View topic - All personal data lost

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

All personal data lost

Page 1 of 2

[ 29 posts ]

Go to page 1, 2 Next

Previous topic | Next topic

Author

Message

nimame

Post subject: All personal data lost

Posted: December 31st, 2015, 8:21

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

Hello,

I have a serious data loss problem and hope that someone can help!

Situation: My 2 TB hard drive (HD501LJ) with all my personal data was suddenly not accessible anymore by Windows. So my first reaction was to use EaseUs Todo Backup to create a partition backup on a different drive. I tried to recreate the partition on the original drive after formatting, but that didn't work, because it said the space was insufficient. (I know, formatting the original drive was a terrible idea...) So I got a 3 TB drive (WD30EZRX) and recreated the partition on that drive. However, the drive was still not accessible by Windows. I used a demo versions of recovery tools to scan the drive, and some of them listed files from the drive, so I assume recovery is possible. But for the actual recovery, all of them required to purchase the full version.

Goal: The best result would be to repair the files system, so I could access it normally again. If that doesn't work, my goal would be to recover as many files as possible with the original folder structure. There were a lot of files on that drive (documents, pictures, music, video, etc.), and organizing them again into folders would cost me weeks. A solution that takes a smaller amount of expert knowledge would be preferable.

Diagnostics:

Attachment:

R-Studio-Screenshot.PNG [ 66.14 KiB | Viewed 15691 times ]

Any other information required?

Possible actions:

1. Buy a commercial recovery software tool, e. g.:

Which tool is best for my situation?

2. Any other commercial/free software you would recommend?[/list]

3. Bring my drive to a professional data recovery lab

4. Other options?

I would greatly appreciate any advice by someone who has experience with these types of issues on what my best option is. I already spent hours with this, so I hope someone can finally help me to solve this problem.

Thanks a lot!

Attachments:

r-studio.log [25.16 KiB]
Downloaded 817 times

Top

unknown

Post subject: Re: All personal data lost

Posted: January 2nd, 2016, 7:52

Joined: October 21st, 2007, 8:48
Posts: 1712

Go for R-Studio.

Top

dick

Post subject: Re: All personal data lost

Posted: January 2nd, 2016, 9:07

Joined: January 8th, 2008, 5:21
Posts: 927
Location: uk

The free version of Dmde will allow you to scan for partitions and carry out repairs. Also it will backup partition info etc.

Top

galaxy

Post subject: Re: All personal data lost

Posted: January 2nd, 2016, 10:18

Joined: January 31st, 2014, 8:46
Posts: 242
Location: India

http://www.diskgetor.com/ use its very fast processing

Top

galaxy

Post subject: Re: All personal data lost

Posted: January 2nd, 2016, 10:19

Joined: January 31st, 2014, 8:46
Posts: 242
Location: India

http://www.p30day.com/%D8%A8%D8%B1%D9%8 ... 13154.html

Top

fzabkar

Post subject: Re: All personal data lost

Posted: January 2nd, 2016, 15:04

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia

It appears that EaseUs cloned your partition or physical drive to a file. It also appears to have prefixed this file with 7.84MB of header information.

ISTM that there may still be an easy solution using freeware. I would examine the 3TB drive with a disc editor, eg DMDE.

Can you show us DMDE's Partitions window?

_________________
A backup a day keeps DR away.

Top

HDD Spaz

Post subject: Re: All personal data lost

Posted: January 3rd, 2016, 5:47

Joined: October 13th, 2008, 7:29
Posts: 1493

why does your 2 TB hard drive have a model number of a 500 GB Samsung?

Top

nimame

Post subject: Re: All personal data lost

Posted: January 9th, 2016, 21:46

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

Apparently I had email notifications turned off, so I found your answers only today after checking back on my post... thanks a lot for your help!

As Spildit suggested, I have indeed mixed up the model numbers in my question. The following is correct:

HD51LJ - 500 GB
HD204UI - 2TB

I have tried the free editions of R-Studio and DMDE which both seem to be great tools for working with damaged drives. I went on with DMDE and did a full scan. Then the whole folder structure (as far as I can tell) was listed and I was able to selectively recover the files and folders that were most important to me, which was a great relief!

Now, before going on and searching for folders worth recovering, I was wondering if it was possible to actually repair/recreate the MFT record or any other damaged parts of the file system to make the volume be normally recognizable/accessible by an OS?

@fzabkar: Here's the partition view of DMDE:

Attachment:

DMDE partition view.PNG [ 23.5 KiB | Viewed 15442 times ]

Is that of any help?

