Failed to rebuild NTFS boot sector

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
drhelp
Posts: 2
Joined: 14 Feb 2019, 08:04

Failed to rebuild NTFS boot sector

#1 Post by drhelp » 14 Feb 2019, 08:17

so i'm helping out someone who trashed their portable drive by plugging an the wrong power supply to the case. this used to be an main drive from a computer, but they dumped the computer and put it in an enclosure after the mb died a while back. I've removed it and plugged the drive directly into my linux computer. i've dumped an image using dd to work on until i figure it out then will repeat the correct steps on the drive itself. i have used photorec to dump the data and got a lot of it successfully, but as we all know the directory structure and names are toast. since its a 3 tb drive, i would like to try and just fix it to save time, but we do have info which proves it is at least still on the drive. i'm pretty sure the fat partition is one of the OEM recovery partitions. i also see sda as 3000gb, and sda1 as 375. the sda1 is completely inaccessible and gives me pretty no options, so i've been working on sda. when i try and list the files in advanced options, it says can't open file system, filesystem seems damaged.

when i do an analyze i get something like this
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 45600 0 63 732564000
1 P HPFS - NTFS 0 1 1 45600 0 63 732564000
No partition is bootable

in deeper search i get this
Invalid FAT boot sector
0 D FAT16 LBA 276485 185 44 374645 121 8 1576936333
FAT16 LBA 276485 185 44 374645 121 8 1576936333


when i do a advanced boot rebuild i get
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
1 P HPFS - NTFS 0 1 1 45600 0 63 732564000

ntfs_boot_sector
1 P HPFS - NTFS 0 1 1 45600 0 63 732564000
filesystem size 1 18130176396244664060
sectors_per_cluster 0 143
mft_lcn 0 14331846171329054641
mftmirr_lcn 0 18199115062560321387
clusters_per_mft_record 0 -70
clusters_per_index_record 0 -114
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 6291897
Failed to rebuild NTFS boot sector.


am i able recover this and restore functionality so we can copy directory structure or has something completely toasted it? i think this is where i need to rebuild the bs but it won't let me, so maybe i'm done for?

