Win 7, WD blue 500 GB HD, can no longer boot

[murmur104]

When I start the PC, in the configuration Seagate HD and WD 500 GB HD, the check disk is running every time. The process does not give me understandable information, as I am a laymen; however, what happens as displayed in the last of the 4 images makes me wonder: “Inserting an index entry into index $O of file 25.” This process of inserting lasts about 60 seconds. This is a lot of inserting. Could this have anything to do with the Drive I problem?
Images
Checking file system in I-drive 01.jpg
Checking file system in I-drive 02.jpg
Checking file system in I-drive 03.jpg
Checking file system in I-drive 04.jpg


When I try accessing Drive I through Explorer, I get two messages: the first is “I: is not accessible. Data error (cyclic redundancy check)”; the second message is “You need to format the disk in drive I: before you can use it.” Formatting is not an option. What does the first message mean? Can we do anything about it?
Images:
Drive I not accessible.jpg
Drive I requires formatting before use.jpg
Drive I: is still in RAW.


Previously in Disk Management right clicking on Drive J: only offered one option: New Simple Volume. Now more options are offered.
Image:
Disk Management 2017 01 28 – 02.jpg

I did several TDs; initially, I could copy whatever I thought was valuable; however, choosing the “paste” location had given me a big headache. Copying the entire 2 P HFPS – NFTS Directory took about 3.5 hours; as I could not find any desired saving location, 3.5 hours of looking at the process were a waste.
Images:
TD - destinations for copying marked files process 01.png
TD - destinations for copying marked files process 02.png
TD - destinations for copying marked files process 03 copying finished.png
TD - destinations for copying marked files process 04 copying finished.png.

After I finally managed to find Drive D: as saving location, nothing was copied into Drive D:
Image:
TD - destinations for copying marked files process 05.png

After that I turned towards copying the Outlook 1.pst, and the Outlook 1.log. This process magically was successful with the first attempt.
On the next day, I have again tried hard to copy the Partition 2 P HFPS – NFTS; after several failed attempts and about 7 hours later, I finally managed to copy to the desired destination. After checking the result, I saw that about 44 GB were copied; however from “Documents and Setting” only an empty folder was copied.


I am still trying to copy the contents of the “Documents and Setting”.
While copying, on another PC I have looked at where Outlook is storing the information about the password; it is here:
Registry under HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\[Profile Name]\9375CFF0413111d3B88A00104B2A6676\[Account Index].


From what I have read about encrypting the logon information, decrypting from the registry is only possible when Windows is running again from the WD 500 GB HD. For this process I have found several programs. One I have tested on my other PC and in no time the password was retrieved. But this program works only in cooperation with the Local Security Authority, integrated into Windows.
I have continued to try copying the folder “Documents and Settings”, but the results have not changed. When I copied, I have always seen on out of two screens:
Images:
TD - copying Docs and Settings 01.png
TD - copying Docs and Settings 02.png.

I have no idea why copying of exactly this folder is not possible.
So far I have copied
Partition 1 HPFS-NFTS
· File folder “Boot (35 files, 24 Folders, 13.9 MB)
· File “bootmgr” (391 KB)
· BAK file “BOOTSECT.BAK (8 KB)
Partition 2 P HPFS - NFTS
· 133,568 Files, 22999 Folders, 43.9 GB
Image:
Partition 2 P HPFS - NFTS.png

Please note that the File folder Documents and Settings was copied without any files inside.

Have you more tasks for me to bring us forward?

 

[jumanji]

For copying files I had referred you to my writeup "For copying the files follow the procedure outlined in my post #28 in this thread My external hard drive suddenly became unllocated:"

You do not seem to have read it and followed the procedure.

1. You must have an empty external drive on which you had created a folder named Recovery.

2. Supposing that external drive shows as J: in TestDisk your destination should be J:\Recovery.

Look at the screenshots 8,9,10 and 11 in my post no 28 in the refrerred thread and you will see how I reached the destination on my external drive i:\Recovery. ( In that case the external drive was i: as shown in TestDisk)

It is to fix the exact location the Recovery folder was created in the destination external drive. It can be any other internal drive also say D: with adequate space to copy files but you must create a folder named Recovery on it so that your copied files go that destination folder D:\Recovery.

