repair disk file system
hello experts
i am starting a self-educational project on a disk from an XP SP3 laptop, that starts to boot - then gives a blue screen, referring to Ram (which is tested ok)
Goal : to find the cause of the blue screen - and note that i ran windbg, but since it refers to ram it does not help
educate myself to be able to read and use the NTFS disk info to correct problems
it does the same when you try to repair the file system
Disk diagnostics are OK, so i suppose it is an error in the file system
i KNOW i can do a fresh install -so don' tell me that or not loose my time on it, yes?
I was thinking of using Winhex for reading the disk sectors, but since i'm totally unfamiliar with this, i thought that maybe the EE-experts could guide me through the first steps, and provide some DO'S and DONT's
you may answer with some links, if they point"understandable" sites, so i can start this
i appreciate all help and answers
i am starting a self-educational project on a disk from an XP SP3 laptop, that starts to boot - then gives a blue screen, referring to Ram (which is tested ok)
Goal : to find the cause of the blue screen - and note that i ran windbg, but since it refers to ram it does not help
educate myself to be able to read and use the NTFS disk info to correct problems
it does the same when you try to repair the file system
Disk diagnostics are OK, so i suppose it is an error in the file system
i KNOW i can do a fresh install -so don' tell me that or not loose my time on it, yes?
I was thinking of using Winhex for reading the disk sectors, but since i'm totally unfamiliar with this, i thought that maybe the EE-experts could guide me through the first steps, and provide some DO'S and DONT's
you may answer with some links, if they point"understandable" sites, so i can start this
i appreciate all help and answers
Have you already tried repairing the file system using CHKDSK /f run from the Recovery Console (either already installed as a boot option or by booting from an XP CD) ?
ASKER
yes masqueraid - but that is NOT the goal here; i posted clearly : to find the cause of the blue screen and educate myself to be able to read and use the NTFS disk info to correct problems
Upload the minidump file.
Ded9
Ded9
ASKER
@ ded : NO that is not my question
Are these closer?
XP file structure (5 pages)
http://www.informit.com/articles/article.aspx?p=101731&rll=1
hard disk structure
http://www.ntfs.com/hard-disk-basics.htm
XP file structure (5 pages)
http://www.informit.com/articles/article.aspx?p=101731&rll=1
hard disk structure
http://www.ntfs.com/hard-disk-basics.htm
DONT's
- don't do it!. It is soooooo easy to mess up.
But since this is the only way to learn...
DO'S
- make/use a copy/clone whenever possible. It's a lot easier to wipe and reclone if you make a booboo, then to fix a bad guess or bad edit on the only copy.
- understand the MBR, FAT table, and how to get the "next sector" link from a file. Without understanding these, you won't get far.
- don't do it!. It is soooooo easy to mess up.
But since this is the only way to learn...
DO'S
- make/use a copy/clone whenever possible. It's a lot easier to wipe and reclone if you make a booboo, then to fix a bad guess or bad edit on the only copy.
- understand the MBR, FAT table, and how to get the "next sector" link from a file. Without understanding these, you won't get far.
ASKER
coral, i'll look up the links - did you ever do it?
about Do's and DONT's : there is nothing to be kept, i can wipe the laptop clean
i am only looking for a bit of advice of someone who did this, to get started the right way
if you prefer other software for doing this - post them plse !
about Do's and DONT's : there is nothing to be kept, i can wipe the laptop clean
i am only looking for a bit of advice of someone who did this, to get started the right way
if you prefer other software for doing this - post them plse !
Hi nobus,
if the system starts booting and then goes to BSOD then there are 50/50 chances that problem could be caused by FS problems. We still need to narrow the problem to FS bottle neck by looking into BSOD exceptions (or minidump if you can get it).
As for the file system issues, we can look into the boot sector of the drive which is in most cases the culprit of non-bootable system although in such cases the startup process would not show any MS signs.
So let's start from BSOD. Which exception do you get?
if the system starts booting and then goes to BSOD then there are 50/50 chances that problem could be caused by FS problems. We still need to narrow the problem to FS bottle neck by looking into BSOD exceptions (or minidump if you can get it).
As for the file system issues, we can look into the boot sector of the drive which is in most cases the culprit of non-bootable system although in such cases the startup process would not show any MS signs.
So let's start from BSOD. Which exception do you get?
ASKER
thanks noxcho for joining the team
i don't want to examine the bsod, just start with the boot sector, as i said i don't want to try to repair it with usual approaches, just self educate myself a bit by examining the files sytem data
i don't want to examine the bsod, just start with the boot sector, as i said i don't want to try to repair it with usual approaches, just self educate myself a bit by examining the files sytem data
ok, I think you own the same tool like I do: paragon drive backup 10 or hard disk manager 11 from the same company.
In both installed or boot CD based version of this tool you can right click on system partition and select there View\Edit sectors. And then save number of sectors to bin file. Could you please save the first 5 sectors of the partition and share them with me? I will look and if anything is wrong there explain and point you to it.
