Welcome, Guest. Please login or register.
Did you miss your activation email?
November 20, 2017, 09:07:13 PM
Home Help Search Login Register
News:

+  DIY DataRecovery.nl Support forum
|-+  Support
| |-+  DiskPatch (Moderators: Tom, Joep)
| | |-+  DP S.M.A.R.T Analysis Corrupted UEFI drive
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: DP S.M.A.R.T Analysis Corrupted UEFI drive  (Read 3770 times)
ckent1
member

Posts: 24


« on: January 16, 2017, 07:07:56 AM »

Hello,

I remembered from before not to create a DiskPatch Support Analysis Log under Win8 with a UEFI disk so this time I just created the S.M.A.R.T. report, however, even this was enough to corrupt the drive and make it unbootable (using DP v4.0.200). I had storport.sys blue screen errors while running Win8 previously but the PC would still boot, and I was able to backup this drive (1TB, SATAIII) and the data appears to still be all there.

SMART Report:

Detected Controllers

  Disk Controller 1
    Device Vendor . . . . . . . . . . . . . : 8086
    Device ID . . . . . . . . . . . . . . . : 1D02
    Device  . . . . . . . . . . . . . . . . : Intel
    Device Location . . . . . . . . . . . . : Bus 0, Device 31, Function 2
    Device Ports  . . . . . . . . . . . . . : F070-F077, F060-F063, F050-F057, F040-F043, F020-F03F

Here are the DP Support Analysis Logs (run under forensics mode):

Partition One:

.../000:07/LOG> ### LOG START ###
.../000:07/LOG> DISKPATCH 4.0.200
.../000:07/LOG> (C) 2000-2013 DIY DataRecovery
.../000:07/LOG> Contact info: www.DIYDataRecovery.nl
.../000:07/LOG> MemFree: 58Kb
.../000:07/LOG> CommandLineParms: /for
.../000:07/LOG> LogDate: 01-15-2017
.../000:07/CFG> FilePath="C:DPFILES\"
.../000:07/CFG> ReadRetries="32"
.../000:07/CFG> WriteRetries="32"
.../000:07/CFG> MaxReadErrors="32"
.../000:07/CFG> MaxWriteErrors="1"
.../000:07/CFG> ReadDelay="0"
.../000:07/CFG> LogEachReadError="1"
.../000:07/CFG> WriteAfterReadError="1"
.../000:07/CFG> VfyFixedBadSect="1"
.../000:07/CFG> CleanAfterDOD="1"
.../000:07/CFG> DiskReset="1"
.../000:07/CFG> SectorSkip="1024"
.../000:07/CFG> AutoSaveState="1"
.../000:07/CFG> DumpFoundSectors="0"
.../000:07/CFG> FixFats="1"
.../000:07/CFG> MaxFatScan="51200"
.../000:07/CFG> MaxDataColEntries="256"
.../000:07/CFG> IgnoreF8FF="0"
.../000:07/CFG> DownSizeExt="1"
.../000:07/CFG> ScanSignature="55AA"
.../000:07/CFG> Rebuild="00"
.../000:07/13H> Ext13H installed test requested
.../000:07/13H> Disk found at 128
.../000:07/13H> Ext13H version: EDD-3.0
.../000:07/13H> Ext13H Support: Extended disk access functions
.../000:07/13H> Drive Interface Info:
.../000:07/13H> Disk 128 X13H data : 16383/16/63 1953525168/512
.../000:07/13H> Disk found at 129
.../000:07/13H> Ext13H version: EDD-3.0
.../000:07/13H> Ext13H Support: Extended disk access functions
.../000:07/13H> Ext13H Support: Enhanced disk drive functions
.../000:07/13H> Ext13H Flags: Cylinder/head/sector info is valid
.../000:07/13H> Drive Interface Info:
.../000:07/13H> Disk 129 X13H data : 975/255/63 15669248/512
.../000:07/13H> Ext13H tested ok
.../000:07/FDL> DiskList requested
.../000:07/FDL> Disk found at 128
.../000:07/FDL> Disk found at 129
### DISKLIST ###
__D_|________LBA_|___H_|__S_|___GB_|__GEO_|___SS_
128 | 1953525168 | 255 | 63 | .931 | BIOS | .512
129 | ..15669248 | 255 | 63 | ...7 | BIOS | .512
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
.../000:07/EXE> !- EFI BIOS / GUID partition type found on disk 0 (128)
.../000:10/IAS> Forensic mode; no AdmiSectors used
.../000:10/IAS> Forensic mode; no AdmiSectors used
.../000:10/WAS> AdmiSectors in use : 0- 1-
.../000:24/KEY> DEMO/1
.../000:28/PRD> Disk 0 (128) locked
.../000:29/PFC> PQstuff signature not detected on disk 0 (128)
.../000:29/PFC> PQstuff signature not detected on disk 1 (129)
.../000:29/PFC> Disk health not checked
.../000:31/PFC> Partition State backup not found on disk 0 (128)
.../000:31/PFC> Partition State backup not found on disk 1 (129)
.../000:31/PFC> No Repair date found on disk 0 (128)
.../000:31/PFC> No Repair date found on disk 1 (129)
.../000:50/MNU> - Main, Options
.../001:06/MNU> - Main, Options
.../001:21/MNU> - Support, Analyze Disk (no repair, create log)
.../001:27/MNU> - Main, Select Disk
.../001:29/USD> No source / disk selected
.../001:30/USD> Select disk completed
.../001:33/MNU> - Main, Select Disk
.../001:37/CSD> Start CheckDisk for disk 0 (128)
.../001:37/CSD> 0 (0 0 1)
.../001:37/CSD> 16064 (0 254 63)
.../001:37/CSD> 1953520065 (121601 0 1)
.../001:37/CSD> 1953525167 (121601 80 63)
.../001:37/CSD> CheckDisk complete, ReadErrors 0
.../001:37/USD> Disk 0 (128) selected
.../001:37/GSC> AdmiSector not in use
.../001:37/GSC> AdmiSector not in use
128/001:37/USD> MBR for disk 0 (128)
128/001:37/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00  |  3м.|ؾ.|.
016   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00  |  ...Ph....
032   BD BE 07 80 7E 00 00 7C 0B 0F 85 0E 01 83 C5 10  |  .~..|.....
048   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00  |  .V.UF..F..
064   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09  |  AU.]r.Uu.
080   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74  |  ..t.F.f`~..t
096   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00  |  &fh....f.v.h..h.
112   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13  |  |h..h..BV..
128   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00  |  .....|V.
144   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1C FE  |  v.N.n..fas.
160   4E 11 75 0C 80 7E 00 80 0F 84 8A 00 B2 80 EB 84  |  N.u.~...
176   55 32 E4 8A 56 00 CD 13 5D EB 9E 81 3E FE 7D 55  |  U2V..]랁>}U
192   AA 75 6E FF 76 00 E8 8D 00 75 17 FA B0 D1 E6 64  |  un.v..u.d
208   E8 83 00 B0 DF E6 60 E8 7C 00 B0 FF E6 64 E8 75  |  .`|..du
224   00 FB B8 00 BB CD 1A 66 23 C0 75 3B 66 81 FB 54  |  ...f#u;fT
240   43 50 41 75 32 81 F9 02 01 72 2C 66 68 07 BB 00  |  CPAu2..r,fh..
256   00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66  |  .fh....fh....fSf
272   53 66 55 66 68 00 00 00 00 66 68 00 7C 00 00 66  |  SfUfh....fh.|..f
288   61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00 00 CD  |  ah....Z2.|..
304   18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07 32 E4  |  . .. .. .2
320   05 00 07 8B F0 AC 3C 00 74 09 BB 07 00 B4 0E CD  |  ...<.t....
336   10 EB F2 F4 EB FD 2B C9 E4 64 EB 00 24 02 E0 F8  |  .+d.$.
352   24 02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69  |  $.Invalid parti
368   74 69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72  |  tion table.Error
384   20 6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69  |   loading operati
