All personal data lost

Hello,

I have a serious data loss problem and hope that someone can help!

Situation: My 2 TB hard drive (HD501LJ) with all my personal data was suddenly not accessible anymore by Windows. So my first reaction was to use EaseUs Todo Backup to create a partition backup on a different drive. I tried to recreate the partition on the original drive after formatting, but that didn't work, because it said the space was insufficient. (I know, formatting the original drive was a terrible idea...) So I got a 3 TB drive (WD30EZRX) and recreated the partition on that drive. However, the drive was still not accessible by Windows. I used a demo versions of recovery tools to scan the drive, and some of them listed files from the drive, so I assume recovery is possible. But for the actual recovery, all of them required to purchase the full version.

Goal: The best result would be to repair the files system, so I could access it normally again. If that doesn't work, my goal would be to recover as many files as possible with the original folder structure. There were a lot of files on that drive (documents, pictures, music, video, etc.), and organizing them again into folders would cost me weeks. A solution that takes a smaller amount of expert knowledge would be preferable.

Diagnostics:

Any other information required?

Possible actions:

1. Buy a commercial recovery software tool, e. g.:

Which tool is best for my situation?

2. Any other commercial/free software you would recommend?[/list]

3. Bring my drive to a professional data recovery lab

4. Other options?

I would greatly appreciate any advice by someone who has experience with these types of issues on what my best option is. I already spent hours with this, so I hope someone can finally help me to solve this problem.

Thanks a lot!

Attachments

r-studio.log: (25.16 KiB) Downloaded 815 times

Go for R-Studio.

The free version of Dmde will allow you to scan for partitions and carry out repairs. Also it will backup partition info etc.

http://www.diskgetor.com/ use its very fast processing

http://www.p30day.com/%D8%A8%D8%B1%D9%8 ... 13154.html

It appears that EaseUs cloned your partition or physical drive to a file. It also appears to have prefixed this file with 7.84MB of header information.

ISTM that there may still be an easy solution using freeware. I would examine the 3TB drive with a disc editor, eg DMDE.

Can you show us DMDE's Partitions window?

why does your 2 TB hard drive have a model number of a 500 GB Samsung?

Apparently I had email notifications turned off, so I found your answers only today after checking back on my post... thanks a lot for your help!

As Spildit suggested, I have indeed mixed up the model numbers in my question. The following is correct:

HD51LJ - 500 GB
HD204UI - 2TB

I have tried the free editions of R-Studio and DMDE which both seem to be great tools for working with damaged drives. I went on with DMDE and did a full scan. Then the whole folder structure (as far as I can tell) was listed and I was able to selectively recover the files and folders that were most important to me, which was a great relief!

Now, before going on and searching for folders worth recovering, I was wondering if it was possible to actually repair/recreate the MFT record or any other damaged parts of the file system to make the volume be normally recognizable/accessible by an OS?

@fzabkar: Here's the partition view of DMDE:

Is that of any help?

If you need more information, I'm happy to provide anything DMDE or R-Studio produce as outputs.

Thanks again.

It appears that you cloned your 2TB partition to a file, and then restored this partition to your physical 3TB drive starting at sector 0. The usual offset for the partition on an MBR system would be sector 63 (for Win XP) or sector 2048 for later Windows OSes.

The solution would be to shift the whole partition by 63 or 2048 sectors, but that would be risky. An alternative would be to edit two bytes in sector 0. This would then turn your HDD into a Super Floppy, ie a drive without a partition table. The changes would be very easy to undo and would not affect your data in any way.

Can you select Mode -> Hexadecimal/Text and show us the contents of sector 0? This should be an NTFS boot sector.

fzabkar wrote:It appears that you cloned your 2TB partition to a file, and then restored this partition to your physical 3TB drive starting at sector 0. The usual offset for the partition on an MBR system would be sector 63 (for Win XP) or sector 2048 for later Windows OSes.

