Cannot seem to fix the drive.
Posted: 19 Feb 2018, 03:53
Hi,
I have a Dell B120 with XP Home.
It stopped booting.
The hard drive has some problems.
I removed the drive and attached it to a good computer with an external USB adapter.
Interestingly, it spins up and I can actually copy files from it with TestDisk.
The partitions seem to have been “deleted”.
I believe the Master Boot Record and the Partition record have been messed up.
I think there is psychical damage to the sectors involved.
TestDisk finds the Partitions but after I apply the corrections and “write”, the fix does not seem to help me see the drive in Windows.
I go through the motions and change the first deleted partition (OS C: partition) from D to *
The second to P.
Write.
And when I Analyse again, the same broken partitions show up.
Does the Program have the ability to write to a sector that is not broken?
Or does it keep trying to write to the same sector that is broken?
I still have hopes to rescue this drive so that I can clone it and put it to rest!!
Also, can anyone tell me exactly how to do a NTFS Boot sector recovery
Thanks
Joe
Log file:
Sun Feb 18 19:23:05 2018
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, February 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=16016998400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=16016998400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=106489870848
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=21478610944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=171795860480
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=182481223680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=16015949824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=250785792000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=250785792000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=320070288384
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000LPVX-22V0TT0, S/N:WD-WXV1E53HZC04, FW:01.01A01
Disk /dev/sdb - 250 GB / 233 GiB - CHS 30489 255 63, sector size=512 - SanDisk Cruzer Glide 3.0, S/N:4C530001190224109531, FW:1.00
Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63, sector size=512 - SAMSUNG MP0402H, S/N:100, FW:UC20
Disk /dev/sdd - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - TOSHIBA MK3259GSX, S/N:801130168383
Disk /dev/sde - 16 GB / 14 GiB - CHS 1947 255 63, sector size=512 - Lexar USB Flash Drive, S/N:AA00000000000485, FW:1100
Disk /dev/sdf - 250 GB / 233 GiB - CHS 30489 255 63, sector size=512 - SanDisk Cruzer Glide 3.0, S/N:4C530001010304116371, FW:1.00
Partition table type defaults to Intel
Disk /dev/sdc - 40 GB / 37 GiB - SAMSUNG MP0402H
Partition table type: Intel
Analyse Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63
Current partition structure:
Partition: Read error
search_part()
Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63
file_pread(6,16,buffer,48(0/0/49)) ReadFile Incorrect function.
file_pread(6,16,buffer,95(0/1/33)) ReadFile Incorrect function.
file_pread(6,1,buffer,95(0/1/33)) ReadFile Incorrect function.
file_pread(6,8,buffer,111(0/1/49)) ReadFile Incorrect function.
file_pread(6,16,buffer,51(0/0/52)) ReadFile Incorrect function.
file_pread(6,16,buffer,97(0/1/35)) ReadFile Incorrect function.
file_pread(6,1,buffer,97(0/1/35)) ReadFile Incorrect function.
file_pread(6,2,buffer,119(0/1/57)) ReadFile Incorrect function.
file_pread(6,16,buffer,63(0/1/1)) ReadFile Incorrect function.
file_pread(6,1,buffer,63(0/1/1)) ReadFile Incorrect function.
file_pread(6,8,buffer,71(0/1/9)) ReadFile Incorrect function.
file_pread(6,3,buffer,79(0/1/17)) ReadFile Incorrect function.
file_pread(6,3,buffer,126(0/2/1)) ReadFile Incorrect function.
file_pread(6,8,buffer,142(0/2/17)) ReadFile Incorrect function.
NTFS at 2/0/1
filesystem size 71794485
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 1 4470 254 63 71794485
NTFS, blocksize=4096, 36 GB / 34 GiB
FAT32 at 4471/0/1
FAT1 : 36-6173
FAT2 : 6174-12311
start_rootdir : 12312 root cluster : 2
Data : 12312-6297479
sectors : 6297480
cluster_size : 8
no_of_cluster : 785646 (2 - 785647)
fat_length 6138 calculated 6138
set_FAT_info: name from BS used
FAT32 at 4471/0/1
FAT: cluster=2(0x2), pos=71838927
FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
FAT32, blocksize=4096, 3224 MB / 3074 MiB
file_pread(6,2,buffer,78141439(4864/20/20)) lseek err Invalid argument
file_pread(6,1,buffer,78141439(4864/20/20)) lseek err Invalid argument
file_pread(6,2,buffer,78141440(4864/20/21)) lseek err Invalid argument
NTFS at 4863/254/63
filesystem size 78140097
sectors_per_cluster 8
mft_lcn 3
mftmirr_lcn 4883756
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(6,16,buffer,93(0/1/31)) ReadFile Incorrect function.
file_pread(6,1,buffer,93(0/1/31)) ReadFile Incorrect function.
