Welcome, Guest. Please login or register.
Did you miss your activation email?
May 24, 2019, 03:11:12 AM
Home Help Search Login Register
News:

+  DIY DataRecovery.nl Support forum
|-+  Support
| |-+  DiskPatch (Moderators: Tom, Joep)
| | |-+  No A:\ to write Analysis log
0 Members and 1 Guest are viewing this topic. « previous next »
Pages: [1] Go Down Print
Author Topic: No A:\ to write Analysis log  (Read 8326 times)
petitfred
member

Posts: 3


« on: May 28, 2008, 09:57:48 PM »

Hello
How could the log file be written on a USB stick in stead of A:?
Thanks
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1476


WWW
« Reply #1 on: May 29, 2008, 08:44:41 AM »

There are a number of ways to do that. The most simple way is this:

Make sure the usb stick is formatted as FAT or FAT32 (you can use windows to do this). Then copy the DP.EXE file from the bootable diskette to the usb stick. Start from the DiskPatch bootable diskette as you normally would and exit the menu. You should now be at the DOS prompt. Logon to the USB drive (by typing C: <enter> or D: <enter>; you'll have try to see which drive letter had been assigned to the volume on the usb stick, but it should most likely be c or d or somehere in that region. you can check by typing DIR <enter> to see if the DP.EXE file is there). Then start DiskPatch from the usb drive by typing DP.EXE and pressing enter.

You will have to make sure though that the pc recognizes the usb stick from DOS. Almost al modern PCs do, but you may need to enable usb legacy support (or something similar) in the BIOS.

It's clear to me now that this can be a rather daunting prospect for people that are not familiar with DOS. My excuse for not doing this earlier is that most people still use the bootable diskette, but that is changing. I'll update the manual to explain this more clearly and we'll make sure that future DiskPatch versions have a better way to deal with this.
Logged

petitfred
member

Posts: 3


« Reply #2 on: May 29, 2008, 02:01:28 PM »

Thanks for the advice.
I have managed to generate a Analysis Log File. Would you be able to review it and let me know what my options are to recover the partition/data, please?

