Laptop Toshiba 500GB crashed NTSF patitions became RAW

Page 3 of 5 FirstFirst 12345 LastLast

  1. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #21

    Good. I shall write the next episode :) after another 17 hours that is tomorrow afternoon.. ( I am going out now and then it is night time) I hope you have saved Sector 2048 also which I mentioned last in my last post.
      My Computer


  2. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #22

    The next episode :).

    As already told you will now zero all the wrongly written GPT structure data in sector 0, 1, 2, n, and n-32.

    Here is how.

    Using bootice go to sector 0 on your faulty drive. CAUTION: Make doubly sure you have selected the correct faulty 500GB drive. If you wrongly do this zeroing on your system drive your PC will become unbootable. ( By default bootice will show the USB drive but that is no reason to throw caution to the winds. During these procedures also make sure that you have no other USB storage device plugged in to avoid accidental zeroing on those)

    On sector 0 drag your mouse pointer from top left corner to the bottom left corner to select all fields. All filds shoud turn blue.

    Laptop Toshiba 500GB crashed NTSF patitions became RAW-select.jpg

    Click on the Fill selected block icon and in the ensuing Fill Char Window, make sure 0x00 is selected and click on OK.

    Laptop Toshiba 500GB crashed NTSF patitions became RAW-fill.jpg

    All fields will turn into 00. Click on the Save changes icon to write it to the HDD. Done. You have effectively overwritten the Protective MBR with 00s making it ready to receive the real MBR code and the partition table.

    Laptop Toshiba 500GB crashed NTSF patitions became RAW-save-changes.jpg

    Now repeat this zeroing on sector 1, 2 , n ( in your case the last sector 976773167) and n-32 ( in your case sector 976773135). Make sure you click on Save changes button to write 00s to each of these sectors..

    Close bootice completely and then rerun it again afresh, select your faulty drive and check that sector 0, 1, 2, n and n-32 are all zeros.

    NOTE: Do not zero sector 2048. That is the original Partition Boot Record and we want to retain it.

    Close bootice, safely remove your 500 GB external drive.

    If you haven't already installed, download and install MiniTool Partition Wizard Free edition 9.1 https://www.partitionwizard.com/free...n-manager.html

    Confirm that you have completed all this and then we shall proceed to the next and perhaps final episode of restoring your HDD. ( As with all Partition Recovery/Data Recovery efforts, I am keeping my fingers croseed as between the cup and the lip there can be many a slip )
    Last edited by jumanji; 19 Jun 2016 at 07:59.
      My Computer


  3. Posts : 23
    Windws 7 32bit
    Thread Starter
       #23

    OK I have done this! waiting for next step:)
      My Computer


  4. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #24

    I am still doing my homework for the next crucial post . You may expect it my tomorrow morning. It is going to be a win-win or no-win situation. Mostly win-win as per my present perception. Let us see.
      My Computer


  5. Posts : 23
    Windws 7 32bit
    Thread Starter
       #25

    Thanks for working on it! What are the odds of it not working? If it is no-win situation will I be able to revert back to where I was before we started so I can recover all the raw files on my HDD?
      My Computer


  6. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #26

    Continuing,

    Now plug in only your faulty 500GB external drive. Go to Windows Disk Management. Since we had already zeroed sector 0, you will be asked to initialise your 500GB drive. Go ahead and initialise it as an MBR drive.This will write the MBR code into Sector 0. Stop with initialisation.( Do not go further. Do not create a new volume. Do not format.)

    Post a screenshot of Windows Disk Management adhering to the guideliines here Disk Management - Post a Screen Capture Image

    Close Windows Disk Management.

    If you now examine the drive with bootice, you will find that the MBR code has been written to sector 0, but the four 16 byte slots ( highlighted in the screenshot in different colours) where the 16 byte partition table/s should exist, will all be zeroes.

    Laptop Toshiba 500GB crashed NTSF patitions became RAW-20-06-2016-17-18-24.jpg

    We shall now check whether Partition Wizard can locate the partition start point/s and write the partition table/s.

    Run Partition Wizard.

    Post a screenshot of how your 500GB external drive appears in it ( the very first screen when you launch PW).

    On the left pane click on Partition Recovery Wizard > Next > select your faulty 500GB external drive > Next > Full Disk > Next > Quick Scan > Next

    Let the Quick scan run and complete the run. It may be a short run or a long run. Wait till it completes. At the end you will get a window showing the found partitions like the one below.