If you need more information, I'm happy to provide anything DMDE or R-Studio produce as outputs.

Thanks again.

Top

fzabkar

Post subject: Re: All personal data lost

Posted: January 10th, 2016, 20:57

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia

It appears that you cloned your 2TB partition to a file, and then restored this partition to your physical 3TB drive starting at sector 0. The usual offset for the partition on an MBR system would be sector 63 (for Win XP) or sector 2048 for later Windows OSes.

The solution would be to shift the whole partition by 63 or 2048 sectors, but that would be risky. An alternative would be to edit two bytes in sector 0. This would then turn your HDD into a Super Floppy, ie a drive without a partition table. The changes would be very easy to undo and would not affect your data in any way.

Can you select Mode -> Hexadecimal/Text and show us the contents of sector 0? This should be an NTFS boot sector.

_________________
A backup a day keeps DR away.

Top

nimame

Post subject: Re: All personal data lost

Posted: January 13th, 2016, 19:28

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

fzabkar wrote:

I exported the contents of sector 0 using "Tools"-> "Copy sectors":
ëRNTFS ø ? ÿ € € ÿwàè ö No´´ˆ ú3ÀŽÐ¼ |ûhÀhf Ëˆ f> NTFSu´A»ªUÍrûUªu÷Á uéÝ ƒìh ´HŠ ‹ôÍŸƒÄžXrá; uÛ£ Á. Z3Û¹ +Èfÿ ŽÂÿ èK +Èwï¸ »Íf#Àu-fûTCPAu$ùrh»hph fSfSfUh¸faÍ3À¿(¹Øüóªé_f`f¡ f fh fPSh h ´BŠ ‹ôÍfY[ZfYfY‚ fÿ ŽÂÿ u¼faÃ øè ûè ôëý´‹ð¬< t ´» ÍëòÃ
Fehler beim Lesen des Datentr„gers
BOOTMGR fehlt
BOOTMGR komprimiert
Neustart mit Strg+Alt+Entf

Œ±Á× Uª

There is some German text (I presume because my OS is German). It translates to:
Error reading disk
BOOTMGR missing
BOOTMGR compressed
Reboot with Ctrl + Alt + Del

Does that help?

Top

fzabkar

Post subject: Re: All personal data lost

Posted: January 13th, 2016, 20:24

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia

We need to see the hexadecimal data. ZIP the BIN file and attach it to your next post.

Alternatively, if you select Edit -> Export to Text File, then you can paste your sector dump in a code block.

Code:

your sector dump goes in here

_________________
A backup a day keeps DR away.

Top

nimame

Post subject: Re: All personal data lost

Posted: January 14th, 2016, 3:42

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

fzabkar wrote:

Alternatively, if you select Edit -> Export to Text File, then you can paste your sector dump in a code block.

Got it, thanks:

Code:

 LBA:0                  block: 0
 00000000000: EB 52 90 4E 54 46 53 20  20 20 20 00 02 08 00 00  .R.NTFS    .....
 00000000010: 00 00 00 00 00 F8 00 00  3F 00 FF 00 00 08 00 00  ........?.......
 00000000020: 00 00 00 00 80 00 80 00  FF 77 E0 E8 00 00 00 00  .........w......
 00000000030: 00 00 0C 00 00 00 00 00  02 00 00 00 00 00 00 00  ................
 00000000040: F6 00 00 00 01 00 00 00  4E 6F 0F B4 7F 0F B4 88  ........No.....
 00000000050: 00 00 00 00 FA 33 C0 8E  D0 BC 00 7C FB 68 C0 07  .....3.}...|.h..
 00000000060: 1F 1E 68 66 00 CB 88 16  0E 00 66 81 3E 03 00 4E  ..hf......f.>..N
 00000000070: 54 46 53 75 15 B4 41 BB  AA 55 CD 13 72 0C 81 FB  TFSu..A..U..r...
 00000000080: 55 AA 75 06 F7 C1 01 00  75 03 E9 DD 00 1E 83 EC  U.u.....u.......
 00000000090: 18 68 1A 00 B4 48 8A 16  0E 00 8B F4 16 1F CD 13  .h...H`...9.....
 000000000a0: 9F 83 C4 18 9E 58 1F 72  E1 3B 06 0B 00 75 DB A3  x...~X.r.;...u..
 000000000b0: 0F 00 C1 2E 0F 00 04 1E  5A 33 DB B9 00 20 2B C8  ........Z3... +.
 000000000c0: 66 FF 06 11 00 03 16 0F  00 8E C2 FF 06 16 00 E8  f........}......
 000000000d0: 4B 00 2B C8 77 EF B8 00  BB CD 1A 66 23 C0 75 2D  K.+.w......f#.u-
 000000000e0: 66 81 FB 54 43 50 41 75  24 81 F9 02 01 72 1E 16  f..TCPAu$....r..
 000000000f0: 68 07 BB 16 68 70 0E 16  68 09 00 66 53 66 53 66  h...hp..h .fSfSf
 00000000100: 55 16 16 16 68 B8 01 66  61 0E 07 CD 1A 33 C0 BF  U...h..fa....3..
 00000000110: 28 10 B9 D8 0F FC F3 AA  E9 5F 01 90 90 66 60 1E  (........_...f`.
 00000000120: 06 66 A1 11 00 66 03 06  1C 00 1E 66 68 00 00 00  .f...f.....fh...
 00000000130: 00 66 50 06 53 68 01 00  68 10 00 B4 42 8A 16 0E  .fP.Sh..h...B`..
 00000000140: 00 16 1F 8B F4 CD 13 66  59 5B 5A 66 59 66 59 1F  ...9...fY[ZfYfY.
 00000000150: 0F 82 16 00 66 FF 06 11  00 03 16 0F 00 8E C2 FF  ....f........}..
 00000000160: 0E 16 00 75 BC 07 1F 66  61 C3 A0 F8 01 E8 09 00  ...u...fa. ... .
 00000000170: A0 FB 01 E8 03 00 F4 EB  FD B4 01 8B F0 AC 3C 00   ..........9..<.
 00000000180: 74 09 B4 0E BB 07 00 CD  10 EB F2 C3 0D 0A 46 65  t ............Fe
 00000000190: 68 6C 65 72 20 62 65 69  6D 20 4C 65 73 65 6E 20  hler beim Lesen
 000000001a0: 64 65 73 20 44 61 74 65  6E 74 72 84 67 65 72 73  des Datentr.gers
 000000001b0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 66 65 68 6C 74  ...BOOTMGR fehlt
 000000001c0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 6B 6F 6D 70 72  ...BOOTMGR kompr
 000000001d0: 69 6D 69 65 72 74 00 0D  0A 4E 65 75 73 74 61 72  imiert...Neustar
 000000001e0: 74 20 6D 69 74 20 53 74  72 67 2B 41 6C 74 2B 45  t mit Strg+Alt+E
 000000001f0: 6E 74 66 0D 0A 00 0A 00  8C B1 C1 D7 00 00 55 AA  ntf.....R.....U.

Top

fzabkar

Post subject: Re: All personal data lost

Posted: January 14th, 2016, 5:13

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia

Sector 0 is a Win7/Vista boot sector. Normally sector 0 would contain an MBR.

The Number of "Hidden Sectors" is 2048 (= 0x00000800). This means that the boot sector should be located at sector 2048, not 0.

Quote:

00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 08 00 00

The size of the volume is 3907024895 (= 0xE8E077FF) sectors.

Quote:

00000000020: 00 00 00 00 80 00 80 00 FF 77 E0 E8 00 00 00 00

http://www.google.com/search?q=0xE8E077FF+in+decimal

There is a backup boot sector at the end of the volume. You should be able to locate it by selecting ...

Page down to the next sector if necessary. The backup NTFS boot sector should be a copy of sector 0.

We then need to edit the Number of "Hidden Sectors" from 2048 to 0.

Quote:

00000000010: 00 00 00 00 00 F8 00 00 3F 00 FF 00 00 00 00 00

You need to select ...

Reboot so that Windows can reexamine the file system. Hopefully the volume will now appear in Explorer. DMDE should also see it differently (the "Indicators" should now be BCF rather than BCx).

If the drive does not appear in Explorer, then it may be that Windows does not know how to handle a Super Floppy on a Fixed Disk. In this case you could try to edit the registry so that the drive appears as a Removable Disk. Alternatively you may be able to check the Removable box in the Properties for the disk in Device Manager. Still another alternative might be to mount the drive by booting to a Ubuntu Live CD.

References:

An Examination of the Windows 7 (and Vista) VBR:
http://thestarman.pcministry.com/asm/mbr/W7VBR.htm

An Examination of the NTFS Volume Boot Record Of Microsoft Windows 2000 and Windows XP:
http://thestarman.pcministry.com/asm/mbr/NTFSBR.htm

_________________
A backup a day keeps DR away.

Top

nimame

Post subject: Re: All personal data lost

Posted: April 9th, 2016, 6:31

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

I am trying to reactivate this thread since I am finally back at the issue after a few months of other troubles, including other parts of my computer breaking down. I hope you're still here!