Code:
.../000:01/LOG> ### LOG START ###
.../000:01/LOG> DISKPATCH 3.4.100
.../000:01/LOG> (C) 2000-2008 DIY DataRecovery
.../000:01/LOG> Contact info: HTTP://www.DIYDataRecovery.nl
.../000:01/LOG> MemFree: 77Kb
.../000:01/LOG> CommandLineParms:
.../000:01/LOG> LogDate: 05-29-2008
.../000:01/CFG> FilePath="1/.\DPFILES\"
.../000:01/CFG> LogFilename="DP.LOG"
.../000:01/CFG> ReadRetries="32"
.../000:01/CFG> WriteRetries="32"
.../000:01/CFG> MaxReadErrors="32"
.../000:01/CFG> MaxWriteErrors="1"
.../000:01/CFG> ReadDelay="0"
.../000:01/CFG> VfyFixedBadSect="1"
.../000:01/CFG> CleanAfterDOD="1"
.../000:01/CFG> DiskReset="1"
.../000:01/CFG> SectorSkip="1024"
.../000:01/CFG> AutoSaveState="1"
.../000:01/CFG> DumpFoundSectors="0"
.../000:01/CFG> FixFats="1"
.../000:01/CFG> MaxFatScan="51200"
.../000:01/CFG> MaxDataColEntries="256"
.../000:01/CFG> IgnoreF8FF="0"
.../000:01/CFG> DownSizeExt="1"
.../000:01/CFG> ScanSignature="55AA"
.../000:01/CFG> Rebuild="00"
.../000:01/13H> Ext13H installed test requested
.../000:01/13H> Disk found at 128
.../000:01/13H> Ext13H version: EDD-3.0
.../000:01/13H> Ext13H Support: Extended disk access functions
.../000:01/13H> Ext13H Support: Enhanced disk drive functions
.../000:01/13H> Drive Interface Info : ATA
.../000:01/13H> Disk 128 X13H data : 16383/16/63 117210240/512
.../000:01/13H> Ext13H tested ok
.../000:01/FDL> DiskList requested
.../000:01/FDL> Disk found at 128
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB
128 | .117210240 | 255 | 63 | .55
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
..0 | .........0 | ..0 | .0 | ..0
.../000:01/IAS> AdmiSector found on disk 0 (128)
.../000:01/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:01/WAS> AdmiSectors in use : 0+
.../000:23/KEY> DEMO/1
.../000:24/PFC> UDMA driver not loaded
.../000:24/PFC> PQstuff signature detected on disk 0 (128)
.../000:24/PFC> Partition State backup not found on disk 0 (128)
.../000:25/PFC> No Repair date found on disk 0 (128)
.../000:39/MNU> - Support, Analyze Disk (no repair, create log)
.../000:48/MNU> - Main, Select Disk
.../000:51/CSD> Start CheckDisk for disk 0 (128)
.../000:52/CSD> CheckDisk complete, ReadErrors 0
.../000:52/USD> Disk 0 (128) selected
.../000:52/GSC> No geo change detected for disk 0 (128)
.../000:52/WAS> AdmiSectors in use : 0+
.../000:52/GSC> Geo for disk 0 (128) saved as 0117210240255063
128/000:52/USD> MBR for disk 0 (128)
128/000:52/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C FB 50 07 50 1F FC BE 1B 7C  |  3???.|?P.P.??.|
016   BF 1B 06 50 57 B9 E5 01 F3 A4 CB BD BE 07 B1 04  |  ?..PW??.????.?.
032   38 6E 00 7C 09 75 13 83 C5 10 E2 F4 CD 18 8B F5  |  8n.|.u.??.???.??
048   83 C6 10 49 74 19 38 2C 74 F6 A0 B5 07 B4 07 8B  |  ??.It.8,t? ?.?.?
064   F0 AC 3C 00 74 FC BB 07 00 B4 0E CD 10 EB F2 88  |  ??<.t??..?.?.???
080   4E 10 E8 46 00 73 2A FE 46 10 80 7E 04 0B 74 0B  |  N.?F.s*?F.?~..t.
096   80 7E 04 0C 74 05 A0 B6 07 75 D2 80 46 02 06 83  |  ?~..t. ?.u?F..?
112   46 08 06 83 56 0A 00 E8 21 00 73 05 A0 B6 07 EB  |  F..?V..?!.s. ?.?
128   BC 81 3E FE 7D 55 AA 74 0B 80 7E 10 00 74 C8 A0  |  ??>?}U?t.?~..t? 
144   B7 07 EB A9 8B FC 1E 57 8B F5 CB BF 05 00 8A 56  |  ?.??.W???..?V
160   00 B4 08 CD 13 72 23 8A C1 24 3F 98 8A DE 8A FC  |  .?.?.r#??$?????
176   43 F7 E3 8B D1 86 D6 B1 06 D2 EE 42 F7 E2 39 56  |  C?????.??B??9V
192   0A 77 23 72 05 39 46 08 73 1C B8 01 02 BB 00 7C  |  .w#r.9F.s.?..?.|
208   8B 4E 02 8B 56 00 CD 13 73 51 4F 74 4E 32 E4 8A  |  ?N.?V.?.sQOtN2??
224   56 00 CD 13 EB E4 8A 56 00 60 BB AA 55 B4 41 CD  |  V.?.???V.`??U?A?
240   13 72 36 81 FB 55 AA 75 30 F6 C1 01 74 2B 61 60  |  .r6??U?u0??.t+a`
256   6A 00 6A 00 FF 76 0A FF 76 08 6A 00 68 00 7C 6A  |  j.j..v..v.j.h.|j
272   01 6A 10 B4 42 8B F4 CD 13 61 61 73 0E 4F 74 0B  |  .j.?B???.aas.Ot.
288   32 E4 8A 56 00 CD 13 EB D6 61 F9 C3 49 6E 76 61  |  2??V.?.??a??Inva
304   6C 69 64 20 70 61 72 74 69 74 69 6F 6E 20 74 61  |  lid partition ta
320   62 6C 65 00 45 72 72 6F 72 20 6C 6F 61 64 69 6E  |  ble.Error loadin
336   67 20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74  |  g operating syst
352   65 6D 00 4D 69 73 73 69 6E 67 20 6F 70 65 72 61  |  em.Missing opera
368   74 69 6E 67 20 73 79 73 74 65 6D 00 00 00 00 00  |  ting system.....
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 2C 44 63 05 94 5F 6E 00 00 80 01  |  .....,Dc.?_n..?.
448   01 00 07 FE FF FF 3F 00 00 00 80 3D FC 06 00 00  |  ...?..?...?=?...
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............U?
###
128/000:52/VEC> Start Verify EPBR Chain for disk 0 (128)
128/000:52/VEC> Listing current partitions on disk:
128/000:52/VEC>     NTFS (P)        (Err)          63   117194112      (56 Gb)
128/000:52/VEC> Partition Table info for sector 0 (0 0 1)
128/000:52/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 .128 | ..07 | ....0...1...1 | .1023.254..63 | ........63 | .117194112
..2 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..3 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
128/000:52/VEC> 55AA sig Ok
128/000:52/LOG> Boot sector dump requested at 63 (0 1 1)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): 000000
............OEM Name (txt): ........
....Bytes per Sector (dec): 0
.Sectors per Cluster (dec): 0
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): 00
..............Unused (hex): 0000
...Sectors per Track (dec): 0
.....Heads per Track (dec): 0
......Hidden Sectors (dec): 0
..............Unused (hex): 00000000
.............Unknown (hex): 00000000
.......Total Sectors (dec): 0
........MFT Location (dec): 0
.MFT Mirror Location (dec): 0
....Clusters per FRS (dec): 0
.Clusters/Indx Block (dec): 0
...........Volume ID (hex): 0000000000000000
........Volume Label (txt): (Err)
............Checksum (hex): 00000000
....Sector Signature (hex): 0000
128/000:52/VEC> BS and BBS not equal, dump follows;
128/000:52/LOG> Boot sector dump requested at 117194174 (7294 254 63)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 63
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 117194111
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 7324631
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 6058C09158C0677E
........Volume Label (txt): (no name)
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
128/000:52/VEC> Verify EPBR Chain completed
128/000:52/USD> Select disk completed
128/001:00/MNU> - Support, Analyze Disk (no repair, create log)
128/001:04/SCN> DiskScan requested, ScanType is 3
128/001:04/SCN> from 0 (0 0 1) to 117210239 (7295 254 63), 117210240 sectors
128/001:04/SCN> Starting QuickScan (pre-vista) at 63 (0 1 1)
128/001:04/CDC> No DataCollection entries, CleanDatacollection aborted
128/001:04/MPL> No DataCollection entries, MakePartList aborted
128/001:04/SCN> Next QuickScan location at 0 (0 0 1)
128/001:05/SCN> QuickScan finished
128/001:05/SCN> Starting SmartScan (pre-vista) at 0 (0 0 1) (JMP=16065, RNG=63)
128/008:34/SCN> SmartScan finished
128/008:34/SCN> DiskScan completed
128/008:34/SCN> ReadErrors for disk 0 (128): 0
128/009:07/LOG> DataCollection items found: 3 / 0
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 128 | .........0 | ...NTFS | PTE1 | ........63 | .117194112 | PRI | .
002 | 128 | ...6265362 | ..FAT16 | PTE2 | ..13605466 | ...1572864 | LOG | .
003 | 128 | .117194174 | ...NTFS | .BBS | ........63 | .117194112 | PRI | .
128/009:07/LOG> DataCollection items found: 3 / 0
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 128 | .........0 | ...NTFS | PTE1 | ........63 | .117194112 | PRI
002 | 128 | ...6265362 | ..FAT16 | PTE2 | ..13605466 | ...1572864 | LOG
003 | 128 | .117194174 | ...NTFS | .BBS | ........63 | .117194112 | PRI
128/009:07/LOG> PartList items created: 2
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ..1 | ... | ..3 | --- | ..1 | ..1 | ..1 | 2 | ..B
002 | ..FAT16 | ..2 | ... | --- | ... | ..2 | ..2 | ..2 | 1 | ...
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R
001 | ...NTFS | ........63 | .117194112 | .117194174 | PRI | ..B
002 | ..FAT16 | ..13605466 | ...1572864 | ..15178329 | LOG | ...
128/009:07/SST> SaveState requested for disk 0 (128)
128/009:07/WAS> AdmiSectors in use : 0+
128/009:08/SST> SaveState completed for disk 0 (128)
128/009:08/EXE> Analysis complete
128/009:23/MNU> - Main, Quit
128/009:23/LOG> RunTime: 009:23
128/009:23/LOG> ### CLOSE LOG ###
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1476