If you do not follow the procedure detailed as above you will be running around in circles to know and fix your destination.

I had already seen in a previous screenshot that the documents and settings folder had no files - your third screenshot in your post #19.(When you highlight a Folder in the list and press enter,TestDisk will show you the files in the folder and allow you to select the file to be copied.)

As for your ISP problem: any hard disk can completely fail and go dead anytime needing a replacement new drive. In such cases your ISP would definitely have some procedure to authenticate and tie the connection to the new HDD.It should also be possible for them to reset the Password after restoring the connection to the new setup ( As far as I know, ISPs may tie up the connection to a particular Mac ID of your Network adapter in the PC . I haven't heard a connection tied up to a HDD. In any case I do not know much about these things and so not a proper person to deal with . )

 

[murmur104]

The devil is always in the details, as G.H. Hardy has learnt when discussing issues with Ramanujan.


In your Post = 13, you had referred me to WD Elements being read as RAW // Contents readable through app ; I have followed the procedures and I could copy files that you wrote we need; the only File folder that would not allow copying contents, is the “Documents and Settings”. The begin of the copying process – showing all File folders and files in green – is on image TD - destinations for copying marked files process 04.png; in this copying process all green marked elements, including the contents of File folders – even the Norton quarantine files – were copied, except for the contents of “Documents and Settings”. I have thereafter spent hours trying to copy only “Documents and Settings”.


With your previous post, you refer me to another post, which I had not seen before: My external hard drive suddenly became unllocated:.
I have now followed the procedure received today (link above).


In the “select a media” view, I have selected the Disk /dev/sdb – 500 GB / 465 GiB
Image: TD – Select a media 01.png

On the first attempt, I was trying to only copy the File folder “Documents and Settings”.
Image: TD – Select Documents and Setting.png

Pressing Shift + C with the selected File folder “Documents and Settings” produced the next screen.
Image: TD – Directory C testdisk 7.0.png

This process took me directly into the Drive C: of the PC (Seagate HD). Following the prescribed steps did not mark the desired file green. I followed again the procedure that allowed me copying 2 HPFS – NFTS. This attempt was successful. TD did copy documents and settings; however, the File folder was empty again and the copied folder had the date: 14.07.2009, 11:53. I did assume that the copying process by TD worked fine, as in other copying processes the File folders and their contents was copied. There was no reason for leaving “Documents and Settings” empty.

I did some research and I found why the results were unsatisfactory. The [FONT=&quot]C:\Documents and Settings folder[/FONT] doesn't exist anymore. It was replaced by the [FONT=&quot]C:\Users[/FONT] and [FONT=&quot]C:\ProgramData.[/FONT] The empty File folder for “Documents and Settings” is still in the software, but now it is empty and serves as something like a share point, interacting with other programs. This is why TD did not copy anything into this folder.

The information for reconnecting to my account is in an encrypted Windows file. If the right file is installed on a PC, I do have a program to retrieve the required information.

As I have explained in my Post # 16, my SP has in recent years become highly automated so that the interface is through computers, but mainly only files for download. I have spent some money to talk to someone, to no avail. This is why I have to go through this procedure laid out by you or get a new account. I would prefer keeping the old one alive.

As of today, I have recovered from the WD 500 GB HD these files (43.9 GB):
· Partition 1 HPFS – NFTS (Bootmgr)
· Partition 2 HPFS – NFTS (Program files and data)
· Partition 3 HPFS – NFTS (Outlook 1.pst, Outlook 1.log)


Now I would be ready for new tasks.

 

[murmur104]

Hi Jumanji,

I do hope you are well.

You have not responded to my post from two weeks ago. Are you still set to providing further assistance or not? I need to know, as my problem has not been resolved.
[FONT=&quot]
murmur104[/FONT]

 

[jumanji]

You went off tangentially after copying whatever files you wanted to copy from the RAW partition ( You tried to copy files from the drive H: Why? I was amazed. Your drive H: seems healthy and accessible. Were you not able to access it normally?)

