[Bug 1280574] Re: Files modified on NTFS partition are seen as corrupted files in Windows

[Karim Sonbol]

@Anton Altaparmakov

> Have you got any 3rd party security related software / antivirus software installed that might be protecting the volume against 
> modifications? If yes what happens if you turn it off?
Yes, I have an antivirus and I already tried turning it off with no luck. 

> Have you got any of the change tracking features enabled in Windows ? If yes what happens if you turn them off?
I don't know what you mean by "change tracking features", could you explain ?

> Perhaps most importantly, would you be happy to create and send us metadata images of the volume in question? Probably 
> most useful to have a "post ntfs-3g write" and "post windows boot after ntfs-3g write". We can give you instructions how to 
> gather the metadata images - note those would expose the names of all your files/directories but none of the content (except 
> for metadata related files).
I have three NTFS partitions (besides the Recovery and Restore partitions) and they all have the same problem, do you want the metadata images for any one of them ? and will that be very helpful ? If yes, please tell me the instructions

> Do you by any chance have an SSD or hybrid drive that Windows might be using as a boot cache or some such?
I have a 1 TB hard drive with a 24 GB SSD cache.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ntfs-3g in Ubuntu.
https://bugs.launchpad.net/bugs/1280574

Title:
  Files modified on NTFS partition are seen as corrupted files in
  Windows

Status in “ntfs-3g” package in Ubuntu:
  New

Bug description:
  I have Ubuntu 13.10 and Windows 8.1 installed, both 64-bit (dual
  boot). Whenever I create or copy files to any of the NTFS partitions
  from Ubuntu, these files get deleted once I login to Windows. When I
  login to Ubuntu again, the files are not there. I shut down Windows
  properly and do not hibernate. I have disabled fast startup option in
  Windows, and Fastboot from BIOS. So it is not a hibernation problem.
  The same problem occurred when using Linux Mint.

  I have been able to find the exact event log concerning this issue in
  Windows Event Viewer, it says: "The file system structure on volume D:
  has now been repaired." and in the details section:

  EventData
    VolumeIdLength 2
    VolumeId D:
    RepairDetail 25008: Start repair on 02/05/2014 at 20:53:12:946 25017: Processing repair verb IndexEntry: 0x5000000000005,        "$I30", "line-mozart.avi" Flags: 0x32, 0x0 26065: Deleting index entry line-mozart.avi in index 0x5000000000005 of file   0x2000000003498. 25009: End repair on 02/05/2014 at 20:53:12:946
    RepairDataLength 152
  ...
  Note: "line-mozart.avi" is the name of the file that got deleted this time.

  Since Windows sees the modified files as corrupted files that need
  repair, I think Ubuntu does something wrong when saving files to NTFS
  partitions, and it is probably a bug in NTFS-3g.

  ProblemType: Bug
  DistroRelease: Ubuntu 13.10
  Package: ntfs-3g 1:2013.1.13AR.1-2ubuntu1
  ProcVersionSignature: Ubuntu 3.11.0-15.23-generic 3.11.10
  Uname: Linux 3.11.0-15-generic x86_64
  ApportVersion: 2.12.5-0ubuntu2.2
  Architecture: amd64
  Date: Sat Feb 15 14:07:58 2014
  InstallationDate: Installed on 2014-01-17 (28 days ago)
  InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
  MarkForUpload: True
  SourcePackage: ntfs-3g
  UpgradeStatus: No upgrade log present (probably fresh install)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ntfs-3g/+bug/1280574/+subscriptions