findpart - diskrecovery

[joergen a.]

Once I have used Sven Olaf's utilities with great sucess, but now I
need help.

History:
My PC with OS: Win2K - HDD: 80 GB has given several warnings 'HDD
failure - bad block' so I created regulary backup. The PC was stable
until I maked a RAM upgrade - after restart: 'No system disk'.

Actions:
I have installed an old 2 GB HDD as master (which include WinXP Pro
SP1) and the above mentioned 80 GB HDD as slave. I can access the 80
GB HDD FAT32 partitions but not the NTFS partition.

I have 2 questions:

1. My backup are missing some important files. Would it be possible to
recover any of the files from the NTFS partition, and if 'yes' how ?

2. Is a 'Bad Block' a physical failure, and as far as the HDD still is
covered by warrenty - is the failure expected to continue.

Output from Findpart:

Findpart, version 4.41 - for Windows 95/98/ME/NT/2000/XP.
Copyright Svend Olaf Mikkelsen, 1999-2004.

OS: Windows 5.1.2600 Service Pack 1 All

Disk: 1 Cylinders: 1023 Heads: 64 Sectors: 63 MB: 2014

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 - 07 63 4124673 2014 0 1 1 1022 63 63 B OK

No FATs found.

Partitions according to partition tables on first harddisk:

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 1*07 63 4124673 2014 0 1 1 1022 63 63 OK OK

Disk: 2 Cylinders: 9964 Heads: 255 Sectors: 63 MB: 78160

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 - 07 63119105847 58157 0 1 1 7413 254 63 B OK
7414 1 0B 63 12289662 6000 7414* 1 1 8178*254 63 R0 OK
7414 2 05 12289725 28676025 14001 8179* 0 1 9963*254 63 7414 OK
0 - 0B119105973 12289662 6000 7414 1 1 8178 254 63 B OK
8179 1 0B 63 28675962 14001 8179* 1 1 9963*254 63 R0 OK
0 - 0B131395698 28675962 14001 8179 1 1 9963 254 63 B OK
0 - 07 63160055532 78152 0 1 1 9962 254 63 BU OK

-----FAT CHS -Size Cl --Root -Good -Rep. Maybe --Bad YYMMDD DataMB
7414 1 33 11980 4 220915 11980 0 0 0 030219 340
8179 1 37 13990 8 2 13990 0 0 0 030223 4283
There were sectors, which could not be read.

Partitions according to partition tables on second harddisk:

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 1*07 63119105847 58157 0 1 1 7413*254 63 OK OK
0 2 0F119105910 40965750 20002 7414* 0 1 9963*254 63 OK

7414 1 0B 63 12289662 6000 7414* 1 1 8178*254 63 R0 OK
7414 2 05 12289725 28676025 14001 8179* 0 1 9963*254 63 OK

8179 1 0B 63 28675962 14001 8179* 1 1 9963*254 63 R0 OK

Disk: 3 Cylinders: 16 Heads: 255 Sectors: 63 MB: 126

None found.


-----FAT CHS ------LBA Confidence Distance Type Sig
0 0 7 6 17 16 OK
0 4 8 259 17 253 16 OK
0 184 36 11627 50 11368 32 NB
0 249 9 15695 14 4068 32 NB
1 231 53 30670 13 14975 32 NB

Partitions according to partition tables on third harddisk:

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 1*04 5 259488 126 0 1 1 998 1 32 NB NB
0 0 6 16 38 59 Actual?

Any help would be greatly appreciated

//Joergen A

 

[Svend Olaf Mikkelsen]

Once I have used Sven Olaf's utilities with great sucess, but now I
need help.

History:
My PC with OS: Win2K - HDD: 80 GB has given several warnings 'HDD
failure - bad block' so I created regulary backup. The PC was stable
until I maked a RAM upgrade - after restart: 'No system disk'.

Actions:
I have installed an old 2 GB HDD as master (which include WinXP Pro
SP1) and the above mentioned 80 GB HDD as slave. I can access the 80
GB HDD FAT32 partitions but not the NTFS partition.

I have 2 questions:

1. My backup are missing some important files. Would it be possible to
recover any of the files from the NTFS partition, and if 'yes' how ?

2. Is a 'Bad Block' a physical failure, and as far as the HDD still is
covered by warrenty - is the failure expected to continue.

Output from Findpart:

Findpart, version 4.41 - for Windows 95/98/ME/NT/2000/XP.
Copyright Svend Olaf Mikkelsen, 1999-2004.

OS: Windows 5.1.2600 Service Pack 1 All

Disk: 1 Cylinders: 1023 Heads: 64 Sectors: 63 MB: 2014

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 - 07 63 4124673 2014 0 1 1 1022 63 63 B OK

No FATs found.

Partitions according to partition tables on first harddisk:

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 1*07 63 4124673 2014 0 1 1 1022 63 63 OK OK

Disk: 2 Cylinders: 9964 Heads: 255 Sectors: 63 MB: 78160

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 - 07 63119105847 58157 0 1 1 7413 254 63 B OK
7414 1 0B 63 12289662 6000 7414* 1 1 8178*254 63 R0 OK
7414 2 05 12289725 28676025 14001 8179* 0 1 9963*254 63 7414 OK
0 - 0B119105973 12289662 6000 7414 1 1 8178 254 63 B OK
8179 1 0B 63 28675962 14001 8179* 1 1 9963*254 63 R0 OK
0 - 0B131395698 28675962 14001 8179 1 1 9963 254 63 B OK
0 - 07 63160055532 78152 0 1 1 9962 254 63 BU OK

-----FAT CHS -Size Cl --Root -Good -Rep. Maybe --Bad YYMMDD DataMB
7414 1 33 11980 4 220915 11980 0 0 0 030219 340
8179 1 37 13990 8 2 13990 0 0 0 030223 4283
There were sectors, which could not be read.

Partitions according to partition tables on second harddisk:

-PCyl N ID -----Rel -----Num ---MB -Start CHS- --End CHS-- BS CHS
0 1*07 63119105847 58157 0 1 1 7413*254 63 OK OK
0 2 0F119105910 40965750 20002 7414* 0 1 9963*254 63 OK

7414 1 0B 63 12289662 6000 7414* 1 1 8178*254 63 R0 OK
7414 2 05 12289725 28676025 14001 8179* 0 1 9963*254 63 OK

8179 1 0B 63 28675962 14001 8179* 1 1 9963*254 63 R0 OK

Any help would be greatly appreciated

//Joergen A

I will concentrate on the data recovery. One possible reason that you
cannot access the NTFS partition on disk 2 could be one or more bad
sectors in the Master File Table or in the root directory.

Since you had bad sectors, and more bad sectors developed, I suggest
that nothing is written to the problem disk. Note that just reading
files will write to the disk, since access times are updated.

If the NTFS partition contains only a limited number of bad sectors
(or none), the important files can be copied to the 2014 MB disk using
Findpart or another recovery program (if possible). Using Findpart,
the procedure will be this:

You make a file listing for your own use, using the command:

findpart findntfs 2 0 1 1 files files-a.txt

This will make an initial short search, and then file names should be
scrolling on the screen. If that does not happen in this case, it can
be due to bad sectors. You then can stop the search if it takes too
long time and/or you hear many disk retry attempts.

Then find a directory number in files-a.txt, and do to copy that
directory and subdirectories to current directory and below:

findpart findntfs 2 0 1 1 copy <directory number>


If money is no object, I would suggest something like the following,
since the number of bad sectors is not known:

The partitions on the problem disks are hidden.

A third 160 GB disk is inserted.

The problem disk is copied sector by sector to the new disk by me in
mail.

A new partition is created in another area of the new disk.

Data are copied from the copied sector by sector area to the new
partition.

 

[joergen a.]

////////////////////////////////////////////////////////////////////////////////
I will concentrate on the data recovery. One possible reason that you
cannot access the NTFS partition on disk 2 could be one or more bad
sectors in the Master File Table or in the root directory.

Since you had bad sectors, and more bad sectors developed, I suggest
that nothing is written to the problem disk. Note that just reading
files will write to the disk, since access times are updated.

If the NTFS partition contains only a limited number of bad sectors
(or none), the important files can be copied to the 2014 MB disk using
Findpart or another recovery program (if possible). Using Findpart,
the procedure will be this:

You make a file listing for your own use, using the command:

findpart findntfs 2 0 1 1 files files-a.txt

This will make an initial short search, and then file names should be
scrolling on the screen. If that does not happen in this case, it can
be due to bad sectors. You then can stop the search if it takes too
long time and/or you hear many disk retry attempts.

Then find a directory number in files-a.txt, and do to copy that
directory and subdirectories to current directory and below:

findpart findntfs 2 0 1 1 copy <directory number>


If money is no object, I would suggest something like the following,
since the number of bad sectors is not known:

The partitions on the problem disks are hidden.

A third 160 GB disk is inserted.

The problem disk is copied sector by sector to the new disk by me in
mail.

A new partition is created in another area of the new disk.

Data are copied from the copied sector by sector area to the new
partition.

Thank you for your quick response - and I succeed to get the missing
files, even they have been renamed.

Thanks again
Joergen

 

[Svend Olaf Mikkelsen]

Thank you for your quick response - and I succeed to get the missing
files, even they have been renamed.

Thanks again
Joergen

Nice that you got the files.

If Findpart was used for the file copying, I however do not understand
the files were renamed. I can happen that parts of the directory
structure is missing, if files are copied from a damaged partition,
but the file names should be intact.