MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 6 posts ] 
Author Message
 Post subject: 2gb memory stick file corruption
PostPosted: August 20th, 2010, 6:56 
Offline

Joined: January 8th, 2008, 5:21
Posts: 927
Location: uk
Has anybody any idea what might of caused this?
In R studio correctly identifies the manufacturer and model with a 2gb fat32 partition.
Approximately 60% is used.

In Windows explorer the drive is incorrectly identified as 10gb with about 60% used and also shows 10gb in administative tools but the partition size under administative tools shows correctly as 2gb.

Device manager shows:
USBSTOR\DISK&VEN_UDISK&PROD_PDU10_2G_97I2.0&REV_0.00\0000000000003D&0

Access to files and folders is impossible using windows explorer but it is possible to scan and recover the files and folders but much data is missing. Other files and folders are repeated many times.

I don't think this is a chinese hacked drive!

Attachment:
2gb memory stick.JPG
2gb memory stick.JPG [ 100.84 KiB | Viewed 9360 times ]


Top
 Profile  
 
 Post subject: Re: 2gb memory stick file corruption
PostPosted: August 20th, 2010, 10:57 
Offline
User avatar

Joined: July 12th, 2010, 4:38
Posts: 1451
Location: Portugal
Try to use Linux, to see if you can read it rigth.

_________________
http://www.pclab.com.pt facebook.com/PCLAB.A.T
ACELab partner


Top
 Profile  
 
 Post subject: Re: 2gb memory stick file corruption
PostPosted: August 20th, 2010, 12:53 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2821
Location: Kuwait
i suggest to try the memory card recovery appz and see
most of them are fat not ntfs and see

or

Stellar recovery recommended in this case

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: 2gb memory stick file corruption
PostPosted: August 21st, 2010, 3:44 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16963
Location: Australia
Can we see the partition table and boot sector?
http://www.users.on.net/~fzabkar/SecInspect.zip

Extract the above archive to the one folder and execute the SIrun.bat file. The procedure will generate a report file named SIout.txt.

You might also want to see how Microsoft's UVCView identifies the pen drive:
http://www.users.on.net/~fzabkar/USB_ID ... ew.x86.exe


Top
 Profile  
 
 Post subject: Re: 2gb memory stick file corruption
PostPosted: August 25th, 2010, 15:16 
Offline

Joined: January 8th, 2008, 5:21
Posts: 927
Location: uk
Hi fzabkar, Sorry for the delay in getting back.
I did manage to recover all the data.
I used R Studio but it was no good. Then tried Dmde and still no good.
Then I tried Get data back for fat and voila. All files and folders recovered with correct names and structures.

Here is the partition information from the secinspect tool:

===========================================================================
Target - \\.\PHYSICALDRIVE1
245 Cylinders
255 Heads
63 Sectors Per Track
512 BytesPerSector
11 MediaType

===========================================================================
Master Boot Record
===========================================================================
| B | FS TYPE | START | END | | |
| F | (hex) | C H S| C H S| RELATIVE | TOTAL |
===========================================================================
| | 72 | 357 116 40| 357 32 45| 1851877732| 1141521919|
| | 67 | 304 251 43| 367 114 51| 1242431346| 1936028240|
| | 79 | 366 32 41| 357 32 43| 1869881593| 2137354800|
| | 0d | 380 97 50| 0 10 0| 2921857028| 312531147|
===========================================================================
Disk Signature 0x6f20736b



LBN 0 [C 0, H 0, S 1]

