Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Trying to recover partition on laptop HDD


  • Please log in to reply
13 replies to this topic

#1 ActiveALLI

ActiveALLI

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 13 January 2014 - 10:42 PM

I have a Dell Studio XPS laptop with Windows 7 that all of a sudden stopped booting. I got it up from the Windows Recovery CD and from the command prompt tried to access the hard drives which gave an IO error and the partition reported as RAW which got me to James Littens excellent article:
 
I am stuck though. 
 
I launched TestDrive
See the disk reporting the correct size
Select Intel/PC partition
Click analyze and get this up:
 
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63
Current partition structure:
     Partition                  Start        End    Size in sectors

 1 * HPFS - NTFS              0  32 33    12 223 19     204800 [System Reserved]
Invalid NTFS or EXFAT boot
 2 P HPFS - NTFS             12 223 20 60801  48 31  976564272
 2 P HPFS - NTFS             12 223 20 60801  48 31  976564272
 
Notice that the 2nd partition is listed twice which according to the test drive wiki indicates that the partition is corrupted.
 
I do a quick search and that finds the first partition only and then I do a deeper search and it still only finds the first partition.  
 
The deeper search does differ from the quick search in that it reports:  
Read error at 12/223/26 (lba=206854)
 
What can I try next?

 

 

Thanks to everyone in advance for any help.

 

Cheers,

 

Alli



BC AdBot (Login to Remove)

 


#2 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,230 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:03:52 AM

Posted 13 January 2014 - 10:58 PM

do you have data that you need on the machine?



#3 ActiveALLI

ActiveALLI
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 13 January 2014 - 11:07 PM

Yes,  This is my primary laptop and most data that I care about is "on the machine".  ie on that larger partition that seems to have a damaged file system, the healthy partition (number 1) is a 100Mb boot partition of some sorts. 



#4 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,230 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:03:52 AM

Posted 13 January 2014 - 11:17 PM

there are some tools that may be of assistance.

 

http://www.cgsecurity.org/wiki/TestDisk

 

is probably the best about.

 

Let us know how you go with that before we look at other options.



#5 ActiveALLI

ActiveALLI
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 13 January 2014 - 11:26 PM

Hey! Thanks for your quick response.    

 

As you can see in my original post I am using TestDisk but I'm not able to recover the partition sucessfully.  The Quick and Deeper Search function only return the smaller partition's files as viewable with the P function and if I go to Advanced and try the 'List' function it return with "Can't open filesystem. Filesystem seems damaged"

 

I'm very interested in knowing what some of the next steps could be to try to restore the partition / filesystem.

 

Thanks again,

 

Alli



#6 TsVk!

TsVk!

    penguin farmer


  • Members
  • 6,230 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Antipodes
  • Local time:03:52 AM

Posted 13 January 2014 - 11:39 PM

you can try to recover the file from the partition using this tool

 

http://www.powerdatarecovery.com/free-file-recovery-software/how-to-recover-data-from-damaged-partition.html



#7 ActiveALLI

ActiveALLI
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 14 January 2014 - 12:03 AM

Thanks TsVk,  I appreciate your swift response.

 

If anybody has any insight on how to be able to recover the file system using TestDisk based on this scenario before going into a last resort data recovery process then I'd be very grateful. 

 

Alli



#8 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,946 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:52 PM

Posted 14 January 2014 - 10:02 AM

Hi

 

Thanks for the kind words.

 

Run TestDisk again and do something a little different from last time.

Choose Create and hit enter
You should now see a list of drives.
Select the bad drive and choose Proceed and hit enter
Select Intel/PC partition and hit enter
Select Advanced and hit enter (not Analyse like last time)

 

Hopefully, you will see your partition that looks like this...

2 P HPFS - NTFS             12 223 20 60801  48 31  976564272

make sure that it is highlighted (if there are two listed again, either can be highlighted) and then choose BOOT at the bottom of the screen and press ENTER.

 

Select REBUILD BS and press ENTER.

 

Select LIST and press ENTER.

 

Do you see your files and folders?

 

Press Q repeatedly to get out of TestDisk.

 

IF AT ANY POINT WHILE EXITING IT ASKS YOU TO WRITE TO DISK

If you saw your files and folders at the LIST step above, say YES

If you did not then say NO

 

 

   Did you see your files and folders?

 

   Did it ask you to write a new boot sector?

 

   Are you running TestDisk from Windows or From a Linux LiveCD like PartedMagic?

 

-=[ James ]=-

 



#9 ActiveALLI

ActiveALLI
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 14 January 2014 - 10:22 AM

Hi James,

 

Running this squence gives this result

 

BOOT:

Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63
     Partition                  Start        End    Size in sectors
 2 P HPFS - NTFS             12 223 20 60801  48 31  976564272

Boot sector
ntfs_boot_sector: Can't read boot sector.
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

REBUILD BS

Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63
     Partition                  Start        End    Size in sectors
 2 P HPFS - NTFS             12 223 20 60801  48 31  976564272

filesystem size           976564272 1
sectors_per_cluster       8 0
mft_lcn                   786432 0
mftmirr_lcn               16 0
clusters_per_mft_record   -10 0
clusters_per_index_record 1 0
Extrapolated boot sector and current boot sector are different.

