Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: Trying to recover data

  1. #1
    Member bradlesliect's Avatar
    Join Date
    Apr 2006
    Location
    CT - SA
    Posts
    74

    Trying to recover data

    Helo,

    Not sure if this is the correct forum to post this to - Admin please move if incorrect and my apologies

    I am trying to recover data from a notebook hard drive. When the drive is in the notebook and windowsXP Pro runs, desktop loads up but you cannot right-click or bring up task manager. Checkd the reg and there is nothing running there. Checked services, cannot see anything.

    Client mentioned that someone else took a look at the notebook and "messed" it up...mmmmm....

    Anyways, I want to try and recover the data he lost with this other dude but each time I run a recover on it - using easy recovery pro 6.0 - get the message " error encountered while scanning partition "...but the scan continues.. This is first me and google doesn't tell me much.

    Could the filesystem in fact be corrupt? Is there a method of repairing the file system without losing any other data i.e. can i run windows repair? How do I check if this is software or drive busy crashing....?

    Thanks for help
    .....I rather not say....

  2. #2
    AOs Resident Troll
    Join Date
    Nov 2003
    Posts
    3,152
    Is this drive slaved in another machine???


    MLF
    How people treat you is their karma- how you react is yours-Wayne Dyer

  3. #3
    0_o Mastermind keezel's Avatar
    Join Date
    Jun 2003
    Posts
    1,024
    Could the filesystem in fact be corrupt? Is there a method of repairing the file system without losing any other data i.e. can i run windows repair? How do I check if this is software or drive busy crashing....?
    It's possible to delete the partition table. For example, say someone is preparing for a windows install and they delete the partition prior to format, but do not proceed with the format. This or a similar operation will cause the symptoms you're experiencing. Software won't know what it's looking at, so it won't display anything. I've fixed this in the past but I can't remember what I used...I think it was called "Partition table doctor" or something to that effect. You can be fairly sure it's NTFS if XP Pro was installed on the drive, but I've seen some cases where someone installed XP onto a Fat32 file system. You can also try running an mbr fix.

  4. #4
    Senior Member Wazz's Avatar
    Join Date
    Apr 2003
    Posts
    288
    Your best bet is to remove the Hard Drive and Slave it in a Desktop (that's what I do and it works) or get a 2.5 external enclosure. From there a chkdsk or 3rd party scan should work depending on the state of the filesystem and level of infection (if compromised). You can then run a Recovery and dump the data to another partition which is usually required anyway (usually cannot dump recovery data to the same partition). Good Luck!
    "It is a shame that stupidity is not painful" - Anton LaVey

  5. #5
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Client mentioned that someone else took a look at the notebook and "messed" it up...mmmmm....
    Never trust what a customer says unless it is a very simple description of their problems or requirements. It was obviously already messed up or he wouldn't have had to take it to someone else would he?

    Your best bet is to remove the Hard Drive and Slave it in a Desktop
    I agree with what Wazz says and MLF implied. To attach a 2.5" Laptop drive to a desktop you need an adaptor. I would expect them to be cheaper than an external mounting, but either will do. You can attempt repairs from a bootable CD, but not recovery as you need another drive/partition to store the recovered data.

    and level of infection (if compromised).
    That is a thought.............try running an av scan from a master drive or bootable CD. Some malware does disable right click and task manager.

    Can you run chkdsk?

  6. #6
    Senior Member Wazz's Avatar
    Join Date
    Apr 2003
    Posts
    288
    Thanks nihil, forgot to mention you may need an adapter (if the Hard Drive is IDE), if the notebook drive is SATA, you do not need an adapter.
    "It is a shame that stupidity is not painful" - Anton LaVey

  7. #7
    0_o Mastermind keezel's Avatar
    Join Date
    Jun 2003
    Posts
    1,024
    Quote Originally Posted by Wazz View Post
    Thanks nihil, forgot to mention you may need an adapter (if the Hard Drive is IDE), if the notebook drive is SATA, you do not need an adapter.
    I think you mean the SATA connector is the same on 2.5" and 3.5" drives but IDE is different. This is true, however, if he's talking about hooking it up externally he'll most likely still need an adapter to convert from SATA to USB.

  8. #8
    Senior Member Wazz's Avatar
    Join Date
    Apr 2003
    Posts
    288
    Exactly right.....I just pull the side panel and jack the SATA drive in directly if I'm without an adapter\external enclosure.
    "It is a shame that stupidity is not painful" - Anton LaVey

  9. #9
    Why don't you leave the drive in the laptop and boot to a live CD like UBCD4Win? That's got multiple data recovery apps to try and all are non-destructive.
    Analog = Classical
    Digital = Techno

  10. #10
    Senior Member nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,188
    Why don't you leave the drive in the laptop and boot to a live CD like UBCD4Win? That's got multiple data recovery apps to try and all are non-destructive.
    It is generally not considered good practice to attempt to recover data back onto a drive that you are having problems with.

    Anyway, all you would do is copy the files you cannot access from the OS on that HDD, so what would it achieve?

    What you are suggesting is how you would try to fix the problem, not how you would recover the data

Similar Threads

  1. Windows Error Messages
    By cheyenne1212 in forum Miscellaneous Security Discussions
    Replies: 7
    Last Post: February 1st, 2012, 02:51 PM
  2. Port List
    By ThePreacher in forum Miscellaneous Security Discussions
    Replies: 17
    Last Post: December 14th, 2006, 09:37 PM
  3. Newbies, list of many words definitions.
    By -DaRK-RaiDeR- in forum Newbie Security Questions
    Replies: 9
    Last Post: December 14th, 2002, 08:38 PM
  4. Information Leakage from Optical Emanations
    By E5C4P3 in forum Miscellaneous Security Discussions
    Replies: 5
    Last Post: March 7th, 2002, 07:35 AM
  5. Traceroute: under the hood
    By antihaxor in forum Non-Security Archives
    Replies: 0
    Last Post: January 24th, 2002, 05:42 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •