NTFS cluster size

[cse_20]

Hi,

I purchased DP with the hope that this Dell laptop I trying to fix for someone will work.
I'm in the process of cloning it to another drive, so I can work with the cloned drive.
But yesterday, I saw that there is a problem with the boot sector of the XP partition, since I did not know what the cluster size was, I left it on automatic, I came in this morning and it had failed to find the cluster size and or fix it.

I also ran the partition rebuild yesterday and now the Dell partition shows up when hooked up to another computer, but the XP gives me a error message, shows up as RAW in windows?
I know you would like the log file, I'll upload it when the cloning is finished.
Any thoughts?
Regards,
cse_20

[cse_20]

BTW, this all started when I was running an anti-virus scan of the laptop drive through a USB adapter from another system.
At one point I got a delay read/write error on $MFT and since then the laptop drive does not boot up when back in the laptop.

Is it a problem with the MFT or the boot sector, xp partition?
Regards,
cse_20

[cse_20]

Here's the dp file log.

I stopped the clone, it was taking too long 54+ hours.
I retried again to fix the boot sector, in the analysis details it says it's 8 sectors per cluster, so I tried 8 and it still failed to fix it.

Please help with some options, Thanks in advance.
Regards,
cse_20

Code:

.../000:04/LOG> ### LOG START ###
.../000:04/LOG> DISKPATCH 3.5.200
.../000:04/LOG> (C) 2000-2008 DIY DataRecovery
.../000:04/LOG> Contact info: HTTP://www.DIYDataRecovery.nl
.../000:04/LOG> MemFree: 70Kb
.../000:04/LOG> CommandLineParms: /sup
.../000:04/LOG> LogDate: 12-18-2008
.../000:04/CFG> FilePath="1/C:\DPFILES\"
.../000:04/CFG> LogFilename="DP.LOG"
.../000:04/CFG> ReadRetries="32"
.../000:04/CFG> WriteRetries="32"
.../000:04/CFG> MaxReadErrors="32"
.../000:04/CFG> MaxWriteErrors="1"
.../000:04/CFG> LogEachReadError="1"
.../000:04/CFG> ReadDelay="0"
.../000:04/CFG> VfyFixedBadSect="1"
.../000:04/CFG> CleanAfterDOD="1"
.../000:04/CFG> DiskReset="1"
.../000:04/CFG> SectorSkip="1024"
.../000:04/CFG> AutoSaveState="1"
.../000:04/CFG> DumpFoundSectors="0"
.../000:04/CFG> FixFats="1"
.../000:04/CFG> MaxFatScan="51200"
.../000:04/CFG> MaxDataColEntries="256"
.../000:04/CFG> IgnoreF8FF="0"
.../000:04/CFG> DownSizeExt="1"
.../000:04/CFG> ScanSignature="55AA"
.../000:04/CFG> Rebuild="00"
.../000:04/13H> Ext13H installed test requested
.../000:04/13H> Disk found at 128
.../000:04/13H> Ext13H version: 2.1 / EDD-1.1
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Ext13H Support: Enhanced disk drive functions
.../000:04/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 128 X13H data : 16383/16/63 156301488/512
.../000:04/13H> Ext13H tested ok
.../000:04/FDL> DiskList requested
.../000:04/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .156301488 | 255 | 63 | .74 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:05/IAS> AdmiSector found on disk 0 (128)
.../000:05/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:05/WAS> AdmiSectors in use : 0+
.../000:05/KEY> DEMO/1
.../000:05/PFC> PQstuff signature not detected on disk 0 (128)
.../000:05/PFC> UDMA driver not loaded
.../000:05/PFC> Disk health 50-100
.../000:07/PFC> Partition State backup not found on disk 0 (128)
.../000:07/PFC> Last Repair (R) for disk 0 (128) performed on 12182008/145824
.../000:18/CSD> Start CheckDisk for disk 0 (128)
.../000:18/CSD> CheckDisk complete, ReadErrors 0
.../000:18/USD> Disk 0 (128) selected
.../000:18/GSC> No geo change detected for disk 0 (128)
.../000:18/WAS> AdmiSectors in use : 0+
128/000:18/USD> MBR for disk 0 (128)
128/000:18/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3???.|?P.P.??.|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ?..PW??.????.?.
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u.??.???.??
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  ??.It.8,t? ?.?.?
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  ??<.t??..?.?.???
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.?F.s*?F.?~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  ?~..t. ?.u?F..?
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..?V..?!.s. ?.?
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  ??>?}U?t.?~..t? 
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  ?.??.W???..?V
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  .?.?.r#??$?????
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  C?????.??B??9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s.?..?.|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  ?N.?V.?.sQOtN2??
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V.?.???V.`??U?A?
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6??U?u0??.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.?B???.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 49 6E 76 61  |  2??V.?.??a??Inva
304   6C 69 64 20 50 61 72 74 69 74 69 6F 6E 20 74 61  |  lid Partition ta
320   62 6C 65 00 45 72 72 6F 72 20 6C 6F 61 64 69 6E  |  ble.Error loadin
336   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
352   65 6D 00 4D 69 73 73 69 6E 67 20 6F 70 65 72 61  |  em.Missing opera
368   74 69 6E 67 20 73 79 73 74 65 6D 00 00 00 00 00  |  ting system.....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 44 63 8C 73 F4 D0 00 00 00 01  |  .....,Dc?s??....
448   01 00 06 FE 3F 05 3F 00 00 00 47 78 01 00 80 00  |  ...??.?...Gx..?.
464   01 06 07 FE FF FF 86 78 01 00 F2 15 EF 08 00 00  |  ...?..?x..?.?...
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U?
