Jump to content

steve595

Members
  • Content Count

    36
  • Joined

  • Last visited

About steve595

  • Rank
    Member
  1. Just wanted to say thanks for all your help! I reinstalled windows today all seems to be working fine!
  2. I don't think that the attachment option is enabled on this topic, so i have uploaded them to your submission site. 3 files 1st is CBS.log located at /mnt/sda3/windows/logs/CBS/CBS.log the 2nd is cbssmall.log located at /mnt/sda3/windows/panther/cbs.log the 3rd is filefind.txt thanks,
  3. First thanks for the help. second no need to apoligize, i appreciate your assistance. I can understand how frustrating this is, so again I do appreciate your assistance. When the scan completes I have the following message: " Windows Resource Protection found corrupt files but was unable to fix some of them. Details are included in the CBS.Log windir\Logs\CBS\CBS.log. For Example x:\windows\system32> After restart I have the same result, blank screen.
  4. I was wondering if there were any more suggestion on how to resolve this issue?
  5. After selecting system restore and clicking next i receive the following "No restore points have been created on your computer's system drive. To create a restore point open sytem protection."
  6. Hello noahdfear Beginning replacement procedure mv "/mnt/sda3/Windows/explorer.exe" "/mnt/sda3/Windows/explorer.exe.orig" cp "/mnt/sda3/Windows/winsxs/x86_microsoft-windows-explorer_31bf3856ad364e35_6.1.7600.16450_none_51a66d6ddafc2ed1/explorer.exe" "/mnt/sda3/Windows/explorer.exe" Unfortunately no change when restating the computer
  7. Thu Apr 21 04:46:24 2011 Command line: TestDisk TestDisk 6.12-WIP, Data Recovery Utility, October 2010 Christophe GRENIER <[email protected]> http://www.cgsecurity.org OS: Linux, kernel 2.6.31.2 (#5 SMP Mon Dec 7 11:56:35 UTC 2009) i686 Compiler: GCC 4.4 - Feb 7 2011 09:24:20 ext2fs lib: 1.41.9, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226 /dev/sda: LBA, HPA, LBA48, DCO support /dev/sda: size 488397168 sectors /dev/sda: user_max 488397168 sectors /dev/sda: native_max 488397168 sectors /dev/sda: dco 488397168 sectors Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512 Hard disk list Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - ATA ST9250320AS Disk /dev/sdb - 1033 MB / 986 MiB - CHS 1017 32 62, sector size=512 - Flash Disk Partition table type (auto): Intel Disk /dev/sda - 250 GB / 232 GiB - ATA ST9250320AS Partition table type: Intel Interface Advanced Geometry from i386 MBR: head=255 sector=63 check_part_i386 1 type DE: no test NTFS at 5/25/21 NTFS at 1279/234/44 check_part_i386 5 type DD: no test get_geometry_from_list_part_aux head=255 nbr=2 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 1 P Dell Utility 0 1 1 4 254 63 80262 2 P HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] NTFS, 10485 MB / 10000 MiB 3 * HPFS - NTFS 1279 234 44 30074 213 3 462590312 [OS] NTFS, 236 GB / 220 GiB 4 E extended LBA 30074 239 54 30401 42 41 5240832 5 L Sys=DD 30075 17 23 30401 42 41 5238784 ntfs_boot_sector 2 P HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] NTFS, 10485 MB / 10000 MiB NTFS at 5/25/21 NTFS at 5/25/21 filesystem size 20480000 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 16 clusters_per_mft_record -10 clusters_per_index_record 1 Boot sector Status: OK Backup boot sector Status: OK Sectors are identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. Boot sector Backup boot sector 0000 eb52904e 54465320 .R.NTFS eb52904e 54465320 .R.NTFS 0008 20202000 02080000 ..... 20202000 02080000 ..... 0010 00000000 00f80000 ........ 00000000 00f80000 ........ 0018 3f00ff00 00400100 [email protected] 3f00ff00 00400100 [email protected] 0020 00000000 80008000 ........ 00000000 80008000 ........ 0028 ff7f3801 00000000 ..8..... ff7f3801 00000000 ..8..... 0030 00000c00 00000000 ........ 00000c00 00000000 ........ 0038 10000000 00000000 ........ 10000000 00000000 ........ 0040 f6000000 01000000 ........ f6000000 01000000 ........ 0048 b7eed8b6 21d9b6aa ....!... b7eed8b6 21d9b6aa ....!... 0050 00000000 fa33c08e .....3.. 00000000 fa33c08e .....3.. 0058 d0bc007c fb68c007 ...|.h.. d0bc007c fb68c007 ...|.h.. 0060 1f1e6866 00cb8816 ..hf.... 1f1e6866 00cb8816 ..hf.... 0068 0e006681 3e03004e ..f.>..N 0e006681 3e03004e ..f.>..N 0070 54465375 15b441bb TFSu..A. 54465375 15b441bb TFSu..A. 0078 aa55cd13 720c81fb .U..r... aa55cd13 720c81fb .U..r... 0080 55aa7506 f7c10100 U.u..... 55aa7506 f7c10100 U.u..... 0088 7503e9d2 001e83ec u....... 7503e9d2 001e83ec u....... 0090 18681a00 b4488a16 .h...H.. 18681a00 b4488a16 .h...H.. 0098 0e008bf4 161fcd13 ........ 0e008bf4 161fcd13 ........ 00A0 9f83c418 9e581f72 .....X.r 9f83c418 9e581f72 .....X.r 00A8 e13b060b 0075dba3 .;...u.. e13b060b 0075dba3 .;...u.. 00B0 0f00c12e 0f00041e ........ 0f00c12e 0f00041e ........ 00B8 5a33dbb9 00202bc8 Z3... +. 5a33dbb9 00202bc8 Z3... +. 00C0 66ff0611 0003160f f....... 66ff0611 0003160f f....... 00C8 008ec2ff 061600e8 ........ 008ec2ff 061600e8 ........ 00D0 40002bc8 77efb800 @.+.w... 40002bc8 77efb800 @.+.w... 00D8 bbcd1a66 23c0752d ...f#.u- bbcd1a66 23c0752d ...f#.u- 00E0 6681fb54 43504175 f..TCPAu 6681fb54 43504175 f..TCPAu 00E8 2481f902 01721e16 $....r.. 2481f902 01721e16 $....r.. 00F0 6807bb16 68700e16 h...hp.. 6807bb16 68700e16 h...hp.. 00F8 68090066 53665366 h..fSfSf 68090066 53665366 h..fSfSf 0100 55161616 68b80166 U...h..f 55161616 68b80166 U...h..f 0108 610e07cd 1ae96a01 a.....j. 610e07cd 1ae96a01 a.....j. 0110 90906660 1e0666a1 ..f`..f. 90906660 1e0666a1 ..f`..f. 0118 11006603 061c001e ..f..... 11006603 061c001e ..f..... 0120 66680000 00006650 fh....fP 66680000 00006650 fh....fP 0128 06536801 00681000 .Sh..h.. 06536801 00681000 .Sh..h.. 0130 b4428a16 0e00161f .B...... b4428a16 0e00161f .B...... 0138 8bf4cd13 66595b5a ....fY[Z 8bf4cd13 66595b5a ....fY[Z 0140 66596659 1f0f8216 fYfY.... 66596659 1f0f8216 fYfY.... 0148 0066ff06 11000316 .f...... 0066ff06 11000316 .f...... 0150 0f008ec2 ff0e1600 ........ 0f008ec2 ff0e1600 ........ 0158 75bc071f 6661c3a0 u...fa.. 75bc071f 6661c3a0 u...fa.. 0160 f801e808 00a0fb01 ........ f801e808 00a0fb01 ........ 0168 e80200eb feb4018b ........ e80200eb feb4018b ........ 0170 f0ac3c00 7409b40e ..<.t... f0ac3c00 7409b40e ..<.t... 0178 bb0700cd 10ebf2c3 ........ bb0700cd 10ebf2c3 ........ 0180 0d0a4120 6469736b ..A disk 0d0a4120 6469736b ..A disk 0188 20726561 64206572 read er 20726561 64206572 read er 0190 726f7220 6f636375 ror occu 726f7220 6f636375 ror occu 0198 72726564 000d0a42 rred...B 72726564 000d0a42 rred...B 01A0 4f4f544d 47522069 OOTMGR i 4f4f544d 47522069 OOTMGR i 01A8 73206d69 7373696e s missin 73206d69 7373696e s missin 01B0 67000d0a 424f4f54 g...BOOT 67000d0a 424f4f54 g...BOOT 01B8 4d475220 69732063 MGR is c 4d475220 69732063 MGR is c 01C0 6f6d7072 65737365 ompresse 6f6d7072 65737365 ompresse 01C8 64000d0a 50726573 d...Pres 64000d0a 50726573 d...Pres 01D0 73204374 726c2b41 s Ctrl+A 73204374 726c2b41 s Ctrl+A 01D8 6c742b44 656c2074 lt+Del t 6c742b44 656c2074 lt+Del t 01E0 6f207265 73746172 o restar 6f207265 73746172 o restar 01E8 740d0a00 00000000 t....... 740d0a00 00000000 t....... 01F0 00000000 00000000 ........ 00000000 00000000 ........ 