Search Members Help

» Welcome Guest
[ Log In :: Register ]

Page 1 of 212>>

[ Track This Topic :: Email This Topic :: Print this topic ]

reply to topic new topic new poll
Topic: Data Recovery< Next Oldest | Next Newest >
 Post Number: 1
Observer Search for posts by this member.
I once watched, but I have left.
Avatar



Group: Members
Posts: 912
Joined: May 2000
PostIcon Posted on: Oct. 22 2001,15:08  Skip to the next post in this topic. Ignore posts   QUOTE

Ok, so I was stupid and in the course of trying to copy one drive to another, wiped the wrong drive. Partition Magic has a "Partition Undelete" feature, but doing that has given me some memory access violation errors. I also tried the trial version of Norton Utilities, but the tool I needed was not there.

Anyway, is there a tool I can use to re-write the partition table with what should be there? The drive had (should have) one primary FAT32 partition.

------------------
When 1337 hax0rs start impaling each other with swords and typing code with a hook on one hand, then they can modify the term "pirate."

Offline
Top of Page Profile Contact Info 
 Post Number: 2
just_dave Search for posts by this member.
Town Naysayer, and court jester..
Avatar



Group: Members
Posts: 535
Joined: Apr. 2001
PostIcon Posted on: Oct. 22 2001,16:46 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

maxtor makes a program called max blast.. available on their site that copys total partitions it like formats the new drive then copys everything from the other drive... sorta like drive imaging if that helps.

This message has been edited by just_dave on October 23, 2001 at 11:49 AM

Offline
Top of Page Profile Contact Info 
 Post Number: 3
Beldurin Search for posts by this member.
Mayor of Detnet
Avatar



Group: Members
Posts: 1242
Joined: Aug. 2001
PostIcon Posted on: Oct. 22 2001,18:02 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

Yeah, but I don't think MaxBlast is a data recovery program.

------------------
Give me ambiguity or give me something else...

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 4
damien_s_lucifer Search for posts by this member.
Emperor of Detnet
Avatar



Group: Members
Posts: 33
Joined: Jan. 1970
PostIcon Posted on: Oct. 22 2001,18:06 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

Norton Utilities has a sector editor stashed somewhere. If you can find your way around hex codes, you can use it to rebuild your partition table manually.
Offline
Top of Page Profile Contact Info WEB 
 Post Number: 5
EvilGenius Search for posts by this member.
another useless poster
Avatar



Group: Members
Posts: 273
Joined: Sep. 2001
PostIcon Posted on: Oct. 22 2001,20:23 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

beat the computer sensless with a stick, and scream obscenities at it until you pass out... it's what i do.. albeit it doesn't work to well.
Offline
Top of Page Profile Contact Info WEB 
 Post Number: 6
Observer Search for posts by this member.
I once watched, but I have left.
Avatar



Group: Members
Posts: 912
Joined: May 2000
PostIcon Posted on: Oct. 22 2001,20:53 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

Now all I would need is where to put what values.

------------------
When 1337 hax0rs start impaling each other with swords and typing code with a hook on one hand, then they can modify the term "pirate."

Offline
Top of Page Profile Contact Info 
 Post Number: 7
damien_s_lucifer Search for posts by this member.
Emperor of Detnet
Avatar



Group: Members
Posts: 33
Joined: Jan. 1970
PostIcon Posted on: Oct. 23 2001,04:42 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

I only dug this up because, er, anyone who is willing to use a sector editor to fix a busted MBR deserves it.

code:

Disk Partition Table (Fixed disk boot record)

Offset Represents: (see format below)

01BE Partition 1 data table (16 bytes)
01CE Partition 2 data table (16 bytes)
01DE Partition 3 data table (16 bytes)
01EE Partition 4 data table (16 bytes)
01FE Signature (hex 55 AA, 2 bytes)

Offset from beginning of partition data shown above:

Offset Size Description

00 byte boot indicator
01 byte beginning sector head number
02 byte beginning sector (2 high bits of cylinder #)
03 byte beginning cylinder# (low order bits of cylinder #)
04 byte system indicator
05 byte ending sector head number
06 byte ending sector (2 high bits of cylinder #)
07 byte ending cylinder# (low order bits of cylinder #)
08 dword number of sectors preceding the partition
0B dword number of sectors in the partition


