Loss of partition data?

[OlaZ]

Hi!

My system cant boot, I have looked on the hard drive using a bootcd and seems like the disk has lost its partition data. I cant see any files and the diagonstic tool see the disk as "raw" (unformated?).
When I Try too boot the computer it displays the following message :" Operativsystemet kan inte startas" that should be in english "Error Loading operating system".

I turned off my computer yesterday and had no unusual errors and such when turning off, neither have I done anything that should affect the disk that I am aware of . The disk had only one partition.

My system is congfigured like this:
OS: Windows XP with service pack 3 (Swedish)
File system: NTFS

And here is the log file:

Code:

.../000:02/LOG> ### LOG START ###
.../000:02/LOG> DISKPATCH 3.4.100
.../000:02/LOG> (C) 2000-2008 DIY DataRecovery
.../000:02/LOG> Contact info: HTTP://www.DIYDataRecovery.nl
.../000:02/LOG> MemFree: 35Kb
.../000:02/LOG> CommandLineParms:
.../000:02/LOG> LogDate: 05-13-2008
.../000:02/CFG> FilePath="1/.\DPFILES\"
.../000:02/CFG> LogFilename="DP.LOG"
.../000:02/CFG> ReadRetries="32"
.../000:02/CFG> WriteRetries="32"
.../000:02/CFG> MaxReadErrors="32"
.../000:02/CFG> MaxWriteErrors="1"
.../000:02/CFG> ReadDelay="0"
.../000:02/CFG> VfyFixedBadSect="1"
.../000:02/CFG> CleanAfterDOD="1"
.../000:02/CFG> DiskReset="1"
.../000:02/CFG> SectorSkip="1024"
.../000:02/CFG> AutoSaveState="1"
.../000:02/CFG> DumpFoundSectors="0"
.../000:02/CFG> FixFats="1"
.../000:02/CFG> MaxFatScan="51200"
.../000:02/CFG> MaxDataColEntries="256"
.../000:02/CFG> IgnoreF8FF="0"
.../000:02/CFG> DownSizeExt="1"
.../000:02/CFG> ScanSignature="55AA"
.../000:02/CFG> Rebuild="00"
.../000:02/13H> Ext13H installed test requested
.../000:02/13H> Disk found at 128
.../000:02/13H> Ext13H version: EDD-3.0
.../000:02/13H> Ext13H Support: Extended disk access functions
.../000:02/13H> Ext13H Support: Enhanced disk drive functions
.../000:02/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:02/13H> Drive Interface Info :
.../000:02/13H> Disk 128 X13H data : 16383/16/63 488397168/512
.../000:02/13H> Ext13H tested ok
.../000:02/FDL> DiskList requested
.../000:02/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB
128 | .488397168 | 255 | 63 | 232
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
.../000:02/IAS> AdmiSector found on disk 0 (128)
.../000:02/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:02/WAS> AdmiSectors in use : 0+
.../000:13/KEY> DEMO/1
.../000:13/PFC> UDMA driver not loaded
.../000:13/PFC> PQstuff signature not detected on disk 0 (128)
.../000:14/PFC> Partition State backup not found on disk 0 (128)
.../000:14/PFC> No Repair date found on disk 0 (128)
.../000:24/MNU> - Main, Select Disk
.../000:26/CSD> Start CheckDisk for disk 0 (128)
.../000:26/CSD> CheckDisk complete, ReadErrors 0
.../000:26/USD> Disk 0 (128) selected
.../000:26/GSC> No geo change detected for disk 0 (128)
.../000:26/WAS> AdmiSectors in use : 0+
.../000:26/GSC> Geo for disk 0 (128) saved as 0488397168255063
128/000:26/USD> MBR for disk 0 (128)
128/000:26/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3ÀŽÐ¼.|ûP.P.ü¾.|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ¿..PW¹å.ó¤Ë½¾.±.
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u.ƒÅ.âôÍ.‹õ
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  ƒÆ.It.8,tö µ.´.‹
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  ð¬<.tü»..´.Í.ëòˆ