400   6E 67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E  |  ng system.Missin
416   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
432   65 6D 00 00 00 63 7B 9A 78 E2 D7 9B 00 00 00 00  |  em...c{xכ....
448   02 00 EE FE FF FF 01 00 00 00 AF 6D 70 74 00 00  |  ........mpt..
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U
###
128/001:37/VEC> Start Verify EPBR Chain for disk 0 (128)
128/001:37/VEC> Listing current partitions on disk:
128/001:37/VEC>  UNKNOWN (P)        (Err)           1  1953525167     (932 Gb)
128/001:37/VEC> Partition Table info for sector 0 (0 0 1)
128/001:37/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..EE | ....0...0...2 | .1023.254..63 | .........1 | 1953525167
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/001:37/VEC> 55AA sig Ok
128/001:37/LOG> Boot sector dump requested at 1 (0 0 2)
### BootSectorDump for BStype FAT16
...........Jump Code (hex): 454649
............OEM Name (txt): PART...
....Bytes per Sector (dec): 23552
.Sectors per Cluster (dec): 0
....Reserved Sectors (dec): 0
...........FAT count (dec): 239
....Root Entry Count (dec): 18382
..Total Sectors (16) (dec): 6
....Media Descriptor (hex): 00
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 1
.....Heads per Track (dec): 0
......Hidden Sectors (dec): 0
..Total Sectors (32) (dec): 1953525167
........Drive Number (hex): 00
............Reserved (hex): 00
......Boot Signature (hex): 00
...........Volume ID (hex): 00002200
........Volume Label (txt): mpt
..Filesystem Type ID (txt):   ?
....Sector Signature (hex): 0000
1st FAT not found at      : 1 (0 0 2)
2nd FAT not found at      : 1 (0 0 2)
128/001:37/CF8> FAT sectors are equal
128/001:37/LOG> SectorDump requested at 1 (0 0 2)
###
     EFI PART... mpt....".. 9.ϯmp ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
###
128/001:37/VEC> Verify EPBR Chain completed
128/001:38/USD> Select disk completed
128/001:43/MNU> - Main, Utilities
128/001:47/MNU> - Main, Options
128/001:52/MNU> - Support, Analyze Disk (no repair, create log)
128/001:56/SCN> DiskScan requested, ScanType is 3
128/001:56/SCN> from 0 (0 0 1) to 1953525167 (121601 80 63), 1953525168 sectors
128/001:56/SCN> Starting QuickScan (vista) at 2048 (0 32 33)
128/001:56/CDC> No DataCollection entries, CleanDatacollection aborted
128/001:56/MPL> No DataCollection entries, MakePartList aborted
128/001:56/SCN> Next QuickScan location at 0 (0 0 1)
128/001:57/SCN> QuickScan finished
128/001:57/SCN> Starting SmartScan (vista) at 0 (0 0 1)
128/001:57/RDS> Read past EOD intercept for disk 128 at 4294967295 (267349 89 4)
128/103:23/SCN> SmartScan finished
128/103:23/SCN> DiskScan completed
128/103:23/SCN> ReadErrors for disk 0 (128): 0
128/103:42/LOG> DataCollection items found: 7 / 0
### DATACOLLECTION, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ....264192 | ...NTFS | ..BS | ....264192 | ....614393 | PRI | .
002 | 128 | ....878591 | ...NTFS | .BBS | ....264199 | ....614393 | PRI | .
003 | 128 | ....878592 | ..FAT32 | ..BS | ....878592 | ....202752 | PRI | .
004 | 128 | ....878598 | ..FAT32 | .BBS | ....878592 | ....202752 | PRI | .
005 | 128 | ...1081344 | ...NTFS | ..BS | ...1081344 | 1952442361 | PRI | .
006 | 128 | ..97376255 | .NOVELL | PTE1 | 2584751154 | 3160258825 | LOG | .
007 | 128 | 1953523711 | ...NTFS | .BBS | ...1081351 | 1952442361 | PRI | .
128/103:42/LOG> DataCollection items found: 7 / 0
### DATACOLLECTION, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ....264192 | ...NTFS | ..BS | ....264192 | ....614393 | PRI
002 | 128 | ....878591 | ...NTFS | .BBS | ....264199 | ....614393 | PRI
003 | 128 | ....878592 | ..FAT32 | ..BS | ....878592 | ....202752 | PRI
004 | 128 | ....878598 | ..FAT32 | .BBS | ....878592 | ....202752 | PRI
005 | 128 | ...1081344 | ...NTFS | ..BS | ...1081344 | 1952442361 | PRI
006 | 128 | ..97376255 | .NOVELL | PTE1 | 2584751154 | 3160258825 | LOG
007 | 128 | 1953523711 | ...NTFS | .BBS | ...1081351 | 1952442361 | PRI
128/103:42/LOG> PartList items created: 6
### PARTLIST ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ... | ..1 | ... | ..0 | ..1 | ..1 | ..1 | 1 | ..B
002 | ...NTFS | ... | ... | ..2 | ..0 | ..2 | ..2 | ..2 | 1 | ..B
003 | ..FAT32 | ... | ..3 | ..4 | ... | ..3 | ..3 | ..3 | 2 | ..B
004 | ...NTFS | ... | ..5 | ... | ..0 | ..5 | ..5 | ..5 | 1 | ..B
005 | ...NTFS | ... | ... | ..7 | ..0 | ..7 | ..7 | ..7 | 1 | ..B
006 | .NOVELL | ..6 | ..0 | ..0 | ..0 | ..6 | ..6 | ..6 | 1 | ..-
### PARTLIST, INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ...NTFS | ....264192 | ....614393 | ....878584 | PRI | ..B | ..V
002 | ...NTFS | ....264199 | ....614393 | ....878591 | PRI | ..B | ..?
003 | ..FAT32 | ....878592 | ....202752 | ...1081343 | PRI | ..B | ..V
004 | ...NTFS | ...1081344 | 1952442361 | 1953523704 | PRI | ..B | ..V
005 | ...NTFS | ...1081351 | 1952442361 | 1953523711 | PRI | ..B | ..?
006 | .NOVELL | 2584751154 | 3160258825 | 1450042682 | LOG | ..- | ..?
128/103:42/SST> SaveState requested for disk 0 (128)
128/103:42/SST> AdmiSector not in use for disk 0 (128), SaveState aborted
128/104:52/EXE> Analysis complete
128/105:13/MNU> - Main, Quit
128/105:13/LOG> RunTime: 105:13
128/105:13/LOG> ### CLOSE LOG ###