I followed fzabkar's suggestion and edited sector 3907024895:

Code:

 LBA:3907024895         block: 3 907 024 895
 1d1c0effe00: EB 52 90 4E 54 46 53 20  20 20 20 00 02 08 00 00  ëRNTFS    .....
 1d1c0effe10: 00 00 00 00 00 F8 00 00  3F 00 FF 00 00 00 00 00  .....ø..?.ÿ.....
 1d1c0effe20: 00 00 00 00 80 00 80 00  FF 77 E0 E8 00 00 00 00  ....€.€.ÿwàè....
 1d1c0effe30: 00 00 0C 00 00 00 00 00  02 00 00 00 00 00 00 00  ................
 1d1c0effe40: F6 00 00 00 01 00 00 00  4E 6F 0F B4 7F 0F B4 88  ö.......No.´.´ˆ
 1d1c0effe50: 00 00 00 00 FA 33 C0 8E  D0 BC 00 7C FB 68 C0 07  ....ú3ÀŽÐ¼.|ûhÀ.
 1d1c0effe60: 1F 1E 68 66 00 CB 88 16  0E 00 66 81 3E 03 00 4E  ..hf.Ëˆ...f>..N
 1d1c0effe70: 54 46 53 75 15 B4 41 BB  AA 55 CD 13 72 0C 81 FB  TFSu.´A»ªUÍ.r.û
 1d1c0effe80: 55 AA 75 06 F7 C1 01 00  75 03 E9 DD 00 1E 83 EC  Uªu.÷Á..u.éÝ..ƒì
 1d1c0effe90: 18 68 1A 00 B4 48 8A 16  0E 00 8B F4 16 1F CD 13  .h..´HŠ...‹ô..Í.
 1d1c0effea0: 9F 83 C4 18 9E 58 1F 72  E1 3B 06 0B 00 75 DB A3  ŸƒÄ.žX.rá;...uÛ£
 1d1c0effeb0: 0F 00 C1 2E 0F 00 04 1E  5A 33 DB B9 00 20 2B C8  ..Á.....Z3Û¹. +È
 1d1c0effec0: 66 FF 06 11 00 03 16 0F  00 8E C2 FF 06 16 00 E8  fÿ.......ŽÂÿ...è
 1d1c0effed0: 4B 00 2B C8 77 EF B8 00  BB CD 1A 66 23 C0 75 2D  K.+Èwï¸.»Í.f#Àu-
 1d1c0effee0: 66 81 FB 54 43 50 41 75  24 81 F9 02 01 72 1E 16  fûTCPAu$ù..r..
 1d1c0effef0: 68 07 BB 16 68 70 0E 16  68 09 00 66 53 66 53 66  h.».hp..h .fSfSf
 1d1c0efff00: 55 16 16 16 68 B8 01 66  61 0E 07 CD 1A 33 C0 BF  U...h¸.fa..Í.3À¿
 1d1c0efff10: 28 10 B9 D8 0F FC F3 AA  E9 5F 01 90 90 66 60 1E  (.¹Ø.üóªé_.f`.
 1d1c0efff20: 06 66 A1 11 00 66 03 06  1C 00 1E 66 68 00 00 00  .f¡..f.....fh...
 1d1c0efff30: 00 66 50 06 53 68 01 00  68 10 00 B4 42 8A 16 0E  .fP.Sh..h..´BŠ..
 1d1c0efff40: 00 16 1F 8B F4 CD 13 66  59 5B 5A 66 59 66 59 1F  ...‹ôÍ.fY[ZfYfY.
 1d1c0efff50: 0F 82 16 00 66 FF 06 11  00 03 16 0F 00 8E C2 FF  .‚..fÿ.......ŽÂÿ
 1d1c0efff60: 0E 16 00 75 BC 07 1F 66  61 C3 A0 F8 01 E8 09 00  ...u¼..faÃ ø.è .
 1d1c0efff70: A0 FB 01 E8 03 00 F4 EB  FD B4 01 8B F0 AC 3C 00   û.è..ôëý´.‹ð¬<.
 1d1c0efff80: 74 09 B4 0E BB 07 00 CD  10 EB F2 C3 0D 0A 46 65  t ´.»..Í.ëòÃ..Fe
 1d1c0efff90: 68 6C 65 72 20 62 65 69  6D 20 4C 65 73 65 6E 20  hler beim Lesen
 1d1c0efffa0: 64 65 73 20 44 61 74 65  6E 74 72 84 67 65 72 73  des Datentr„gers
 1d1c0efffb0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 66 65 68 6C 74  ...BOOTMGR fehlt
 1d1c0efffc0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 6B 6F 6D 70 72  ...BOOTMGR kompr
 1d1c0efffd0: 69 6D 69 65 72 74 00 0D  0A 4E 65 75 73 74 61 72  imiert...Neustar
 1d1c0efffe0: 74 20 6D 69 74 20 53 74  72 67 2B 41 6C 74 2B 45  t mit Strg+Alt+E
 1d1c0effff0: 6E 74 66 0D 0A 00 0A 00  8C B1 C1 D7 00 00 55 AA  ntf.....Œ±Á×..Uª

