[sleuthkit-users] "Invalid MFT File Reference" Error

[Kucenski, M. A. <Mat...@di...>]

I was originally getting a core dump when trying to run fls on a NTFS
partition.  Then I tried running ils on the same partition and received this
error:

Invalid MFT file reference (1933667429) in the attribute list of MFT 54940.

I then tried to run istat on 54940 and received the same error.  Is this a
bug in Sleuthkit or is there an error in my partition?  If it is an error in
the partition, is there anything that can be done besides copying the
partition to a disk and letting windows repair it?

Thanks,
-Matt

Matt Kucenski
U.S. Department of Defense
Voice: (202) 231-1847