Jump to content

SkylineRB26DETT

Member
  • Posts

    29
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    United States

Everything posted by SkylineRB26DETT

  1. Well it seems to have corrected itself... I connected it externally and it came up fine with both partitions. Then I connected it internally again and now both come up.
  2. I have a seemingly good drive that will not show one partition in windows... I tried right-clicking on it and 'change the drive letter', but it will not let me. It says the screen has not been refreshed, but I tried it a few times. I cycled the power too. In testdisk it shows up... Now...the bootsectors are identical on the partition that doesn't show up, but on the partition that shows up they are not... So I do a rebuild BS... Here is the dump (you can see the different byte at 0028)... So I do a rebuild again... So now they're identical , but the HP partition still does not show up. I can list and navigate through all the files in testdisk and I also copied the partition to another drive using testdisk. Any idea why it's not showing up (getting a drive letter assigned)? I attached sectors 0 of the drive and partition in a zip file. sector0.zip
  3. It works it woks!!! You are the man with the master plan!!! So now...fill everything from 20482875-20484095 and 1465144064 with zero's?
  4. This is what it comes up as... Does it seem correct? Main difference is that it shows 1023 instead of 1024 like you posted. If everything seems alright then I'm about to change... 20482875 to 20484096 -and- 1444661190 to 1444661248 Holding a rabbit's foot btw.
  5. What I did before was open the first 200 sectors of partition 2 and not the physical drive. The partition does begin with EB52904E54465320. When I open the physical drive to sector 20482940...the 200 sectors are all empty. Ok so when I open partition 2 the first string is EB52904E54465320 then I search and find it again on sector 1221, which is attached. 1,465,145,343-1,465,144,064=1,279 Sectors attached. 1465144064 and 1465145343.zip 1221.zip
  6. Attached. String EB52904E54465320 shows up in sectors 1,465,144,064 and 1,465,145,343. B) first 200 of partition2.zip
  7. BINGO!!!! I started searching for FILE0 again starting at the last sectors I posted and before I found 300+ sectors with FILE0. I was writing them all down and I ran out of room on the paper. I still had 40000 sectors to go till 6291521. So I decided to skip to sector 6291521 just to check it and you are right...that's where the $MFT is. I attached a file with 1000 sectors (100 before 6291521 and 900 after )because there were many FILE0's. Should I still be checking? 6291521.zip
  8. Once again I appreciate your help!! Attached is a zip folder which contains 7 files. The name of the files are the actual sectors which contain FILE0. Two files have many sectors with FILE0 in them...those file names contain "and a lot" in the file name. There are more sectors I keep finding. sectors.zip
  9. The date code on the drive is 09122 so a date of 15/02/2005 is not possible. Should I post screenshots of the individual sectors with FILE0 or post zip of 200 sectors? There are probably 50-100 more sectors with FILE0 (not all next to each other). Can I disregard most of those sectors? Should I be looking for other syntax with FILE0?
  10. So it would mean that all files created after that date will not show up? Are the other sectors irrelevant? There got to be about 100 sectors with FILE0 in them. How do we proceed?
  11. Attached are the sectors...two files with 200 sectors each. Also...more FILE0 sightings... Sectors 6185824(pictured) 6185837 6191570 6193371 6193386 maybe more...it's scanning sectors.zip
  12. They're everywhere... 1083587 1083589 1083591 1083593 1083595 1083597 1083599 1083601 1083603 1083605 1083607 1083609 1083611 1083613 1083615 Then starting at sector 10833634 they show up somewhere in the middle of sectors (always somewhere different) not at the beginning...and not every other sector. Sometimes the next sector or sometimes 3-4 away. Then they start having multiple FILE0's in the sectors. If you need all the sector number I can do that...there's probably like 50 more. It's just scanning now and has not found anything in a while.
  13. Ok I found the next 13 sectors with FILE0. 1081543 1081545 1081547 1081549 1081551 1081553 1081555 1081557 1081559 1081561 1081563 1081565 I attached a file showing 50 sectors starting at 1081543. I will continue searching for more FILE0's. 1081543-1081582.zip
  14. The disk was Vista 64, but I'm nit sure if it was XP before that. I will search starting that that sector.
  15. Is this amazing or what?!?!?!? sector 1081543 Although something seems odd.
  16. My calculations...about 130 days if it has to scan the whole drive. You mean like photorec? Where all files are just dumped into folders while losing the file name?