In both installed or boot CD based version of this tool you can right click on system partition and select there View\Edit sectors. And then save number of sectors to bin file. Could you please save the first 5 sectors of the partition and share them with me? I will look and if anything is wrong there explain and point you to it.
Have you hit the F8 key numerous times during POST (Power up) and then selected the "Last Known Good Configuration" option? or have you booted into SAFE mode (after the first last known configuration attempt) and will it complete the boot in Safe Mode ??
In Safe Mode, you should be able to Start/Run/ MSCONFIG and then hit the "Launch System Restore" button and select a restoration point on a date you believe things were working.
Your blue screen problem appears to be a missing or corrupted setting.
Hope this helps.
Jeff
In Safe Mode, you should be able to Start/Run/ MSCONFIG and then hit the "Launch System Restore" button and select a restoration point on a date you believe things were working.
Your blue screen problem appears to be a missing or corrupted setting.
Hope this helps.
Jeff
>> ... other software for doing this
It's been a few years, but I mostly used Disk Investigator and one of the disk editors on an older version of UBCD. But Winhex is suppose to be pretty good:
http://www.softpedia.com/get/System/Back-Up-and-Recovery/Disk-Investigator.shtml
It's been a few years, but I mostly used Disk Investigator and one of the disk editors on an older version of UBCD. But Winhex is suppose to be pretty good:
http://www.softpedia.com/get/System/Back-Up-and-Recovery/Disk-Investigator.shtml
ASKER
noxcho : good idea - i could save the sectors to a file, but where is it saved? i could not find it (sorry, never tried this)
@ Jeff : that is NOT what i want at all - read the question plse
@coral47 : thanks for the idea
@ Jeff : that is NOT what i want at all - read the question plse
@coral47 : thanks for the idea
nobus
I read the question and it seemed that your system produced a blue screen on boot.
You can run these inspector programs in Windows, maybe in DOS mode as well, but it seemed to me that you were describing two problems, one to fix the blue screen, and another to teach yourself about NTFS file systems with some software.
Botton line: I did read the question, and it could have been interpreted as a broken WIndows system AND a learning about NTFS question combined into one question.
Will these disk analysis programs allow you to figure out what driver is missing that is causing the blue screen? I doubt it.
Have fun.
I read the question and it seemed that your system produced a blue screen on boot.
You can run these inspector programs in Windows, maybe in DOS mode as well, but it seemed to me that you were describing two problems, one to fix the blue screen, and another to teach yourself about NTFS file systems with some software.
Botton line: I did read the question, and it could have been interpreted as a broken WIndows system AND a learning about NTFS question combined into one question.
Will these disk analysis programs allow you to figure out what driver is missing that is causing the blue screen? I doubt it.
Have fun.
Nobus, did you find View/Edit Sectors? It is available when you get to the full mode of the product (no difference which one you use but not the free one). Right click on partition - there in context menu you can find View/Edit sectors. Then in the hex view window at the right upper corner you can see Save and Load options.
ASKER
yes i found view/edit, and i could save the 5 sectors as said - but was UNABLE to find where the ****file is..
so WHERE is it, so i can copy it ? ? on the c: drive, or must i connect an USB stick?
so WHERE is it, so i can copy it ? ? on the c: drive, or must i connect an USB stick?
ASKER
@JT : with all respect, but i posted :
Goal : to find the cause of the blue screen - and note that i ran windbg, but since it refers to ram it does not help
educate myself to be able to read and use the NTFS disk info to correct problems
Goal : to find the cause of the blue screen - and note that i ran windbg, but since it refers to ram it does not help
educate myself to be able to read and use the NTFS disk info to correct problems
Ah, that is your problem. But you can point it to the folder where you can save it to. Look the attached screen shot.
Backup-sectors.png
Backup-sectors.png
ASKER
ok thanks - i must have overlooked it
(i'm starting to be a big overlooker..)
(i'm starting to be a big overlooker..)
ASKER
hello, here the 5 sectors (had to postpone this a couple of days)
i had to rename it to txt (bin not allowed)
dump-from-sector-0--5-sectors-.txt
i had to rename it to txt (bin not allowed)
dump-from-sector-0--5-sectors-.txt
ASKER
hello noxcho ??
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
i'm still waiting for noxcho's response
Hi nobus, sorry for my silence. I am currently in Spain enjoying my vacations time. Not much I can do from iPad device. On Sunday I'll get to my PC and will post my update.
ASKER
ok - tx for the info noxcho -take your time, and enjoy!
ASKER
i saw you are back noxcho - waiting for your answer
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
here sector 0 attached
could not find any file in X: as asked (in the root folder of the paragon program pls find fdisk.txt file )
dump-from-sector-0--1-sectors-.txt
dump-from-sector-0--5-sectors-.txt
could not find any file in X: as asked (in the root folder of the paragon program pls find fdisk.txt file )
dump-from-sector-0--1-sectors-.txt
dump-from-sector-0--5-sectors-.txt
nobus, I think you attached wrong file instead of fdisk.txt (it is in C:\Program Files\Paragon\Drive Backup or any other tool by paragon\Program directory).
