Andy wrote:
> On Sat, 24 Oct 2009 20:05:02 -0700 (PDT), zalek
> <(E-Mail Removed)> wrote:
>
>> I think I figured what happened. Using Windows Live CD http://www.nu2.nu/pebuilder/
>> I noticed f:\ drive with WinXP is missing. It looks that f:\ partition
>> is broken - this is the reason WinXP is not booting.
>> Now the question is if this partition can be repaired. If yes - how?
>
> Try using TestDisk.
>
TestDisk is a program that scans the hard drive, looking for file
systems. Based on what it sees, it prepares a partition table, suitable
for writing to the MBR (sector 0). (It has some other capabilities.
It can display the partition's boot sector and backup boot sector.
It claims to be able to do something with MFT, but I haven't tested
that.) There is no guarantee it will prepare a correct specification.
I did a test once, where there was a freshly deleted partition
on the disk - testdisk detected it, and put it back in the partition
table, but strictly speaking, that isn't correct. So you have to understand
the limits of what TestDisk is doing. It relies on the human operator,
to make the decision as to whether the new partition table is
trustworthy. The program operator has to know a lot about the
disk in question, to use the program effectively.
http://www.cgsecurity.org/wiki/TestDisk
http://en.wikipedia.org/wiki/TestDisk
To look at the partition table before TestDisk runs, you can use
"fdisk" in Linux, or PTEDIT32 in Windows.
ftp://ftp.symantec.com/public/englis...s/PTEDIT32.zip
(PTEDIT32 screenshot)
http://i24.photobucket.com/albums/c5...TEditVista.jpg
Since TestDisk writes to the disk you're trying to repair, you're
taking a risk by doing so. It is best if you back up the entire
disk first, to a spare disk. I do that using "dd". Once I have
an exact copy of the original disk, then I can do as many experiments
as I want. If the broken disk has bad (unreadable) sectors, then
there is an "industrial strength" version called "ddrescue". So
scanning the disk, and making sure it is readable, is all part
of the process. If some sectors are broken, use ddrescue. if
all sectors are readable, then ordinary "dd" will do.
http://www.cgsecurity.org/wiki/Damaged_Hard_Disk
So the first thing I'd do, is make the backup. Generally,
I recommend there be two spare disks. The first spare disk
holds an exact copy of the broken disk. The second
spare disk, provides space for any recovered files.
Assuming the partition table is now repaired, then the next
step would be repairing the file system. Windows has "chkdsk".
It can accept a drive letter, but my guess is, that implies
the volume in question is mountable.
chkdsk C:
This article mentions it can also check, based on a volume
specification.
http://technet.microsoft.com/en-us/l.../bb457122.aspx
chkdsk \\?\Volume{2d9bd2a8-5df8-11d2-bdaa-000000000000}
The article mentions a tool called "mountvol" to get that
symbolic link. I tried that and it works. I was able to
pass a specification like that, and get chkdsk to run.
I can also get that kind of information, from the port of "dd" here.
The "dd --list" command, gives information like that volume
specification.
http://www.chrysocome.net/dd
So maybe if you could boot some other form of Windows
(bartpe / recovery console or whatever), you could
run that particular syntax of chkdsk.
Paul
Similar Threads