Partition Two:


.../000:04/LOG> ### LOG START ###
.../000:04/LOG> DISKPATCH 4.0.200
.../000:04/LOG> (C) 2000-2013 DIY DataRecovery
.../000:04/LOG> Contact info: www.DIYDataRecovery.nl
.../000:04/LOG> MemFree: 58Kb
.../000:04/LOG> CommandLineParms: /for
.../000:04/LOG> LogDate: 01-16-2017
.../000:04/CFG> FilePath="C:DPFILES\"
.../000:04/CFG> ReadRetries="32"
.../000:04/CFG> WriteRetries="32"
.../000:04/CFG> MaxReadErrors="32"
.../000:04/CFG> MaxWriteErrors="1"
.../000:04/CFG> ReadDelay="0"
.../000:04/CFG> LogEachReadError="1"
.../000:04/CFG> WriteAfterReadError="1"
.../000:04/CFG> VfyFixedBadSect="1"
.../000:04/CFG> CleanAfterDOD="1"
.../000:04/CFG> DiskReset="1"
.../000:04/CFG> SectorSkip="1024"
.../000:04/CFG> AutoSaveState="1"
.../000:04/CFG> DumpFoundSectors="0"
.../000:04/CFG> FixFats="1"
.../000:04/CFG> MaxFatScan="51200"
.../000:04/CFG> MaxDataColEntries="256"
.../000:04/CFG> IgnoreF8FF="0"
.../000:04/CFG> DownSizeExt="1"
.../000:04/CFG> ScanSignature="55AA"
.../000:04/CFG> Rebuild="00"
.../000:04/13H> Ext13H installed test requested
.../000:04/13H> Disk found at 128
.../000:04/13H> Ext13H version: EDD-3.0
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 128 X13H data : 16383/16/63 1953525168/512
.../000:04/13H> Disk found at 129
.../000:04/13H> Ext13H version: EDD-3.0
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Ext13H Support: Enhanced disk drive functions
.../000:04/13H> Ext13H Flags: Cylinder/head/sector info is valid
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 129 X13H data : 975/255/63 15669248/512
.../000:04/13H> Ext13H tested ok
.../000:04/FDL> DiskList requested
.../000:04/FDL> Disk found at 128
.../000:04/FDL> Disk found at 129
### DISKLIST ###
__D_|________LBA_|___H_|__S_|___GB_|__GEO_|___SS_
128 | 1953525168 | 255 | 63 | .931 | BIOS | .512
129 | ..15669248 | 255 | 63 | ...7 | BIOS | .512
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
.../000:04/EXE> !- EFI BIOS / GUID partition type found on disk 0 (128)
.../000:07/IAS> Forensic mode; no AdmiSectors used
.../000:07/IAS> Forensic mode; no AdmiSectors used
.../000:07/WAS> AdmiSectors in use : 0- 1-
.../000:17/KEY> DEMO/1
.../000:22/PRD> Disk 1 (129) locked
.../000:24/PFC> PQstuff signature not detected on disk 0 (128)
.../000:24/PFC> PQstuff signature not detected on disk 1 (129)
.../000:24/PFC> Disk health not checked
.../000:26/PFC> Partition State backup not found on disk 0 (128)
.../000:26/PFC> Partition State backup not found on disk 1 (129)
.../000:26/PFC> No Repair date found on disk 0 (128)
.../000:26/PFC> No Repair date found on disk 1 (129)
.../001:12/MNU> - Support, Analyze Disk (no repair, create log)
.../001:16/MNU> - Main, Select Disk
.../001:20/CSD> Start CheckDisk for disk 1 (129)
.../001:20/CSD> 0 (0 0 1)
.../001:20/CSD> 16064 (0 254 63)
.../001:20/CSD> 15663375 (975 0 1)
.../001:20/CSD> 15669247 (975 93 14)
.../001:20/CSD> CheckDisk complete, ReadErrors 0
.../001:20/USD> Disk 1 (129) selected
.../001:20/GSC> AdmiSector not in use
.../001:20/GSC> AdmiSector not in use
129/001:20/USD> MBR for disk 1 (129)
129/001:20/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3м.|P.P..|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ..PW.˽..
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u...
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  .It.8,t ..
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  <.t....
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.F.s*F.~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  ~..t. .uҀF..
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..V..!.s. .
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  >}Ut.~..t
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  .멋.W˿..V
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  ...r#$?ފ
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  Cцֱ.B9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s....|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  N.V..sQOtN2
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V..V.`UA
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6Uu0.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.B.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 49 6E 76 61  |  2V..aInva
304   6C 69 64 20 70 61 72 74 69 74 69 6F 6E 20 74 61  |  lid partition ta
320   62 6C 65 00 45 72 72 6F 72 20 6C 6F 61 64 69 6E  |  ble.Error loadin
336   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
352   65 6D 00 4D 69 73 73 69 6E 67 20 6F 70 65 72 61  |  em.Missing opera
368   74 69 6E 67 20 73 79 73 74 65 6D 00 00 00 00 00  |  ting system.....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 44 63 BE 3E 8C C5 00 00 80 00  |  .....,Dc>...
448   39 00 0C FE FF CE 38 00 00 00 C8 17 EF 00 00 00  |  9...8.......
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U
###
129/001:20/VEC> Start Verify EPBR Chain for disk 1 (129)
129/001:20/VEC> Listing current partitions on disk:
129/001:20/VEC>    FAT32 (P)      NO NAME          56    15669192       (7 Gb)
129/001:20/VEC> Partition Table info for sector 0 (0 0 1)
129/001:20/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..0C | ....0...0..57 | ..974.254..63 | ........56 | ..15669192
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/001:20/VEC> 55AA sig Ok
129/001:20/LOG> Boot sector dump requested at 56 (0 0 57)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): EB5890
............OEM Name (txt): MSDOS5.0
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 2228
...........FAT count (dec): 2
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): F8
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 56
..Total Sectors (32) (dec): 15669192
.......FAT Size (32) (dec): 15270
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 2
.............FS Info (dec): 1
...........Backup BS (dec): 6
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 80
............Reserved (hex): 00
......Boot Signature (hex): 29
...........Volume ID (hex): 88277B24
........Volume Label (txt): NO NAME
..Filesystem Type ID (txt): FAT32
....Sector Signature (hex): AA55
..........1st FAT at      : 2284 (0 36 17)
..........2nd FAT at      : 17554 (1 23 41)
129/001:20/CF8> FAT sectors are equal
129/001:20/LOG> SectorDump requested at 32824 (2 11 2)
###
     EFS         B .I.n.f.o. .S.y.s.t.e. SYSTEM~1    
     AF.-.R.e.s. F-RESP~1    AG.u.i.d.a. GUIDANCE    
     AP.a.s.s.w. PASSWARE    AT.a.b.l.e. TABLEAU    
     AV.o.u.n.d. VOUND       Bi.a.l..... .X.1. .p.r.
###
129/001:20/VEC> BS and BBS equal
129/001:20/VEC> Verify EPBR Chain completed
129/001:20/USD> Select disk completed
129/001:33/MNU> - Support, Analyze Disk (no repair, create log)
129/001:36/SCN> DiskScan requested, ScanType is 3
129/001:36/SCN> from 0 (0 0 1) to 15669247 (975 93 14), 15669248 sectors
129/001:36/SCN> Starting QuickScan (vista) at 2048 (0 32 33)
129/001:36/CDC> No DataCollection entries, CleanDatacollection aborted
129/001:36/MPL> No DataCollection entries, MakePartList aborted
129/001:36/SCN> Next QuickScan location at 0 (0 0 1)
129/001:36/SCN> QuickScan finished
129/001:36/SCN> Starting SmartScan (vista) at 0 (0 0 1)
129/001:36/RDS> Read past EOD intercept for disk 129 at 4294967295 (267349 89 4)
129/001:49/SCN> SmartScan finished
129/001:49/SCN> DiskScan completed
129/001:49/SCN> ReadErrors for disk 1 (129): 0
129/001:53/LOG> DataCollection items found: 1 / 0
### DATACOLLECTION, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 129 | .........0 | ..FAT32 | PTE1 | ........56 | ..15669192 | PRI | .
129/001:53/LOG> DataCollection items found: 1 / 0
### DATACOLLECTION, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 129 | .........0 | ..FAT32 | PTE1 | ........56 | ..15669192 | PRI
129/001:53/LOG> PartList items created: 1
### PARTLIST ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ..FAT32 | ..1 | ... | ... | ... | ..1 | ..1 | ..1 | 1 | ...
### PARTLIST, INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ..FAT32 | ........56 | ..15669192 | ..15669247 | PRI | ... | ..?
129/001:53/SST> SaveState requested for disk 1 (129)
129/001:53/SST> AdmiSector not in use for disk 1 (129), SaveState aborted
129/001:56/EXE> Analysis complete
129/002:03/MNU> - Main, Quit
129/002:03/LOG> RunTime: 002:03
129/002:03/LOG> ### CLOSE LOG ###



Since there is no AdmiSector to remove this time, can I just run gdisk like before and restore the backup GPT to get the HDD to boot again?

