Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

How can I find the last files written to my hard drive?

February 24th, 2016, 15:57

I have two possibly 3 drives that were corrupted by the GigaByte BIOS bug. I want to know if the files are corrupted and I would think the ones that are at the very end are the most likely. If I can find out what they are I can access them in Linux and see if they're OK.

Re: How can I find the last files written to my hard drive?

February 24th, 2016, 18:00

Are you referring to the bug described here: http://malthus.mooo.com/viewtopic.php?t=150
Where it sets an HPA and stupidly reduces the size of the LBA by 1Tb?

If so, I'd be looking for corruption right around the beginning of the HPA that it set (after you disable the HPA and reset the LBA that is). That's where I'd assume the BIOS backed itself up to. Either there or the end of the drive. So if it's a 3Tb drive, I'd be checking files right near the 2Tb mark to see if they were overwritten first.

Re: How can I find the last files written to my hard drive?

February 25th, 2016, 15:57

Thanks. Now I have another weirdness the old 3TB WD30EZRX and the new one WD30EFRX are only showing around 800GB. I've attached screen captures of the DMDE partition scan reports.
Attachments
WD30EZRX_DMDE_2016_02_25.jpg
WD30EFRX_DMDE_2016_02_24_1.jpg
ST4000VN000_DMDE_2016_02_24.jpg

Re: How can I find the last files written to my hard drive?

February 25th, 2016, 16:13

Your SATA driver appears to have a 32-bit LBA limitation. This could be because you have changed the SATA controller mode (AHCI/IDE/RAID), or it could be that you have reverted to Microsoft's driver. The fix is to switch to AHCI mode and update the driver.

3TB - 2TiB = 800GB
4TB - 2TiB = 1.8TB

http://www.google.com.au/search?q=3TB+-+2TiB+in+GB
http://www.google.com.au/search?q=4TB+-+2TiB+in+TB

Re: How can I find the last files written to my hard drive?

March 2nd, 2016, 13:41

The problem went away when I reinstalled Paragon GPT Loader. Am I correct in my thinking since the 3TB and 4TB were over-written in different places if I use Beyond Compare 3 and both drives are the same that there aren't any files corrupted by the GigaByte BIOS bug?

Re: How can I find the last files written to my hard drive?

March 2nd, 2016, 17:02

CheckMarc wrote:Am I correct in my thinking since the 3TB and 4TB were over-written in different places if I use Beyond Compare 3 and both drives are the same that there aren't any files corrupted by the GigaByte BIOS bug?

Sounds plausible to me, assuming that it is a byte-by-byte comparison.
Post a reply