ASKER
i run it from cd, not from disk - does that change anything?in c\program files -there is of course no mention of paragon
From CD (if you are referring to WinPE) you have also a chance to get the log file. Simply run once the program thus to see the disk layout. Then start File Transfer Wizard (in Tools - FTW) and browse for X: drive. There find the Paragon directory and Program folder. In this folder the file should be created.
ASKER
i found the paragon directory; but not the file
FYI i run DB9 server edition from cd
i start it, click on disk editor to view sectors, then use FTW to scroll to the directory
or did i miss a step ?
FYI i run DB9 server edition from cd
i start it, click on disk editor to view sectors, then use FTW to scroll to the directory
or did i miss a step ?
Hmm I think the problem is that you use version 9. I am using version 10. Get a copy of latest version it is still free for you.
ASKER
ok -i'll download server version 11
or do you want me to use another?
or do you want me to use another?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
ok -i'll download the trial
Hmm trial has no WinPE. You can get easily full version as well. All EE experts can get it as far as I know.
ASKER
>> All EE experts can get it as far as I know. << that's how i got it; good you remember me of it; will do so
ASKER
ok - i downloaded the hdm 11 server and installed it
but when i select the file transfer wizard, it locks up ...
note that it is on a clean disk, with a fresh W7 install + only Office and drivers
i tried the hdmserver recovery cd - but it has not the same functionality
but when i select the file transfer wizard, it locks up ...
note that it is on a clean disk, with a fresh W7 install + only Office and drivers
i tried the hdmserver recovery cd - but it has not the same functionality
ASKER
ok - it is running now, and i made the recovery cd - also working
HDM 11 running from disk C: now, i looked in c:\program files\paragon\Hard Disk Manager 11 Server but did not see fdisk.txt
HDM 11 running from disk C: now, i looked in c:\program files\paragon\Hard Disk Manager 11 Server but did not see fdisk.txt
Hi nobus, did you look into C: while booting from CD or while working from installed copy?
Also to create the WinPE you do not need to install anything. WinPE as far as I got it came always in self burning ISO file packed into burning shell with .exe extension. Did you download all files sent to you by Paragon?
Once you boot to WinPE CD for HDM11 - select Full Mode there where you see the disk layout - there press on Tools - FTW - search in X: directory. X: is the RAM device to which WinPE loads usually.
Also to create the WinPE you do not need to install anything. WinPE as far as I got it came always in self burning ISO file packed into burning shell with .exe extension. Did you download all files sent to you by Paragon?
Once you boot to WinPE CD for HDM11 - select Full Mode there where you see the disk layout - there press on Tools - FTW - search in X: directory. X: is the RAM device to which WinPE loads usually.
ASKER
i made the standalone CD from the installed one - it seems ok now
the downloaded cd was a rescue cd (while it DID say HDM11 Server rescue cd...)
but up to now - i simply can't find fdisk.txt somewhere -starnge
the downloaded cd was a rescue cd (while it DID say HDM11 Server rescue cd...)
but up to now - i simply can't find fdisk.txt somewhere -starnge
Yes, because it is generated in WinPE IMHO. I checked it and yes, it is generated only in WinPE environment. Linux/DOS which you have does not create this log.
ASKER
what do you suggest me to do then ?
Download WinPE - boot from it - select full scale mode - thus to run the engine of the tool one time and let the log create. Then use the FTW to extract it.
ASKER
which winpe file? there are lots, and the hdm11 winpe was not what i needed
Wait. What files did you get with HDM11 download email? How many links were there in the mail? I have two links.
ASKER
ok i have :
Component Paragon Hard Disk Manager 11 Server - Windows Installation Package
Component Paragon Hard Disk Manager 11 Server - WinPE based Recovery CD Image
so you mean the second one, yes - i'll download and try that then (maybe i was sidetracked, and downloaded a wrong one)
Component Paragon Hard Disk Manager 11 Server - Windows Installation Package
Component Paragon Hard Disk Manager 11 Server - WinPE based Recovery CD Image
so you mean the second one, yes - i'll download and try that then (maybe i was sidetracked, and downloaded a wrong one)
ASKER
and that is the file : Paragon-201-SEE_WinPERCD_1
ASKER
..which i was using the last time
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
here the other file you need attached -renamed to txt
fsdump-110930-0840-0-0x3f.txt
fsdump-110930-0840-0-0x3f.txt
nobus, I am unable to download it. Interrupts after 3.4MB finished. Can you use some file sharing service or FTP for it?
ASKER
maybe it got corrupt -i'll post it again
fsdump-110930-0840-0-0x3f.txt
fsdump-110930-0840-0-0x3f.txt
ASKER
i will close out this question - tx to Jt92677 and noxcho
JT posted first to use the disk sectors and compare them - noxcho supported me further so i could start
and for everyone : no i did not analyse it yet (not too much time) but now i know where to start at least
JT posted first to use the disk sectors and compare them - noxcho supported me further so i could start
and for everyone : no i did not analyse it yet (not too much time) but now i know where to start at least