You did not answer my question in my post#20 "Now tell me your drive H seems to be absolutely OK. It is not RAW. Are you not able to access it in Windows Explorer? Have you tried booting into Windows from that drive?''

 

[murmur104]

In my post #21, I have described what happens when I try booting into windows from that drive. Windows has started the Chkdsk every time I had started the PC, and I did not get anywhere. In my post #23, I have stated that I have now all files from partitions 1 – 3 from the WD HD 500 GB with the unallocated partition. After I had accessed the recovered files, I have discovered that one profile and its data were missing. This was my working profile. I always use three different profiles as safety feature in case a profile turns corrupt. Had helped me in the past a few times. I have tried recovering the missing profile and the data with 3rd party recovery tools. My first efforts were not successful. When searching for other solutions, I came across the EaseUS Data Recovery Wizard Professional 11.0. In a thread a poster claimed that he had recovered all his files of the entire disk, including all files from a RAW partition and some earlier deleted ones. As the WD 500 GB with the RAW partition was the last HD I was working from, I have chosen to do the data recovery on that HD. While preparing for the file recovery, I was searching something on my new PC (Win 10 and Office 2013). The search result also found something in a Seagate folder, much to my surprise, as I had never before worked with or on Seagate, nor had I ever created a Seagate folder. But the folder was there and it contained a Win 7_backup, worth 15.108 GB. I assume that staff in the PC-service shop have done the back-up before they had installed a new Seagate HD and on it the old PC (Win 7 and Office 2010). The wizard is still working “hard” recovering drive E:\. As I could not get booting into windows from either of the two WD 500 GB HD (unallocated and RAW partition), I thought about another way of retrieving the much needed Outlook data. Right now I am running Win 7 on the PC on which I had been working with the WD 500 GB HD in a RAID 1 (mirror) configuration. My plan is to uninstall Office 2010 and replace it with Office 2007, which is what I had installed previously. I intend to recover also the drive F:\ and the System reserved partition. I have no clue of how long this will take. My best guess is some 16 more hours. Once this is done, I will clone the HD with the Win 7 and Office 2007 installation, and use the clone as test drive. I wonder if it would be possible to replace on that installation the current system files with those recovered from the WD 500 GB with the RAW partition. If this works then I might be able to recover the needed outlook data. Once the recovery is completed, I will let you know of the outcome. What do you think about that plan? Please bear in mind that I am not anywhere near an expert in computer matters; I am just a user trying to get along. Any better proposals are much appreciated.

 

[jumanji]

Too complicated for me to understand and suggest anything. I shall leave it to other experts and get into watch mode.

 

[murmur104]

Hi Jumanji,


The result of the recovery operations of 21.02 and 22.02 is:


System Reserved: 20.40 MB
Explorer: not visible
Boot: 14.0 MB
Lost files: 6.06 MB
System volume information: 20 KB

E:\
Explorer: 40.4 GB
Deep scan: 4.65 GB
Existing Partition NFTS: 51.9 GB
Lost Partition NFTS: 266 GB
More Lost files RAW: 206 GB
Special lost files LAB: 1.87 GB

F:\
Explorer: not visible
Deep scan: 4.86 GB
Lost partition 120 GB
More lost files (RAW) 181 GB
Special lost files 21.1 GB

After all data from the WD 500 GB HD with the RAW partition have been retrieved, my plan of cloning and replacing things looks no longer feasible because of the shear amount of data recovered.


In your post #20 (and #25), you ask “Now tell me your drive H seems to be absolutely OK. It is not RAW. Are you not able to access it in Windows Explorer? Have you tried booting into Windows from that drive?”


I have tried both HD, the one with the unallocated and the other with the RAW partition. Both would not boot into Windows. I have created two new bootable media: one on a CD, the other on a USB device.


During data recovery, my Anti-Virus gave several alerts: one about a POLY.CRYPT.COM (a virus from more than ten years ago) and about 10 about viruses in retrieved files, which the system has taken care off. While downloading programs from various sites, Firefox was very unstable. Therefor I have started a malicious software removal tool. It has been running for 40 hours and counting. So far it shows 401 file as infected. Right now, I cannot shut down the PC, because I want the tool to finish the task.


After the malicious software removal tool has finished, I will again try booting into Windows with the unallocated and the RAW partition HDs. I will let you know the results.

 

[murmur104]

The malicious software removal tools employed on the Win 10 and the Win 7 PC have been running some 50 hours and they have removed about 600 infected files, all of them in the recovered data (probably Norton quarantined). For HD space reasons, I had transferred recovered data to the Win 10 PC.
Today, 24.02.2017, I have tried using two different rescue media on the WD 500 GB HD with the RAW partition.


The first media was the MacriumReflect Rescue Medium Software Version 6.3, Build No 1665. The second was a download from MS website: Win 7 Pro SP 1 Rescue Media on USB.


I have configured the BIOS to boot from the WD 500 GB HD with the RAW partition, and the Boot Manager to boot from CD for the Macrium test.


After the PC was started, the system wanted again first perform CHKDSK. I have stopped that, as all previous processes only consumed time without fixing anything.


Macrium started with Initializing Windows PE, followed by loading driver rt86win. During this process the software was obviously looking for drive A, which it could not find, as there was no drive A: installed on this PC. I thought that such a smart program would have figured that out during producing the rescue media. Bad start.


2 Macrium - initialization Win PE 01.JPG
3 Macrium - Loading driver rt86win7 - Search Dive A.JPG


After analyzing Disk 3 Partition 1, the system produced the previously created image. The next step was Fix Boot Problems (I liked that); however, the next step “Running Tasks…” ended not how I would have expected, as it failed creating BCD store.



4 Macrium - Analyzing Disk 3 Partition 1.JPG
5 Macrium - Image ID 20170212-00-00 mrimg.JPG
6 Macrium - Select Partition for Boot.JPG
7 Macrium - Fix Boot Problems - running tasks - Resart.JPG


I have restarted the PC, hoping for a better result in the next go. The restart produced Windows Boot Manager with an error code, pointing to a device not connected. Choosing enter produced the Windows Boot Manager Error memtest.exe.


8 Macrium - Windows Boot Manager - error.JPG
9 Macrium - Windows Boot Manager - boot - memtest exe.JPG


The next restart produced the same errors.


I changed to Win 7 Pro SP 1 Rescue Media on USB.


For this I have configured the BIOS to boot from the WD 500 GB HD with the RAW partition, and the Boot Manager to boot from USB for the Win 7 Pro SP 1.


After the PC was started, the system wanted again first perform CHKDSK. I have stopped that, as al previous processes only consumed time without fixing anything.


After loading the windows files, the system went through the normal sequence for the System Repair Process. For the System Recovery Options it showed the repair details.


10 MS Win 7 Pro SP 1 rescue USB - 01.JPG
11 MS Win 7 Pro SP 1 rescue USB - 02.JPG


The last entry of the repair details seemed at that time benign, but later I was reminded of that step, when the PC configured to boot from the Seagate HD had failed to do so (this is described later and in detail).


The last step for the System Recovery Options meant trouble: Failed to save start up options. This was followed by the “Re-image Your Computer” window showing that an internal error had occurred.


12 MS Win 7 Pro SP 1 rescue USB - System Recovery 01.JPG
13 MS Win 7 Pro SP 1 rescue USB - Re-image your computer.JPG


A second attempt running the Windows Rescue Media from USB would not even get me to the system repair option. Instead, I have seen again the two Windows Boot Manager errors. I have decided not to continue with the rescue media from Macrium and reflect, as they seemed not to bring me forward.


14 MS Win 7 Pro SP 1 rescue USB - Win Boot Mgr 01.JPG
15 MS Win 7 Pro SP 1 rescue USB - Win Boot Mgr 02.JPG


Thereafter, I have configured the BIOS to boot from the Seagate 1 TB HD and the Boot Manager to boot from the Seagate 1 TB HD.


When starting the PC, I got again the Windows Boot Manager errors (images 14…, 15…). After re-checking BIOS and Boot Manager before every try to boot, the Windows Boot Manager errors (images 14…, 15…) were produced three more times. I have already placed the procedures for Bootrec.exe on the desk, when finally the fourth boot effort on the Seagate HD was successful.


I have documented the Startup attempts on the next day, 25.02.2017.


