Forgot your password?
Or sign in with one of these services
mattiasnyc, August 16, 2012
Posted December 3, 2012
thanks, will do.
Posted December 4, 2012
Hi, downloaded and installed "tiny hexer". Again, this is an application that is way beyond intuitive for a non-programmer/hacker/whatever.
Could you tell me what to type and where in steps? I don't even know where to start. (or alternatively let me know if there's a quick guide and what its name would be so I could learn the stuff).
Tiny hexer is GUI, not command line.
It works more or less like *any* editor, the main difference is that when you operate on a disk or on disk image to avoid using too much memory it loads by default a sector at a time.
What do you see?
All 00's and "dots" or you can read at very beginning of sectors "FILE0" and some text here and there? (like "$.M.F.T.", "$.M.F.T.m.i.r.r.o.r.", etc.)?
Post a screenshot (if it is not all 00's) of sector 6291519 the windows should have a title like >\\.\PhysicalDriven , sector 6291519/xxxxxxxxxxx
Once you are there:
I guess you are stuck, then
Without partition data, nor bootsector data, nor $MFT the only thing that may work is file-based recovery, but as said I start to suspect that your drive is either "really" "all 00's or *somehow* it went in some kind of "failure" mode and simply outputs 00ed sectors.
Try again from the start, describe what happened BEFORE you posted here:
Found this place, went through steps to get it back.
What symptoms did the drive have, which exact steps you performed, etc., etc.
Went to boot my computer and it wouldn't go past POST. BIOS couldn't find OS or drive. This was as I mentioned the OS drive and I didn't touch it prior to shutting down. I never initialize drives "willy nilly". The words "initialize", "erase", "format" etc throw up red flags in my brain and I've yet to be dumb enough to clean a drive from data. I'm plenty dumb in other ways to make up for it though.
Then I went to the thread called " The Solution for Seagate 7200.11 HDDs" and went through the instructions and "unbricked" it. The symptoms of my drive conformed to the ones the "unbricking" would potentially solve.
The drive then spun up properly and got detected by the OS. After that I tried absolutely nothing else but instead posted in this thread.
I'm guessing "file based recovery" is some sort of time consuming scan where the software tries to intelligently piece together what binary constitutes a file, and what type of file that would be... Would that be the next step?
Thanks again for your help and patience.
Posted December 5, 2012
Yes, OK, but were BSY or LBA0 symptoms?
Which EXACT commands did you send to it in the Hyperterminal (or whatever you used)?
Yes, the issue here is that your drive behaves "strangely".
The MBR CODE is there, exactly where it should be, but the data in it have been "00ed". <- this is "queer", usually either the "whole" MBR is there or it has been completely (not just 16 bytes of it) 00ed.
Also, it seems like all the sectors you accessed are all 00's (wiped).
I am suspecting that - for *any* reason - the disk has gone in some kind of "loop" and - besides the MBR - only "provides" the same bunch of 00ed sectors , no matter which sector you try to access.
Yep, that is the idea, that has a big caveat, though.
Provided that the disk is not all 00's, any file that was contiguous should normally be retrieved without issues, whilst any file that was fragmented will most probably result as either corrupted or "partial".
The "reference" tool is PHOTOREC (the companion of TESTDISK):
(it is not just for photos)
Let's try again to see if some data can actually be read on that disk.
Open the disk in Tiny Hexer and search, starting from sector 0 the hex 4D5A90 (which equates to "MZ<nop>", i.e. the header for executable files, one of the most common filetypes on a "system" disk).
If you don't find a hit within (say) first 50000 sectors it is likely that there is the "all 00's issues.
Are you trying to access the "original, unbricked" disk or the clone of it? (can it be, if the latter, that the cloning failed?)
You need to be a member in order to leave a comment
Sign up for a new account in our community. It's easy!
Already have an account? Sign in here.
No registered users viewing this page.