Have the corruption issues been fixed in DP 4.0.300?
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #1 on: January 16, 2017, 07:31:55 PM »

I have no idea how this could have corrupted the UEFI setup. Forensic mode was used, nothing was changed on disk, and the SMART tool doesn't write anything to any disk directly. Also, DiskPatch (still) checks for UEFI stuff on a disk and if any is encountered DiskPatch will halt, as you've seen before.

Is this all there is of the SMART report? It is not complete and that usually means there is a serious hardware issue.
Logged

ckent1
member

Posts: 24


« Reply #2 on: January 16, 2017, 09:10:42 PM »

Thanks, Tom.

Here are the most recent Acronis 2014 System Reports:

Fdisk.txt:
Found valid GPT with protective MBR; using GPT

Disk /dev/sda: 4294967295 sectors, 4095M
Logical sector size: 512
Disk identifier (GUID): 9e60213f-4619-4d73-a41c-19ad56eca138
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 5860533134

Number  Start (sector)    End (sector)  Size       Code  Name
   1              34          262177        256K   0700  Microsoft reserved partition
   2          264192      5860532223       5588M   0700  Basic data partition

warning: GPT header CRC is invalid

Gdisk.txt:
GPT fdisk (gdisk) version 0.8.4

Partition table scan:
  MBR: protective
  BSD: not present
  APM: not present
  GPT: present

Found valid GPT with protective MBR; using GPT.
Disk /dev/sda: 5860533168 sectors, 2.7 TiB
Logical sector size: 512 bytes
Disk identifier (GUID): 9E60213F-4619-4D73-A41C-19AD56ECA138
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 5860533134
Partitions will be aligned on 8-sector boundaries
Total free space is 2925 sectors (1.4 MiB)

Number  Start (sector)    End (sector)  Size       Code  Name
   1              34          262177   128.0 MiB   0C01  Microsoft reserved part
   2          264192      5860532223   2.7 TiB     0700  Basic data partition
GPT fdisk (gdisk) version 0.8.4

 Caution: invalid main GPT header, but valid backup; regenerating main header
from backup!

Caution! After loading partitions, the CRC doesn't check out!
 Warning! Main partition table CRC mismatch! Loaded backup partition table
instead of main partition table!

Warning! One or more CRCs don't match. You should repair the disk!

Partition table scan:
  MBR: protective
  BSD: not present
  APM: not present
  GPT: damaged

  ****************************************************************************
Caution: Found protective or hybrid MBR and corrupt GPT. Using GPT, but disk
verification and recovery are STRONGLY recommended.
****************************************************************************
Disk /dev/sdb: 1953525168 sectors, 931.5 GiB
Logical sector size: 512 bytes
Disk identifier (GUID): 0402EF9B-063F-41EC-9EE8-FD39A5FFCFAF
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 1953525134
Partitions will be aligned on 8-sector boundaries
Total free space is 3437 sectors (1.7 MiB)

Number  Start (sector)    End (sector)  Size       Code  Name
   1              34          262177   128.0 MiB   0C01  
   2          264192          878591   300.0 MiB   2700  
   3          878592         1081343   99.0 MiB    EF00  
   4         1081344      1953523711   931.0 GiB   0700  
GPT fdisk (gdisk) version 0.8.4

Partition table scan:
  MBR: MBR only
  BSD: not present
  APM: not present
  GPT: not present


***************************************************************
Found invalid GPT and valid MBR; converting MBR to GPT format.
***************************************************************

Disk /dev/sdc: 3907029168 sectors, 1.8 TiB
Logical sector size: 512 bytes
Disk identifier (GUID): 6CBCB419-1D4D-44AF-9520-656953E8B7F4
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 3907029134
Partitions will be aligned on 8-sector boundaries
Total free space is 6044 sectors (3.0 MiB)

Number  Start (sector)    End (sector)  Size       Code  Name
   1              63      3907023119   1.8 TiB     0700  Microsoft basic data
GPT fdisk (gdisk) version 0.8.4

Partition table scan:
  MBR: MBR only
  BSD: not present
  APM: not present
  GPT: not present


***************************************************************
Found invalid GPT and valid MBR; converting MBR to GPT format.
***************************************************************


Warning! Secondary partition table overlaps the last partition by
33 blocks!
You will need to delete this partition or resize it in another utility.
Disk /dev/sdd: 15669248 sectors, 7.5 GiB
Logical sector size: 512 bytes
Disk identifier (GUID): 6592AB9C-3FAE-4EBC-A237-41FB02CA7F5F
Partition table holds up to 128 entries
First usable sector is 34, last usable sector is 15669214
Partitions will be aligned on 8-sector boundaries
Total free space is 22 sectors (11.0 KiB)

Number  Start (sector)    End (sector)  Size       Code  Name
   1              56        15669247   7.5 GiB     0700  Microsoft basic data


These are the same error messages after running DiskPatch 4.0.200 on this system in 2013.

No disk errors were spotted in either the Win8 Event logs or thru HD Tune SMART check other than the storport.sys blue screens prior.

I read in another thread on this board someone had to change the SATA controller mode in the BIOS from AHCI/SATA to IDE to get the DP SMART check to run under Win8/UEFI. Is this recommended?
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #3 on: January 17, 2017, 11:57:24 AM »

Quote
I read in another thread on this board someone had to change the SATA controller mode in the BIOS from AHCI/SATA to IDE to get the DP SMART check to run under Win8/UEFI. Is this recommended?
Not so much recommended, more like a trick. It may work but you must make sure that you change this in the BIOS only and do NOT run Windows with the change active. So, change it, run DiskPatch, change it back.