here's the boot sector dumps
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Boot sector Backup boot sector
0000 00000000 00000000 ........ becbd572 7336e6cf ...rs6..
0008 00000000 00000000 ........ 49d1b0cc be8ffd78 I......x
0010 00000000 00000000 ........ cb1e1bd3 dddb7ebf ......~.
0018 00000000 00000000 ........ 3015100d 384b6a5e 0...8Kj^
0020 00000000 00000000 ........ 1157ccb1 e477bb73 .W...w.s
0028 00000000 00000000 ........ fbbe55e5 5f539bfb ..U._S..
0030 00000000 00000000 ........ b1479cd1 28f2e4c6 .G..(...
0038 00000000 00000000 ........ 6b6f5ef2 b93e90fc ko^..>..
0040 00000000 00000000 ........ bac9bf99 8ed435f6 ......5.
0048 00000000 00000000 ........ 7b58b084 669f3b7f {X..f.;.
0050 00000000 00000000 ........ 4cab8aa5 e7ee461f L.....F.
0058 00000000 00000000 ........ fe32fc03 bb3db246 .2...=.F
0060 00000000 00000000 ........ c7ff035e 852f7829 ...^./x)
0068 00000000 00000000 ........ aa551357 9cfd5ad2 .U.W..Z.
0070 00000000 00000000 ........ d24cb806 ff2559d3 .L...%Y.
0078 00000000 00000000 ........ da10fea0 48d8a814 ....H...
0080 00000000 00000000 ........ a10fec81 4d34aff6 ....M4..
0088 00000000 00000000 ........ 4b9eb56b 5b7b8a6b K..k[{.k
0090 00000000 00000000 ........ 88bdadfa 62536db3 ....bSm.
0098 00000000 00000000 ........ 748c10d2 ef31f968 t....1.h
00A0 00000000 00000000 ........ 80d919f8 7ce91f42 ....|..B
00A8 00000000 00000000 ........ d5e7e928 4931da4c ...(I1.L
00B0 00000000 00000000 ........ 8f190b8f f5bcd3c8 ........
00B8 00000000 00000000 ........ f0b1b223 2be1690a ...#+.i.
00C0 00000000 00000000 ........ bc7cb084 47253faa .|..G%?.
00C8 00000000 00000000 ........ 8bad806c be8212a4 ...l....
00D0 00000000 00000000 ........ 66c10a0f 15e46951 f.....iQ
00D8 00000000 00000000 ........ 763e08e5 f6301022 v>...0."
00E0 00000000 00000000 ........ 84bf16fb beb593e7 ........
00E8 00000000 00000000 ........ 93462456 bc95ffb7 .F$V....
00F0 00000000 00000000 ........ 4bae318f 2e32afd5 K.1..2..
00F8 00000000 00000000 ........ 058791dc f3fc48b8 ......H.
0100 00000000 00000000 ........ c844726a 25b6102b .Drj%..+
0108 00000000 00000000 ........ 19ff0c07 b7810282 ........
0110 00000000 00000000 ........ a5ebb810 8ac24533 ......E3
0118 00000000 00000000 ........ 251e5907 e965842c %.Y..e.,
0120 00000000 00000000 ........ 2b2eb09e 53214e7e +...S!N~
0128 00000000 00000000 ........ 6c218970 0b3a65d2 l!.p.:e.
0130 00000000 00000000 ........ 29660923 fa27be32 )f.#.'.2
0138 00000000 00000000 ........ 78560867 1588527f xV.g..R.
0140 00000000 00000000 ........ fcdc6cfb 3e9499c9 ..l.>...
0148 00000000 00000000 ........ 856cbc89 8de99a68 .l.....h
0150 00000000 00000000 ........ e88ef32f 3a7321dd .../:s!.
0158 00000000 00000000 ........ e53f55b9 c338b659 .?U..8.Y
0160 00000000 00000000 ........ f1f817c7 fa324a3d .....2J=
0168 00000000 00000000 ........ bdf7e134 868f8e66 ...4...f
0170 00000000 00000000 ........ 4cf72f92 e1919a76 L./....v
0178 00000000 00000000 ........ 59ef0fcb d7aa1dcc Y.......
0180 00000000 00000000 ........ 76ce2a54 9ed78a4f v.*T...O
0188 00000000 00000000 ........ 9092ebbf e0fc0f50 .......P
0190 00000000 00000000 ........ 534b0872 6d70f6da SK.rmp..
0198 00000000 00000000 ........ 5f3f19f7 e205182f _?...../
01A0 00000000 00000000 ........ 0297d5d7 c4e56ebf ......n.
01A8 00000000 00000000 ........ 62b6f51b 4d9ea668 b...M..h
01B0 00000000 00000000 ........ 5e942738 4a9f1e78 ^.'8J..x
01B8 00000000 00000000 ........ 2572170f f8fa3c64 %r....<d
01C0 00000000 00000000 ........ 1d9b90ca 7de5203e ....}. >
01C8 00000000 00000000 ........ 407443dc e64d0c08 @tC..M..
01D0 00000000 00000000 ........ fcef6dc6 393dd4a4 ..m.9=..
01D8 00000000 00000000 ........ 99bef5bf 4e4bc6e8 ....NK..
01E0 00000000 00000000 ........ 1892fd1b aedb9b72 .......r
01E8 00000000 00000000 ........ 4ea13447 699abcad N.4Gi...
01F0 00000000 00000000 ........ 4c8077b5 92212edf L.w..!..
01F8 00000000 00000000 ........ f955556c 525fcabc .UUlR_..


thanks for any help or at least letting me know i've taken the right steps or have done everything possible

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 4974
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Failed to rebuild NTFS boot sector

#2 Post by cgrenier » 14 Feb 2019, 18:56

Can you try Advanced, boot, RebuildBS, List
If you can see your files, choose List, Write, confirm, Quit.
If it doesn't work, try Analyse, Quick Search and if needed Deeper Search.If it find your partition, choose Write, confirm, Quit and restart your computer.
If it still doesn't work, try PhotoRec.

drhelp
Posts: 2
Joined: 14 Feb 2019, 08:04

Re: Failed to rebuild NTFS boot sector

#3 Post by drhelp » 15 Feb 2019, 02:19

list doens't work
analyze find the big partition, but still can't list
deeper search says size doesn't match (weird) and lists the fat16 partition

photorec got all the files, but i was trying to get the directory info back as the drive is quite large and it will be a pita to go through

not as bad as losing everything though, your utilities are phenomenal

Locked