A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

deleted mbr,boot sector



 
 
Thread Tools Display Modes
  #16  
Old June 4th 09, 04:42 PM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
poster
external usenet poster
 
Posts: 17
Default deleted mbr,boot sector

On Jun 3, 9:02*pm, poster wrote:
On Jun 3, 9:58*am, "Ben Myers" wrote:

"poster" wrote in ...


On Jun 1, 8:36 pm, poster wrote:


as mentioned deletedmbrand part table
on hdd with part1-fat32 and partition2-fat16
so part1 not visible in dos any more
To make it visible and bootable using Norton Disk editor,confirm
please?
-need to input first entry in part table of the physical hard disk
with start/end head.sector.cyl and partition1 size which should
be=size_in_KB*2 ,
(counting in some reserved sectors is not necessary even though
part1 is primary)
-need to input appropriate info in boot sector of part1(sector 0 only):
8 sect per cluster, file sys id=Bh...
-need to refreshmbrand boot sector code for part1
ndd usually makes more damage than good
update:
did said but for physical hdd advanced recovery when input- start
side.sector.cyl=1.0.1 and *end s.s.c=part2start-1,


On many disks, the start address for the first partition is cylinder 0, head 1,
sector 1. *Also, zero is not a valid entry for the sector field and DOS can't
handle a partition which starts on something other than sector 1.


with sectors/
cluster=32 you get fat32 as it should be but then virtual disk button
does not display data but message-inconsistent sec/cluster given 16
derived 8, however when you change the value to 8 still no
data.Inputting sec/cluster=64 gives fat16but then virtual button takes
you to sector 263 with no data in it.Perhaps Boot sector info and
partition table need to be repaired before using advaced recovery and
disk virtualisation??


See if this is helpful.


http://support.microsoft.com/kb/192322


(however backup boot record in sector 6 is gone as well)


See if the software you are using has an option to search for boot sectors,
since it's possible that the partition starts at a non-standard address..


Ben


actually first problem is making a partition visible in ne



played with numbers a bit in nde and voila partition data showed up
now how do you go about copying it to another place- when you edit/
mark the folder it copies just the list of files in it?(NortonDisk
Editor clipboard is only 4KB)
Ads
  #17  
Old June 6th 09, 07:46 AM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
Ben Myers[_4_]
external usenet poster
 
Posts: 66
Default deleted mbr,boot sector

"poster" wrote in message ...
played with numbers a bit in nde and voila partition data showed up
now how do you go about copying it to another place- when you edit/
mark the folder it copies just the list of files in it?(NortonDisk
Editor clipboard is only 4KB)


If you are referring to a Norton Disk Editor feature, you probably should
start a new thread or post in a Norton forum.

http://community.norton.com/norton/board?board.id=other

If not, I suggest you back up the existing partition table, then write the
new data to it, restart the computer and see if you have access to the
missing files and folders.

Ben
  #18  
Old June 13th 09, 06:05 PM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
poster
external usenet poster
 
Posts: 17
Default deleted mbr,boot sector

On Jun 6, 8:46*am, "Ben Myers" wrote:
"poster" wrote in ...
played with *numbers a bit in nde and voila partition data showed up
now how do you go about copying it to another place- when you edit/
mark the folder it copies just the list of files in it?(NortonDisk
Editor clipboard is only 4KB)


If you are referring to a Norton Disk Editor feature, you probably should
start a new thread or post in a Norton forum.

http://community.norton.com/norton/board?board.id=other

If not, I suggest you back up the existing partition table, then write the
new data to it, restart the computer and see if you have access to the
missing files and folders.

Ben

ok but
does anyone know how does norton d.e. access files with advanced
recoverz mode-is it using fat tables?Also confirm please-boot sector
info that needs to be input in sector 63 is for the first partition
and not for the hard disk as a whole
  #19  
Old June 13th 09, 07:44 PM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
Bill Todd
external usenet poster
 
Posts: 1
Default deleted mbr,boot sector

poster wrote:
On Jun 6, 8:46 am, "Ben Myers" wrote:
"poster" wrote in ...
played with numbers a bit in nde and voila partition data showed up
now how do you go about copying it to another place- when you edit/
mark the folder it copies just the list of files in it?(NortonDisk
Editor clipboard is only 4KB)

If you are referring to a Norton Disk Editor feature, you probably should
start a new thread or post in a Norton forum.

http://community.norton.com/norton/board?board.id=other

If not, I suggest you back up the existing partition table, then write the
new data to it, restart the computer and see if you have access to the
missing files and folders.

