2
2
I have an netbook hard drive that won't boot or be mounted and is refusing to cooperate in my debugging. There were two partitions on the disk, an Acer installed recovery partition and my main XP one.
Summary: Only the 6GB recovery partition is mountable, and appears to be fine. Testdisk recreated the partitions, but can't read from the main one. Hitachi hardware diagnostics check out fine. Nothing I do seems to recognize a file system on the main partition. The master boot record seems to be problematic.
Environment: Acer Aspire One AOD150 netbook in original configuration. XP Home Premium, updated and current. Original Hitachi 5K320-160 hdd. BIOS 1.13. I don't have access to an external drive enclosure for now.
How it started: I was writing in a web form (Chrome) when the netbook locked instantly and completely (no pointer movement; ctr-alt-del did nothing). I held the power button down to reboot, and when it came back up, the BIOS started looping through alternate boot options. It said there was no boot disk, as if the hard drive wasn't connected.
Troubleshooting performed and results: Unseated and reseated the hard drive. No effect.
Booted to a Knoppix 6.4.3 CD. Hard drive was not visable to mount.
Ran testdisk (Intel option; NO to Vista partition question) which originally showed 4 nonsensical, overlapping partitions. The quick search found the 2 real NTFS partitions, and appeared to have the size correct. The deeper search showed the same results. The "p" command allowed me to view files in the recovery partition, but gave an error for the main partition "Can't open filesystem. Filesystem seems damaged." I switch the main drive to primary bootable. Even though it wasn't working completely, I wrote the partitions to disk.
Rebooted to Knoppix. It can now see and mount the PQSERVICE recovery partition. I can't browse to the main partition, but fdsik -l shows both partitions. The Disk Utility shows the 160GB drive as healthy, but only finds the one 6.4GB partition.
GParted shows both partitions plus 2.49 MiB unallocated, but gives a bunch of warnings for the main: "$MFT had invalid magic. ntfs_mft_load():Failed. Failed to load $MFT: Input/output error. Failed to startup volume: Input/output error. Failed to mount '/dev/sda2': Input/output error. NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE!" I then tried "Check and repair filesystem (ntfs)..." in GParted. Same error as above.
Booted to Ultimate Boot CD UBCD 5.0.3. Ran the Diagnosis Drive Fitness Test v4.16 for the Hitachi drive. Both the quick and full scans completed without error.
Used Smart BootManager to boot to the PQSERVICE recovery partition (Alt+F10 isn't working). It loads fine. I'm not yet willing to try to recover to factory defaults and sacrifice my data.
Ran MBRtool and MBRWork, rebooting after each. Now the BIOS says "A disk read error occurred press Ctrl+Alt+Del to restart".
Booted to UBCD4Win 3.60. Ran chkdsk /r on the recovery partition, without error. chkdsk would not run on the main partition.
Originally I couldn't boot to a Windows Recovery Console CD. It blue-screened giving a STOP 0x0000007B error that the drive wasn't accessable. I went into the BIOS and changed the hard drive interface from AHCI to IDE. I can now boot to the Recovery Console.
Ran chkdsk again, same results as before.
Ran fixboot and rebooted, no change.
Ran fixmbr and rebooted, no change.
But in IDE mode, I can't see the recovery partition anywhere. I have to switch it back to AHCI to view it in Knoppix or get testdisk to recognize the drive.
Plea for help: I would really like to know what's going on. Is it a hardware problem that isn't detected by SMART or the Hitachi diagnostics? Or is it just a bad MBR that I can't seem to get right? Is my best bet to give up on the data, reformat, and reinstall? Or is there something more I can try?
Thanks much!
UPDATE:
On a hunch, I went back and reran testdisk, choosing to search for Vista partitions even though it's an XP install. The quick search showed no improvement, but the deeper search uncovered the deleted ACER partition. After writing to disk, the computer rebooted into XP as if nothing had ever happened.
I'm running chkdsk now just to be safe, but it seems to be back to normal. Hooray!
ChrisJ
Posted 2011-01-18T04:14:37.670
Reputation: 21
If you can see anything with AHCI stick with that...you could try manually specifying offsets and length to force the mount from live media...it's a last ditch thing though. when it comes down to it you could always image the entire disk to a file somewhere else and do the file carving on an old pc (be prepared for file carving to take forever though) you might have had a head crash somewhere critical. – RobotHumans – 2011-01-18T04:25:13.497
1This is the point where I decide whether professional data recovery is worth the loss of data, and send it to the professionals. – None – 2011-01-18T06:12:11.783
Low Cost professional Data Recovery...http://lowcostrecovery.com/pricing.html
– Moab – 2011-01-18T14:15:09.067The data lost definitely isn't worth the price of pro recovery. It's probably not worth the time I've already spent troubleshooting the drive. But before I sink a day into reformatting and reinstalling everything, I'm hoping there's something else that might recover the filesystem. And I'd like to know what went wrong, to give me an idea if it's a hardware or software failure. Thanks for all the replies so far. – ChrisJ – 2011-01-18T19:34:54.330