Laptop Toshiba 500GB crashed NTSF patitions became RAW

Page 4 of 5 FirstFirst ... 2345 LastLast

  1. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #31

    OK, good that you posted the screenshots of sector 206847,.....48 and ......49. We have a small clue here. There are two partition boot sectors one at 206847 and one at 206848. This can't be like that. There should only be one partition boot sector. This also may be the reason why PW got confused and stalled.It may be the same case with your C and D partitions. I shall reserve my comments on this to my last post in this thread - whenever it happens :) .

    Now look at the second PRW screenshot in my post #26. The next partition always starts in the previous ending LBA +2. So do this now: Save LBA 206847 with that sector Number and then zero it. Quit bootice, safely remove your drive and then plug it in again. Run bootice and check it has been really zeroed. Quit bootice after this check.

    Reboot your PC, plug in your drive and now run Partition Recovery Wizard Quick Scan. Does it now find the second partition easily? It may stall again after finding the second partition but from the ending LBA showed you can repeat the same process to get the third and fourth partition start point. ( Always remember to save the sector by that sector number before you zero it - just in case we need to restore it)

    Let me know first whether the second partition was found before repeating the process to find the third and fourth partitions.

    As always, I am keeping my fingers crossed. This job is like that .
      My Computer


  2. Posts : 23
    Windws 7 32bit
    Thread Starter
       #32

    You want me to save 206847 as 2 and then zero out 2. I cannot save 206847 as 2 as there are no Save AS function. I can only zero out 206847 but I do not see a menu action to save as sector to 2???

    WHEN I Try to SAVE IT as 2 I enter 2 in save it box It then loads 2 again and I lose 206847. I WANT TO SAVE IT as 2 but when I ENTER 2 it BRINGs UP 2 AGAIN on screen/ Bottom line can zero it out but do not see a menu action to save it as 2? I'M CONFUSED.
    Last edited by GeekEco; 22 Jun 2016 at 08:29.
      My Computer


  3. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #33

    You are confused. Yes :) . Go to Sector Number 206847. Click on "Save to file". Give the name sector206847 and back it up.( The same way you backed up the sectors before). It will be backed up as sector206847.bin in the bootice folder.,

    After backing it up, zero that sector in the same way you zeroed the GPT sectors before, killing the duplicate bootsector 206847..

    Regarding my statement on the screenshot at post # 26;

    First sector Starting LBA 2048. Ending LBA 366416443. Second partition starting LBA 366416445, that is the previous partition ending LBA 366416443+2.

    So in your case I believe the (first partition ending LBA 206846+2) = 206848 is the real and correct second partition starting LBA.

    So we are retaining 206848. We are killing the duplicate bootsector 206847 by zeroing it.( after saving it, just like you saved the GPT sectors 0,1,2,n and n-32 and then zeroed it)

    So save sector 206487 - as a precautionary measure with the name sector206847 - and then zero it to kill that duplicate.Remember to click Save changes icon on the menu bar to write zeros into the HDD.

    After that run Partition Wizard Quickscan. Report if it lists the second partition with starting LBA at 206848. Post a screenshot. ( Partition Wizard will again stall after finding the second partition. The best and proper method for terminating a not-responding program is press CTRL+ALT+DELETE to invoke Task Manager, select the not responding program in the Task Manager list and end it. Don't simply pull out the drive.)
    Last edited by jumanji; 22 Jun 2016 at 14:20.
      My Computer


  4. Posts : 23
    Windws 7 32bit
    Thread Starter
       #34

    Yes I was confused/ I will be traveling over the next couple of days attending meetings so I don't know how much time I will have but will take my HDD with me in case I have time.

    I never remove the drive by pulling it out. My description above was trying to eject it but my anti malware was accessing the drive. In Process Explorer with admin rights, I saw Partition Recovery Wizard not using any memory jsut sitting there. I tried to kill the program by repeatedly ending the process through closing Partition Recovery Wizard and also through Process Explorer. It was not using any memory in the threads. My anti malware was going crazy with high CPU usage and the flashes on both HHD indicator light. So I believe it was trying to analysis the drive for malware. I killed all programs accessing the drive and then after that Partition Recovery Wizard closed. I never thought about task manager maybe it is more effective than Process Explorer in closng programs with admin rights. At no time did I pull out the drive without ejecting. My last though was just shutdown windows if I couldn't close the program

    Thanks for the information and help! Stressful time as there is a lot of research material on the D Drive.
      My Computer


  5. Posts : 23
    Windws 7 32bit
    Thread Starter
       #35

    I did a quick full scan as mentioned and it hung as you mentioned 206846 not a large partition size
    Attached Thumbnails Attached Thumbnails Laptop Toshiba 500GB crashed NTSF patitions became RAW-206846-stall.gif  
      My Computer


  6. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #36

    Please post a screenshot of sector 206847 and sector 206848 taken with bootice as it exists now.I want to confirm that 206847 has been zeroed and 206848 remains as it was before.
      My Computer


  7. Posts : 23
    Windws 7 32bit
    Thread Starter
       #37

    OK, I had some problems. I connected HHD back into my laptop usb port heard the sound that I normally get but no eject button showed in my taskbar. My computer did not show the drive. It did not show up in devices and printers panel. I ran bootice and click on UAC window for admin rights but nothing happened. bootice did not appear on my screen. So I clicked it again and then click on uac button nothing, no window. so i did it a third time and still no window but all three programs were running in different processes in taskmanager. Weird. So I killed all instances of the same program and the same thing happend again. So I shut down the computer. unplugged the HDD and restarted the computer. So I plugged the usb HDD back in same thing occured. I heard the normal connection sound but no eject in task bar, nothing under devices, nothing in MY computer, I opened admin tools and storage-drive component and it saw C and D drive and an unknown blank drive where toshiba drive is normally listed. I thought I lost the drive. So Imoved the drive without disconnecting it and sound the sound of connection came on and everthing showed up nomraly in taskbar, devices and admin storage panel. Bootice then worked normally so I retook the screen shots but afraid it might be on its last legs.

    I included 0 sector as well in case something is wrong there from the original thx
    Attached Thumbnails Attached Thumbnails Laptop Toshiba 500GB crashed NTSF patitions became RAW-0-2nd.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-206847-2nd.gif   Laptop Toshiba 500GB crashed NTSF patitions became RAW-206848-2nd.gif  
      My Computer


  8. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #38

    Whenever you encounter problems like this, shut down your PC, remove the drive. Shutting down will close everything. Re boot and then plug in your drive.

    If you run drive seeking programs one after another, your drive may get locked by a program and not get released for another program to see it.

    Since you brought this problem do it now.

    Shut down your PC. Remove the 500GB external drive(if you hadn't removed it earlier). Reboot and then plug in your drive. Now invoke Windows Disk Management. Post a picture of Windows Disk Management. Close Windows Disk Management.

    Safely remove your drive. Plug it in again. Now run bootice. Does bootice see the drive?

    I just want to make sure everything is fine before proceeding further.

    ( If I ask you to run bootice, do not open Windows Disk Management (WDM), PW or any other program to see the drive and then run bootice. Run bootice only without opening any other program prior to it. If I ask you to run PW straight away run it without opening WDM or bootice before it.Before changing over from one program to another, close the running program, safely remove and then plug in your drive before running the other program.Never run these drive seeking programs simultaneously. It may lead to a panic situation like the one you faced.)
    Last edited by jumanji; 24 Jun 2016 at 03:46.
      My Computer


  9. Posts : 23
    Windws 7 32bit
    Thread Starter
       #39

    Yes bootice sees the drive everything is now working for now. OK THX for info
    Attached Thumbnails Attached Thumbnails Laptop Toshiba 500GB crashed NTSF patitions became RAW-disk-management-2.gif  
      My Computer


  10. Posts : 7,055
    Windows 7 Home Premium 32 bit
       #40

    OK, your drive appears fine. You have also correctly zeroed 206847 retaining 206848. But that hasn't helped matters. Quick scan still stalls at 2048. Instead of a Full Scan do a range scan with the range 206000 to 207000 and check whether it finds the second partition at 206848.

    Sample screenshot selecting the range:

    Laptop Toshiba 500GB crashed NTSF patitions became RAW-24-06-2016-16-21-46.jpg

    Whether Quick Scan stalls or finds the partition at 206848, post a screenshot.

    ( If it stalls, shut down the computer or do the Ctrl+Alt+Delete and kill the program in the Task Manager.)
      My Computer


 
Page 4 of 5 FirstFirst ... 2345 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 02:32.
Find Us