WWW
« Reply #3 on: May 29, 2008, 04:08:22 PM »

I'll review it but please read this first and update your posting:
http://www.diydatarecovery.nl/FAQ_custservice.htm#F0
Logged

petitfred
member

Posts: 3


« Reply #4 on: May 29, 2008, 07:58:01 PM »

My notebook is Pentium M running Windows XP Professional SP2.

To give you a description of the problem it started with a Windows DLL infected by a virus that was put in quarantine. At that point Windows was not started and kept rebooting.
Then I tried to recover the OS by inserting the manufacturer recovery disk and it started formatting the disk. I quickly switched the power off but 20% of the drive was apparently already formatted.

I since get the 'Error loading operating system' when I start my notebook. You can see that in the log I sent.

I would like to know if the/some data is recoverable and how, please? I don't mind re-installing the OS but as long as I can get back some of my files.

Many thanks for your assistance.
Please let me know if you require more information
Logged
Tom
Developer and Support Tech
Administrator
member
*****
Posts: 1476


WWW
« Reply #5 on: May 30, 2008, 08:59:24 AM »

Well, that's going to be tricky. The log shows 1 problem that can in itself be fixed but i don't think that this will help you, if your description of how this happened is accurate. I understand that part of the partition that held windows and your files has been overwritten by a restore operation. This means that the part that was overwritten can't be restored at all, and that file system structures that were there are now gone, so other files that may still be on the disk can't be located. You can probably forget about repairing this. What you need to do is try to recover the files from the damaged partition and copy them to safety (if possible) and then reinstall. You can try our iRecover to see if any files can be located and copied; the trial version allows you to save some files to see if the program can help you.
Logged

Pages: [1] Go Up Print 
« previous next »
Jump to:  


Login with username, password and session length

Powered by MySQL Powered by PHP Powered by SMF 1.1.20 | SMF © 2013, Simple Machines Valid XHTML 1.0! Valid CSS!