LIST

 

Errors on "Segmentation fault" and exits TestDrive to shell

 [  Dump  ] >[  List  ]  [ Write  ]  [  Quit  ]
                           List directories and filesSegmentation fault
root@partedmagic:~# 


I am running this from PartedMagic, following your oringal post on your site.

 

Do you think it is totally hosed at this point?

 

Thanks for the help,

 

 

Cheers

 

Alli



#10 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,946 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:52 PM

Posted 14 January 2014 - 04:31 PM

Hi

 

That is usually an error with TestDisk and not the drive. Shutdown the computer, restart it and try again. If it happens again, we'll try something else.

 

-=[ James ]=-



#11 ActiveALLI

ActiveALLI
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 14 January 2014 - 11:08 PM

Hi James.

 

This happens identically every time.   I also tried running PartedMagic in 32bit mode to see if that had an affect on how TestDisk would operate but it was the same result.   I´ve been selecting the Default settings 64 (Runs from RAM) at boot time for PartedMagic everytime I run it. 

 

Looking forward to hear what I can try next and thank you again for taking the time to answer my questions, truly appreciated.

 

 

Alli



#12 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,946 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:52 PM

Posted 15 January 2014 - 11:29 AM

HI

 

Do you have another computer that you can connect the drive to?

 

If so, you can try running TestDisk on it (the Windows version or the Linux version should be fine) and try the same thing again.

 

If it gives the same error, then you can try it with the beta of TestDisk 7.0

http://www.cgsecurity.org/wiki/TestDisk_Download

 

My concern is that the error you are getting is typically encountered when a program tries to use memory that it can not access.

 

Since it certainly appears that the boot sector is damaged for that partition, you could always try different software that will repair that specifically. Or follow the steps that Windows has for repairing that (I am not sure if bootrec /FixBoot would work since the problem is not with the system partition).

 

-=[ James ]=-

 



#13 ActiveALLI

ActiveALLI
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:09:52 AM

Posted 15 January 2014 - 11:36 PM

I got this up and running on another machine using testdisk_win.exe   Now the List operation does not fail and I do infact see my files when I list.

Disk /dev/sdb - 500 GB / 465 GIB - CHS 60801 255 63
     Partition                  Start        End    Size in sectors
2 P HPFS - NTFS              12 223 20 60801  48 31  976564272

Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.  

I wasn't asked to write at any point.   I can go back to the advanced menu and go back into BUILD,  see the above screen and press LIST to now list my files.  

 

However if I try to access the drive via windows explorer I get the following:

 

You need to format the disk in drive E: before you can use it.  Do you want to format it?  (I press cancel)

E:\ is not accessible.   Data error (cyclic redundancy check).   (I press OK, which is the only option)

 

I feel I'm almost there. What is the next step?

 

 

Thanks again for all your help and taking the time to answer my questions. 

 

 

Cheers,

 

Alli



#14 James Litten

James Litten

    Ԁǝǝ˥q


  • BC Advisor
  • 1,946 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:New Jersey
  • Local time:12:52 PM

Posted 16 January 2014 - 01:34 PM

Hi

 

In the screen where you see the files and folders listed, you can recover them to another drive. After the files are safely recovered, try running chkdsk on the drive and that may fix it at this point but it also may cause you to lose some data. That is why you should recover files first.

 

Instructions for recovering from the file/folder list screen in TestDisk (Windows version)

You should see some basic directions at the bottom of the screen in TestDisk about how to copy the files to another location.

Some simple navigation instructions.
To see the contents of a folder, highlight it and press the right arrow key on the keyboard.
To go back up a directory highlight the line that has two dots
..
It should be the second entry in the list.

I like to do a test first and try to copy just one file or folder to see if it works.

Select a file or folder that you’d like to try copying by highlighting it.
Press the colon key on your keyboard to select it
:
and then press upper case C to copy the selected file or folder
SHIFT-C
Now it wants to know where to copy the file to.
It will automatically default to saving them in the directory where TestDisk is being run from.
Highlight the second line which is .. (two dots) and press the right arrow key and it will take you up a level.
You can keep selecting the .. line and eventually you’ll get to the top of the hierarchy which will list all of the connected disks.
From there you can navigate to the location that you wish to copy the recovered files to. (If you have any difficulty navigating, let us know.)
When you are inside the folder that you want to copy recovered files to, choose the top line which is one dot
.
Then press
SHIFT-C
and it should copy the file there.
Leave everything open and look in the Windows Explorer to verify that the file was copied. If it is there, go back to the TestDisk window and select more files and folders that you want to copy. When you choose to copy them it will automatically put them in the location that you already selected.

 

-=[ James ]=-






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users