The solution would be to shift the whole partition by 63 or 2048 sectors, but that would be risky. An alternative would be to edit two bytes in sector 0. This would then turn your HDD into a Super Floppy, ie a drive without a partition table. The changes would be very easy to undo and would not affect your data in any way.

Can you select Mode -> Hexadecimal/Text and show us the contents of sector 0? This should be an NTFS boot sector.

I exported the contents of sector 0 using "Tools"-> "Copy sectors":
ëRNTFS ø ? ÿ € € ÿwàè ö No´´ˆ ú3ÀŽÐ¼ |ûhÀhf Ëˆ f> NTFSu´A»ªUÍrûUªu÷Á uéÝ ƒìh ´HŠ ‹ôÍŸƒÄžXrá; uÛ£ Á. Z3Û¹ +Èfÿ ŽÂÿ èK +Èwï¸ »Íf#Àu-fûTCPAu$ùrh»hph fSfSfUh¸faÍ3À¿(¹Øüóªé_f`f¡ f fh fPSh h ´BŠ ‹ôÍfY[ZfYfY‚ fÿ ŽÂÿ u¼faÃ øè ûè ôëý´‹ð¬< t ´» ÍëòÃ
Fehler beim Lesen des Datentr„gers
BOOTMGR fehlt
BOOTMGR komprimiert
Neustart mit Strg+Alt+Entf

Œ±Á× Uª

There is some German text (I presume because my OS is German). It translates to:
Error reading disk
BOOTMGR missing
BOOTMGR compressed
Reboot with Ctrl + Alt + Del

Does that help?

We need to see the hexadecimal data. ZIP the BIN file and attach it to your next post.

Alternatively, if you select Edit -> Export to Text File, then you can paste your sector dump in a code block.

Code:: your sector dump goes in here

fzabkar wrote:Alternatively, if you select Edit -> Export to Text File, then you can paste your sector dump in a code block.

Got it, thanks:

Code:: LBA:0 block: 0 00000000000: EB 52 90 4E 54 46 53 20 20 20 20 00 02 08 00 00 .R.NTFS ..... 00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 08 00 00 ........?....... 00000000020: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00 .........w...... 00000000030: 00 00 0C 00 00 00 00 00 02 00 00 00 00 00 00 00 ................ 00000000040: F6 00 00 00 01 00 00 00 4E 6F 0F B4 7F 0F B4 88 ........No..... 00000000050: 00 00 00 00 FA 33 C0 8E D0 BC 00 7C FB 68 C0 07 .....3.}...|.h.. 00000000060: 1F 1E 68 66 00 CB 88 16 0E 00 66 81 3E 03 00 4E ..hf......f.>..N 00000000070: 54 46 53 75 15 B4 41 BB AA 55 CD 13 72 0C 81 FB TFSu..A..U..r... 00000000080: 55 AA 75 06 F7 C1 01 00 75 03 E9 DD 00 1E 83 EC U.u.....u....... 00000000090: 18 68 1A 00 B4 48 8A 16 0E 00 8B F4 16 1F CD 13 .h...H`...9..... 000000000a0: 9F 83 C4 18 9E 58 1F 72 E1 3B 06 0B 00 75 DB A3 x...~X.r.;...u.. 000000000b0: 0F 00 C1 2E 0F 00 04 1E 5A 33 DB B9 00 20 2B C8 ........Z3... +. 000000000c0: 66 FF 06 11 00 03 16 0F 00 8E C2 FF 06 16 00 E8 f........}...... 000000000d0: 4B 00 2B C8 77 EF B8 00 BB CD 1A 66 23 C0 75 2D K.+.w......f#.u- 000000000e0: 66 81 FB 54 43 50 41 75 24 81 F9 02 01 72 1E 16 f..TCPAu$....r.. 000000000f0: 68 07 BB 16 68 70 0E 16 68 09 00 66 53 66 53 66 h...hp..h .fSfSf 00000000100: 55 16 16 16 68 B8 01 66 61 0E 07 CD 1A 33 C0 BF U...h..fa....3.. 00000000110: 28 10 B9 D8 0F FC F3 AA E9 5F 01 90 90 66 60 1E (........_...f`. 00000000120: 06 66 A1 11 00 66 03 06 1C 00 1E 66 68 00 00 00 .f...f.....fh... 00000000130: 00 66 50 06 53 68 01 00 68 10 00 B4 42 8A 16 0E .fP.Sh..h...B`.. 00000000140: 00 16 1F 8B F4 CD 13 66 59 5B 5A 66 59 66 59 1F ...9...fY[ZfYfY. 00000000150: 0F 82 16 00 66 FF 06 11 00 03 16 0F 00 8E C2 FF ....f........}.. 00000000160: 0E 16 00 75 BC 07 1F 66 61 C3 A0 F8 01 E8 09 00 ...u...fa. ... . 00000000170: A0 FB 01 E8 03 00 F4 EB FD B4 01 8B F0 AC 3C 00 ..........9..<. 00000000180: 74 09 B4 0E BB 07 00 CD 10 EB F2 C3 0D 0A 46 65 t ............Fe 00000000190: 68 6C 65 72 20 62 65 69 6D 20 4C 65 73 65 6E 20 hler beim Lesen 000000001a0: 64 65 73 20 44 61 74 65 6E 74 72 84 67 65 72 73 des Datentr.gers 000000001b0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 66 65 68 6C 74 ...BOOTMGR fehlt 000000001c0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 6B 6F 6D 70 72 ...BOOTMGR kompr 000000001d0: 69 6D 69 65 72 74 00 0D 0A 4E 65 75 73 74 61 72 imiert...Neustar 000000001e0: 74 20 6D 69 74 20 53 74 72 67 2B 41 6C 74 2B 45 t mit Strg+Alt+E 000000001f0: 6E 74 66 0D 0A 00 0A 00 8C B1 C1 D7 00 00 55 AA ntf.....R.....U.