###
128/000:18/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:18/VEC> Listing current partitions on disk:
128/000:18/VEC>    FAT16 (P)  DellUtility          63       96327       (0 Gb)
128/000:18/VEC>     NTFS (P)                    96390   149886450      (71 Gb)
128/000:18/VEC> Partition Table info for sector 0 (0 0 1)
128/000:18/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..06 | ....0...1...1 | ....5.254..63 | ........63 | .....96327
..2 .128 | ..07 | ....6...0...1 | .1023.254..63 | .....96390 | .149886450
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:18/VEC> 55AA sig Ok
128/000:18/LOG> Boot sector dump requested at 63 (0 1 1)
### BootSectorDump for BStype FAT16
...........Jump Code (hex): EB4A90
............OEM Name (txt): Dell 8.0
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 4
....Reserved Sectors (dec): 1
...........FAT count (dec): 2
....Root Entry Count (dec): 512
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): F8
.......FAT Size (16) (dec): 94
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 63
..Total Sectors (32) (dec): 96327
........Drive Number (hex): 80
............Reserved (hex): 00
......Boot Signature (hex): 29
...........Volume ID (hex): 07D6050F
........Volume Label (txt): DellUtility
..Filesystem Type ID (txt): FAT16
....Sector Signature (hex): AA55
..........1st FAT at      : 64 (0 1 2)
..........2nd FAT at      : 158 (0 2 33)
128/000:18/CF8> FAT sectors are equal
128/000:18/LOG> SectorDump requested at 252 (0 4 1)
###
     Ac.o.m.m.a. COMMAND COM DELLBIO BIN DELLRMK BIN
     CONFIG  BTS DELL        DIR     LST SEAL    EXE
     Ac.o.n.f.i. CONFIG  SYS SEAL    INI AUTOEXECUP 
     AA.d.a.p.t. ADAPTEC MDM AA.d.a.p.t. ADAPTEC2MDM
###
128/000:18/LOG> Boot sector dump requested at 96390 (6 0 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 96390
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 149886449
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 16
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 7448D20748D1C84E
........Volume Label (txt):
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/000:18/VEC> BS and BBS equal
128/000:18/VEC> Verify EPBR Chain completed
128/000:19/USD> Select disk completed
128/000:21/SCN> DiskScan requested, ScanType is 3
128/000:21/SCN> from 0 (0 0 1) to 156301487 (9729 80 63), 156301488 sectors
128/000:21/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:21/SCN> Next QuickScan location at 96390 (6 0 1)
128/000:22/SCN> Next QuickScan location at 149982840 (9336 0 1)
128/000:22/SCN> Next QuickScan location at 0 (0 0 1)
128/000:23/SCN> QuickScan finished
128/000:23/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/006:26/SCN> SmartScan finished
128/006:26/SCN> DiskScan completed
128/006:26/SCN> ReadErrors for disk 0 (128): 0
128/007:24/LOG> DataCollection items found: 14 / 4
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....96327 | PRI | .
002 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI | .
003 | 128 | .....96390 | ...NTFS | ..BS | .....96390 | .149886450 | PRI | .
004 | 128 | .149982839 | ...NTFS | .BBS | .....96390 | .149886450 | PRI | .
005 | 128 | .........0 | ..FAT16 | PTE1 | ........63 | .....96327 | PRI | .
006 | 128 | .........0 | ...NTFS | PTE2 | .....96390 | .149886450 | PRI | .
007 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....96327 | PRI | I
008 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI | I
009 | 128 | .....96390 | ...NTFS | ..BS | .....96390 | .149886450 | PRI | I
010 | 128 | .149982839 | ...NTFS | .BBS | .....96390 | .149886450 | PRI | I
011 | 128 | .149998905 | ..FAT32 | ..BS | .149998905 | ...6297480 | PRI | .
012 | 128 | .149998911 | ..FAT32 | .BBS | .149998905 | ...6297480 | PRI | .
013 | 128 | .149998922 | ...NTFS | PTE2 | .150095312 | .149886450 | LOG | .
014 | 128 | .149998937 | ..FAT32 | F8FF | .149998905 | .......... | PRI | .
128/007:24/LOG> DataCollection items found: 14 / 4
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....96327 | PRI
002 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI
003 | 128 | .....96390 | ...NTFS | ..BS | .....96390 | .149886450 | PRI
004 | 128 | .149982839 | ...NTFS | .BBS | .....96390 | .149886450 | PRI
005 | 128 | .........0 | ..FAT16 | PTE1 | ........63 | .....96327 | PRI
006 | 128 | .........0 | ...NTFS | PTE2 | .....96390 | .149886450 | PRI
011 | 128 | .149998905 | ..FAT32 | ..BS | .149998905 | ...6297480 | PRI
012 | 128 | .149998911 | ..FAT32 | .BBS | .149998905 | ...6297480 | PRI
013 | 128 | .149998922 | ...NTFS | PTE2 | .150095312 | .149886450 | LOG
014 | 128 | .149998937 | ..FAT32 | F8FF | .149998905 | .......... | PRI
128/007:24/LOG> PartList items created: 4
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ..FAT16 | ..5 | ..1 | ..0 | ..8 | ..5 | ..5 | ..5 | 4 | ..A
002 | ...NTFS | ..6 | ..3 | ..4 | ..0 | ..6 | ..6 | ..6 | 3 | ..A
003 | ..FAT32 | ... | .11 | .12 | .14 | .11 | .11 | .11 | 3 | ..A
004 | ...NTFS | .13 | ... | ... | ..0 | .13 | .13 | .13 | 1 | ...
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ..FAT16 | ........63 | .....96327 | .....96389 | PRI | ..A | ..X
002 | ...NTFS | .....96390 | .149886450 | .149982839 | PRI | ..A | ..X
003 | ..FAT32 | .149998905 | ...6297480 | .156296384 | PRI | ..A | ..X
004 | ...NTFS | .150095312 | .149886450 | .299981761 | LOG | ... | ..?
128/007:24/SST> SaveState requested for disk 0 (128)
128/007:24/WAS> AdmiSectors in use : 0+
128/007:24/SST> SaveState completed for disk 0 (128)
128/007:24/EXE> Analysis complete
128/007:28/LOG> RunTime: 007:28
128/007:28/LOG> ### CLOSE LOG ###