  17. Which commands do I use in those tools? This one ??... MbrFix /drive <num> /partition <part> fixbootsector <os> As for bootsect I am unsure. I have tried a different PC with same results.
  18. This is what it looks like now, which is correct. Here is absolute sector 26774331... When trying to repair the MFT it says 'MFT and MFT mirror are bad. Failed to repair them'. When I said the process takes 6 hours I was talking about the 'rebuild BS' command. Sorry. When saving the 15 sectors do I just click 'next sector' 15 times while doing a 'save as' every sector? I will try the tools mentioned. Thank you very much for your help thus far btw.
  19. Jaclaz, I did not change anything yet... ever. The 80h swapped spots by itself after restarting the computer. I've tried this twice already with negative results. It takes like 6 hours to complete and nothing changes. This is what you wrote a few posts ago... Did you want to say row #1 in any of those lines above or are all changes in row #0?
  20. Attached is a zip with the 'save as' files from tinyhexer. One is for the entire drive and the other for partition 2. Before I change anything this is what it looks like now after I started the computer...the 80h is in row two now. Should I still change the 07h to 12h? drive1.zip
  21. Hi jaclaz, In my second post when I posted this screenshot... http://img715.imageshack.us/img715/3140/partitionssk.jpg I didn't realize the recovery partition was hidden, which is why it didn't get a drive letter assigned. This is the whole reason I checked in testdisk and 'wrote' the partition...because I thought it was missing. Everything was fine and now there's a mess. I wonder why testdisk wrote wrong partition info. Anyway...attached are zip folders of files from tiny hexer. I wasn't sure if you wanted me to run it on the drive itself or the partition that is not showing up. I did it for both. Here are screenshots... The drive itself... The partition coming up as RAW... drive0 partition2.zip drive0.zip
  22. Next time use a "proper" tool :whistling:: Are you talking about instead of Computer Management? Changed "how"? In testdisk you can change from (P)rimary to (*)bootable with the right and left arrows. NO, I'm using Win7 x64 I will do this when I get home. Thanks!
  23. Thanks for the quick reply. The hdd was running Win Vista 64. Here is what it looked like before I 'wrote' the partition table...I should have left it alone since the 'recover partition' does not need a drive letter. I thought since it didn't come up as a viewable partition with a drive letter that there was something wrong. http://img715.imageshack.us/img715/3140/partitionssk.jpg Here is what it looks like now... http://img180.imageshack.us/img180/3228/nowpu.jpg Here are screenshots from test disk. Originally the large partition was bootable, but now it states the small one is. I tried changing that, but it always reverts back. The boot sectors are identical because I copied them. I tried to list the files. Tried repair MFT. thanks for your time
  24. So I do a bsy fix on another drive and everything seemed fine. The drive showed up and I can see the files. The problem is it showed up with one partition...the large one ~690Gb. Now..this drive is from a system and they usually have a second small partition for backup. So I run testdisk and it finds both partitions. I do a 'write' partition table. Now both partitions show up and get drive letters assigned. The problem... The small 10Gb partition I can navigate through no problem, but the big partition is inaccessible and shows up as RAW in computer management. Before the partition table 'write' I could navigate through the large partition no problem. I did not backup the partition table before doing the write. Any ideas how to get the large partition to work again?
  25. Alright some info... Drive is an ST31000340AS SD15 and my OS is Win7 x64. I have access to a Mac, but if you're referring to Linux or Unix I guess I can leran and setup a dual boot. Prior to these problems I did the BSY fix and updated the firmware. Everything seemed fine until the data was transferring onto another drive. The computer became sluggish and then froze. Upon start-up windows wanted to repair the drive and I promptly canceled. BTW is it ever a good idea to let windows do the repair? Testdisk finds the drive and partition(everything is really sluggish with this drive btw), but when I try to list the files it says "no file found, filesystem seems damaged". You can see the drive in MyComputer, but when you try to click on it it says "E:\ is not accessible. The file or directory is corrupted and unreadable." Computer management lists the disk as a RAW. Ok now the DRDD fiasco. There were a lot of these..."Read error at xxxxxxx : Data error (cyclic redundancy check)." I tried running DRDD as a test on a working drive for a total of 1Gb and the outcome is also a .dd file so I assume it's the proper format. I don't want to touch it until your advice. Thanks for your time.
×
×
  • Create New...