I checked and verified: if DiskPatch sees UEFI traces it halts and asks the user to continue. Nothing is written to disk before the UEFI check, so I don't see how this works. I'll do some more testing. Did you at any point see the DiskPatch UEFI warning and what did you do at that point?
Logged

ckent1
member

Posts: 24


« Reply #4 on: January 17, 2017, 04:47:58 PM »

Tom, saw the warning when running the DP Support Analysis Log so exited, changed to Forensics Mode and re-ran the test.

No warning when running DP SMART report.
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #5 on: January 17, 2017, 07:05:11 PM »

Quote
Tom, saw the warning when running the DP Support Analysis Log so exited, changed to Forensics Mode and re-ran the test.
Which test? You mean the support analysis log?

Quote
No warning when running DP SMART report.
That would be correct. No need for a warning as SMART analysis doesn't do anything to a disk, it just reads.
Logged

ckent1
member

Posts: 24


« Reply #6 on: January 18, 2017, 12:35:30 AM »

Quote
Tom, saw the warning when running the DP Support Analysis Log so exited, changed to Forensics Mode and re-ran the test.
Which test? You mean the support analysis log?

Correct.
Logged
ckent1
member

Posts: 24


« Reply #7 on: January 19, 2017, 08:40:41 PM »

Tom, how is the testing going?
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #8 on: January 19, 2017, 10:16:13 PM »

I can not reproduce the problem. Also, I've reviewed the code (again) and I don't see how this can cause this problem. So, ongoing.
Logged

ckent1
member

Posts: 24


« Reply #9 on: January 20, 2017, 05:22:04 AM »

I've been testing Gdisk and it seems it should be pretty simple to repair the original GPT by using the backup. The main GPT is largely okay, the volumes seem correct and valid. The only problem seems to be the header and that can be recovered. Before we attempt this it would be nice to verify the situation, and for that I'd need a few sector dumps. We'll need DiskPatch for that, so make sure to use the earlier mentioned Forensic mode.

Just in case you missed that:
"To use forensic mode, select "DiskPatch Options (troubleshooting)" from the first start menu that appears after booting the DiskPatch boot disk, and select "Start DiskPatch in Forensic Mode". When prompted to select a disk to protect, select the disk you wish to be excluded from any and all writing."

Again, sorry to put you to work like this.

- start DiskPatch in forensic mode, select the correct disk (the win8 problem disk) as the disk to be protected
- from the DiskPatch main menu select "select disk", select the win8 disk
- go to "Utilities", then "Disk Editor"
- once you have the sector screen, press F4 and type 1, press enter
- you are now looking at the GPT header. Press F10 and select "dump sector to log"
- exit the menu (press Escape once)
- press "page down" once, this should put you at the first block of the GPT
- again, press F10 and select "dump sector to log"
- exit the menu and from the sector screen press ctrl-end, this should put you at the very end of the disk looking at the GPT backup header
- again, press F10 and select "dump sector to log"
- exit the menu, press F4 and enter 29
- again, press F10 and select "dump sector to log"
- exit the menu, exit the editor and exit DiskPatch
- post the resulting DP.LOG

Edit: I'm off to bed now but I can tell you that I've successfully restored a GPT after damaging an original GPT in a way similar to your current situation. I've used Gdisk for it and the whole process was pretty self explanatory. I used the Windows version of Gdisk from the author's website.
http://rodsbooks.com/gdisk/
If you like I'll put up an in-depth explanation tomorrow morning.

Tom, I'm trying to create this dp.log file recommended in 2013 however DiskPatch is not letting me save the sector dumps to a USB stick (dp.log is 0 bytes). I'm loading DP from CD-RW currently, should I run DP and save the log to the same USB key. DP is running on Win98 v 4.10.2222.
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #10 on: January 20, 2017, 12:14:52 PM »

The best way to do this is to start the PC with the DiskPatch USB key/drive. Is that not possible?

If you are going to create this log please add something, after doing this sector dump:
"- exit the menu, press F4 and enter 29" etc.
also do this for sector 34. So, just to be clear, one additional sector is added to the log.
Logged

ckent1
member

Posts: 24


« Reply #11 on: January 21, 2017, 04:46:32 AM »

Tom, here is the new DP.LOG for the 1TB disk:


.../000:01/LOG> ### LOG START ###
.../000:01/LOG> DISKPATCH 4.0.200
.../000:01/LOG> (C) 2000-2013 DIY DataRecovery
.../000:01/LOG> Contact info: www.DIYDataRecovery.nl
.../000:01/LOG> MemFree: 62Kb
.../000:01/LOG> CommandLineParms: /for
.../000:01/LOG> LogDate: 01-20-2017
.../000:01/CFG> FilePath="C:DPFILES\"
.../000:01/CFG> ReadRetries="32"
.../000:01/CFG> WriteRetries="32"
.../000:01/CFG> MaxReadErrors="32"
.../000:01/CFG> MaxWriteErrors="1"
.../000:01/CFG> ReadDelay="0"
.../000:01/CFG> LogEachReadError="1"
.../000:01/CFG> WriteAfterReadError="1"
.../000:01/CFG> VfyFixedBadSect="1"
.../000:01/CFG> CleanAfterDOD="1"
.../000:01/CFG> DiskReset="1"
.../000:01/CFG> SectorSkip="1024"
.../000:01/CFG> AutoSaveState="1"
.../000:01/CFG> DumpFoundSectors="0"
.../000:01/CFG> FixFats="1"
.../000:01/CFG> MaxFatScan="51200"
.../000:01/CFG> MaxDataColEntries="256"
.../000:01/CFG> IgnoreF8FF="0"
.../000:01/CFG> DownSizeExt="1"
.../000:01/CFG> ScanSignature="55AA"
.../000:01/CFG> Rebuild="00"
.../000:01/13H> Ext13H installed test requested
.../000:01/13H> Disk found at 128
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Ext13H Support: Enhanced disk drive functions
.../000:01/13H> Ext13H Flags: Cylinder/head/sector info is valid
.../000:01/13H> Drive Interface Info:
.../000:01/13H> Disk 128 X13H data : 2001/16/63 2017280/512
.../000:01/13H> Disk found at 129
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Drive Interface Info:
.../000:01/13H> Disk 129 X13H data : 16383/16/63 1953525168/512
.../000:01/13H> Ext13H tested ok
.../000:01/FDL> DiskList requested
.../000:01/FDL> Disk found at 128
.../000:01/FDL> Disk found at 129
### DISKLIST ###
__D_|________LBA_|___H_|__S_|___GB_|__GEO_|___SS_
128 | ...2017280 | .16 | 63 | ...0 | BIOS | .512
129 | 1953525168 | 255 | 63 | .931 | BIOS | .512
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
..0 | .........0 | ..0 | .0 | ...0 | BIOS | ...0
.../000:01/EXE> !- EFI BIOS / GUID partition type found on disk 1 (129)
.../000:04/IAS> Forensic mode; no AdmiSectors used
.../000:04/IAS> Forensic mode; no AdmiSectors used
.../000:04/WAS> AdmiSectors in use : 0- 1-
.../000:27/KEY> DEMO/1
.../000:40/PRD> Disk 1 (129) locked
.../000:43/PFC> PQstuff signature not detected on disk 0 (128)
.../000:43/PFC> PQstuff signature not detected on disk 1 (129)
.../000:43/PFC> Disk health not checked
.../000:44/PFC> Partition State backup not found on disk 0 (128)
.../000:44/PFC> Partition State backup not found on disk 1 (129)
.../000:44/PFC> No Repair date found on disk 0 (128)
.../000:44/PFC> No Repair date found on disk 1 (129)
.../000:55/MNU> - Main, Options
.../001:03/MNU> - Main, Select Disk
.../001:19/CSD> Start CheckDisk for disk 1 (129)
.../001:19/CSD> 0 (0 0 1)
.../001:19/CSD> 16064 (0 254 63)
.../001:19/CSD> 1953520065 (121601 0 1)
.../001:19/CSD> 1953525167 (121601 80 63)
.../001:19/CSD> CheckDisk complete, ReadErrors 0
.../001:19/USD> Disk 1 (129) selected
.../001:19/GSC> AdmiSector not in use
.../001:19/GSC> AdmiSector not in use
129/001:19/USD> MBR for disk 1 (129)
129/001:19/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00  |  3м.|ؾ.|.
016   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00  |  ...Ph....
032   BD BE 07 80 7E 00 00 7C 0B 0F 85 0E 01 83 C5 10  |  .~..|.....
048   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00  |  .V.UF..F..
064   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09  |  AU.]r.Uu.
080   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74  |  ..t.F.f`~..t
096   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00  |  &fh....f.v.h..h.
112   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13  |  |h..h..BV..
128   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00  |  .....|V.
144   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1C FE  |  v.N.n..fas.
160   4E 11 75 0C 80 7E 00 80 0F 84 8A 00 B2 80 EB 84  |  N.u.~...
176   55 32 E4 8A 56 00 CD 13 5D EB 9E 81 3E FE 7D 55  |  U2V..]랁>}U
192   AA 75 6E FF 76 00 E8 8D 00 75 17 FA B0 D1 E6 64  |  un.v..u.d
208   E8 83 00 B0 DF E6 60 E8 7C 00 B0 FF E6 64 E8 75  |  .`|..du
224   00 FB B8 00 BB CD 1A 66 23 C0 75 3B 66 81 FB 54  |  ...f#u;fT
240   43 50 41 75 32 81 F9 02 01 72 2C 66 68 07 BB 00  |  CPAu2..r,fh..
256   00 66 68 00 02 00 00 66 68 08 00 00 00 66 53 66  |  .fh....fh....fSf
272   53 66 55 66 68 00 00 00 00 66 68 00 7C 00 00 66  |  SfUfh....fh.|..f
288   61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00 00 CD  |  ah....Z2.|..
304   18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07 32 E4  |  . .. .. .2
320   05 00 07 8B F0 AC 3C 00 74 09 BB 07 00 B4 0E CD  |  ...<.t....
336   10 EB F2 F4 EB FD 2B C9 E4 64 EB 00 24 02 E0 F8  |  .+d.$.
352   24 02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69  |  $.Invalid parti
368   74 69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72  |  tion table.Error
384   20 6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69  |   loading operati
400   6E 67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E  |  ng system.Missin
416   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
432   65 6D 00 00 00 63 7B 9A 78 E2 D7 9B 00 00 00 00  |  em...c{xכ....
448   02 00 EE FE FF FF 01 00 00 00 AF 6D 70 74 00 00  |  ........mpt..
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U
###
129/001:19/VEC> Start Verify EPBR Chain for disk 1 (129)
129/001:19/VEC> Listing current partitions on disk:
129/001:19/VEC>  UNKNOWN (P)        (Err)           1  1953525167     (932 Gb)
129/001:19/VEC> Partition Table info for sector 0 (0 0 1)
129/001:19/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..EE | ....0...0...2 | .1023.254..63 | .........1 | 1953525167
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/001:19/VEC> 55AA sig Ok
129/001:19/LOG> Boot sector dump requested at 1 (0 0 2)
### BootSectorDump for BStype FAT16
...........Jump Code (hex): 454649
............OEM Name (txt): PART...
....Bytes per Sector (dec): 23552
.Sectors per Cluster (dec): 0
....Reserved Sectors (dec): 0
...........FAT count (dec): 239
....Root Entry Count (dec): 18382
..Total Sectors (16) (dec): 6
....Media Descriptor (hex): 00
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 1
.....Heads per Track (dec): 0
......Hidden Sectors (dec): 0
..Total Sectors (32) (dec): 1953525167
........Drive Number (hex): 00
............Reserved (hex): 00
......Boot Signature (hex): 00
...........Volume ID (hex): 00002200
........Volume Label (txt): mpt
..Filesystem Type ID (txt):   ?
....Sector Signature (hex): 0000
1st FAT not found at      : 1 (0 0 2)
2nd FAT not found at      : 1 (0 0 2)
129/001:19/CF8> FAT sectors are equal
129/001:19/LOG> SectorDump requested at 1 (0 0 2)
###
     EFI PART... mpt....".. 9.ϯmp ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
###
129/001:19/VEC> Verify EPBR Chain completed
129/001:19/USD> Select disk completed
129/001:25/MNU> - Main, Options
129/001:28/MNU> - Main, Utilities
129/001:30/MNU> - Tools, DiskEditor
129/001:38/UND> New Undo archive created for disk 1 (129)
129/001:38/LOG> Undo settings: GL(+) DE(+) FAT(+)
129/001:38/DED> Start DiskEditor, ScanReady 0
129/003:09/DED> Dump sector requested by user
129/003:09/LOG> SectorDump requested at 1 (0 0 2)
###
000   45 46 49 20 50 41 52 54 00 00 01 00 5C 00 00 00  |  EFI PART....\...
016   EF CE 47 06 00 00 00 00 01 00 00 00 00 00 00 00  |  G.............
032   AF 6D 70 74 00 00 00 00 22 00 00 00 00 00 00 00  |  mpt....".......
048   8E 6D 70 74 00 00 00 00 9B EF 02 04 3F 06 EC 41  |  mpt......?.A
064   9E E8 FD 39 A5 FF CF AF B0 6D 70 74 00 00 00 00  |  9.ϯmpt....
080   80 00 00 00 80 00 00 00 00 00 00 00 00 00 00 00  |  ..............
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
128   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
144   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
160   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
176   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
272   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
288   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
###
129/004:13/DED> Dump sector requested by user
129/004:13/LOG> SectorDump requested at 2 (0 0 3)
###
000   16 E3 C9 E3 5C 0B B8 4D 81 7D F9 2D F0 02 15 AE  |  .\.M}-..
016   CB C0 28 4A 56 A4 A7 43 97 29 E4 CF AE 7D 2F 90  |  (JVC)Ϯ}/
032   22 00 00 00 00 00 00 00 21 00 04 00 00 00 00 00  |  ".......!.......
048   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
064   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
128   A4 BB 94 DE D1 06 40 4D A1 6A BF D5 01 79 D6 AC  |  .@Mj.y֬
144   B1 45 D0 67 CA 4D 39 4E AC 96 6D C9 BE 78 C3 D3  |  EgM9Nmɾx
160   00 08 04 00 00 00 00 00 FF 67 0D 00 00 00 00 00  |  .........g......
176   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   28 73 2A C1 1F F8 D2 11 BA 4B 00 A0 C9 3E C9 3B  |  (s*..K. >;
272   8C CE CE A2 88 1C 2E 4F 92 17 AB 25 A0 D7 88 C7  |  ΢..O.% ׈
288   00 68 0D 00 00 00 00 00 FF 7F 10 00 00 00 00 00  |  .h.............
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   A2 A0 D0 EB E5 B9 33 44 87 C0 68 B6 B7 26 99 C7  |   3Dh&
400   F8 3A 0D 5E 15 6B 3E 44 90 C9 77 9E 48 E9 96 AC  |  :.^.k>DwH閬
416   00 80 10 00 00 00 00 00 FF 67 70 74 00 00 00 00  |  ........gpt....
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
###
129/005:06/DED> Dump sector requested by user
129/005:06/LOG> SectorDump requested at 1953525167 (121601 80 63)
###
000   45 46 49 20 50 41 52 54 00 00 01 00 5C 00 00 00  |  EFI PART....\...
016   FE E1 9D C6 00 00 00 00 AF 6D 70 74 00 00 00 00  |  ....mpt....
032   01 00 00 00 00 00 00 00 22 00 00 00 00 00 00 00  |  ........".......
048   8E 6D 70 74 00 00 00 00 9B EF 02 04 3F 06 EC 41  |  mpt......?.A
064   9E E8 FD 39 A5 FF CF AF 8F 6D 70 74 00 00 00 00  |  9.ϯmpt....
080   80 00 00 00 80 00 00 00 EF CE 47 06 00 00 00 00  |  ......G.....
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
128   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
144   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
160   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
176   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
272   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
288   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
###
129/006:10/DED> Dump sector requested by user
129/006:10/LOG> SectorDump requested at 29 (0 0 30)
###
000   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
016   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
032   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
048   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
064   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
128   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
144   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
160   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
176   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
272   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
288   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
###
129/006:31/DED> Dump sector requested by user
129/006:31/LOG> SectorDump requested at 34 (0 0 35)
###
000   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
016   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
032   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
048   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
064   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
080   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
128   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
144   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
160   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
176   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
272   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
288   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
###
129/006:48/DED> Exit DiskEditor at 34 (0 0 35)
129/006:48/UND> Undo archive discarded, no sectors saved
129/006:57/MNU> - Main, Quit
129/006:57/LOG> RunTime: 006:57
129/006:57/LOG> ### CLOSE LOG ###


Please advise.
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1472


WWW
« Reply #12 on: January 21, 2017, 12:20:40 PM »

The log shows no sectors that may tamper with the EFI were changed, they're both empty. So no cause for your problem can be detected in this log.

I don't think I have any advice, except for suggesting to follow the 'restore EFI' steps from your other thread. I can see that the EFI backup is different from the original sector, so restoring the backup may fix things. Then again, it may not, I don't know. If I were you I'd do something like this:

- create a backup of the entire disk (either by cloning it or by copying files to safety through iRecover)
- try the gdisk restore trick from your other thread

If that doesn't work out I'd rebuild the disk.
Logged

Pages: [1] Go Up Print 
« previous next »
Jump to:  


Login with username, password and session length

Powered by MySQL Powered by PHP Powered by SMF 1.1.20 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!