[Joep]

Hello,

Well, partition table and boot sector look valid as they are.

But yesterday, I saw that there is a problem with the boot sector of the XP partition

What problem and where did you see that?

I also ran the partition rebuild yesterday and now the Dell partition shows up when hooked up to another computer

And it didn't before? Show up when hooking it up to another computer?

Do you have some Linux live rescue CD, or can you get one? Because Linux is more forgiving when it somes to file system errors. It wouldn't be the first time it mounts a partition Windows thinks is RAW.

Did the clone show anomalies? Because 54+ hours is too long for a healthy disk that size. Where were you copying to?

[cse_20]

Hi
The system does not boot.
When I hook up the drive to a USB to another computer, all I see is the dell partition, the XP does not show up at all.

I'm trying to get this drive to boot again, what would a linux cd do for me?

I aborted the clone to another drive, bhecause it was taking too long and I need to finish this asap.

So if everything looks good why does it not boot into XP?
What would you do next?
Regards,
cse_20

[Tom]

I'm trying to get this drive to boot again, what would a linux cd do for me?

To be blunt, we don't care about the drive booting or not. It's about accessing the data and saving it to a safe place. Now, with the current boot sector you can not access the volume. The trick when using a linux distri is that linux distris have been known to allow access to volumes that windows doesn't mount: linux is more "forgiving" when it comes to inconsistencies in a volume. So try that, see if the volume can be accessed and if data can be saved.

I aborted the clone to another drive, bhecause it was taking too long and I need to finish this asap.

Yes, we got that but we want to know why the clone is taking so long. If the disk's health has something to do with that you could be in trouble. You should make sure that the disk itself is okay.
Also, cloning to/from USB can take a very long time and is not recommended, could be a cause for the "slow cloning" too.

Since the boot sector and partition table appear to be okay it's possible that the inner structures of the volume are damaged (the delayed write error could have caused damage to the MFT). In that case you should use a tool like iRecover to lift data from the damaged volume. When trying, make sure you start with the demo version, it allows recovery of some files so you can see if it will work for you.