external Raw usb drive, clean command and restoring data

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #11

    OK, that is surprising. Do not initialise it. We shall check with bootice whether sector 416 571 392 contains the NTFS boot data. Since you are using 64 bit Windows, install 64bit version of bootice.

    On how to use bootice, see my post here Lost partitions!

    Click on the sector indicator field, type 416571392 and post the screenshot of what it contains.

    A valid NTFS boot sector should look like this. (Here it is the first partition beginning at sector 2048)

    external Raw usb drive, clean command and restoring data-19-04-2016-18-00-07.jpg

    If it does not show a valid boot sector, then we shall try to check with TestDisk.

    I know we are going slow, but that is the way it is going to be in a data recovery exercise.
    Last edited by jumanji; 19 Apr 2016 at 10:42.
      My Computer


  2. Posts : 141
    Windows 7 Home Premium x64, *W7 Prem. x64
    Thread Starter
       #12

    Hello friend.
    I start to think I've to forget my data...
    I'd have done already (to forget...) but I was sure everyrhing is intact inside the disk and that was keeping me hoping.
    I'll tell you now a secret...
    In the begining I tried with EaseUs and it reads everything! I started to recover!
    ...but they give only 1Gb free and me I had 500Gb data so I had to pay about 80$ if I remember well.
    So me (stupid always...) I wanted to get back everything for free..... so I started all the wrong actions
    until to be in the situation I'm now....
    I could get back everything!
    Anyway... like you see in the screenshot bootice cannot read because of cyclic redundance error which is a serious
    problem I read. So first we have to check disk and close any bad sectors, then to recover the changes clean command did,
    then rebuild partitions, then raw to become again ntfs and then find my data! ?
    Ok if the way is the above after we'll need a psychiatric hospital!
    I gave up! if you have an idea feel free to tell me
    Attached Thumbnails Attached Thumbnails external Raw usb drive, clean command and restoring data-dmde.png  
      My Computer


  3. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #13

    OK my dear friend, most of the time we try to recover the data with free software. But there are situations when free software fails to bring results. In that situation we recommend commercial software.

    And most of the time the OPs when they come seeking help, have already tried so many things which they hide and don't tell us :). So we start from the beginning and the previous history unfolds as we investigate.

    If you had seen the data on a drive which was not accessible, which you know was bad and going bad, you must have grabbed it at the first instance, no matter what cost if its worth more than the price you pay for it. Taxing a bad drive repeatedly can only make matters worse with more data going bad..The proper data recovery procedure in this case would be to clone the bad drive and attempt data recovery from the cloned drive.

    Check now with EaseUs again and if it shows your data, buy it and get your data out.

    My recommendation here is GetDataback Simple. https://www.runtime.org/data-recovery-software.htm

    If it scans your drive and lists all folders and files well and good. You can preview the files and check whether those are good. Some files in bad sectors will invariably be bad. If you are happy with the data that you can recover, close your eyes and buy it to recover as much as you can.

    Note: You cannot repair a drive with bad sectors. Now a comment on the DMDE screenshot you posted in your first post. During the course of this thread, I was wondering whether clicking on the Restore button there would have restored your drive. Now I know it wouldn't have. It would have probably written the correct partition table to sector 0 but your drive will still be inaccessible because of the bad sectors and the NTFS boot sector at 416571392 is not readable.
    Last edited by jumanji; 19 Apr 2016 at 22:33.
      My Computer


  4. Posts : 141
    Windows 7 Home Premium x64, *W7 Prem. x64
    Thread Starter
       #14

    Ok jumanji. You are RIGHT in everything you said. !
    (only .... it was NOT that I wanted to hide someting... I just didn't want to make tired someone...
    I just wrote "my story is long... ask me.." because happened many things, started from a virus...)

    Of course DMDE was showing only the structure not the real files because scanning was
    somehow very quick to be true (something like "is too good to be true!")
    Now two last questions.
    I was reading your long thread " Recover data from a diskpart > clean command " where you succed getting back data.
    Do you think could apply in my situation or I'm going to loose my time because of bad sectors? and second
    Before I put out this problematic drive I made an image of it.
    This image I've restore to the new drive (of course data was not in. Data was in another partition, other backup which got infected and lost)
    So my new good (inside) drive is exactly what the problematic is without the Data partition.
    My question if you know is :
    Could I restore the important sectors eg. with bootice and make the bad drive accessible or is not so simple?
    And if yes which sectors are the important?

    [I recover some files with EaseUs before just few days not long time ago, exept if you think that drive became
    inaccessible and bad just in that few days... Still EaseUs find my files but I cannot be sure anymore if is only the mft]

    Thank you for everything.
      My Computer


  5. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #15

    If one accidentally and by mistake runs a diskpart clean on a good drive, recovering it is pretty easy - provided the OP hadn't done any further adventures on it.:)

    This however does not apply in your case since it was a bad drive already.