0x0000 eb 58 90 4d 53 44 4f 53-35 2e 30 00 02 08 26 00 ëXMSDOS5.0...&.
0x0010 02 00 00 00 20 f8 00 00-3f 00 ff 00 00 00 00 00 .... ø..?.ÿ.....
0x0020 d0 3f 3c 00 09 4f 40 00-00 00 00 00 02 00 00 00 Ð?<..O@.........
0x0030 21 20 16 20 01 00 00 80-00 00 00 00 00 20 00 00 !  ...€..... ..
0x0040 80 00 6b 5e da f6 98 4e-4f 20 4e 41 4d 55 20 21 €.k^Úö˜NO NAMU !
0x0050 20 28 46 41 54 33 32 20-20 20 33 c9 8e d1 bc f4 (FAT32 3ɎѼô
0x0060 7b 8e c1 8e d9 bd 00 7e-88 4e 02 8a 56 40 b4 08 {ŽÁŽÙ½.~ˆN.ŠV@´.
0x0070 cd 13 73 05 b9 ff ff 8a-f1 66 0f b6 c7 40 66 0f Ís.¹ÿÿŠñf.¶Ç@f.
0x0080 b6 d1 80 e2 3f ff e2 86-cd c0 ed 06 61 66 0f b7 ¶Ñ€â?ÿâ†ÍÀí.af.·
0x0090 c9 66 f7 f1 66 89 46 f8-83 7e 16 00 75 38 83 7e Éf÷ñf‰Føƒ~.u8ƒ~
0x00a0 2a 00 77 32 6e cf 66 1c-66 87 c8 2c bb 08 80 b9 *.w2nÏff‡È,».€¹
0x00b0 01 00 e8 2b 00 e9 48 03-a0 fa 7d b4 7d 8b f0 ac ..è+.éH. ú}´}‹ð¬
0x00c0 84 c0 74 17 3c ff 74 09-b4 0e bb 0f 00 cd 10 eb „Àt<ÿt.´.»..Íë
0x00d0 fe ba fb 7d eb e7 a0 f9-7d eb e0 98 cd 96 cd 59 þºû}ëç ù}ëà˜Í–ÍY
0x00e0 66 60 6e 7b 46 f8 0f 8a-4a 00 66 6a 00 66 50 06 f`n{Fø.ŠJ.fj.fP.
0x00f0 53 e6 e8 30 00 01 00 80-7e 16 00 0f 85 28 00 b4 Sæè0...€~..…(.´
0x0100 41 bb aa 55 8a 56 60 cd-33 0f a2 1c 20 81 fb 55 A»ªUŠV`Í3.¢ ûU
0x0110 aa 0f 85 14 00 f6 c1 01-0f 84 0d 00 fe 46 02 b4 ª.….öÁ..„..þF.´
0x0120 42 8a 56 50 9b f4 cd 13-b0 f9 e6 58 66 58 66 58 BŠVP›ôͰùæXfXfX
0x0130 66 58 eb 2a 66 33 d2 66-0f b7 4e 18 66 f7 f1 fe fXë*f3Òf.·Nf÷ñþ
0x0140 c2 8a ca 66 8b d0 66 c1-ea 10 f7 76 1a 86 d6 8a ŠÊf‹ÐfÁê÷v†ÖŠ
0x0150 56 40 8a e8 c0 e4 06 0a-cc b8 01 02 cd 13 66 61 V@ŠèÀä..̸..Ífa
0x0160 0f 82 54 ff 81 c3 00 02-66 40 49 0f 85 71 ff c3 .‚TÿÃ..f@I.…qÿÃ
0x0170 4e 54 4c 44 52 20 20 20-20 20 20 00 00 00 00 20 NTLDR ....
0x0180 00 00 04 00 00 00 00 00-00 00 00 08 10 00 00 00 ...............
0x0190 02 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
0x01a0 00 00 00 00 00 00 00 04-00 00 00 20 0d 0a 52 65 ........... ..Re
0x01b0 6d 6f 76 6d 20 64 69 73-6b 73 20 6f 72 20 6f 74 movm disks or ot
0x01c0 68 65 72 20 6d 65 64 69-61 6e ff 3d 0a 44 69 fb her medianÿ=.Diû
0x01d0 6b 30 67 72 73 6f 72 ff-0d 4a 50 72 65 73 73 20 k0grsorÿ.JPress
0x01e0 69 6e 79 20 6b 65 f9 20-74 6f 30 72 65 7f 77 61 iny keù to0rewa
0x01f0 72 7c 0d 0a 00 00 04 00-28 ae cb d8 a0 12 55 aa r|......(®ËØ Uª


Top
 Profile  
 
 Post subject: Re: 2gb memory stick file corruption
PostPosted: August 25th, 2010, 20:49 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16963
Location: Australia
Your memory stick is formatted as a superfloppy rather than as a hard drive, ie the first sector is a boot sector rather than an MBR. Maybe that's why R-Studio and DMDE had trouble with it ??? In any case, Sector Inspector assumed it was an MBR and analysed it accordingly (and therefore incorrectly).

That said, I would question whether your files are intact. The boot sector is clearly corrupted, and the type of corruption would suggest a hardware failure of some kind.

For example, the text string, "NO NAMU !", should be "NO NAME<space><space>". Similarly, "Removm disks" should be "Remove disks", and "Diûk0grsor" should be "Disk error", and "Press iny keù to0rewar|" should be "Press any key to restart".

These errors appear to be random, and they affect several bits.

I would suggest that, if you have any text files, open them in an editor and check them for errors.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 6 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 27 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group