Ben

ok but
does anyone know how does norton d.e. access files with advanced
recoverz mode-is it using fat tables?Also confirm please-boot sector
info that needs to be input in sector 63 is for the first partition
and not for the hard disk as a whole


No - but http://www.cgsecurity.org/wiki/TestDisk might be of some help.

- bill
  #20  
Old June 17th 09, 07:44 AM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
No_Name
external usenet poster
 
Posts: 699
Default deleted mbr,boot sector

poster wrote:

ok but
does anyone know how does norton d.e. access files with advanced
recoverz mode-is it using fat tables?Also confirm please-boot sector
info that needs to be input in sector 63 is for the first partition
and not for the hard disk as a whole


I'm very fimilar with Norton Disk Edit, it defaults to read only you
have to turn editing on (it's a safety feature).

Your boot sector or MBR is on the first sector of the hard drive and
holds all of your partition information not just the first one.
http://en.wikipedia.org/wiki/Master_boot_record

Haven't followed the entire thread, but play around with Disk Edit,
you can't do any harm, until you change it's config to allow edits.
It's how I learned how to use it. - I recovered one of my hard drives
with it a long time ago and swear by it now - but it took a lot of
playing around to find the problem.
--

Kind of a sad picture, that speaks volumes
http://farm4.static.flickr.com/3605/...a463fdca_o.jpg
  #21  
Old June 17th 09, 08:49 AM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
Jurjen Oskam
external usenet poster
 
Posts: 1
Default deleted mbr,boot sector

On 2009-06-17, wrote:

Your boot sector or MBR is on the first sector of the hard drive and
holds all of your partition information not just the first one.
http://en.wikipedia.org/wiki/Master_boot_record

The MBR doesn't hold all of the partition information. There's only room
for four partition table entries in the MBR. To be able to create more
partitions, a partition table entry in the main MBR can be set to type
"Extended" and point to a section of the disk where *another* MBR is
located. That other MBR has one partition table entry describing a
partition (called an "extended partition" by the OS) and optionally
another partition table entry of type "Extended" pointing to yet
another MBR, and so on.

In short: almost all information about any extended partitions *isn't*
stored in the main MBR.

--
Jurjen Oskam

Savage's Law of Expediency:
You want it bad, you'll get it bad.
  #22  
Old June 17th 09, 07:38 PM posted to microsoft.public.windowsxp.security_admin,24hoursupport.helpdesk,comp.arch.storage
No_Name
external usenet poster
 
Posts: 699
Default deleted mbr,boot sector

Jurjen Oskam wrote:

On 2009-06-17, wrote:

Your boot sector or MBR is on the first sector of the hard drive and
holds all of your partition information not just the first one.
http://en.wikipedia.org/wiki/Master_boot_record


The MBR doesn't hold all of the partition information. There's only room
for four partition table entries in the MBR. To be able to create more
partitions, a partition table entry in the main MBR can be set to type
"Extended" and point to a section of the disk where *another* MBR is
located. That other MBR has one partition table entry describing a
partition (called an "extended partition" by the OS) and optionally
another partition table entry of type "Extended" pointing to yet
another MBR, and so on.


In short: almost all information about any extended partitions *isn't*
stored in the main MBR.


Wow, news to me, never heard of the EBR before, but in my defense it's
still located on the first sector
http://en.wikipedia.org/wiki/Extended_boot_record
(good info at this link)

As for recovering my hard drive I should mention that I had run
DISKMAP.EXE from the NT resource kit, something I do just in case.

So I had the numbers to rebuild my partitions (extended as well), The
OP is going to have a bit more math to do than I did, Disk Edit will
help on this but it's a rough ride.




--

Kind of a sad picture, that speaks volumes
http://farm4.static.flickr.com/3605/...a463fdca_o.jpg
 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 01:49 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.