Sector 0 is a Win7/Vista boot sector. Normally sector 0 would contain an MBR.

The Number of "Hidden Sectors" is 2048 (= 0x00000800). This means that the boot sector should be located at sector 2048, not 0.

00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 08 00 00

The size of the volume is 3907024895 (= 0xE8E077FF) sectors.

00000000020: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00

http://www.google.com/search?q=0xE8E077FF+in+decimal

There is a backup boot sector at the end of the volume. You should be able to locate it by selecting ...

Page down to the next sector if necessary. The backup NTFS boot sector should be a copy of sector 0.

We then need to edit the Number of "Hidden Sectors" from 2048 to 0.

00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 00 00 00

You need to select ...

Reboot so that Windows can reexamine the file system. Hopefully the volume will now appear in Explorer. DMDE should also see it differently (the "Indicators" should now be BCF rather than BCx).

If the drive does not appear in Explorer, then it may be that Windows does not know how to handle a Super Floppy on a Fixed Disk. In this case you could try to edit the registry so that the drive appears as a Removable Disk. Alternatively you may be able to check the Removable box in the Properties for the disk in Device Manager. Still another alternative might be to mount the drive by booting to a Ubuntu Live CD.

References:

An Examination of the Windows 7 (and Vista) VBR:
http://thestarman.pcministry.com/asm/mbr/W7VBR.htm

An Examination of the NTFS Volume Boot Record Of Microsoft Windows 2000 and Windows XP:
http://thestarman.pcministry.com/asm/mbr/NTFSBR.htm

I am trying to reactivate this thread since I am finally back at the issue after a few months of other troubles, including other parts of my computer breaking down. I hope you're still here!

