Big problem, small solution?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Bassdude
Posts: 4
Joined: 11 Sep 2012, 19:45

Big problem, small solution?

#1 Post by Bassdude »

Hi everybody,

I seem to have a problem with the HDD of my laptop. One day it refused to boot windows, not even from CD. I won't get me to Windows Recovery. It did boot Knoppix 7.0 off a DVD, so I'm using that right now. It comes with Testdisk 6.13. It recognized two partitions but was able to mount only one, and that's not the one windows is installed on. I used Testdisk to recover my files to an external HDD (so a monumental MERCI BEAUCOUP to Mr. Grenier here!!!), which gave me no errors or anything (via analyze - quick search - list files - copy). The entire folder structure and all the data seems to be fine.
Then I did a 'deeper search' (via analyze - quick search - select partition, press enter - deeper search).

This gave me the following results:
During the search I got this...

Code: Select all

HPFS - NTFS              0  32 33  1305 138 49   20971520 [BIOS_RVY]
  HPFS - NTFS              0  32 33  1305 138 49   20971520 [BIOS_RVY]
  HPFS - NTFS           1305 138 50  1318  74 36     204800 [System]
  HPFS - NTFS           1305 138 50  1318  74 36     204800 [System]
  HPFS - NTFS           1318  74 37 37008  13 61  573356032 [OS_Install]
  HPFS - NTFS           1318  74 37 37008  13 61  573356032 [OS_Install]
  HPFS - NTFS          37008  13 62 60801  47 46  382236672 [Data]
check_FAT: can't read FAT boot sector
Invalid FAT boot sector
 0 D FAT16 >32M           140145 235  1 157446 222 34  277939780
  FAT16 >32M           140145 235  1 157446 222 34  277939780

This message underneath the partition list appeared about 83% into the search.

When it finished, it gave me this:

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 500 GB / 465 GiB - CHS 60802 255 63

The harddisk (500 GB / 465 GiB) seems too small! (< 1295 GB / 1206 GiB)
Check the harddisk size: HD jumpers settings, BIOS detection...

The following partition can't be recovered:
     Partition               Start        End    Size in sectors
>  FAT16 >32M           140145 235  1 157446 222 34  277939780


[ Continue ]
142 GB / 132 GiB
What does all this mean? Should I somehow get it to rewrite the FAT boot sector?

Also, what I've noticed when I do a 'quick search'...

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 500 GB / 465 GiB - CHS 60802 255 63
     Partition               Start        End    Size in sectors
>D HPFS - NTFS              0  32 33  1305 138 49   20971520 [BIOS_RVY]
 D HPFS - NTFS           1305 138 50  1318  74 36     204800 [System]
 D HPFS - NTFS           1318  74 37 37008  13 61  573356032 [OS_Install]
 D HPFS - NTFS          37008  13 62 60801  47 46  382236672 [Data]








Structure: Ok.  Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable  P=Primary  L=Logical  E=Extended  D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
     Enter: to continue
NTFS, 10 GB / 10 GiB
...is that the partitions all have a D in front of them, meaning that they are deleted, which I never manually did.

What should I do to be able to boot windows normally again? I feel like it's not a hard problem, because I can still view and copy my files, and Testdisk shows the size of the disk correctly.

Any help would be greatly appreciated!

Bassdude
Posts: 4
Joined: 11 Sep 2012, 19:45

Re: Big problem, small solution?

#2 Post by Bassdude »

...anyone?

Bassdude
Posts: 4
Joined: 11 Sep 2012, 19:45

Re: Big problem, small solution?

#3 Post by Bassdude »

Ah, I found out the MFT is corrupt:

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org


MFT and MFT mirror are bad. Failed to repair them.
Any suggestions?...

Bassdude
Posts: 4
Joined: 11 Sep 2012, 19:45

Re: Big problem, small solution?

#4 Post by Bassdude »

Ok, nevermind then... I zerofilled the disk and reinstalled windows.

Locked