Boot indicator (BYTE)

00 - non-bootable partition
80 - bootable partition (one partition only)


System Indicator (BYTE)

00 - unknown operating system
01 - DOS with 12 bit FAT, 16 bit sector number
02 - XENIX
04 - DOS with 16 bit FAT, 16 bit sector number
05 - DOS Extended partition (DOS 3.3+)
06 - DOS 4.0 (Compaq 3.31), 32 bit sector number
51 - Ontrack extended partition
64 - Novell
75 - PCIX
DB - CP/M
FF - BBT


Signature

Hex 55AA marks the end of valid boot sector. This is also
required in each of the partition boot records.


Sector/Cylinder

2 bytes are combined to a word similar to INT 13:

„ 7„ 6„ 5„ 4„ 3„ 2„ 1„ 0„  1st byte (sector)
„  „  „¤„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„Ÿ Sector offset within cylinder
„¤„Ÿ„¨„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ High order bits of cylinder #

„ 7„ 6„ 5„ 4„ 3„ 2„ 1„ 0„  2nd byte (cylinder)
„¤„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„¨„Ÿ„Ÿ„Ÿ„Ÿ„Ÿ Low order bits of cylinder #


- all partitions begin on sector 1 head 0, except the first
partition which follows the disk's master boot record and begins
in sector 2
- some of this information may vary with some variants of DOS 3.2
and DOS 3.3 that use their own sectoring scheme for large disks

- see INT 21 subfunction 32; Disk Partition Table


The partition type for FAT32 is hex 0C.

AFAIK, DOS / Windows completely ignore the beginning and ending track (they call it a "cylinder") / head / sector information and only use the starting sector and partition length in sectors. Look in CMOS for the number of sectors per track; that *should* be the value for "# of sectors preceding the partition." If you paritioned the entire drive, the length in sectors should be total * of sectors (CMOS Tracks * CMOS Heads * CMOS Sectors per Track).

I hope you didn't use fdisk to try and re-create the partition... if so, you'll have to write out a new boot sector as well. I don't have anything on FAT32 boot sectors.

Offline
Top of Page Profile Contact Info WEB 
 Post Number: 8
Observer Search for posts by this member.
I once watched, but I have left.
Avatar



Group: Members
Posts: 912
Joined: May 2000
PostIcon Posted on: Oct. 23 2001,14:21 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

Nope, just deleted the partition by accident, nothing further written to the drive. Thanks for the info. Hopefully I'll be able to put it to some use.

------------------
When 1337 hax0rs start impaling each other with swords and typing code with a hook on one hand, then they can modify the term "pirate."

Offline
Top of Page Profile Contact Info 
 Post Number: 9
just_dave Search for posts by this member.
Town Naysayer, and court jester..
Avatar



Group: Members
Posts: 535
Joined: Apr. 2001
PostIcon Posted on: Oct. 24 2001,05:22 Skip to the previous post in this topic. Skip to the next post in this topic. Ignore posts   QUOTE

Sorry for my stupidty, I read his post quickly, I didn't realize the part where he said "WRONG" drive ... hehe my bad..

sorry
/me hangs his head in shame

Offline
Top of Page Profile Contact Info 
 Post Number: 10
Observer Search for posts by this member.
I once watched, but I have left.
Avatar



Group: Members
Posts: 912
Joined: May 2000
PostIcon Posted on: Oct. 24 2001,11:10 Skip to the previous post in this topic.  Ignore posts   QUOTE

Update: I believe that I have found a viable alternative to sitting down with a large cup of coffee and a sector editor. Apparently the Linux fdisk utility is able to modify the MBR without touching the actual partitions. Found a nice "Linux on a floppy" here for just that purpose.

------------------
When 1337 hax0rs start impaling each other with swords and typing code with a hook on one hand, then they can modify the term "pirate."

Offline
Top of Page Profile Contact Info 
11 replies since Oct. 22 2001,15:08 < Next Oldest | Next Newest >

[ Track This Topic :: Email This Topic :: Print this topic ]


Page 1 of 212>>
reply to topic new topic new poll

» Quick Reply Data Recovery
iB Code Buttons
You are posting as:

Do you wish to enable your signature for this post?
Do you wish to enable emoticons for this post?
Track this topic
View All Emoticons
View iB Code