One day a disk containing several NTFS file systems spread a lot of nasty messages in the System log, and working with the computer resembled a snail race:
I did not want to lose the files on the disk, and at the same time I did not know how serious the damage was. I decided to start by saving the contents of the damaged disk to another medium using disk2vhd.exe.
First, I connected an external drive to which a VHD file was to be written, constituting a "backup" of the contents of the suspect drive. Now a small registry change was needed to make the next mounted USB drive read-only. What is needed is the creation of a StorageDevicePolicies key, which is usually not present, and a corresponding value for a variable of type DWORD.
Key: HKLM_SystemCurrentControlSetStorageDevicePolicies.
Variable: WriteProtect
Type: REG_DWORD
Value: 1
After this entry, the previously mounted file systems continue to be available in read-write mode, but the next ones are read-only. Lucky managed to create a VHD file with the contents of the "suspicious" hard drive.
After performing repair actions on a copy of the VHD file, similar actions also performed on the real disk brought it back to life.
Of course, at the end, you must delete the entry, otherwise writes to connected USB drives will be blocked.