I followed fzabkar's suggestion and edited sector 3907024895:

Code:: LBA:3907024895 block: 3 907 024 895 1d1c0effe00: EB 52 90 4E 54 46 53 20 20 20 20 00 02 08 00 00 ëRNTFS ..... 1d1c0effe10: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 00 00 00 .....ø..?.ÿ..... 1d1c0effe20: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00 ....€.€.ÿwàè.... 1d1c0effe30: 00 00 0C 00 00 00 00 00 02 00 00 00 00 00 00 00 ................ 1d1c0effe40: F6 00 00 00 01 00 00 00 4E 6F 0F B4 7F 0F B4 88 ö.......No.´.´ˆ 1d1c0effe50: 00 00 00 00 FA 33 C0 8E D0 BC 00 7C FB 68 C0 07 ....ú3ÀŽÐ¼.|ûhÀ. 1d1c0effe60: 1F 1E 68 66 00 CB 88 16 0E 00 66 81 3E 03 00 4E ..hf.Ëˆ...f>..N 1d1c0effe70: 54 46 53 75 15 B4 41 BB AA 55 CD 13 72 0C 81 FB TFSu.´A»ªUÍ.r.û 1d1c0effe80: 55 AA 75 06 F7 C1 01 00 75 03 E9 DD 00 1E 83 EC Uªu.÷Á..u.éÝ..ƒì 1d1c0effe90: 18 68 1A 00 B4 48 8A 16 0E 00 8B F4 16 1F CD 13 .h..´HŠ...‹ô..Í. 1d1c0effea0: 9F 83 C4 18 9E 58 1F 72 E1 3B 06 0B 00 75 DB A3 ŸƒÄ.žX.rá;...uÛ£ 1d1c0effeb0: 0F 00 C1 2E 0F 00 04 1E 5A 33 DB B9 00 20 2B C8 ..Á.....Z3Û¹. +È 1d1c0effec0: 66 FF 06 11 00 03 16 0F 00 8E C2 FF 06 16 00 E8 fÿ.......ŽÂÿ...è 1d1c0effed0: 4B 00 2B C8 77 EF B8 00 BB CD 1A 66 23 C0 75 2D K.+Èwï¸.»Í.f#Àu- 1d1c0effee0: 66 81 FB 54 43 50 41 75 24 81 F9 02 01 72 1E 16 fûTCPAu$ù..r.. 1d1c0effef0: 68 07 BB 16 68 70 0E 16 68 09 00 66 53 66 53 66 h.».hp..h .fSfSf 1d1c0efff00: 55 16 16 16 68 B8 01 66 61 0E 07 CD 1A 33 C0 BF U...h¸.fa..Í.3À¿ 1d1c0efff10: 28 10 B9 D8 0F FC F3 AA E9 5F 01 90 90 66 60 1E (.¹Ø.üóªé_.f`. 1d1c0efff20: 06 66 A1 11 00 66 03 06 1C 00 1E 66 68 00 00 00 .f¡..f.....fh... 1d1c0efff30: 00 66 50 06 53 68 01 00 68 10 00 B4 42 8A 16 0E .fP.Sh..h..´BŠ.. 1d1c0efff40: 00 16 1F 8B F4 CD 13 66 59 5B 5A 66 59 66 59 1F ...‹ôÍ.fY[ZfYfY. 1d1c0efff50: 0F 82 16 00 66 FF 06 11 00 03 16 0F 00 8E C2 FF .‚..fÿ.......ŽÂÿ 1d1c0efff60: 0E 16 00 75 BC 07 1F 66 61 C3 A0 F8 01 E8 09 00 ...u¼..faÃ ø.è . 1d1c0efff70: A0 FB 01 E8 03 00 F4 EB FD B4 01 8B F0 AC 3C 00 û.è..ôëý´.‹ð¬<. 1d1c0efff80: 74 09 B4 0E BB 07 00 CD 10 EB F2 C3 0D 0A 46 65 t ´.»..Í.ëòÃ..Fe 1d1c0efff90: 68 6C 65 72 20 62 65 69 6D 20 4C 65 73 65 6E 20 hler beim Lesen 1d1c0efffa0: 64 65 73 20 44 61 74 65 6E 74 72 84 67 65 72 73 des Datentr„gers 1d1c0efffb0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 66 65 68 6C 74 ...BOOTMGR fehlt 1d1c0efffc0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 6B 6F 6D 70 72 ...BOOTMGR kompr 1d1c0efffd0: 69 6D 69 65 72 74 00 0D 0A 4E 65 75 73 74 61 72 imiert...Neustar 1d1c0efffe0: 74 20 6D 69 74 20 53 74 72 67 2B 41 6C 74 2B 45 t mit Strg+Alt+E 1d1c0effff0: 6E 74 66 0D 0A 00 0A 00 8C B1 C1 D7 00 00 55 AA ntf.....Œ±Á×..Uª

However, windows is still not able to access the drive "The disk structure is corrupted and unreadable". I have Ubuntu as a second OS on my computer and tried to mount the drive, however:

Code:: nimame@nima-PC:~$ mount /dev/sdh1 mount: /dev/sdh1: No such file or directory

gparted had the following warning:

Code:: ntfs_mst_post_read_fixup_warn: magic: 0x44414142 size: 1024 usa_ofs: 27644 usa_count: 27643: Invalid argument Record 0 has no FILE magic (0x44414142) Failed to load $MFT: Input/output error Failed to mount '/dev/sdh1': Input/output error NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE! The usage of the /f parameter is very IMPORTANT! No modification was made to NTFS by this software. Unable to read the contents of this file system! Because of this some operations may be unavailable. The cause might be a missing software package. The following list of software packages is required for ntfs file system support: ntfsprogs / ntfs-3g.

I now want to try the alternative suggestions:

If the drive does not appear in Explorer, then it may be that Windows does not know how to handle a Super Floppy on a Fixed Disk. In this case you could try to edit the registry so that the drive appears as a Removable Disk.

Can you tell me how exactly I should edit the registry? Which keys/values?

Alternatively you may be able to check the Removable box in the Properties for the disk in Device Manager.

I did not find a "removable box" in the properties for the disk in device manager? Where exactly can I find it?

Anything else I could try?

You need to edit sector 0 in the same way.

Oh, I had done so. Sorry for not mentioning:

Code:: LBA:0 block: 0 00000000000: EB 52 90 4E 54 46 53 20 20 20 20 00 02 08 00 00 ëRNTFS ..... 00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 00 00 00 .....ø..?.ÿ..... 00000000020: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00 ....€.€.ÿwàè.... 00000000030: 00 00 0C 00 00 00 00 00 02 00 00 00 00 00 00 00 ................ 00000000040: F6 00 00 00 01 00 00 00 4E 6F 0F B4 7F 0F B4 88 ö.......No.´.´ˆ 00000000050: 00 00 00 00 FA 33 C0 8E D0 BC 00 7C FB 68 C0 07 ....ú3ÀŽÐ¼.|ûhÀ. 00000000060: 1F 1E 68 66 00 CB 88 16 0E 00 66 81 3E 03 00 4E ..hf.Ëˆ...f>..N 00000000070: 54 46 53 75 15 B4 41 BB AA 55 CD 13 72 0C 81 FB TFSu.´A»ªUÍ.r.û 00000000080: 55 AA 75 06 F7 C1 01 00 75 03 E9 DD 00 1E 83 EC Uªu.÷Á..u.éÝ..ƒì 00000000090: 18 68 1A 00 B4 48 8A 16 0E 00 8B F4 16 1F CD 13 .h..´HŠ...‹ô..Í. 000000000a0: 9F 83 C4 18 9E 58 1F 72 E1 3B 06 0B 00 75 DB A3 ŸƒÄ.žX.rá;...uÛ£ 000000000b0: 0F 00 C1 2E 0F 00 04 1E 5A 33 DB B9 00 20 2B C8 ..Á.....Z3Û¹. +È 000000000c0: 66 FF 06 11 00 03 16 0F 00 8E C2 FF 06 16 00 E8 fÿ.......ŽÂÿ...è 000000000d0: 4B 00 2B C8 77 EF B8 00 BB CD 1A 66 23 C0 75 2D K.+Èwï¸.»Í.f#Àu- 000000000e0: 66 81 FB 54 43 50 41 75 24 81 F9 02 01 72 1E 16 fûTCPAu$ù..r.. 000000000f0: 68 07 BB 16 68 70 0E 16 68 09 00 66 53 66 53 66 h.».hp..h .fSfSf 00000000100: 55 16 16 16 68 B8 01 66 61 0E 07 CD 1A 33 C0 BF U...h¸.fa..Í.3À¿ 00000000110: 28 10 B9 D8 0F FC F3 AA E9 5F 01 90 90 66 60 1E (.¹Ø.üóªé_.f`. 00000000120: 06 66 A1 11 00 66 03 06 1C 00 1E 66 68 00 00 00 .f¡..f.....fh... 00000000130: 00 66 50 06 53 68 01 00 68 10 00 B4 42 8A 16 0E .fP.Sh..h..´BŠ.. 00000000140: 00 16 1F 8B F4 CD 13 66 59 5B 5A 66 59 66 59 1F ...‹ôÍ.fY[ZfYfY. 00000000150: 0F 82 16 00 66 FF 06 11 00 03 16 0F 00 8E C2 FF .‚..fÿ.......ŽÂÿ 00000000160: 0E 16 00 75 BC 07 1F 66 61 C3 A0 F8 01 E8 09 00 ...u¼..faÃ ø.è . 00000000170: A0 FB 01 E8 03 00 F4 EB FD B4 01 8B F0 AC 3C 00 û.è..ôëý´.‹ð¬<. 00000000180: 74 09 B4 0E BB 07 00 CD 10 EB F2 C3 0D 0A 46 65 t ´.»..Í.ëòÃ..Fe 00000000190: 68 6C 65 72 20 62 65 69 6D 20 4C 65 73 65 6E 20 hler beim Lesen 000000001a0: 64 65 73 20 44 61 74 65 6E 74 72 84 67 65 72 73 des Datentr„gers 000000001b0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 66 65 68 6C 74 ...BOOTMGR fehlt 000000001c0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 6B 6F 6D 70 72 ...BOOTMGR kompr 000000001d0: 69 6D 69 65 72 74 00 0D 0A 4E 65 75 73 74 61 72 imiert...Neustar 000000001e0: 74 20 6D 69 74 20 53 74 72 67 2B 41 6C 74 2B 45 t mit Strg+Alt+E 000000001f0: 6E 74 66 0D 0A 00 0A 00 8C B1 C1 D7 00 00 55 AA ntf.....Œ±Á×..Uª

But still Windows says: "The disk structure is corrupted and unreadable"...

It would appear that Windows and TestDisk are interpreting sector 0 as an MBR rather than a boot sector.

I presume that DMDE still sees your data. If so, then there is a way to convert your boot sector into a hybrid boot sector and MBR. Once again I propose to only edit sector 0. Hopefully you have backed up all your data.

Make the following changes to sector 0. This will add a partition table with a single 2TB NTFS partition beginning at sector 0.

Code:: 0000001b0: 00 00 0000001c0: 01 00 07 FE FF FF 00 00 00 00 00 78 E0 E8 00 00 0000001d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000001e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0000001f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA

Reboot after making the changes.

I made the changes you suggested to sector 0:

Code:: LBA:0 block: 0 00000000000: EB 52 90 4E 54 46 53 20 20 20 20 00 02 08 00 00 ëRNTFS ..... 00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 00 00 00 .....ø..?.ÿ..... 00000000020: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00 ....€.€.ÿwàè.... 00000000030: 00 00 0C 00 00 00 00 00 02 00 00 00 00 00 00 00 ................ 00000000040: F6 00 00 00 01 00 00 00 4E 6F 0F B4 7F 0F B4 88 ö.......No.´.´ˆ 00000000050: 00 00 00 00 FA 33 C0 8E D0 BC 00 7C FB 68 C0 07 ....ú3ÀŽÐ¼.|ûhÀ. 00000000060: 1F 1E 68 66 00 CB 88 16 0E 00 66 81 3E 03 00 4E ..hf.Ëˆ...f>..N 00000000070: 54 46 53 75 15 B4 41 BB AA 55 CD 13 72 0C 81 FB TFSu.´A»ªUÍ.r.û 00000000080: 55 AA 75 06 F7 C1 01 00 75 03 E9 DD 00 1E 83 EC Uªu.÷Á..u.éÝ..ƒì 00000000090: 18 68 1A 00 B4 48 8A 16 0E 00 8B F4 16 1F CD 13 .h..´HŠ...‹ô..Í. 000000000a0: 9F 83 C4 18 9E 58 1F 72 E1 3B 06 0B 00 75 DB A3 ŸƒÄ.žX.rá;...uÛ£ 000000000b0: 0F 00 C1 2E 0F 00 04 1E 5A 33 DB B9 00 20 2B C8 ..Á.....Z3Û¹. +È 000000000c0: 66 FF 06 11 00 03 16 0F 00 8E C2 FF 06 16 00 E8 fÿ.......ŽÂÿ...è 000000000d0: 4B 00 2B C8 77 EF B8 00 BB CD 1A 66 23 C0 75 2D K.+Èwï¸.»Í.f#Àu- 000000000e0: 66 81 FB 54 43 50 41 75 24 81 F9 02 01 72 1E 16 fûTCPAu$ù..r.. 000000000f0: 68 07 BB 16 68 70 0E 16 68 09 00 66 53 66 53 66 h.».hp..h .fSfSf 00000000100: 55 16 16 16 68 B8 01 66 61 0E 07 CD 1A 33 C0 BF U...h¸.fa..Í.3À¿ 00000000110: 28 10 B9 D8 0F FC F3 AA E9 5F 01 90 90 66 60 1E (.¹Ø.üóªé_.f`. 00000000120: 06 66 A1 11 00 66 03 06 1C 00 1E 66 68 00 00 00 .f¡..f.....fh... 00000000130: 00 66 50 06 53 68 01 00 68 10 00 B4 42 8A 16 0E .fP.Sh..h..´BŠ.. 00000000140: 00 16 1F 8B F4 CD 13 66 59 5B 5A 66 59 66 59 1F ...‹ôÍ.fY[ZfYfY. 00000000150: 0F 82 16 00 66 FF 06 11 00 03 16 0F 00 8E C2 FF .‚..fÿ.......ŽÂÿ 00000000160: 0E 16 00 75 BC 07 1F 66 61 C3 A0 F8 01 E8 09 00 ...u¼..faÃ ø.è . 00000000170: A0 FB 01 E8 03 00 F4 EB FD B4 01 8B F0 AC 3C 00 û.è..ôëý´.‹ð¬<. 00000000180: 74 09 B4 0E BB 07 00 CD 10 EB F2 C3 0D 0A 46 65 t ´.»..Í.ëòÃ..Fe 00000000190: 68 6C 65 72 20 62 65 69 6D 20 4C 65 73 65 6E 20 hler beim Lesen 000000001a0: 64 65 73 20 44 61 74 65 6E 74 72 84 67 65 72 73 des Datentr„gers 000000001b0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 66 65 68 00 00 ...BOOTMGR feh.. 000000001c0: 01 00 07 FE FF FF 00 00 00 00 00 78 E0 E8 00 00 ...þÿÿ.....xàè.. 000000001d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000001e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000001f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª

However, after rebooting Windows still says: "The disk structure is corrupted and unreadable"...

Also the drive is repeatedly connected/disconnected and the above message shows up automatically.

While this is an interesting discussion, I'm going to have to come out and say what we've all been thinking.

Stop being so cheap and just buy a data recovery program like R-Studio already! You're in Germany, one of the wealthiest countries on earth. I'm certain you can afford it. :lol:

I made the changes you suggested to sector 0:

Code:: LBA:0 block: 0 00000000000: EB 52 90 4E 54 46 53 20 20 20 20 00 02 08 00 00 ëRNTFS ..... 00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 00 00 00 .....ø..?.ÿ..... 00000000020: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00 ....€.€.ÿwàè.... 00000000030: 00 00 0C 00 00 00 00 00 02 00 00 00 00 00 00 00 ................ 00000000040: F6 00 00 00 01 00 00 00 4E 6F 0F B4 7F 0F B4 88 ö.......No.´.´ˆ 00000000050: 00 00 00 00 FA 33 C0 8E D0 BC 00 7C FB 68 C0 07 ....ú3ÀŽÐ¼.|ûhÀ. 00000000060: 1F 1E 68 66 00 CB 88 16 0E 00 66 81 3E 03 00 4E ..hf.Ëˆ...f>..N 00000000070: 54 46 53 75 15 B4 41 BB AA 55 CD 13 72 0C 81 FB TFSu.´A»ªUÍ.r.û 00000000080: 55 AA 75 06 F7 C1 01 00 75 03 E9 DD 00 1E 83 EC Uªu.÷Á..u.éÝ..ƒì 00000000090: 18 68 1A 00 B4 48 8A 16 0E 00 8B F4 16 1F CD 13 .h..´HŠ...‹ô..Í. 000000000a0: 9F 83 C4 18 9E 58 1F 72 E1 3B 06 0B 00 75 DB A3 ŸƒÄ.žX.rá;...uÛ£ 000000000b0: 0F 00 C1 2E 0F 00 04 1E 5A 33 DB B9 00 20 2B C8 ..Á.....Z3Û¹. +È 000000000c0: 66 FF 06 11 00 03 16 0F 00 8E C2 FF 06 16 00 E8 fÿ.......ŽÂÿ...è 000000000d0: 4B 00 2B C8 77 EF B8 00 BB CD 1A 66 23 C0 75 2D K.+Èwï¸.»Í.f#Àu- 000000000e0: 66 81 FB 54 43 50 41 75 24 81 F9 02 01 72 1E 16 fûTCPAu$ù..r.. 000000000f0: 68 07 BB 16 68 70 0E 16 68 09 00 66 53 66 53 66 h.».hp..h .fSfSf 00000000100: 55 16 16 16 68 B8 01 66 61 0E 07 CD 1A 33 C0 BF U...h¸.fa..Í.3À¿ 00000000110: 28 10 B9 D8 0F FC F3 AA E9 5F 01 90 90 66 60 1E (.¹Ø.üóªé_.f`. 00000000120: 06 66 A1 11 00 66 03 06 1C 00 1E 66 68 00 00 00 .f¡..f.....fh... 00000000130: 00 66 50 06 53 68 01 00 68 10 00 B4 42 8A 16 0E .fP.Sh..h..´BŠ.. 00000000140: 00 16 1F 8B F4 CD 13 66 59 5B 5A 66 59 66 59 1F ...‹ôÍ.fY[ZfYfY. 00000000150: 0F 82 16 00 66 FF 06 11 00 03 16 0F 00 8E C2 FF .‚..fÿ.......ŽÂÿ 00000000160: 0E 16 00 75 BC 07 1F 66 61 C3 A0 F8 01 E8 09 00 ...u¼..faÃ ø.è . 00000000170: A0 FB 01 E8 03 00 F4 EB FD B4 01 8B F0 AC 3C 00 û.è..ôëý´.‹ð¬<. 00000000180: 74 09 B4 0E BB 07 00 CD 10 EB F2 C3 0D 0A 46 65 t ´.»..Í.ëòÃ..Fe 00000000190: 68 6C 65 72 20 62 65 69 6D 20 4C 65 73 65 6E 20 hler beim Lesen 000000001a0: 64 65 73 20 44 61 74 65 6E 74 72 84 67 65 72 73 des Datentr„gers 000000001b0: 00 0D 0A 42 4F 4F 54 4D 47 52 20 66 65 68 00 00 ...BOOTMGR feh.. 000000001c0: 01 00 07 FE FF FF 00 00 00 00 00 78 E0 E8 00 00 ...þÿÿ.....xàè.. 000000001d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000001e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 000000001f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª

However, after rebooting Windows still says: "The disk structure is corrupted and unreadable"...

Also the drive is repeatedly connected/disconnected and the above message shows up automatically.

All personal data lost

All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost

Re: All personal data lost