NTFS: Can't read MFT
HPFS - NTFS 0 1 1 4863 254 63 78140097
NTFS found using backup sector, blocksize=4096, 40 GB / 37 GiB
file_pread(6,1,buffer,78140160(4864/0/1)) ReadFile Incorrect function.
file_pread(6,14,buffer,78140161(4864/0/2)) lseek err Invalid argument
file_pread(6,3,buffer,78140175(4864/0/16)) lseek err Invalid argument
file_pread(6,3,buffer,78140222(4864/0/63)) lseek err Invalid argument
file_pread(6,8,buffer,78140238(4864/1/16)) lseek err Invalid argument
file_pread(6,11,buffer,78140285(4864/1/63)) lseek err Invalid argument
file_pread(6,2,buffer,78142207(4864/32/32)) lseek err Invalid argument
file_pread(6,1,buffer,78140178(4864/0/19)) lseek err Invalid argument
file_pread(6,1,buffer,78140225(4864/1/3)) lseek err Invalid argument
file_pread(6,1,buffer,78140246(4864/1/24)) lseek err Invalid argument
file_pread(6,1,buffer,78140296(4864/2/11)) lseek err Invalid argument
file_pread(6,1,buffer,78142209(4864/32/34)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=3
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=6
Results
HPFS - NTFS 0 1 1 4863 254 63 78140097
NTFS found using backup sector, blocksize=4096, 40 GB / 37 GiB
HPFS - NTFS 2 0 1 4470 254 63 71794485
NTFS, blocksize=4096, 36 GB / 34 GiB
FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
FAT32, blocksize=4096, 3224 MB / 3074 MiB
interface_write()
1 * HPFS - NTFS 2 0 1 4470 254 63 71794485
2 P FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
I have a Dell B120 with XP Home.
It stopped booting.
The hard drive has some problems.
I removed the drive and attached it to a good computer with an external USB adapter.
Interestingly, it spins up and I can actually copy files from it with TestDisk.
The partitions seem to have been “deleted”.
I believe the Master Boot Record and the Partition record have been messed up.
I think there is psychical damage to the sectors involved.
TestDisk finds the Partitions but after I apply the corrections and “write”, the fix does not seem to help me see the drive in Windows.
I go through the motions and change the first deleted partition (OS C: partition) from D to *
The second to P.
Write.
And when I Analyse again, the same broken partitions show up.
Does the Program have the ability to write to a sector that is not broken?
Or does it keep trying to write to the same sector that is broken?
I still have hopes to rescue this drive so that I can clone it and put it to rest!!
Also, can anyone tell me exactly how to do a NTFS Boot sector recovery
Thanks
Joe
Log file:
Sun Feb 18 19:23:05 2018
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, February 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=16016998400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=16016998400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=106489870848
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=21478610944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=171795860480
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=182481223680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=16015949824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=250785792000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=250785792000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=320070288384
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000LPVX-22V0TT0, S/N:WD-WXV1E53HZC04, FW:01.01A01
Disk /dev/sdb - 250 GB / 233 GiB - CHS 30489 255 63, sector size=512 - SanDisk Cruzer Glide 3.0, S/N:4C530001190224109531, FW:1.00
Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63, sector size=512 - SAMSUNG MP0402H, S/N:100, FW:UC20
Disk /dev/sdd - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - TOSHIBA MK3259GSX, S/N:801130168383
Disk /dev/sde - 16 GB / 14 GiB - CHS 1947 255 63, sector size=512 - Lexar USB Flash Drive, S/N:AA00000000000485, FW:1100
Disk /dev/sdf - 250 GB / 233 GiB - CHS 30489 255 63, sector size=512 - SanDisk Cruzer Glide 3.0, S/N:4C530001010304116371, FW:1.00
Partition table type defaults to Intel
Disk /dev/sdc - 40 GB / 37 GiB - SAMSUNG MP0402H
Partition table type: Intel
Analyse Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63
Current partition structure:
Partition: Read error
search_part()
Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63
file_pread(6,16,buffer,48(0/0/49)) ReadFile Incorrect function.