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.èF.s*þF.€~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  €~..t. ¶.uÒ€F..ƒ
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..ƒV..è!.s. ¶.ë
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  ¼�>þ}Uªt.€~..tÈ
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  ·.ë©‹ü.W‹õË¿..ŠV
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  .´.Í.r#ŠÁ$?˜ŠÞŠü
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  C÷ã‹Ñ†Ö±.ÒîB÷â9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s.¸..».|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  ‹N.‹V.Í.sQOtN2äŠ
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V.Í.ëäŠV.`»ªU´AÍ
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6�ûUªu0öÁ.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.´B‹ôÍ.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 4F 67 69 6C  |  2äŠV.Í.ëÖaùÃOgil
304   74 69 67 20 70 61 72 74 69 74 69 6F 6E 73 74 61  |  tig partitionsta
320   62 65 6C 6C 00 4F 70 65 72 61 74 69 76 73 79 73  |  bell.Operativsys
336   74 65 6D 65 74 20 6B 61 6E 20 69 6E 74 65 20 73  |  temet kan inte s
352   74 61 72 74 61 73 00 4F 70 65 72 61 74 69 76 73  |  tartas.Operativs
368   79 73 74 65 6D 20 73 61 6B 6E 61 73 00 00 00 00  |  ystem saknas....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 45 67 03 CB 30 EE 00 00 80 00  |  .....,Eg.Ë0î..€.
448   01 05 07 FE FF FF C5 39 01 00 BC 0B 1B 1D 00 00  |  ...þ..Å9..¼.....
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............Uª
###
128/000:26/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:26/VEC> Listing current partitions on disk:
128/000:26/VEC>     NTFS (P)        (Err)       80325   488311740     (233 Gb)
128/000:26/VEC> Partition Table info for sector 0 (0 0 1)
128/000:26/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..07 | ....5...0...1 | .1023.254..63 | .....80325 | .488311740
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:26/VEC> 55AA sig Ok
128/000:26/LOG> Boot sector dump requested at 80325 (5 0 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): 2A29D4
............OEM Name (txt): ;‡h@z.Ûå
....Bytes per Sector (dec): 4294962468
.Sectors per Cluster (dec): 178
....Reserved Sectors (dec): 6076
..............Unused (hex): D534537EE1
....Media Descriptor (hex): EF
..............Unused (hex): BC31
...Sectors per Track (dec): 7983
.....Heads per Track (dec): 32103
......Hidden Sectors (dec): 1549804206
..............Unused (hex): 85F7F539
.............Unknown (hex): 73CCED40
.......Total Sectors (dec): 388879297
........MFT Location (dec): 3677226973
.MFT Mirror Location (dec): 550547328
....Clusters per FRS (dec): 1882105619
.Clusters/Indx Block (dec): 597991898
...........Volume ID (hex): EB7031E9BFDDB896
........Volume Label (txt): (Err)
............Checksum (hex): 06FB146B
....Sector Signature (hex): 187E
128/000:26/VEC> BS and BBS not equal, dump follows;
128/000:26/LOG> Boot sector dump requested at 488392064 (30400 254 63)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 80325
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 488311739
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 1024143
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 248097EC8097C32C
........Volume Label (txt): Windows5
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/000:26/VEC> Verify EPBR Chain completed
128/000:27/USD> Select disk completed
128/010:04/MNU> - Main, Quit
128/010:05/LOG> RunTime: 010:05
128/010:05/LOG> ### CLOSE LOG ###

