| Author | Message | ||
     Xronis Kyriklakis Username: rafaela Registered: N/A |
i have one Maxtor drive for data recovery. the user of that drive (NTFS, WINDOWS XP PRO) try to take a backup the NTFS Partition using HP Backup and Restore Manager utility. this utility make a image of the NTFS partition to one small recovery partition (like laptops have) for system and drivers programs. when he try to do that on 67% percents the drive stop working. after that he try to reboot the PC and nothing boot. i have try to recover any partition, or file of that drive we many famous program but no results. i can't find MBR , MFT , nothing. even Raw Recovery but nothing happen. Please any advice welcome Xronis (Rafaela) | ||
| Don Camillo Username: willybilly Registered: N/A |
If the partition with Windows is still okay, the simplest solution to get the data back is a Knoppix CD. Knoppix is a bootable CD (basing on Linux, but don`t worry - it looks like Windows). Download it - (google or www.knopper.net/knoppix "en"" is english version, "de" is german version) it is an ISO image (CD or DVD) (DO NOT SIMPLY COPY THE ISO FILE TO THE CD / DVD BUT LOOK FOR AN OPTION IN THE BURNING TOOL TO USE THIS IMAGE AS A BASIS FOR THE NEW CD / DVD - Nero and others offer this - if you are asked for ".iso" ending you are on the right way). Then boot from it (if it does not boot, change the boot settings in the BIOS to CD first then HD) - add an USB drive. When it is booted up you should see some HD symbols such as "dev/hda1" - this are your HDs. Click on it and you should see the files of your own HD or your USB HD. At this moment they are still write protected. To remove write protection from the target (USB) HD use kontext menu (right mouse button) and look for "remove write protection" or a text something like this. You will be asked if you really want to do this - after this you can copy the files from your old HD to your USB HD. Better than nothing. In some cases the Knoppix CD does not show the graphic user interface. Bad luck, but if you know a little about Linux, it is also possible to copy files with "mc" a Total Commander Clone or with the copy command. But this requires the knowledge about some commands like mount, umount and so on. In this case I would use the newer DVD version - 4.7 GB have to be downloaded with Firefox (not IE). | ||
| René Axnix Username: reax Registered: N/A |
Did you try to find a partition? Maybe the mbr doesn't start at the begining of the disk. Maybe there is an bootloader installed. If the solution with knoppix doesn't work try GetDataBack for NTFS. With the demoversion you will see the files if it can recover anything or not. | ||
| Ross Johnson Username: ross_winpro_net Registered: N/A |
Since this is a WinHex forum I assume you have WinHex (at least the demo?) >even Raw Recovery but nothing happen. I believe this is your most informative statement in the post ... I cannot speak about the other methods listed above, but WinHex alone should be just fine for determining/confirming the situation. 1. Clone the drive. DO THIS! I believe, from your comments, that you may have a physicaly failing hard drive, You may confirm this during cloning and need to adjust accordingly. If the cloning goes well ... 2. Visually examine the clone in Hex View just to get an idea of the content (e.g. how much of the 'raw data' is zeroed?, Can you see human readable content such as text file content?) 3. With WinHex 15.0 SR-2 and up, select a range of raw data that looks promising (I have not seen this documented yet, but I have observed that it appears you may need to start your range selection on a cluster border for this method to be most accurate for some search parameters). Then perform a signature search at the byte level with NTFS compression for an assortment of expected file types. If this fails to yield results, try it on the complete clone (this may be slow but it will be thorough). The above should work very well despite the file system actually used, however, encrypted or otherwise disguised data may be missed, however, you have not indicated that you are expecting encrypted or disguised data. If you are not finding ANY data files after this then, perhaps, look for repeating paterns. I have seen, for example, Backup/Restore routines go awry and rewrite the same chunk of data repeatedly over a drive (in your case, perhaps up to the 67% point). Of course, this will be bad news. I am guessing though, that you have a physical issue causing the failure at the 67% point and thus, perhaps, causing your "many famous program but no results". If you are already familiar with WinHex, I cannot imagine any other method that will more easily determine your true situation. If the cloning does not go well (e.g. slows, stutters or stops), it is very likely you have a physically failing drive and perhpas it may be best to halt your efforts, post your results for feedback (so that you will be more prepared to make a series of decisions regarding the best/safest method to access the raw data). Good Luck, Ross@WinPro.net | ||
| Xronis Kyriklakis Username: rafaela Registered: N/A |
no luck, no partition found, no raw files found, the clone drive begins to have "data" from 24012666 to 480243393 and from 625142383 to 625142384 who is the last sector. all the other sectors is "0". i clone that drive with WinHex 15 SR-2 sector by sector. i don't know what i say any more ... any Help-Advice welcome ... Xronis | ||
| Don Camillo Username: willybilly Registered: N/A |
Try to do the following: (hope this option works) Specialist | Refine volume snapshot | Execute now: a) particularly thorough file system ... b) file header signature search and choose all file types which are offered (if you look for special ones, you can select only these) this options look if they can find still "existing" files at the unallocated clusters. You will find them later at something like: "path unknown" and restore them. Good luck! | ||
| wangjian Username: wangjian Registered: 1-1997 |
That you are not trying to open the tips and not formatted ah, if so I have to Lane's. |