recover deleted NTFS partition

C

chuck clark

Hi,
I deleted an NTFS partition on my second hd. I am running windows xp.
I found this MS article but am having trouble following it.
http://support.microsoft.com/?kbid=245725

here is the relevant info

To Recover a Deleted NTFS Volume
1. Re-create the exact same volume but choose not to format it. This may
be difficult if you do not remember the exact size you had created
originally, especially because the Disk Management snap-in tends to
round partition sizes.

2. Using Dskprobe.exe, recover the backup boot sector for the NTFS
volume from the end of the volume. Because it is a dynamic volume you
may need to use Dmdiag.exe to help find the backup boot sector, or
search for it by using Dskprobe.exe (on the Tools menu, click Search
Sectors).

3. After rewriting the NTFS boot sector, quit Dskprobe.

4. In Disk Management, click Rescan Disks on the Action menu. This
should mount the volume for immediate use.


Ok, So i found both Dskprobe.exe and Dmdiag.exe on the ms site and
downloaded/installed them.

I have no idea how to find the backup boot sector. I don't know exactly
understand what it is i am
searching for, is it a sector number, a range of sectors that i copy
over another sector?

ok, i have a log from Dmdiag.exe, i suppose this shows where the backup
boot sector is exactly, but
i am having trouble figuring it out.

Please can someone help me with this. The log is below and it is long,

Thanks,
Chuck


---------- Computer name and OS version ----------

Computer name: BIGE
NT build: 2600

---------- Drive letter to device name, QueryDosDevice() ----------

D: \Device\CdRom0
E: \Device\CdRom1
F: \Device\HarddiskVolume2
G: \Device\HarddiskVolume3
H: \Device\HarddiskVolume4
A: \Device\Floppy0
C: \Device\HarddiskVolume1

---------- Physical Disk to disk type ----------

PhysicalDrive0 \Device\Harddisk0\DR0 (Signature 4a6e4a6e) Basic Disk
PhysicalDrive1 \Device\Harddisk1\DR1 (Signature f28c9560) Basic Disk

---------- Mount Points ----------

\\?\Volume{f82cb506-ace3-11d8-bf62-806d6172696f}\

C:\



\\?\Volume{5df9b570-ad18-11d8-89f9-00a0c975e3ac}\

F:\



\\?\Volume{95a3c2a0-ad48-11d8-bfc7-806d6172696f}\

G:\



\\?\Volume{95a3c2a1-ad48-11d8-bfc7-00a0c975e3ac}\

H:\



\\?\Volume{d694e4c2-ace5-11d8-89f6-806d6172696f}\

D:\



\\?\Volume{d694e4c3-ace5-11d8-89f6-806d6172696f}\

E:\



\\?\Volume{d694e4c4-ace5-11d8-89f6-806d6172696f}\

A:\




---------- LDM File Versions ----------

2600.0.503.0 shp - C:\WINDOWS\System32\dmadmin.exe
2600.0.503.0 shp - C:\WINDOWS\System32\dmconfig.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmdlgs.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmdskmgr.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmdskres.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmintf.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmremote.exe
2600.0.503.0 shp - C:\WINDOWS\System32\dmserver.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmutil.dll
2600.0.503.0 shp - C:\WINDOWS\System32\dmview.ocx
2600.0.503.0 shp - C:\WINDOWS\System32\drivers\dmboot.sys
2600.0.503.0 shp - C:\WINDOWS\System32\drivers\dmio.sys
2600.0.503.0 shp - C:\WINDOWS\System32\drivers\dmload.sys

---------- Drive letter usage, GetLogicalDrives(), GetDriveType() ----------

A: Removable disk
C: Fixed disk
D: CD-ROM
E: CD-ROM
F: Fixed disk
G: Fixed disk
H: Fixed disk

---------- dosdev ----------

A: = \Device\Floppy0 [Removable]
C: = \Device\HarddiskVolume1 [Fixed]
D: = \Device\CdRom0 [CDRom]
E: = \Device\CdRom1 [CDRom]
F: = \Device\HarddiskVolume2 [Fixed]
G: = \Device\HarddiskVolume3 [Fixed]
H: = \Device\HarddiskVolume4 [Fixed]

---------- \Device\Harddisk0 ----------

\Device\Harddisk0\DP(1)0x7e00-0x3a9627200+2 (Device)
\Device\Harddisk0\DP(2)0x3a962f000-0xaa757f600+3 (Device)
\Device\Harddisk0\DR0 (Device)
\Device\Harddisk0\Partition0 (SymbolicLink) -> \Device\Harddisk0\DR0
\Device\Harddisk0\Partition1 (SymbolicLink) -> \Device\HarddiskVolume1
\Device\Harddisk0\Partition2 (SymbolicLink) -> \Device\HarddiskVolume2

---------- \Device\Harddisk1 ----------

\Device\Harddisk1\DP(1)0x7e00-0x32c91a200+4 (Device)
\Device\Harddisk1\DP(2)0x32c922000-0x6248a0000+5 (Device)
\Device\Harddisk1\DR1 (Device)
\Device\Harddisk1\Partition0 (SymbolicLink) -> \Device\Harddisk1\DR1
\Device\Harddisk1\Partition1 (SymbolicLink) -> \Device\HarddiskVolume3
\Device\Harddisk1\Partition2 (SymbolicLink) -> \Device\HarddiskVolume4

---------- \Device ----------

\Device\00000001 (Device)
\Device\00000002 (Device)
\Device\00000003 (Device)
\Device\00000004 (Device)
\Device\00000005 (Device)
\Device\00000006 (Device)
\Device\00000007 (Device)
\Device\00000008 (Device)
\Device\00000009 (Device)
\Device\0000000a (Device)
\Device\0000000b (Device)
\Device\0000000c (Device)
\Device\0000000d (Device)
\Device\0000000e (Device)
\Device\0000000f (Device)
\Device\00000010 (Device)
\Device\00000011 (Device)
\Device\00000012 (Device)
\Device\00000013 (Device)
\Device\00000014 (Device)
\Device\00000015 (Device)
\Device\00000016 (Device)
\Device\00000017 (Device)
\Device\00000018 (Device)
\Device\00000019 (Device)
\Device\0000001a (Device)
\Device\0000001b (Device)
\Device\0000001c (Device)
\Device\0000001d (Device)
\Device\0000001e (Device)
\Device\0000001f (Device)
\Device\00000020 (Device)
\Device\00000021 (Device)
\Device\00000022 (Device)
\Device\00000023 (Device)
\Device\00000024 (Device)
\Device\00000025 (Device)
\Device\00000026 (Device)
\Device\00000027 (Device)
\Device\00000028 (Device)
\Device\00000029 (Device)
\Device\0000002a (Device)
\Device\0000002b (Device)
\Device\0000002c (Device)
\Device\0000002d (Device)
\Device\0000002e (Device)
\Device\00000030 (Device)
\Device\00000031 (Device)
\Device\00000032 (Device)
\Device\00000033 (Device)
\Device\00000034 (Device)
\Device\00000035 (Device)
\Device\00000036 (Device)
\Device\00000037 (Device)
\Device\00000038 (Device)
\Device\00000039 (Device)
\Device\0000003a (Device)
\Device\0000003b (Device)
\Device\0000003c (Device)
\Device\0000003d (Device)
\Device\0000003e (Device)
\Device\0000003f (Device)
\Device\00000040 (Device)
\Device\00000041 (Device)
\Device\00000042 (Device)
\Device\00000043 (Device)
\Device\00000044 (Device)
\Device\00000045 (Device)
\Device\00000046 (Device)
\Device\00000047 (Device)
\Device\00000048 (Device)
\Device\00000049 (Device)
\Device\0000004a (Device)
\Device\0000004b (Device)
\Device\0000004c (Device)
\Device\0000004d (Device)
\Device\00000050 (Device)
\Device\00000051 (Device)
\Device\00000052 (Device)
\Device\00000053 (Device)
\Device\00000054 (Device)
\Device\00000055 (Device)
\Device\00000056 (Device)
\Device\Afd (Device)
\Device\Beep (Device)
\Device\CdRom0 (Device)
\Device\CdRom1 (Device)
\Device\DmControl (Directory)
\Device\DmLoader (Device)
\Device\Fips (Device)
\Device\Floppy0 (Device)
\Device\FloppyPDO0 (Device)
\Device\FsWrap (Device)
\Device\FtControl (Device)
\Device\Gpc (Device)
\Device\Harddisk0 (Directory)
\Device\Harddisk1 (Directory)
\Device\HarddiskDmVolumes (Directory)
\Device\HarddiskVolume1 (Device)
\Device\HarddiskVolume2 (Device)
\Device\HarddiskVolume3 (Device)
\Device\HarddiskVolume4 (Device)
\Device\Ide (Directory)
\Device\Ip (Device)
\Device\IPMULTICAST (Device)
\Device\IPSEC (Device)
\Device\KeyboardClass0 (Device)
\Device\KeyboardClass1 (Device)
\Device\KsecDD (Device)
\Device\KSENUM#00000001 (Device)
\Device\KSENUM#00000002 (Device)
\Device\LanmanDatagramReceiver (Device)
\Device\LanmanRedirector (Device)
\Device\LanmanServer (Device)
\Device\Mailslot (Device)
\Device\MountPointManager (Device)
\Device\Mup (Device)
\Device\NamedPipe (Device)
\Device\Ndis (Device)
\Device\NdisTapi (Device)
\Device\Ndisuio (Device)
\Device\NdisWan (Device)
\Device\NdisWanIp (Device)
\Device\NDProxy (Device)
\Device\Netbios (Device)
\Device\NetbiosSmb (Device)
\Device\NetBT_Tcpip_{E1C17C88-83A3-4BFE-B084-50F63A16D140} (Device)
\Device\NetBt_Wins_Export (Device)
\Device\NTPNP_PCI0000 (Device)
\Device\NTPNP_PCI0001 (Device)
\Device\NTPNP_PCI0002 (Device)
\Device\NTPNP_PCI0003 (Device)
\Device\NTPNP_PCI0004 (Device)
\Device\NTPNP_PCI0005 (Device)
\Device\NTPNP_PCI0006 (Device)
\Device\NTPNP_PCI0007 (Device)
\Device\NTPNP_PCI0008 (Device)
\Device\NTPNP_PCI0009 (Device)
\Device\Null (Device)
\Device\Parallel0 (Device)
\Device\ParallelPort0 (Device)
\Device\ParallelVdm0 (Device)
\Device\ParTechInc0 (Device)
\Device\ParTechInc1 (Device)
\Device\ParTechInc2 (Device)
\Device\PhysicalMemory (Section)
\Device\PointerClass0 (Device)
\Device\PointerClass1 (Device)
\Device\Processor (Device)
\Device\PSched (Device)
\Device\RasAcd (Device)
\Device\RawCdRom (Device)
\Device\RawDisk (Device)
\Device\RawIp (Device)
\Device\RawTape (Device)
\Device\RDP_CONSOLE0 (Device)
\Device\RDP_CONSOLE1 (Device)
\Device\RdpDr (Device)
\Device\RdpDrDvMgr (Device)
\Device\RdpDrPort (Device)
\Device\rdpwd (Device)
\Device\ScsiPort0 (SymbolicLink) -> \Device\Ide\IdePort0
\Device\ScsiPort1 (SymbolicLink) -> \Device\Ide\IdePort1
\Device\Serial0 (Device)
\Device\Serial1 (Device)
\Device\sysaudio (Device)
\Device\Tcp (Device)
\Device\tdtcp (Device)
\Device\Termdd (Device)
\Device\Udp (Device)
\Device\USBFDO-0 (Device)
\Device\USBFDO-1 (Device)
\Device\USBPDO-0 (Device)
\Device\USBPDO-1 (Device)
\Device\Video0 (Device)
\Device\Video1 (Device)
\Device\Video2 (Device)
\Device\Video3 (Device)
\Device\VideoPdo0 (Device)
\Device\VolumesSafeForWriteAccess (Event)
\Device\WANARP (Device)
\Device\WebDavRedirector (Device)
\Device\WinDfs (Directory)
\Device\WMIDataDevice (Device)
\Device\{24DF0B50-32D6-4263-84E1-7C3598EF5540} (Device)
\Device\{35622AC3-1E97-43B4-95D8-568F845CBAFE} (Device)
\Device\{3B64DC7E-9F15-410D-A8C3-82BF47728894} (Device)
\Device\{5253725C-958B-4081-8155-AE90AE85D691} (Device)
\Device\{D945F74F-7712-47FF-B616-E0EDAB3FA477} (Device)
\Device\{E1C17C88-83A3-4BFE-B084-50F63A16D140} (Device)
\Device\{E27BEC8E-77C9-43D3-8D55-2BCE44B5D0AE} (Device)

---------- \?? ----------

\Sessions\0\DosDevices\00000000-0000a731\Global (SymbolicLink) -> \Global??

---------- ldmsize 0 ----------


7,476 Cylinders
255 Tracks/Cylinder
63 Sectors/Track
512 Bytes/Sector
12 MediaType
120,101,940 Sectors (total)
61,492,193,280 Bytes (total)
60,050,970 KB
58,644 MB
57.3 GB

0 StartingOffset
61,492,838,400 PartitionLength
0 HiddenSectors
0 PartitionNumber
0 PartitionType
0 BootIndicator
0 RecognizedPartition
0 RewritePartition

4 PartitionCount
4a6e4a6e Signature

Starting Partition Hidden Total Partition
Partition Boot Recognized Rewrite
Offset (bytes) Length (bytes) Sectors Sectors Number
Type (HEX) Indicator Partition Partition

32,256 15,726,703,104 63 30,716,217
0 0x07 1 1 0
15,726,735,360 45,757,232,640 30,716,280 89,369,595
1 0x07 0 1 0
0 0 0 0
2 0x00 0 0 0
0 0 0 0
3 0x00 0 0 0

61,492,193,280 Bytes (120101940 sectors) Geometric size
61,492,838,400 Bytes (120103200 sectors) True size (measured)
61,492,838,400 Bytes (120103200 sectors) Reported size (Partition0)
0 Bytes ( 0 sectors) missing/wasted

---------- ldmsize 1 ----------


5,169 Cylinders
240 Tracks/Cylinder
63 Sectors/Track
512 Bytes/Sector
12 MediaType
78,155,280 Sectors (total)
40,015,503,360 Bytes (total)
39,077,640 KB
38,162 MB
37.3 GB

0 StartingOffset
40,020,664,320 PartitionLength
0 HiddenSectors
0 PartitionNumber
0 PartitionType
0 BootIndicator
0 RecognizedPartition
0 RewritePartition

4 PartitionCount
f28c9560 Signature

Starting Partition Hidden Total Partition
Partition Boot Recognized Rewrite
Offset (bytes) Length (bytes) Sectors Sectors Number
Type (HEX) Indicator Partition Partition

32,256 13,632,643,584 63 26,626,257
0 0x07 1 1 0
13,632,675,840 26,382,827,520 26,626,320 51,528,960
1 0x07 0 1 0
0 0 0 0
2 0x00 0 0 0
0 0 0 0
3 0x00 0 0 0

40,015,503,360 Bytes (78155280 sectors) Geometric size
40,020,664,320 Bytes (78165360 sectors) True size (measured)
40,020,664,320 Bytes (78165360 sectors) Reported size (Partition0)
0 Bytes ( 0 sectors) missing/wasted

---------- kernel list ----------

Basic-info: version=21 maxspecio=512 maxio=512 maxkio=2048
Ktrans-state: dg=0.0 pendtid=0.0 state=UNKNOWN
#
# Kmem-regions:
#
#
# Disks: (cnt: 0)
#
#
# Devices: (cnt: 0)
#
#
# Groups: (cnt: 1)
#
Group NULLDG: iid=0.0 id=
diskset=00000000-0000-0000-0000-000000000000
configtid=0.0 logsize=0
kflag=()
vflag=(created|notempdb|noautoreimport|secondary)
# Group-Objects: (cnt: 0)
# End-group: NULLDG

---------- query -ht ----------


---------- query -l ----------


---------- disk header Harddisk0 ----------

dmdiag: ERROR: scan operation failed:
Format error in disk private region

---------- disk header Harddisk1 ----------

dmdiag: ERROR: scan operation failed:
Format error in disk private region

---------- disk config Harddisk0 ----------

dmdiag: ERROR: scan operation failed:
Format error in disk private region

---------- disk config Harddisk1 ----------

dmdiag: ERROR: scan operation failed:
Format error in disk private region

---------- disk klog Harddisk0 ----------

dmdiag: ERROR: scan operation failed:
Format error in disk private region

---------- disk klog Harddisk1 ----------

dmdiag: ERROR: scan operation failed:
Format error in disk private region

---------- disk partitions Harddisk0 ----------

Device: Harddisk0
Size: 120103200 blocks 58644.1 Megabytes
Parameters: Signature=1248741998 mediatype=12
Geometry: geometry=7476/255/63 sectorsize=512 endingblocks=1260
Partition1: Type=7 Extent=63,30716217 Hidden=63 Flags=boot,recognized
Partition2: Type=7 Extent=30716280,89369595 Hidden=30716280
Flags=recognized

---------- disk partitions Harddisk1 ----------

Device: Harddisk1
Size: 78165360 blocks 38166.7 Megabytes
Parameters: Signature=4069299552 mediatype=12
Geometry: geometry=5169/240/63 sectorsize=512 endingblocks=10080
Partition1: Type=7 Extent=63,26626257 Hidden=63 Flags=boot,recognized
Partition2: Type=7 Extent=26626320,51528960 Hidden=26626320
Flags=recognized
 
A

Alex Nichol

chuck said:
I deleted an NTFS partition on my second hd. I am running windows xp.
I found this MS article but am having trouble following it.
http://support.microsoft.com/?kbid=245725

I suggest rather that you get BootIT NG, from http://www.BootitNG.com
($35 shareware - 30 day full functional trial)

Download, to its own folder, extract from the zip, run the bootitng to
make a boot floppy. (or you can make an image file to burn as the boot
sectors of a boot CD)

Boot the floppy, Cancel Install, entering maintenance, then click on
Partition work. Select the relevant disk, HD1, on the left

Click in the Free space in the middle pane, where the partition used to
be, and click on UnDelete - it should work if the partition was deleted
simply, without deliberately scrubbing the section of disk
 
W

Wesley Vogel

May 24 2004 was when this was originaly posted.

Timely answer, I must say.

You might include some of the original thread so we don't have to look it up
in the history books.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top