Is there any chance to get my files back?

Best regards

Ola Andersson

[Tom]

Even though you didn't post the correct log file (check the read me postings in the forum) this log tells me that it looks like this can be repaired quite easily. Obviously i can't guarantee anything but it looks good. You should try to figure out why this happened (virus? etc.) to make sure it doesn't happen again anytime soon.

It seems that the boot sector (the first sector in the partition) is scrambled. There's a backup though and it seems to be in good shape. What you would have to do is copy the backup to the original location. An automated repair ("rebuild partition tables") should fix this for you.

If you need more details post the support analysis log, i can give a more detailed explanation of what should be done.

[OlaZ]

Thank you!

That's both good and bad news.

Guess I have to clean my computer after I have recovered my files, if it's a virus a format and a reinstall of windows should take care of it .

Here is the logfile:

Code:

.../000:02/LOG> ### LOG START ###
.../000:02/LOG> DISKPATCH 3.4.100
.../000:02/LOG> (C) 2000-2008 DIY DataRecovery
.../000:02/LOG> Contact info: HTTP://www.DIYDataRecovery.nl
.../000:02/LOG> MemFree: 35Kb
.../000:02/LOG> CommandLineParms:
.../000:02/LOG> LogDate: 05-14-2008
.../000:02/CFG> FilePath="1/.\DPFILES\"
.../000:02/CFG> LogFilename="DP.LOG"
.../000:02/CFG> ReadRetries="32"
.../000:02/CFG> WriteRetries="32"
.../000:02/CFG> MaxReadErrors="32"
.../000:02/CFG> MaxWriteErrors="1"
.../000:02/CFG> ReadDelay="0"
.../000:02/CFG> VfyFixedBadSect="1"
.../000:02/CFG> CleanAfterDOD="1"
.../000:02/CFG> DiskReset="1"
.../000:02/CFG> SectorSkip="1024"
.../000:02/CFG> AutoSaveState="1"
.../000:02/CFG> DumpFoundSectors="0"
.../000:02/CFG> FixFats="1"
.../000:02/CFG> MaxFatScan="51200"
.../000:02/CFG> MaxDataColEntries="256"
.../000:02/CFG> IgnoreF8FF="0"
.../000:02/CFG> DownSizeExt="1"
.../000:02/CFG> ScanSignature="55AA"
.../000:02/CFG> Rebuild="00"
.../000:02/13H> Ext13H installed test requested
.../000:02/13H> Disk found at 128
.../000:02/13H> Ext13H version: EDD-3.0
.../000:02/13H> Ext13H Support: Extended disk access functions
.../000:02/13H> Ext13H Support: Enhanced disk drive functions
.../000:02/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:02/13H> Drive Interface Info :
.../000:02/13H> Disk 128 X13H data : 16383/16/63 488397168/512
.../000:02/13H> Ext13H tested ok
.../000:02/FDL> DiskList requested
.../000:02/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB
128 | .488397168 | 255 | 63 | 232
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
.../000:02/IAS> AdmiSector found on disk 0 (128)
.../000:03/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:03/WAS> AdmiSectors in use : 0+
.../000:12/KEY> DEMO/1
.../000:12/PFC> UDMA driver not loaded
.../000:12/PFC> PQstuff signature not detected on disk 0 (128)
.../000:13/PFC> Partition State backup not found on disk 0 (128)
.../000:14/PFC> No Repair date found on disk 0 (128)
.../000:22/MNU> - Main, Select Disk
.../000:24/CSD> Start CheckDisk for disk 0 (128)
.../000:24/CSD> CheckDisk complete, ReadErrors 0
.../000:24/USD> Disk 0 (128) selected
.../000:24/GSC> No geo change detected for disk 0 (128)
.../000:24/WAS> AdmiSectors in use : 0+
.../000:24/GSC> Geo for disk 0 (128) saved as 0488397168255063
128/000:24/USD> MBR for disk 0 (128)
128/000:24/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3???.|?P.P.??.|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ?..PW??.????.?.
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u.??.???.??
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  ??.It.8,t? ?.?.?
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  ??<.t??..?.?.???
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.?F.s*?F.?~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  ?~..t. ?.u?F..?
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..?V..?!.s. ?.?
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  ??>?}U?t.?~..t?
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  ?.??.W???..?V
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  .?.?.r#??$?????
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  C?????.??B??9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s.?..?.|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  ?N.?V.?.sQOtN2??
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V.?.???V.`??U?A?
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6??U?u0??.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.?B???.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 4F 67 69 6C  |  2??V.?.??a??Ogil
304   74 69 67 20 70 61 72 74 69 74 69 6F 6E 73 74 61  |  tig partitionsta