    For your second question, Bootice cannot be used to restore the drive. ( It can restore the sector 0 and other important sectors like the NTFS boot sectors, provided you had taken a backup of those important sectors earlier and stored it elsewhere.(Each sector is 512 bytes) The bootice post I had given earlier deals with how to save the important sectors to be able to restore those sectors in case partition related problem arise due to some glitch that often happens.)

    So try Getdataback Simple now and check whether you can still see the files. Preview those to check the integrity.Report the results. If you can spend $79 do that and copy the data.

    If data is seen, but still you do not want to spend, we can still try TestDisk to see whether it can show the partitions. If it shows the partitions and can list the filles, you can copy the files. But nothing can be guaranteed. It all depends how bad or how good it is still.
      My Computer


  6. Posts : 141
    Windows 7 Home Premium x64, *W7 Prem. x64
    Thread Starter
       #16

    Ok. I got it!
    So you advice me not to take the way in your old thread I spoke about (reconstruct partitions with "Partition Guru" and all the rest)
    I don't have even a card for buying apps from internet... (never I had good relation with banks....) maybe the time came...
    So if you please have sometimes a look to this thread maybe I'll be back in 1-2 days if I deside to follow the hardest way with TestDisk and so on..... Again I thank for your patience
      My Computer


  7. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #17

    I just now noticed. I wanted the bootice picture of sector 416571392. What I see is that of sector 416571393. Any explanation?

    I could understand that you may not be in a position to spend $79. All are not equally well placed as far as money is concerned.

    Take your time. No problem.
      My Computer


  8. Posts : 141
    Windows 7 Home Premium x64, *W7 Prem. x64
    Thread Starter
       #18

    I tried also ............392 and some others near the beginning of the volume. All are with this Win. error (cyclic redu....)
    I read a little about this error and they say that the "control" Os makes when reads data somehow finds that mismatch with
    what it had to be. They say to run chkdsk which I cannot because of Raw fs.....
    You told me that if there are bad sectors disk is over. But chkdsk is not just for this case? Anyway I cannot run it if disk is not ntfs.
    What I don't understand is when the beginning of the volume is a mess how the tools give the structure tree of the Data
    completely right? Maybe they read from somewhere where is a copy or somewhere must be.
    Half-Knowing is worster than not-Knowing......
      My Computer


  9. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #19

    Normally a certain percentage of good sectors are kept in reserve to replace the bad sectors as they evolve. If Checkdisk while reading the sectors finds that a particular sector is losing its strength and is likely to go bad sooner or later, immediately retrieves the data in it and writes it to one of the reserved sectors.The weak sector is taken off the roll. The HDD controller also keeps a vigil and continuously doing this. So normally the likely to become bad sectors are mapped to the reserved sectors and this process goes on in the background without the user ever knowing it.But once the reserved sectors are exhausted, the newly developing bad sectors have no place to go and that is the point you start seeing the bad sectors and start getting CRC errors.Your data in those sectors is lost and can no longer be retrieved. Once you start seeing the bad sectors or its symptoms, that means your HDD is likely to die sooner or later. That could be tomorrow or a year later.We can't say.

    The beginning of the volume is in a mess. How then do you get the structure tree of the data ? The start sector where NTFS is written is known as Volume/Partition Boot record. A backup of this boot sector also lies hidden in one of the sectors in that volume/partition. Programs like TestDisk and others can find this backup and see the data.This also implies that the Master File Table in it is still good. But will it remain the same tomorrow? if you continue to tax a drive that you know is bad/going bad, tomorrow itself the backup boot sector may become bad or your MFT can become bad. Then you have lost everything. That is why I said if you had seen the data you should have grabbed it immediately.

    Don't worry about knowing and not knowing. I also know only half of everything or even less .
      My Computer


  10. Posts : 141
    Windows 7 Home Premium x64, *W7 Prem. x64
    Thread Starter
       #20

    Aha... Ok. now I understand (a little better...)
    I had a wrong picture of how a disk get bad . So there is a limit retriving data from bad sectors..
    I thought Os mark a sector off and copy its data in the next healthy sector. So that death is far far away...
    I should not make you tired with knowledge I could find somewhere and read them... but often when I'm reading in detail about something in the end I'm just confused. Usually I study from Wikipedia and in the end I'm just mad and in deeper darkness....
    I believe computing needs more reading than to be a doctor!
    This that I don't know is if is worth to spend a life infront of a monitor....
    Maybe I have to loose Data to start new and fresh!
    Data is for sure past.... Why we need the past? ..is weakness....
    I'm going to sleep now. Tommorow maybe I'll have new ideas to bring more mess in my system.... :)

    Thank you for all the explanations and for the time you spend.
      My Computer


 
Page 2 of 3 FirstFirst 123 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:01.
Find Us