01F8 809db2ca 000055aa ......U. 809db2ca 000055aa ......U. ntfs_boot_sector 2 P HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] NTFS, 10485 MB / 10000 MiB NTFS at 5/25/21 NTFS at 5/25/21 filesystem size 20480000 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 16 clusters_per_mft_record -10 clusters_per_index_record 1 Boot sector Status: OK Backup boot sector Status: OK Sectors are identical. A valid NTFS Boot sector must be present in order to access any data; even if the partition is not bootable. Analyse Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63 Geometry from i386 MBR: head=255 sector=63 check_part_i386 1 type DE: no test NTFS at 5/25/21 NTFS at 1279/234/44 check_part_i386 5 type DD: no test get_geometry_from_list_part_aux head=255 nbr=2 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 Current partition structure: 1 P Dell Utility 0 1 1 4 254 63 80262 2 P HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] 3 * HPFS - NTFS 1279 234 44 30074 213 3 462590312 [OS] 4 E extended LBA 30074 239 54 30401 42 41 5240832 5 L Sys=DD 30075 17 23 30401 42 41 5238784 Computes LBA from CHS for Disk /dev/sda - 250 GB / 232 GiB - CHS 30402 255 63 Allow partial last cylinder : Yes search_vista_part: 1 search_part() Disk /dev/sda - 250 GB / 232 GiB - CHS 30402 255 63 FAT16 at 0/1/1 FAT1 : 1-79 FAT2 : 80-158 start_rootdir : 159 Data : 191-80258 sectors : 80259 cluster_size : 4 no_of_cluster : 20017 (2 - 20018) fat_length 79 calculated 79 FAT16 at 0/1/1 FAT16 >32M 0 1 1 4 254 60 80259 [DellUtility] FAT16, 41 MB / 39 MiB NTFS at 5/25/21 filesystem size 20480000 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 16 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] NTFS, 10485 MB / 10000 MiB NTFS at 1279/234/44 filesystem size 462590312 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 16 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 1279 234 44 30074 213 3 462590312 [OS] NTFS, 236 GB / 220 GiB FAT32 at 30075/17/23 FAT1 : 6182-11282 FAT2 : 11283-16383 start_rootdir : 16384 root cluster : 2 Data : 16384-5238783 sectors : 5238784 cluster_size : 8 no_of_cluster : 652800 (2 - 652801) fat_length 5101 calculated 5101 FAT32 at 30075/17/23 FAT32 LBA 30075 17 23 30401 42 41 5238784 [MEDIADIRECT] FAT32, 2682 MB / 2558 MiB get_geometry_from_list_part_aux head=255 nbr=2 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 Results * FAT16 >32M 0 1 1 4 254 60 80259 [DellUtility] FAT16, 41 MB / 39 MiB P HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] NTFS, 10485 MB / 10000 MiB P HPFS - NTFS 1279 234 44 30074 213 3 462590312 [OS] NTFS, 236 GB / 220 GiB L FAT32 LBA 30075 17 23 30401 42 41 5238784 [MEDIADIRECT] FAT32, 2682 MB / 2558 MiB interface_write() 1 * FAT16 >32M 0 1 1 4 254 60 80259 [DellUtility] 2 P HPFS - NTFS 5 25 21 1279 234 43 20480000 [RECOVERY] 3 P HPFS - NTFS 1279 234 44 30074 213 3 462590312 [OS] 4 E extended LBA 30075 0 1 30401 254 63 5253255 5 L FAT32 LBA 30075 17 23 30401 42 41 5238784 [MEDIADIRECT] simulate write! write_mbr_i386: starting... write_all_log_i386: starting... write_all_log_i386: CHS: 30075/0/1,lba=483154875 TestDisk exited normally. this is drive letter and label information obtained in the Recovery Environment that I did not post in the last reply. Ltr label E D Recvery C OS F
  8. Sorry, getting very frustrated as I do not see a browse button, below the text box.....
  9. I am sure it is right in front of me, but how do I attach files in my replies?
  10. Hello noahdfear, Thank you for your assistance! When I click on dumpit I do not recieve a download, but rather a text page opens...... Is there something special I should be doing to get the download??
  11. Almost positive that I did it correctly this time.....
  12. Ok all uploaded, hoping I did the zip part correctly Thanks, steve
×
×
  • Create New...