Page 1 of 1

Big problem, small solution?

Posted: 12 Sep 2012, 13:42
by Bassdude
Hi everybody,

I seem to have a problem with the HDD of my laptop. One day it refused to boot windows, not even from CD. I won't get me to Windows Recovery. It did boot Knoppix 7.0 off a DVD, so I'm using that right now. It comes with Testdisk 6.13. It recognized two partitions but was able to mount only one, and that's not the one windows is installed on. I used Testdisk to recover my files to an external HDD (so a monumental MERCI BEAUCOUP to Mr. Grenier here!!!), which gave me no errors or anything (via analyze - quick search - list files - copy). The entire folder structure and all the data seems to be fine.
Then I did a 'deeper search' (via analyze - quick search - select partition, press enter - deeper search).

This gave me the following results:
During the search I got this...

Code: Select all

HPFS - NTFS              0  32 33  1305 138 49   20971520 [BIOS_RVY]
  HPFS - NTFS              0  32 33  1305 138 49   20971520 [BIOS_RVY]
  HPFS - NTFS           1305 138 50  1318  74 36     204800 [System]
  HPFS - NTFS           1305 138 50  1318  74 36     204800 [System]
  HPFS - NTFS           1318  74 37 37008  13 61  573356032 [OS_Install]
  HPFS - NTFS           1318  74 37 37008  13 61  573356032 [OS_Install]
  HPFS - NTFS          37008  13 62 60801  47 46  382236672 [Data]
check_FAT: can't read FAT boot sector
Invalid FAT boot sector
 0 D FAT16 >32M           140145 235  1 157446 222 34  277939780
  FAT16 >32M           140145 235  1 157446 222 34  277939780

This message underneath the partition list appeared about 83% into the search.

When it finished, it gave me this:

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 500 GB / 465 GiB - CHS 60802 255 63

The harddisk (500 GB / 465 GiB) seems too small! (< 1295 GB / 1206 GiB)
Check the harddisk size: HD jumpers settings, BIOS detection...

The following partition can't be recovered:
     Partition               Start        End    Size in sectors
>  FAT16 >32M           140145 235  1 157446 222 34  277939780


[ Continue ]
142 GB / 132 GiB
What does all this mean? Should I somehow get it to rewrite the FAT boot sector?

Also, what I've noticed when I do a 'quick search'...

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 500 GB / 465 GiB - CHS 60802 255 63
     Partition               Start        End    Size in sectors
>D HPFS - NTFS              0  32 33  1305 138 49   20971520 [BIOS_RVY]
 D HPFS - NTFS           1305 138 50  1318  74 36     204800 [System]
 D HPFS - NTFS           1318  74 37 37008  13 61  573356032 [OS_Install]
 D HPFS - NTFS          37008  13 62 60801  47 46  382236672 [Data]








Structure: Ok.  Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable  P=Primary  L=Logical  E=Extended  D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
     Enter: to continue
NTFS, 10 GB / 10 GiB
...is that the partitions all have a D in front of them, meaning that they are deleted, which I never manually did.

What should I do to be able to boot windows normally again? I feel like it's not a hard problem, because I can still view and copy my files, and Testdisk shows the size of the disk correctly.

Any help would be greatly appreciated!

Re: Big problem, small solution?

Posted: 14 Sep 2012, 15:44
by Bassdude
...anyone?

Re: Big problem, small solution?

Posted: 15 Sep 2012, 18:00
by Bassdude
Ah, I found out the MFT is corrupt:

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org


MFT and MFT mirror are bad. Failed to repair them.
Any suggestions?...

Re: Big problem, small solution?

Posted: 21 Sep 2012, 12:37
by Bassdude
Ok, nevermind then... I zerofilled the disk and reinstalled windows.