MultiDrive – free backup, clone & wipe disk utility from Atola Technology

All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 14 posts ] 
Author Message
 Post subject: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 24th, 2013, 1:20 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
I have an XP box with two 160GB PATA HDD's that are formatted with several NTFS partitions. Recently I had to manually force my computer to power off after it hung at the shut down screen. The HDD indicated that there was no drive activity at the time but just as the computer powered off, an error message was reported.

Later when I powered the computer back up, disk access was slow and the 1st HDD which contains the OS reached the boot screen but didn't progress much farther. I was able to boot it up via Safe Mode but that is now no longer the case. I booted up a Linux Live CD and used G-Parted to check the partitions, it reported that some of the partitions on the 1st HDD were now "unallocated" and that the 2nd HDD was completely unallocated.

I ran TestDisk and PhotoRec because both had been quite helpful during past situations with HDD corruption and they didn't find a thing on the 2nd HDD. Since then, I have tried several DR programs including R-Studio and most them will detect the 2nd HDD but none of them are able to see the partitions and the data. Every scan just reports an unallocated partition with no partitions or files located.

Can anyone shed any light on what has happened here and if it is possible to recover the partitions please? I'd really appreciate any pointers you can offer.


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 24th, 2013, 2:33 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1740
Location: Verona, Italy
Probably there are bad sectors.
Do not continue to insist with all these programs or things may go worse, you should make a clone of these hdd on new drives and only then use programs like R-studio on clones for data recovery.
Did you check SMART status?
I think you will see a lot of reallocated sectors or pending sectors in smart status, you can use MHDD to check it (F8 button in mhdd) and do a pic of the screen to post here.

http://hddguru.com/software/2005.10.02-MHDD/

Download mhdd ISO and write it on a CD to boot computer in DOS

_________________
My firmware database:
https://mega.nz/folder/O01DkBRI


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 25th, 2013, 20:03 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
Thanks for the reply and the advice. I checked SMART and everything appeared to be fine. I'll check the status again, just to be on the safe side. I will run MHDD and post the results for evaluation. Thanks again.


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 25th, 2013, 21:26 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
Here's a screen shot from MHDD.


Attachments:
SDC11432.JPG
SDC11432.JPG [ 437.47 KiB | Viewed 8125 times ]
Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 4:46 
Offline

Joined: December 5th, 2011, 5:38
Posts: 1740
Location: Verona, Italy
Smart status seems good to me.
Did you try to do surface scan in mhdd? (F4 button twice)
If yes, have you seen some bad sectors?

_________________
My firmware database:
https://mega.nz/folder/O01DkBRI


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 13:09 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
I pressed F4 twice and performed a surface scan. I couldn't see any warnings but here's a screen shot of the results, just in case I've missed something.


Attachments:
SDC11434.JPG
SDC11434.JPG [ 410.62 KiB | Viewed 8054 times ]
Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 13:53 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
Any encryption of any kind used?

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 14:00 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
No, none has ever been used in the history of the computer.


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 14:29 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
Whatever software you ran, R-Studio and such, did the scanning process complete? And there were no issues during the scanning process?

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 17:01 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Could we see the contents of sector 0 in hexadecimal mode?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 17:56 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
I ran most of the DR programs right to the very end and none of them reported anything untoward (in terms of read errors) during the scans.

Can you instruct me on how to display sector 0 in hex mode? I've read the user guide for MHDD but I'm still finding my around.


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 18:24 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
You could use MHDD's TOF command to read sectors to a file.

Alternatively, if you can work in Windows, then HxD and DMDE are two freeware disc editors.

Still another way would be to capture the partition table and boot sector with Microsoft's Sector Inspector:
http://www.users.on.net/~fzabkar/SecInspect.zip

If you extract the above archive to the one folder and execute the SIrun.bat file, then this will generate a report file named SIout.txt.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 26th, 2013, 19:35 
Offline

Joined: September 23rd, 2013, 20:13
Posts: 8
Location: London, UK
Thanks for that. I've attached a report from Sector Inspector and in order to avoid any confusion, I've removed the reports relating to other drives that are not relevant to this issue.


Attachments:
SIout.txt [3.72 KiB]
Downloaded 462 times
Top
 Profile  
 
 Post subject: Re: Multiple PATA HDD NTFS Partitions Vanished "Unallocated"
PostPosted: September 27th, 2013, 2:04 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia
Sector 0 has no MBR code and no partition table. However it does have a unique disk signature (8a a9 8a a9) and the "55 aa" bytes that validate the sector. This explains why the drive is being reported as totally unallocated.

The next thing to do is to examine sectors 63 and 2048. These are the typical locations for the boot sector of the first partition in XP and post-XP Windows versions. You could use HxD or DMDE for this purpose.

If these sectors are empty, then scroll down through the drive. Hopefully you will find some non-zero sectors.

_________________
A backup a day keeps DR away.


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 14 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 60 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group