When starting the PC, I got again the Windows Boot Manager errors (images 14…, 15…). After re-checking BIOS and Boot Manager before every try to boot, the Windows Boot Manager errors (images 14…, 15…) were produced three more times. The procedures for Bootrec.exe were still on the desk, when finally the fourth boot effort on the Seagate HD followed a different path: I got into System Recovery Options, where 3 Windows 7 Professional (recovered) OS were displayed: each on a different drive and a different Partition Size.


16 System Recovery - use recovery tools - 3 Win 7 Pro recovered.JPG


The Windows 7 Professional (recovered) OS on Drive F: would be referring to the WD 500 GB HD, which in Explorer now shows Drive E: System Reserved, Drive F: and Drive I: the RAW partition, whereas in Disk Management, the System Reserved Partition does not have a drive letter.
The Windows 7 Professional (recovered) OS on Drive H: would be referring to the 2nd Seagate 1 TB HD (used for storing recovered data), which in Explorer and Disk Management shows H: Drive Data2.
The Windows 7 Professional (recovered) OS on Drive G: would be referring to the Optical drive, which in Explorer shows G: CD Drive and in Disk Management as drive K.


16-1 Win 7 Computer - Explorer.png
16-2 Win 7 Disk Management.png

Clicking NEXT on the System Recovery Options (16 System Recovery - use recovery tools - 3 Win 7 Pro recovered.JPG), produced the window for choosing recovery tool. My choice was Startup Repair and the standard searching for problems process started.


17 System Recovery - choose recovery tool - Startup Repair.JPG
18 Startup Repair - searching.JPG


The Startup Repair produced the Diagnosis and repair details and the respective log:


19 Startup Repair - Diagnosis and repair log 01.JPG
20 Startup Repair - Diagnosis and repair log 02.JPG
21 Startup Repair - Diagnosis and repair log 03.JPG
22 Startup Repair - Diagnosis and repair log 04.JPG
23 Startup Repair - Diagnosis and repair log 05.JPG
24 Startup Repair - Diagnosis and repair log 06.JPG
25 Startup Repair - Diagnosis and repair log 07.JPG


Next, Restart was selected. The boot process ended at the Windows Boot Manager.


26 System Recovery - Restart.JPG
27 Windows Boot Manager - BCD error - Enter.JPG


Next ESC=EXIT was selected and restart was automatically initiated. When the options for BIOS and Boot Management were displayed, I re-insured correct settings, saved and exited.


28 BIOS and Boot options - confirming setup for Seagate HD.JPG


The next screen showed again the problem with the BCD. I selected ENTER.


29 Windows Boot Manager - BCD error - Enter.JPG


The options for BIOS and Boot Management were displayed. I re-insured correct settings, saved and exited.


30 BIOS and Boot options - confirming setup for Seagate HD.JPG


The next screen showed again the problem with the BCD. I selected ENTER.


31 Windows Boot Manager - BCD error - Enter.JPG


The options for BIOS and Boot Management were again displayed. In the Boot Menu, I selected CDROM (=Win 7 Professional OEM)


32 Boot Menu - CDROM WIn 7 Pro OEM.JPG


During the startup process, the Windows Boot Manager displayed 3 Windows 7 Professional (recovered) OS. I kept the selection as offered and selected ENTER.


33 Windows Boot Manager - 3 Win Pro recovered - Enter.JPG


Windows has finally started.


34 Starting Windows.JPG

But the system had decided to check the file system again. I did not interfere and went for lunch.


35 Checking File System.JPG


After I had returned, Windows was up and running.


36 Windows Desktop.JPG

I have searched in the recovered data the lost profile, but to no avail. If we ever get booting into Windows on the WD 500 GB HD, one of the existing profile would do.

That the system with every boot attempt into windows tried to do CHKDSK seems to be related to the RAW partition. As I do have all data from that partition, with formatting I would not actually loose anything, would I?


What would be arguments against formatting? When I try accessing the RAW partition in Explorer or Disk Management, the proposal is always formatting the disk.


The same could be said about the WD 500 GB HD with the unallocated Partition. Should I format the RAW partition and restart the recovery as described above?