However, windows is still not able to access the drive "The disk structure is corrupted and unreadable". I have Ubuntu as a second OS on my computer and tried to mount the drive, however:

Code:

nimame@nima-PC:~$ mount /dev/sdh1
mount: /dev/sdh1: No such file or directory

gparted had the following warning:

Code:

ntfs_mst_post_read_fixup_warn: magic: 0x44414142  size: 1024   usa_ofs: 27644  usa_count: 27643: Invalid argument
Record 0 has no FILE magic (0x44414142)
Failed to load $MFT: Input/output error
Failed to mount '/dev/sdh1': Input/output error
NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE!
The usage of the /f parameter is very IMPORTANT! No modification was
made to NTFS by this software.

Unable to read the contents of this file system!
Because of this some operations may be unavailable.
The cause might be a missing software package.
The following list of software packages is required for ntfs file system support:  ntfsprogs / ntfs-3g.

I now want to try the alternative suggestions:

Quote:

If the drive does not appear in Explorer, then it may be that Windows does not know how to handle a Super Floppy on a Fixed Disk. In this case you could try to edit the registry so that the drive appears as a Removable Disk.

Can you tell me how exactly I should edit the registry? Which keys/values?

Quote:

Alternatively you may be able to check the Removable box in the Properties for the disk in Device Manager.

I did not find a "removable box" in the properties for the disk in device manager? Where exactly can I find it?

Anything else I could try?

Top

fzabkar

Post subject: Re: All personal data lost

Posted: April 9th, 2016, 16:51

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia

You need to edit sector 0 in the same way.

_________________
A backup a day keeps DR away.

Top

nimame

Post subject: Re: All personal data lost

Posted: April 13th, 2016, 5:21

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

Oh, I had done so. Sorry for not mentioning:

Code:

LBA:0                  block: 0
 00000000000: EB 52 90 4E 54 46 53 20  20 20 20 00 02 08 00 00  ëRNTFS    .....
 00000000010: 00 00 00 00 00 F8 00 00  3F 00 FF 00 00 00 00 00  .....ø..?.ÿ.....
 00000000020: 00 00 00 00 80 00 80 00  FF 77 E0 E8 00 00 00 00  ....€.€.ÿwàè....
 00000000030: 00 00 0C 00 00 00 00 00  02 00 00 00 00 00 00 00  ................
 00000000040: F6 00 00 00 01 00 00 00  4E 6F 0F B4 7F 0F B4 88  ö.......No.´.´ˆ
 00000000050: 00 00 00 00 FA 33 C0 8E  D0 BC 00 7C FB 68 C0 07  ....ú3ÀŽÐ¼.|ûhÀ.
 00000000060: 1F 1E 68 66 00 CB 88 16  0E 00 66 81 3E 03 00 4E  ..hf.Ëˆ...f>..N
 00000000070: 54 46 53 75 15 B4 41 BB  AA 55 CD 13 72 0C 81 FB  TFSu.´A»ªUÍ.r.û
 00000000080: 55 AA 75 06 F7 C1 01 00  75 03 E9 DD 00 1E 83 EC  Uªu.÷Á..u.éÝ..ƒì
 00000000090: 18 68 1A 00 B4 48 8A 16  0E 00 8B F4 16 1F CD 13  .h..´HŠ...‹ô..Í.
 000000000a0: 9F 83 C4 18 9E 58 1F 72  E1 3B 06 0B 00 75 DB A3  ŸƒÄ.žX.rá;...uÛ£
 000000000b0: 0F 00 C1 2E 0F 00 04 1E  5A 33 DB B9 00 20 2B C8  ..Á.....Z3Û¹. +È
 000000000c0: 66 FF 06 11 00 03 16 0F  00 8E C2 FF 06 16 00 E8  fÿ.......ŽÂÿ...è
 000000000d0: 4B 00 2B C8 77 EF B8 00  BB CD 1A 66 23 C0 75 2D  K.+Èwï¸.»Í.f#Àu-
 000000000e0: 66 81 FB 54 43 50 41 75  24 81 F9 02 01 72 1E 16  fûTCPAu$ù..r..
 000000000f0: 68 07 BB 16 68 70 0E 16  68 09 00 66 53 66 53 66  h.».hp..h .fSfSf
 00000000100: 55 16 16 16 68 B8 01 66  61 0E 07 CD 1A 33 C0 BF  U...h¸.fa..Í.3À¿
 00000000110: 28 10 B9 D8 0F FC F3 AA  E9 5F 01 90 90 66 60 1E  (.¹Ø.üóªé_.f`.
 00000000120: 06 66 A1 11 00 66 03 06  1C 00 1E 66 68 00 00 00  .f¡..f.....fh...
 00000000130: 00 66 50 06 53 68 01 00  68 10 00 B4 42 8A 16 0E  .fP.Sh..h..´BŠ..
 00000000140: 00 16 1F 8B F4 CD 13 66  59 5B 5A 66 59 66 59 1F  ...‹ôÍ.fY[ZfYfY.
 00000000150: 0F 82 16 00 66 FF 06 11  00 03 16 0F 00 8E C2 FF  .‚..fÿ.......ŽÂÿ
 00000000160: 0E 16 00 75 BC 07 1F 66  61 C3 A0 F8 01 E8 09 00  ...u¼..faÃ ø.è .
 00000000170: A0 FB 01 E8 03 00 F4 EB  FD B4 01 8B F0 AC 3C 00   û.è..ôëý´.‹ð¬<.
 00000000180: 74 09 B4 0E BB 07 00 CD  10 EB F2 C3 0D 0A 46 65  t ´.»..Í.ëòÃ..Fe
 00000000190: 68 6C 65 72 20 62 65 69  6D 20 4C 65 73 65 6E 20  hler beim Lesen
 000000001a0: 64 65 73 20 44 61 74 65  6E 74 72 84 67 65 72 73  des Datentr„gers
 000000001b0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 66 65 68 6C 74  ...BOOTMGR fehlt
 000000001c0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 6B 6F 6D 70 72  ...BOOTMGR kompr
 000000001d0: 69 6D 69 65 72 74 00 0D  0A 4E 65 75 73 74 61 72  imiert...Neustar
 000000001e0: 74 20 6D 69 74 20 53 74  72 67 2B 41 6C 74 2B 45  t mit Strg+Alt+E
 000000001f0: 6E 74 66 0D 0A 00 0A 00  8C B1 C1 D7 00 00 55 AA  ntf.....Œ±Á×..Uª

But still Windows says: "The disk structure is corrupted and unreadable"...

Top

fzabkar

Post subject: Re: All personal data lost

Posted: April 13th, 2016, 8:04

Joined: September 8th, 2009, 18:21
Posts: 16960
Location: Australia

It would appear that Windows and TestDisk are interpreting sector 0 as an MBR rather than a boot sector.

I presume that DMDE still sees your data. If so, then there is a way to convert your boot sector into a hybrid boot sector and MBR. Once again I propose to only edit sector 0. Hopefully you have backed up all your data.

Make the following changes to sector 0. This will add a partition table with a single 2TB NTFS partition beginning at sector 0.

Code:

0000001b0:                                            00 00
0000001c0: 01 00 07 FE FF FF 00 00  00 00 00 78 E0 E8 00 00
0000001d0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00
0000001e0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00
0000001f0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 55 AA

Reboot after making the changes.

_________________
A backup a day keeps DR away.

Top

nimame

Post subject: Re: All personal data lost

Posted: April 17th, 2016, 7:47

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

I made the changes you suggested to sector 0:

Code:

 
LBA:0                  block: 0
 00000000000: EB 52 90 4E 54 46 53 20  20 20 20 00 02 08 00 00  ëRNTFS    .....
 00000000010: 00 00 00 00 00 F8 00 00  3F 00 FF 00 00 00 00 00  .....ø..?.ÿ.....
 00000000020: 00 00 00 00 80 00 80 00  FF 77 E0 E8 00 00 00 00  ....€.€.ÿwàè....
 00000000030: 00 00 0C 00 00 00 00 00  02 00 00 00 00 00 00 00  ................
 00000000040: F6 00 00 00 01 00 00 00  4E 6F 0F B4 7F 0F B4 88  ö.......No.´.´ˆ
 00000000050: 00 00 00 00 FA 33 C0 8E  D0 BC 00 7C FB 68 C0 07  ....ú3ÀŽÐ¼.|ûhÀ.
 00000000060: 1F 1E 68 66 00 CB 88 16  0E 00 66 81 3E 03 00 4E  ..hf.Ëˆ...f>..N
 00000000070: 54 46 53 75 15 B4 41 BB  AA 55 CD 13 72 0C 81 FB  TFSu.´A»ªUÍ.r.û
 00000000080: 55 AA 75 06 F7 C1 01 00  75 03 E9 DD 00 1E 83 EC  Uªu.÷Á..u.éÝ..ƒì
 00000000090: 18 68 1A 00 B4 48 8A 16  0E 00 8B F4 16 1F CD 13  .h..´HŠ...‹ô..Í.
 000000000a0: 9F 83 C4 18 9E 58 1F 72  E1 3B 06 0B 00 75 DB A3  ŸƒÄ.žX.rá;...uÛ£
 000000000b0: 0F 00 C1 2E 0F 00 04 1E  5A 33 DB B9 00 20 2B C8  ..Á.....Z3Û¹. +È
 000000000c0: 66 FF 06 11 00 03 16 0F  00 8E C2 FF 06 16 00 E8  fÿ.......ŽÂÿ...è
 000000000d0: 4B 00 2B C8 77 EF B8 00  BB CD 1A 66 23 C0 75 2D  K.+Èwï¸.»Í.f#Àu-
 000000000e0: 66 81 FB 54 43 50 41 75  24 81 F9 02 01 72 1E 16  fûTCPAu$ù..r..
 000000000f0: 68 07 BB 16 68 70 0E 16  68 09 00 66 53 66 53 66  h.».hp..h .fSfSf
 00000000100: 55 16 16 16 68 B8 01 66  61 0E 07 CD 1A 33 C0 BF  U...h¸.fa..Í.3À¿
 00000000110: 28 10 B9 D8 0F FC F3 AA  E9 5F 01 90 90 66 60 1E  (.¹Ø.üóªé_.f`.
 00000000120: 06 66 A1 11 00 66 03 06  1C 00 1E 66 68 00 00 00  .f¡..f.....fh...
 00000000130: 00 66 50 06 53 68 01 00  68 10 00 B4 42 8A 16 0E  .fP.Sh..h..´BŠ..
 00000000140: 00 16 1F 8B F4 CD 13 66  59 5B 5A 66 59 66 59 1F  ...‹ôÍ.fY[ZfYfY.
 00000000150: 0F 82 16 00 66 FF 06 11  00 03 16 0F 00 8E C2 FF  .‚..fÿ.......ŽÂÿ
 00000000160: 0E 16 00 75 BC 07 1F 66  61 C3 A0 F8 01 E8 09 00  ...u¼..faÃ ø.è .
 00000000170: A0 FB 01 E8 03 00 F4 EB  FD B4 01 8B F0 AC 3C 00   û.è..ôëý´.‹ð¬<.
 00000000180: 74 09 B4 0E BB 07 00 CD  10 EB F2 C3 0D 0A 46 65  t ´.»..Í.ëòÃ..Fe
 00000000190: 68 6C 65 72 20 62 65 69  6D 20 4C 65 73 65 6E 20  hler beim Lesen
 000000001a0: 64 65 73 20 44 61 74 65  6E 74 72 84 67 65 72 73  des Datentr„gers
 000000001b0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 66 65 68 00 00  ...BOOTMGR feh..
 000000001c0: 01 00 07 FE FF FF 00 00  00 00 00 78 E0 E8 00 00  ...þÿÿ.....xàè..
 000000001d0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
 000000001e0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
 000000001f0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 55 AA  ..............Uª

However, after rebooting Windows still says: "The disk structure is corrupted and unreadable"...

Also the drive is repeatedly connected/disconnected and the above message shows up automatically.

Top

data-medics

Post subject: Re: All personal data lost

Posted: April 17th, 2016, 8:04

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI

While this is an interesting discussion, I'm going to have to come out and say what we've all been thinking.

Stop being so cheap and just buy a data recovery program like R-Studio already! You're in Germany, one of the wealthiest countries on earth. I'm certain you can afford it. :lol:

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company

Top

nimame

Post subject: Re: All personal data lost

Posted: April 17th, 2016, 8:37

Joined: December 31st, 2015, 7:16
Posts: 9
Location: Germany

I made the changes you suggested to sector 0:

Code:

 
LBA:0                  block: 0
 00000000000: EB 52 90 4E 54 46 53 20  20 20 20 00 02 08 00 00  ëRNTFS    .....
 00000000010: 00 00 00 00 00 F8 00 00  3F 00 FF 00 00 00 00 00  .....ø..?.ÿ.....
 00000000020: 00 00 00 00 80 00 80 00  FF 77 E0 E8 00 00 00 00  ....€.€.ÿwàè....
 00000000030: 00 00 0C 00 00 00 00 00  02 00 00 00 00 00 00 00  ................
 00000000040: F6 00 00 00 01 00 00 00  4E 6F 0F B4 7F 0F B4 88  ö.......No.´.´ˆ
 00000000050: 00 00 00 00 FA 33 C0 8E  D0 BC 00 7C FB 68 C0 07  ....ú3ÀŽÐ¼.|ûhÀ.
 00000000060: 1F 1E 68 66 00 CB 88 16  0E 00 66 81 3E 03 00 4E  ..hf.Ëˆ...f>..N
 00000000070: 54 46 53 75 15 B4 41 BB  AA 55 CD 13 72 0C 81 FB  TFSu.´A»ªUÍ.r.û
 00000000080: 55 AA 75 06 F7 C1 01 00  75 03 E9 DD 00 1E 83 EC  Uªu.÷Á..u.éÝ..ƒì
 00000000090: 18 68 1A 00 B4 48 8A 16  0E 00 8B F4 16 1F CD 13  .h..´HŠ...‹ô..Í.
 000000000a0: 9F 83 C4 18 9E 58 1F 72  E1 3B 06 0B 00 75 DB A3  ŸƒÄ.žX.rá;...uÛ£
 000000000b0: 0F 00 C1 2E 0F 00 04 1E  5A 33 DB B9 00 20 2B C8  ..Á.....Z3Û¹. +È
 000000000c0: 66 FF 06 11 00 03 16 0F  00 8E C2 FF 06 16 00 E8  fÿ.......ŽÂÿ...è
 000000000d0: 4B 00 2B C8 77 EF B8 00  BB CD 1A 66 23 C0 75 2D  K.+Èwï¸.»Í.f#Àu-
 000000000e0: 66 81 FB 54 43 50 41 75  24 81 F9 02 01 72 1E 16  fûTCPAu$ù..r..
 000000000f0: 68 07 BB 16 68 70 0E 16  68 09 00 66 53 66 53 66  h.».hp..h .fSfSf
 00000000100: 55 16 16 16 68 B8 01 66  61 0E 07 CD 1A 33 C0 BF  U...h¸.fa..Í.3À¿
 00000000110: 28 10 B9 D8 0F FC F3 AA  E9 5F 01 90 90 66 60 1E  (.¹Ø.üóªé_.f`.
 00000000120: 06 66 A1 11 00 66 03 06  1C 00 1E 66 68 00 00 00  .f¡..f.....fh...
 00000000130: 00 66 50 06 53 68 01 00  68 10 00 B4 42 8A 16 0E  .fP.Sh..h..´BŠ..
 00000000140: 00 16 1F 8B F4 CD 13 66  59 5B 5A 66 59 66 59 1F  ...‹ôÍ.fY[ZfYfY.
 00000000150: 0F 82 16 00 66 FF 06 11  00 03 16 0F 00 8E C2 FF  .‚..fÿ.......ŽÂÿ
 00000000160: 0E 16 00 75 BC 07 1F 66  61 C3 A0 F8 01 E8 09 00  ...u¼..faÃ ø.è .
 00000000170: A0 FB 01 E8 03 00 F4 EB  FD B4 01 8B F0 AC 3C 00   û.è..ôëý´.‹ð¬<.
 00000000180: 74 09 B4 0E BB 07 00 CD  10 EB F2 C3 0D 0A 46 65  t ´.»..Í.ëòÃ..Fe
 00000000190: 68 6C 65 72 20 62 65 69  6D 20 4C 65 73 65 6E 20  hler beim Lesen
 000000001a0: 64 65 73 20 44 61 74 65  6E 74 72 84 67 65 72 73  des Datentr„gers
 000000001b0: 00 0D 0A 42 4F 4F 54 4D  47 52 20 66 65 68 00 00  ...BOOTMGR feh..
 000000001c0: 01 00 07 FE FF FF 00 00  00 00 00 78 E0 E8 00 00  ...þÿÿ.....xàè..
 000000001d0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
 000000001e0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 00 00  ................
 000000001f0: 00 00 00 00 00 00 00 00  00 00 00 00 00 00 55 AA  ..............Uª

However, after rebooting Windows still says: "The disk structure is corrupted and unreadable"...

Also the drive is repeatedly connected/disconnected and the above message shows up automatically.

Top

Page 1 of 2

[ 29 posts ]

Go to page 1, 2 Next

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: Cleanroom and 140 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum