Harddrive recovery

(Jethro) wrote:

Seems that the drive not being recognized as 80 GB is caused by the bad
partition table in the MBR and the drive setting in the setup being on AUTO.
You could try the following procedu

Download RESQ from http://resq.co.il/resq.php and prepare the rescue floppy by
running the download file on a PC that runs under Win98. If you have no access
to such PC then prepare the FreeDOS boot floppy from our site by aid of
MakeResQ, from http://resq.co.il/resq.php

Boot the problem PC from the floppy made, then from the A: prompt and the RESQ
floppy, run RESQDISK /KILL /2

just for te record:
The first HD contains 2 partions, the C-drive voor Windows and a
D-drive.
After that there are 2 CDR's (E-drive and F-drive). The G-drive is the
drive which is corrupted.

C, D, etc., are *logical* drives, while RESQDISK deals with *physical* hard
drives, which are numbered 1, 2 ... (FDISK notation). Try FDISK /STATUS when
booted from the RESQ floppy and you'll see what I mean.

BTW, if you already downloaded RESQ, then download it again as I made some
refinements to RESQDISK last night, to provide a more thorough examination of
the drive in its "assess" mode.

I don't know where the _/2_ is about, but is this stille correct in
the situations as described above?

The "/2" argument instructs RESQDISK to operate on physical drive #2, which is
the corrupted one as I understand. If you want to be sure you don't make any
mistakes, then disconnect both the data and power cables from the first drive
(the good one) and leave just the problem drive connected. That will make it
drive #1 and you can then operate on it with RESQDISK, without the /2 argument.

Important: Run the /KILL command just *once*. The reason is that this
operation automatically backs up the current MBR to the last sector of track 0,
in case there is need to go back to the current state. If you run the command
twice, then the new MBR with the empty partition table will overwrite the
backup. Not a tragedy, but still ...

Lastly, note the post from Joep, in this thread. Joep notes that the partition
type of the problem drive is now that of 'Dynamic Drive'. Do you have any idea
how this came about? Do you remember converting the drive to Dynamic Disk?

Regards, Zvi

I'm really greatfull that you are helping me out with this, cause I
don't know where to go else.
--
NetZ Computing Ltd. ISRAEL http://invircible.com
InVircible Virus Defense Solutions, ResQ and Data Recovery Utilities
E-mail sent in reply to this post will not be considered private and
will be answered in the newsgroup. Top posting is not appreciated!

BTW, if you already downloaded RESQ, then download it again as I made some
refinements to RESQDISK last night, to provide a more thorough examination of
the drive in its "assess" mode.

Oke, I will to the entire process again with the new version.


Lastly, note the post from Joep, in this thread. Joep notes that the partition
type of the problem drive is now that of 'Dynamic Drive'. Do you have any idea
how this came about? Do you remember converting the drive to Dynamic Disk?

I'm not sure what is ment with "Dynamic Disk"? I'm sorry, but I'm a
real dummie at this part of pc's.

(Jethro) wrote:

Boot the problem PC from the floppy made, then from the A: prompt and the RESQ
floppy, run RESQDISK /KILL /2

This will put zeros in the partition table of the second drive without affecting
anything else. Reboot the PC from the floppy and see if the BIOS now detects
the drive with the correct size.

This didn't happen, the size in the bios stays arround 33Gb.
Isn't is possible that the bios is the problem, perhaps it isn't able
to work with large hard drives?

I don't think there is a problem with the BIOS, since it worked before, but the
drive capacity was accidentally changed and limited to 32 GB, as suggested in
Svend's post in this thread. Before restoring the partition table, which is
fairly straightforward, then you need first to reset the drive to its correct
max capacity. The best would be to wait for Svend's instructions how to do that
with his tool.

From the A: drive, run now RESQDISK /ASSESS /2

RESQDISK will scan the second drive for partitions and configuration data and
will prepare a report named A:\RESQDISK.RPT (leave the floppy write enabled to
save the report). Post the report here (it's a plain text file) and I should be
able to instruct how to complete the recovery.

you will find the file he
http://www.xs4all.nl/~bjborsje/RESQDISK.RPT.txt

Section of the report:

Evaluation Copy *************************************** CHS mode W9x
******************* * R e s Q d i s k 550 * ********************
* Hard Disk Rescue and Recovery *
Disk 1 * * Copyright (c) '90-03 NetZ Computing * SeeThru *
ExtBIOS * * Virus Control, Disk & Data Recovery * OFF F9 *
********* *************************************** *********
AltHelp *
*********
^2:FAT-16*
CHS address: Cyl 0 Head 1 Sector 1
******************** Boot Sector Data FAT-32 *********************
* *
* Sectors per Cluster: 32 *
* Number of Heads: 255 *
* Sectors in Partition: 40960000 *
* Sectors per FAT Copy: 9996 *
* Reserved Sectors: 32 *
* Capacity in Kilobytes: 20971520 *
* *
********** Press Alt+P to analyze as partition sector ************
Disk 1, Master Partition Sector, F6 for Layout


Evaluation Copy *************************************** Extended W9x
******************* * R e s Q d i s k 550 * ********************
* Hard Disk Rescue and Recovery *
Disk 1 * * Copyright (c) '90-03 NetZ Computing * SeeThru *
ExtBIOS * * Virus Control, Disk & Data Recovery * OFF F9 *
********* *************************************** *********
AltHelp *
*********
^2:FAT-16*
Checking cylinder 0 for FAT pair
************************************************** ****************
* Press Space to pause, Esc to stop searching *
* -------------------------------------------------------------- *
* First FAT-32 copy starts on sector 95, Cyl 0 *
* Second FAT-32 copy starts on sector 10091, Cyl 0 *
* Sectors per FAT copy: 9996 *
* *
* *
* *
************************************************** ****************
Searching for existing FAT partitions on drive 1


The report confirms what we already know, that the max capacity has been limited
to 32 GB. It also confirms that the first partition is FAT-32, is consistent
(the boot sector data and the FAT match), which is good. What bothers me is
that the report should have shown a second FAT pair, as well as an extended
partition and boot sector pair at cylinder 2550 (there should have been
additional screen snapshots after the above). Seems that you aborted the
'assess' test prematurely by repeatedly pressing Esc.

Another problem occured, because now the drive became invisible in
windows 2000.

Naturally, because we zeroed the partition table. The partitions will resurface
after we rebuild the MBR, but this can be done only after the max capacity of
the drive is restored. I'll leave it to Svend to guide you how to use his tool
for the purpose.

Another run of RESQDISK /ASSESS after the max size has been corrected will
provide the details how to RESQDISK /REBUILD, to restore the correct parameters
into the MBR.

Regards, Zvi
--
NetZ Computing Ltd. ISRAEL http://invircible.com
InVircible Virus Defense Solutions, ResQ and Data Recovery Utilities
E-mail sent in reply to this post will not be considered private and
will be answered in the newsgroup. Top posting is not appreciated!

Svend helped me auto trough e-mail and now everything is working again.
Thanks again Sven!!