Hi,
At 14:18 07/08/02, Frederic Garzon wrote:
>A colleague told me it was because of ACL protection : the content of a
>disk could only be read by a windows whose SID was the same as the one who
>created the partition.
That only applies if NTFS Encryption was turned on. It wasn't otherwise the
ntfs driver would not have allowed you to read the data. I.e. you would
have gotten ACCESS DENIED instead of binary data.
Also it is not just the SID which is important but that is irrelevant to
the discussion.
>Is the disk completely broken ? is there a chance the files content was
>"encrypted" by Windows XP (my friend, who is a computer newbie, told me he
>did not install anything) ? I understand my questions are a bit naive, but
>since I am not a windows expert, i'm a bit lost with this disk and partition...
No it is definitely not encrypted. Also it is definitely not corrupt or the
Linux ntfs driver would complain. However the files have been overwritten
with crap. The mostly likely result of a computer virus at work seeing what
boot.ini looks like. So you are out of luck. The data is lost. Sorry. You
should teach your friend about backups...
btw. You can try running a virus scan on that disk. It may give you the
explanation you are looking for...
Best regards,
Anton
--
"I've not lost my mind. It's backed up on tape somewhere." - Unknown
--
Anton Altaparmakov <aia21 at cantab.net> (replace at with @)
Linux NTFS Maintainer / IRC: #ntfs on irc.openprojects.net
WWW: http://linux-ntfs.sf.net/ & http://www-stu.christs.cam.ac.uk/~aia21/
|