320   62 65 6C 6C 00 4F 70 65 72 61 74 69 76 73 79 73  |  bell.Operativsys
336   74 65 6D 65 74 20 6B 61 6E 20 69 6E 74 65 20 73  |  temet kan inte s
352   74 61 72 74 61 73 00 4F 70 65 72 61 74 69 76 73  |  tartas.Operativs
368   79 73 74 65 6D 20 73 61 6B 6E 61 73 00 00 00 00  |  ystem saknas....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 45 67 03 CB 30 EE 00 00 80 00  |  .....,Eg.?0?..?.
448   01 05 07 FE FF FF C5 39 01 00 BC 0B 1B 1D 00 00  |  ...?..?9..?.....
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U?
###
128/000:24/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:24/VEC> Listing current partitions on disk:
128/000:24/VEC>     NTFS (P)        (Err)       80325   488311740     (233 Gb)
128/000:24/VEC> Partition Table info for sector 0 (0 0 1)
128/000:24/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..07 | ....5...0...1 | .1023.254..63 | .....80325 | .488311740
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:24/VEC> 55AA sig Ok
128/000:24/LOG> Boot sector dump requested at 80325 (5 0 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): 2A29D4
............OEM Name (txt): ;?h@z.??
....Bytes per Sector (dec): 4294962468
.Sectors per Cluster (dec): 178
....Reserved Sectors (dec): 6076
..............Unused (hex): D534537EE1
....Media Descriptor (hex): EF
..............Unused (hex): BC31
...Sectors per Track (dec): 7983
.....Heads per Track (dec): 32103
......Hidden Sectors (dec): 1549804206
..............Unused (hex): 85F7F539
.............Unknown (hex): 73CCED40
.......Total Sectors (dec): 388879297
........MFT Location (dec): 3677226973
.MFT Mirror Location (dec): 550547328
....Clusters per FRS (dec): 1882105619
.Clusters/Indx Block (dec): 597991898
...........Volume ID (hex): EB7031E9BFDDB896
........Volume Label (txt): (Err)
............Checksum (hex): 06FB146B
....Sector Signature (hex): 187E
128/000:24/VEC> BS and BBS not equal, dump follows;
128/000:24/LOG> Boot sector dump requested at 488392064 (30400 254 63)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 80325
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 488311739
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 1024143
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 248097EC8097C32C
........Volume Label (txt): Windows5
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/000:24/VEC> Verify EPBR Chain completed
128/000:25/USD> Select disk completed
128/000:30/MNU> - Support, Analyze Disk (no repair, create log)
128/000:32/SCN> DiskScan requested, ScanType is 3
128/000:32/SCN> from 0 (0 0 1) to 488397167 (30401 80 63), 488397168 sectors
128/000:32/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:32/SCN> Next QuickScan location at 80325 (5 0 1)
128/000:33/SCN> Next QuickScan location at 0 (0 0 1)
128/000:33/SCN> QuickScan finished
128/000:33/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/016:24/SCN> SmartScan finished
128/016:24/SCN> DiskScan completed
128/016:24/SCN> ReadErrors for disk 0 (128): 0
128/030:53/LOG> DataCollection items found: 7 / 2
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....80262 | PRI | .
002 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI | .
003 | 128 | .........0 | ...NTFS | PTE1 | .....80325 | .488311740 | PRI | .
004 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....80262 | PRI | I
005 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI | I
006 | 128 | .488392064 | ...NTFS | .BBS | .....80325 | .488311740 | PRI | .
007 | 128 | .488397167 | ...NTFS | .BBS | .........0 | .488397168 | PRI | .
128/030:53/LOG> DataCollection items found: 7 / 2
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....80262 | PRI
002 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI
003 | 128 | .........0 | ...NTFS | PTE1 | .....80325 | .488311740 | PRI
006 | 128 | .488392064 | ...NTFS | .BBS | .....80325 | .488311740 | PRI
007 | 128 | .488397167 | ...NTFS | .BBS | .........0 | .488397168 | PRI
128/030:53/LOG> PartList items created: 3
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ... | ... | ..7 | --- | ..7 | ..7 | ..7 | 1 | ..B
002 | ..FAT16 | ... | ..1 | --- | ..5 | ..1 | ..1 | ..1 | 3 | ..A
003 | ...NTFS | ..3 | ... | ..6 | --- | ..3 | ..3 | ..3 | 2 | ..B
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R
001 | ...NTFS | .........0 | .488397168 | .488397167 | PRI | ..B
002 | ..FAT16 | ........63 | .....80262 | .....80324 | PRI | ..A
003 | ...NTFS | .....80325 | .488311740 | .488392064 | PRI | ..B
128/030:53/SST> SaveState requested for disk 0 (128)
128/030:55/WAS> AdmiSectors in use : 0+
128/030:55/SST> SaveState completed for disk 0 (128)
128/030:56/EXE> Analysis complete
128/031:50/MNU> - Main, Quit
128/031:50/LOG> RunTime: 031:50
128/031:50/LOG> ### CLOSE LOG ###