file_pread(6,16,buffer,95(0/1/33)) ReadFile Incorrect function.
file_pread(6,1,buffer,95(0/1/33)) ReadFile Incorrect function.
file_pread(6,8,buffer,111(0/1/49)) ReadFile Incorrect function.
file_pread(6,16,buffer,51(0/0/52)) ReadFile Incorrect function.
file_pread(6,16,buffer,97(0/1/35)) ReadFile Incorrect function.
file_pread(6,1,buffer,97(0/1/35)) ReadFile Incorrect function.
file_pread(6,2,buffer,119(0/1/57)) ReadFile Incorrect function.
file_pread(6,16,buffer,63(0/1/1)) ReadFile Incorrect function.
file_pread(6,1,buffer,63(0/1/1)) ReadFile Incorrect function.
file_pread(6,8,buffer,71(0/1/9)) ReadFile Incorrect function.
file_pread(6,3,buffer,79(0/1/17)) ReadFile Incorrect function.
file_pread(6,3,buffer,126(0/2/1)) ReadFile Incorrect function.
file_pread(6,8,buffer,142(0/2/17)) ReadFile Incorrect function.
NTFS at 2/0/1
filesystem size 71794485
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 1 4470 254 63 71794485
NTFS, blocksize=4096, 36 GB / 34 GiB
FAT32 at 4471/0/1
FAT1 : 36-6173
FAT2 : 6174-12311
start_rootdir : 12312 root cluster : 2
Data : 12312-6297479
sectors : 6297480
cluster_size : 8
no_of_cluster : 785646 (2 - 785647)
fat_length 6138 calculated 6138
set_FAT_info: name from BS used
FAT32 at 4471/0/1
FAT: cluster=2(0x2), pos=71838927
FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
FAT32, blocksize=4096, 3224 MB / 3074 MiB
file_pread(6,2,buffer,78141439(4864/20/20)) lseek err Invalid argument
file_pread(6,1,buffer,78141439(4864/20/20)) lseek err Invalid argument
file_pread(6,2,buffer,78141440(4864/20/21)) lseek err Invalid argument
NTFS at 4863/254/63
filesystem size 78140097
sectors_per_cluster 8
mft_lcn 3
mftmirr_lcn 4883756
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(6,16,buffer,93(0/1/31)) ReadFile Incorrect function.
file_pread(6,1,buffer,93(0/1/31)) ReadFile Incorrect function.
NTFS: Can't read MFT
HPFS - NTFS 0 1 1 4863 254 63 78140097
NTFS found using backup sector, blocksize=4096, 40 GB / 37 GiB
file_pread(6,1,buffer,78140160(4864/0/1)) ReadFile Incorrect function.
file_pread(6,14,buffer,78140161(4864/0/2)) lseek err Invalid argument
file_pread(6,3,buffer,78140175(4864/0/16)) lseek err Invalid argument
file_pread(6,3,buffer,78140222(4864/0/63)) lseek err Invalid argument
file_pread(6,8,buffer,78140238(4864/1/16)) lseek err Invalid argument
file_pread(6,11,buffer,78140285(4864/1/63)) lseek err Invalid argument
file_pread(6,2,buffer,78142207(4864/32/32)) lseek err Invalid argument
file_pread(6,1,buffer,78140178(4864/0/19)) lseek err Invalid argument
file_pread(6,1,buffer,78140225(4864/1/3)) lseek err Invalid argument
file_pread(6,1,buffer,78140246(4864/1/24)) lseek err Invalid argument
file_pread(6,1,buffer,78140296(4864/2/11)) lseek err Invalid argument
file_pread(6,1,buffer,78142209(4864/32/34)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=3
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=6
Results
HPFS - NTFS 0 1 1 4863 254 63 78140097
NTFS found using backup sector, blocksize=4096, 40 GB / 37 GiB
HPFS - NTFS 2 0 1 4470 254 63 71794485
NTFS, blocksize=4096, 36 GB / 34 GiB
FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
FAT32, blocksize=4096, 3224 MB / 3074 MiB
interface_write()
1 * HPFS - NTFS 2 0 1 4470 254 63 71794485
2 P FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]