    Laptop Toshiba 500GB crashed NTSF patitions became RAW-21-06-2016-00-37-57.jpg

    Take a screenshot of that Window and post.

    Click on the Cancel button, and then close Partition Wizard. (You can run Quick Scan again - if conditions are favourable - after getting my instructions.)

    If all the partitions are found correctly, then we can recover the partitions and restore the drive. If not we shall shift from Partition Recovery to Data Recovery)

    Post the screenshots and wait for further instructions..
    Last edited by jumanji; 21 Jun 2016 at 00:18.
      My Computer


  7. Posts : 23
    Windws 7 32bit
    Thread Starter
       #27

    Well right not looking so good. The progam is currently not responding locked up. Could be bad sectors on it. Can't kill the program in process explorer, can't eject drive. I have to reboot.
    Attached Thumbnails Attached Thumbnails Laptop Toshiba 500GB crashed NTSF patitions became RAW-1.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-2.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-3.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-4.gif  
      My Computer


  8. Posts : 23
    Windws 7 32bit
    Thread Starter
       #28

    Actually. I was able to unattach the hdd and close the application after waiting a bit. I have a lot of medical research on this drive. Would a data recovery center have more sophisticated tools to recover the with their file names. EasUS said they could recovery most of the files in raw file format but I don't know if they are the best out there for something like this if there are bad sectors on the hard drive. Thx for your help!
    Attached Thumbnails Attached Thumbnails Laptop Toshiba 500GB crashed NTSF patitions became RAW-3.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-4.gif  
      My Computer


  9. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #29

    After passing the System Reserved Partition ending at LBA206846, PW is having problems reading the next volume boot sector. That volume boot sector is most probably corrupted.

    We haven't yet completed our data recovery process.If all our efforts fail using all possible means, then you can consider entrusting your work to Data Recovery Professinal. We haven't reached that stage yet. :) Of course it is a slow process.

    1. In your post #17, you showed me the first partition boot sector 2048. Now with bootice examine sectors 206847, 206848( The most probable second partition boot sector) and 206849.Does one of them show more or less the same picture as in 2048? You should be able to read the word NTFS on the ASCII panel in the first row.

    2. If bootice can read the sectors, then I wouldn't call those bad sectors but corrupted sectors which can be rewritten. We may have to use TestDisk to find the backup bootsector and write it.

    3. In Partition Recovery Wizard, instead of Full Scan select a specified range now 207000 to 976773167 and let it scan. If it finds a large partition then it was your C drive and we can recover the partition.

    As long as PW does not show it as a bad drive ( I wanted the screenshot only to check on it), we have many options to try and recover the partitions/ recover the data
      My Computer


  10. Posts : 23
    Windws 7 32bit
    Thread Starter
       #30

    Ok, that's good to know My HDD had a recovery partition, c:\ primary system partition 25-30GB? and my D:\ drive was were I kept all my data. FYI When I ran eause free recovery program, I wanted to see if it could even read the drive which it did. I could see all the files in raw file format. I don't know if it created mini partition.

    On this latest adventure, I put in the boot sectors and as you stated ascii and ntsf showed up with slight change in data but on 206849 it said bootmgr...screen shots enclosed. I ran Partition Recovery Wizard and it hung or I think it hung as the scan sectors numbers stopped and the cursor said program not responding at 1498496. I couldn't eject the drive and had a difficult time killing the process. There was no activity in process explorer that it was accessing the drive. However, the drive light was flashing as well has the light on my hard drive. I realized that my anti-virus and anti-malware as well as windows indexing were accessing the drive as indicated by process explorer. So I don't know if that was causing the hang. So, I disabled indexing and the anti-virus/anti-malware on one but could not turn off the anti-virus unless I uninstall the program. So, I ran Partition Recovery Wizard again and it went a bit further to 1499008 so maybe its algorithym is sitting there trying to crunch through the corrupted stuff. But at that rate, it would have be days if at all to scan the disk. I didn't want to stress out HDD as I don't know how much damage there is to HDD and how much longer it will last. Appreciate your help.
    Attached Thumbnails Attached Thumbnails Laptop Toshiba 500GB crashed NTSF patitions became RAW-206847.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-206848.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-206849.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-freeze.gif  
      My Computer


 
Page 3 of 5 FirstFirst 12345 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 05:37.
Find Us