And the information in the DPSTATE file:

"3.4.100   255       63        488397168 CD9087C32DC2CE2F    7         3         0         "
"128","63","FAT16","BS","63","80262","PRI","I"
"128","64","FAT16","F8FF","63","","PRI","I"
"128","0","NTFS","PTE1","80325","488311740","PRI","I"
"128","63","FAT16","BS","63","80262","PRI","I"
"128","64","FAT16","F8FF","63","","PRI","I"
"128","488392064","NTFS","BBS","80325","488311740","PRI","I"
"128","488397167","NTFS","BBS","0","488397168","PRI","I"
"NTFS","","","7","---","7","7","7","1","B","","",""
"FAT16","","1","---","5","1","1","1","3","A","","",""
"NTFS","3","","6","---","3","3","3","2","B","","",""

I now understand why I was recommended to ask in this forum, great support staff;D

[Tom]

This is the list of partitions found:

Code:

SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R
001 | ...NTFS | .........0 | .488397168 | .488397167 | PRI | ..B
002 | ..FAT16 | ........63 | .....80262 | .....80324 | PRI | ..A
003 | ...NTFS | .....80325 | .488311740 | .488392064 | PRI | ..B

My (educated) guess would be partition 3 in this list, so that's the one you would have to select if you'd be performing a repair.
Please note that this list appears on your screen just like this, after starting a rebuild partition operation.

You can read a walkthrough on how to do this by looking here:
http://www.diydatarecovery.nl/dp_manual/guide_ptrepair.htm

There's also a method that's a bit more hands on but we'll save that for when really needed.

Mind you, if you wish to go ahead you'll need to buy a license: the trial version can be used to diagnose the problem but can not perform repairs.

[OlaZ]

Hi!

I bought a license and did the recovery but my computer do not boot anyway, all the files are back and I have backed up my most important stuff using another bootcd.

I have activated the partition as described in this guide http://www.diydatarecovery.nl/dp_manual/guide_partattr.htm.
When the computer boots up I only get a flashing underline and nothing more happens. Do I have to refresh the MBR boot code?

Here is a new logfile:

Code:

.../000:02/LOG> ### LOG START ###
.../000:02/LOG> DISKPATCH 3.4.100
.../000:02/LOG> (C) 2000-2008 DIY DataRecovery
.../000:02/LOG> Contact info: HTTP://www.DIYDataRecovery.nl
.../000:02/LOG> MemFree: 35Kb
.../000:02/LOG> CommandLineParms:
.../000:02/LOG> LogDate: 05-14-2008
.../000:02/CFG> FilePath="1/.\DPFILES\"
.../000:02/CFG> LogFilename="DP.LOG"
.../000:02/CFG> ReadRetries="32"
.../000:02/CFG> WriteRetries="32"
.../000:02/CFG> MaxReadErrors="32"
.../000:02/CFG> MaxWriteErrors="1"
.../000:02/CFG> ReadDelay="0"
.../000:02/CFG> VfyFixedBadSect="1"
.../000:02/CFG> CleanAfterDOD="1"
.../000:02/CFG> DiskReset="1"
.../000:02/CFG> SectorSkip="1024"
.../000:02/CFG> AutoSaveState="1"
.../000:02/CFG> DumpFoundSectors="0"
.../000:02/CFG> FixFats="1"
.../000:02/CFG> MaxFatScan="51200"
.../000:02/CFG> MaxDataColEntries="256"
.../000:02/CFG> IgnoreF8FF="0"
.../000:02/CFG> DownSizeExt="1"
.../000:02/CFG> ScanSignature="55AA"
.../000:02/CFG> Rebuild="00"
.../000:02/13H> Ext13H installed test requested
.../000:02/13H> Disk found at 128
.../000:02/13H> Ext13H version: EDD-3.0
.../000:02/13H> Ext13H Support: Extended disk access functions
.../000:02/13H> Ext13H Support: Enhanced disk drive functions
.../000:02/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:02/13H> Drive Interface Info :
.../000:02/13H> Disk 128 X13H data : 16383/16/63 488397168/512
.../000:02/13H> Ext13H tested ok
.../000:02/FDL> DiskList requested
.../000:02/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB
128 | .488397168 | 255 | 63 | 232
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
.../000:02/IAS> AdmiSector found on disk 0 (128)
.../000:03/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:03/WAS> AdmiSectors in use : 0+
.../000:03/KEY> 17O4O8O1OO/4
.../000:03/PFC> UDMA driver not loaded
.../000:03/PFC> PQstuff signature not detected on disk 0 (128)
.../000:04/PFC> Partition State backup not found on disk 0 (128)
.../000:04/PFC> Last Repair (R) for disk 0 (128) performed on 05142008/072251
.../000:13/MNU> - Main, Select Disk
.../000:17/CSD> Start CheckDisk for disk 0 (128)
.../000:17/CSD> CheckDisk complete, ReadErrors 0
.../000:17/USD> Disk 0 (128) selected
.../000:17/GSC> No geo change detected for disk 0 (128)
.../000:17/WAS> AdmiSectors in use : 0+
.../000:17/GSC> Geo for disk 0 (128) saved as 0488397168255063
128/000:17/USD> MBR for disk 0 (128)
128/000:17/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3???.|?P.P.??.|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ?..PW??.????.?.
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u.??.???.??
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  ??.It.8,t? ?.?.?
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  ??<.t??..?.?.???
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.?F.s*?F.?~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  ?~..t. ?.u?F..?
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..?V..?!.s. ?.?
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  ??>?}U?t.?~..t?
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  ?.??.W???..?V
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  .?.?.r#??$?????
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  C?????.??B??9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s.?..?.|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  ?N.?V.?.sQOtN2??
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V.?.???V.`??U?A?
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6??U?u0??.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.?B???.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 4F 67 69 6C  |  2??V.?.??a??Ogil
304   74 69 67 20 70 61 72 74 69 74 69 6F 6E 73 74 61  |  tig partitionsta
320   62 65 6C 6C 00 4F 70 65 72 61 74 69 76 73 79 73  |  bell.Operativsys
336   74 65 6D 65 74 20 6B 61 6E 20 69 6E 74 65 20 73  |  temet kan inte s
352   74 61 72 74 61 73 00 4F 70 65 72 61 74 69 76 73  |  tartas.Operativs
368   79 73 74 65 6D 20 73 61 6B 6E 61 73 00 00 00 00  |  ystem saknas....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 45 67 03 CB 30 EE 00 00 80 00  |  .....,Eg.?0?..?.
448   01 05 07 FE FF FF C5 39 01 00 BC 0B 1B 1D 00 00  |  ...?..?9..?.....
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U?
###
128/000:18/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:18/VEC> Listing current partitions on disk:
128/000:18/VEC>     NTFS (P)     Windows5       80325   488311740     (233 Gb)
128/000:18/VEC> Partition Table info for sector 0 (0 0 1)
128/000:18/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..07 | ....5...0...1 | .1023.254..63 | .....80325 | .488311740
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:18/VEC> 55AA sig Ok
128/000:18/LOG> Boot sector dump requested at 80325 (5 0 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 80325
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 488311739
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 1024143
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 248097EC8097C32C
........Volume Label (txt): Windows5
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/000:18/VEC> BS and BBS equal
128/000:18/VEC> Verify EPBR Chain completed
128/000:19/USD> Select disk completed
128/000:31/MNU> - Support, Analyze Disk (no repair, create log)
128/000:35/SCN> DiskScan requested, ScanType is 3
128/000:35/SCN> from 0 (0 0 1) to 488397167 (30401 80 63), 488397168 sectors
128/000:35/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/000:35/SCN> Next QuickScan location at 80325 (5 0 1)
128/000:35/SCN> Next QuickScan location at 488392065 (30401 0 1)
128/000:36/SCN> Next QuickScan location at 0 (0 0 1)
128/000:37/SCN> QuickScan finished
128/000:37/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/016:27/SCN> SmartScan finished
128/016:27/SCN> DiskScan completed
128/016:27/SCN> ReadErrors for disk 0 (128): 0
128/017:38/LOG> DataCollection items found: 11 / 4
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....80262 | PRI | .
002 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI | .
003 | 128 | .....80325 | ...NTFS | ..BS | .....80325 | .488311740 | PRI | .
004 | 128 | .488392063 | ...NTFS | ..BS | .488392063 | .488311740 | PRI | .
005 | 128 | .488392064 | ...NTFS | .BBS | .....80325 | .488311740 | PRI | .
006 | 128 | .........0 | ...NTFS | PTE1 | .....80325 | .488311740 | PRI | .
007 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....80262 | PRI | I
008 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI | I
009 | 128 | .....80325 | ...NTFS | ..BS | .....80325 | .488311740 | PRI | I
010 | 128 | .488392064 | ...NTFS | .BBS | .....80325 | .488311740 | PRI | I
011 | 128 | .488397167 | ...NTFS | .BBS | .........0 | .488397168 | PRI | .
128/017:38/LOG> DataCollection items found: 11 / 4
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | ........63 | ..FAT16 | ..BS | ........63 | .....80262 | PRI
002 | 128 | ........64 | ..FAT16 | F8FF | ........63 | .......... | PRI
003 | 128 | .....80325 | ...NTFS | ..BS | .....80325 | .488311740 | PRI
004 | 128 | .488392063 | ...NTFS | ..BS | .488392063 | .488311740 | PRI
005 | 128 | .488392064 | ...NTFS | .BBS | .....80325 | .488311740 | PRI
006 | 128 | .........0 | ...NTFS | PTE1 | .....80325 | .488311740 | PRI
011 | 128 | .488397167 | ...NTFS | .BBS | .........0 | .488397168 | PRI
128/017:38/LOG> PartList items created: 4
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ... | ... | .11 | --- | .11 | .11 | .11 | 1 | ..B
002 | ..FAT16 | ... | ..1 | --- | ..8 | ..1 | ..1 | ..1 | 3 | ..A
003 | ...NTFS | ..6 | ..3 | ..5 | --- | ..6 | ..6 | ..6 | 3 | ..A
004 | ...NTFS | ... | ..4 | ... | --- | ..4 | ..4 | ..4 | 1 | ..B
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R
001 | ...NTFS | .........0 | .488397168 | .488397167 | PRI | ..B
002 | ..FAT16 | ........63 | .....80262 | .....80324 | PRI | ..A
003 | ...NTFS | .....80325 | .488311740 | .488392064 | PRI | ..A
004 | ...NTFS | .488392063 | .488311740 | .976703802 | PRI | ..B
128/017:39/SST> SaveState requested for disk 0 (128)
128/017:40/WAS> AdmiSectors in use : 0+
128/017:41/SST> SaveState completed for disk 0 (128)
128/017:41/EXE> Analysis complete
128/021:56/MNU> - Main, Quit
128/021:56/LOG> RunTime: 021:56
128/021:56/LOG> ### CLOSE LOG ###

[Tom]

I bought a license and did the recovery but my computer do not boot anyway, all the files are back and I have backed up my most important stuff using another bootcd.

Ok, well done.

I have activated the partition as described in this guide http://www.diydatarecovery.nl/dp_manual/guide_partattr.htm.
When the computer boots up I only get a flashing underline and nothing more happens. Do I have to refresh the MBR boot code?

Well, there's no harm doing that so you can try, but it's probably not the problem. From your description is difficult to understand what's happening, but if the partition is accessible and you've copied your stuff to safety, it has to be a windows thing. There's a small chance that the disk's health may have something to do with it (you can run a disk surface scan for the partition to see if that's the case) but i think windows itself is messed up. So that would mean doing a reinstall or doing a windows repair. As long as your files are already safe you can always try.

I know that having to reinstall/repair is a pain but getting the files back is the main thing, and that worked out good.