DFSee version 17.0 2022-10-22 (c) 1994-2022: Jan van Wijk =========================[ www.dfsee.com ]========================== _______________________________________________________________________________ C O N T E N T S: _______________________________________________________________________________ DFSDISK introduction Examples of DFSDISK usage 0) Template and general description 1) Thinkpad damaged by VCU using wrong drivers (geometry) 2) eCS system trashed by Windows-98 FDISK while removing a partition 3) Mixed OS/2, Windows and Linux system trashed by Linux Disk-Druid 4) 2nd disk in Windows system trashed by FDISK (made one FAT32 out of it) 5) Multi-boot system lost all partition on FDISK crash, disk seems empty This document concentrates on how to interpret DFSDISK result files. Note: For syntax/usage information on the DFSDISK command itself, either use 'DFSDISK -?' on the DFSee commandline, or read about the command in the 'DFSCMDS.TXT' documentation file. _______________________________________________________________________________ #010 D F S D I S K I N T R O D U C T I O N _______________________________________________________________________________ DFSDOSK or 'Analyse disks for Support' is the name of a DFSee method to UNDO damage done to partition table information by FDISK, Partition-Magic, VCU.EXE, viruses and most important by mistakes you make in using these or similar tools. It is NOT a fully automated procedure where you can just call a magic program and all will be well (or not). Instead, the DFSDISK script is an information collecting procedure that creates a large logfile that can be analysed to find the missing partition(s) and if possible define a recovery script with some DFSee commands to recover them. The DFSDISK script and the RECOVERY script together implement a complete (UNFDISK) recovery procedure (Each RECOVERY script is unique!). Recovery usually involves a few CREATE commands, and sometimes a NEWMBR, STARTABLE, SETBOOT, LVMSET or FIXBOOT as well. Some example recovery scripts are in the standards distribution as 'REC*.DFS, and can be used as a starting point for your own ... All of this means it is not very useful unless you have the knowledge to make that analysis, know someone who does, or are able to learn ... Knowledgable people including myself are to be found on the DFSee support group at Yahoo: http://groups.yahoo.com/group/dfsee-support/ and of course you can always call on my help directly using: support@dfsee.com Note that for real support like this, a registration is required! This document is aimed at those people that would like to learn how to use the DFSDISK script to perform these recoveries. _______________________________________________________________________________ #020 D F S D I S K E X A M P L E S: _______________________________________________________________________________ Some real life scenarios are shown in the items below. Each is described with some text, and the relevant parts of the DFSDISK?.LOG file are included. The DFSee scenario to recover one or more partitions is given, and in some cases the resulting logfile from the recovery too. The first item, (00) serves as a template and a short description of the analysis considerations and techniques. _______________________________________________________________________________ 00) Template for examples, and outline for the analysis procedure Description: ------------ DFSDISKI.SK? logfile extract: ----------------------------- Most important info here: the output from the 'bsfind' command The stuff below that is for double checking and further identification. ========= End output (edited logfile) for this DFSDISK? ============= Analysis: --------- Based on knowledge about what the disk used to contain, and what must be recovered, carefully study the lists resulting from the 'bsfind' and the related 'list -b'. If the 'bsfind' has failed to find anything, there is still some detailed info for some 'well-known' sectors which could be enough for recovery. A second 'all sectors' scan for the start of the disk is included near the end of the logfile, this can be useful to check if the analysis should be rerun with a different geometry to find more information. As a last resort, you can run the DFSDISK script again with the 'ALL' option to perform a more thorough but time consuming search. After a brief look at the displayed partitions in the table (if any :-) the next step is a close examination of the bsfind output. I usually go back and forth between the 'bsfind' result list and the corresponding detailed information below it in the logfile. It is very helpful if you can use a good editor with search facilities like 'search word under cursor'. Use that to find unique sector numbers. When the partitioning for a disk is very 'clean' and no other older partitions exist on the disk, the bsfind results will be a good representation for the partitions that are present, including the right sizes as displayed on the left side. In real life, there are often remains of previous or moved partitions, so the size info is less useful without doing some calculations too. A good strategy is looking for combinations of a few sector hits that are on the same cylinder, like EBR, LVM-info and Boot sector. On LVM systems, the LVM-info is often the best lead, because that contains useful names, starting positions and size information. The list is likely to contain confusing information besides the stuff you are looking for, due to old partition sectors still being around. Use the displayed sector numbers to find the detailed information further below in the 'list -b' to identify the things you are looking for. Also look closely at the reported sizes, not only for identification, but also to check that partitions do not overlap. Recovery scenario: ------------------ One point to consider here is that while using a CREATE command and specifying the size in megabytes, this value might be rounded UP slightly by DFSee to align on cylinder boundaries. To compensate for that it is wise to subtract 1 MiB from the sizes reported because those might have been rounded up already. DFSOS2.EXE -log:recover newmbr 1 cr pri bmgr 1 cr pri fat 1000 cr log hpfs 600 cr log hpfs 2400 q Recovery log extract: --------------------- ========= End output (edited logfile) for this scenario ============= _______________________________________________________________________________ #100 Fix VCU damage 1) Thinkpad damaged by VCU using wrong drivers (geometry) Description: ------------ This is a Thinkpad that contained a small primary HPFS for booting, and a larger HPFS on the rest of the disk for programs and data. Booting that using one of the eComStation installation CDs with old disk drivers on them caused the VCU utility to run and damage the partition. The logical partition was gone after a reboot ... DFSDISKI.SK? logfile extract: ----------------------------- Result of a "part -r" command: Number of disks : 1 LogGeo Disk 1 Cyl : 789 H:255 S:63 = 7.84 MB DiskSize : 00C168D5 = 6189 MB +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |id|PD|Vol|Type, description|Format |Creator |VolumeLabel|LVM Volume| Size MB| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |01| 1|>C:|Prim 07 Inst-FSys|HPFS |IBM 4.50|OS2 |eCS, eCS | 509.8| |02| 1| |Pri/Log FreeSpace|-- -- --|-- -- --|- - - - - -| | 5679.2| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ Result of a "part -n" command ("part -n -e" can be useful too): Read-Only Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 060802-160711 RC:0 : 00000000 u=00000000 x=00C168D4 this=00000000 Base=00000000 +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |id|PD|Vol|Type, description| Begin |End sect| Cylinders | Sectors | Size MB| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |01| 1| |Track-0 Area +MBr| 0| 3e| 0 - 0| 3f| 0.031| |01| 1|>C:|Prim 07 Inst-FSys| 3f| fef00| 0 - 64| feec2| 509.8| |02| 1| |Pri/Log FreeSpace| fef01| c168d4| 65 - 788| b179d4| 5679.2| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ Read-Only Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 060802-160711 RC:0 : 00000000 u=00000000 x=00C168D4 this=00000000 Base=00000000 LogGeo Disk 1 Cyl : 789 H:255 S:63 = 7.84 MB DiskSize : 00C168D5 = 6189 MB Search sect types : MBR, EBR, boot and LVM on cylinder boundaries only (fast) Fast search-mode! : progress not shown; press to abort ... .00000 (inserted) : 00000000 = Master Boot Rec Cyl: 0 H: 0 S: 1 = 00000000 .00001 : 0000003E = LVM disk/vol info Cyl: 0 H: 0 S:63 = 0000003E .00002 : 0000003F = Fsys boot sector Cyl: 0 H: 1 S: 1 = 0000003F .00003 509.9 MB : 000FEF3F = LVM disk/vol info Cyl: 65 H: 0 S:63 = 000FEF3F .00004 : 000FEF40 = Fsys boot sector Cyl: 65 H: 1 S: 1 = 000FEF40 .00005 2996.5 MB : 006D92FF = Extended Boot Rec Cyl: 447 H: 0 S: 1 = 006D92FF 6 matching sector(s) found Read-Only Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 060802-160726 RC:0 : 00C168D5 u=00000000 x=006D92FF this=00000000 Base=00000000 .00000 : 00000000 = Master Boot Rec Cyl: 0 H: 0 S: 1 = 00000000 .00001 : 0000003E = LVM disk/vol info Cyl: 0 H: 0 S:63 = 0000003E .00002 : 0000003F = Fsys boot sector Cyl: 0 H: 1 S: 1 = 0000003F .00003 509.9 MB : 000FEF3F = LVM disk/vol info Cyl: 65 H: 0 S:63 = 000FEF3F .00004 : 000FEF40 = Fsys boot sector Cyl: 65 H: 1 S: 1 = 000FEF40 .00005 2996.5 MB : 006D92FF = Extended Boot Rec Cyl: 447 H: 0 S: 1 = 006D92FF to-End 2682.7 MB : 00C168D4 = Cyl: 788 H:254 S:63 = 00C168D4 SN table +s holds 6 sector(s) Read-Only Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 060802-160727 RC:0 : 00C168D5 u=00000000 x=006D92FF this=00000000 Base=00000000 Shown sector LSN : 00000000 = Master Boot Rec Cyl: 0 H: 0 S: 1 = 00000000 Position Fl|BeginCHS|Tp| EndCHS | BR-offset |sectors [Partition Table ] +==+--------+==+--------+------------+-----------+ -001BE- 00 80 01 01 00 07 fe 3f 40 3f 00 00 00 c2 ee 0f 00 [C...?@?...+o.] -001CE- 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] -001DE- 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] -001EE- 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] +==+--------+==+--------+------------+-----------+ Partition index 0 : Type 07 = Inst-FSys <-------------------- Active/Bootable Begin sector PSN : 0000003F = Cyl: 0 H: 1 S: 1 End sector PSN : 000FEF00 = Cyl: 64 H:254 S:63 Bootsect. offset : 0000003F Sectors : 000FEEC2 = 510 MB Shown sector LSN : 0000003E = LVM disk/vol info Cyl: 0 H: 0 S:63 = 0000003E Disk geometry Cyl : 788 H:255 S:63 = 7.84 MB Disksize : 00C12A14 = 6181 MB Phys disk Id : 22b526ec Name : [ D1 ] Boot disk Id : 22b526ec Install Flags : 00000000 LVM sectorCRC : d5c831e6 checked, OK Partition 1st PSN : 0000003F size : 000FEEC2 = 510 MB Volume letter : C: bmgr : YES, on menu (Installable) Volume ser Id : 32c36dc4 Name : eCS Partition Id : 10fd9c82 Name : eCS Shown sector LSN : 0000003F = Fsys boot sector Cyl: 0 H: 1 S: 1 = 0000003F -00000- 00 eb 4e 90 49 42 4d 20 34 2e 35 30 00 02 00 00 00 [lNEIBM 4.50....] -00010- 00 00 00 02 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [....o..?. .?...] -00020- 00 c2 ee 0f 00 80 80 28 14 14 7e a8 4f 53 32 00 00 [+o.CC(~?OS2..] -00030- 00 00 00 00 00 00 00 48 50 46 53 20 20 20 20 00 00 [......HPFS ..] Bootsector format : HPFS Part. creator : IBM 4.50 Partition label : OS2 Bytes per sector : Hex 200 = 512 0 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1= 8 MB Big nr of sectors : 000FEEC2 = 510 MB = 64.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x28 = 40 (usually 0x28, 0x29 or 0x80) Boot drive-letter : 0x80 = C: bootable Volume-serial nr : A87E1414 Shown sector LSN : 000FEF3F = LVM disk/vol info Cyl: 65 H: 0 S:63 = 000FEF3F Disk geometry Cyl : 788 H:255 S:63 = 7.84 MB Disksize : 00C12A14 = 6181 MB Phys disk Id : 22b526ec Name : [ D1 ] Boot disk Id : 22b526ec Install Flags : 00000000 LVM sectorCRC : fd5440b5 checked, OK Shown sector LSN : 000FEF40 = Fsys boot sector Cyl: 65 H: 1 S: 1 = 000FEF40 -00000- 00 eb 4d 90 4f 53 32 20 32 30 2e 30 00 02 01 01 00 [lMEOS2 20.0..] -00010- 00 00 00 00 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [.....o..?. .?...] -00020- 00 95 79 b1 00 80 00 28 02 e4 5e df 57 4f 52 4b 20 [oy=.C.(e^=WORK ] -00030- 00 20 20 20 20 20 20 48 50 46 53 20 20 20 20 00 00 [ HPFS ..] Bootsector format : HPFS Part. creator : OS2 20.0 Partition label : WORK Bytes per sector : Hex 200 = 512 1 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1= 8 MB Big nr of sectors : 00B17995 = 5679 MB = 723.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x28 = 40 (usually 0x28, 0x29 or 0x80) Boot drive-letter : 0x00 = Not bootable, data partition Volume-serial nr : DF5EE402 ========= End output (edited logfile) for this DFSDISK? ============= Analysis: --------- This is one of the simplest recoveries you are likely to encounter. From the description and the currently displayed partition table, you could already guess that a simple: CR log hpfs will most likely bring back the missing logical HPFS. However, to make sure we don't make a mistake, double check the logfile! From the 'list -s' output we see that the first partition ends after 509 megabyte, and that there is LVM-info and a bootsector there but NO EBR! Checking on the LVM-info we see it is incomplete (lists no partition). I assume this is the point where VCU.EXE failed after creating this. The bootsector looks good, it is for a 5679 HPFS partition. The EBR sector listed at cylinder 447 must be an old one, it is in the middle of our HPFS partition. Also the two sizes listed in the left-hand column of 'list -s' nicely add up to our 5679 MB Recovery scenario: ------------------ Specifying all parameters to 'CR' just makes it a bit safer, just the 'cr log hpfs' would be enough here but I tend to include the disk-number and starting cylinder because on more complex recoveries that will cause typing errors and other mistakes to be caught ... DFSOS2.EXE -log:wayne02 cr log hpfs 5679 -disk:1 -at:65,c q This does not complete the recovery yet, because the LVM-info for this partition was trashed by VCU. To recover from that we need to use the standard LVM program and create the volume again: Define a volume (name and drive-letter) for this partition, so the LVM- enabled eCS will see it too. To do that, start LVM.EXE, and create a new volume. The trick here is to select "use an existing partition" in the procedure, not "from freespace". The partition will probably have an artificial name like [A1] or so, but it can easily be recognized since it is the only "available" one and has the right size. Note: The later versions of DFSee can do that too, just use the "LVM" command interactively, or specify the LVM information on the "cr" command. (as shown in sample (3) too) Recovery log extract: --------------------- DFSee OS2 version : 4.28 executing: fdisk -r- Execute timestamp : Tuesday 06-08-2002 20:57:09 ÚÄÄÂÄÄÂÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄ¿ ³id³PD³Vol³Type, description³Format ³Creator ³VolumeLabel³LVM Volume,³ Size MB³ ÃÄÄÅÄÄÅÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄ´ ³01³ 1³>C:³Prim 07 Inst-FSys³HPFS ³IBM 4.50³OS2 ³eCS, eCS ³ 509.8³ ³02³ 1³ ³Pri/Log FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 5679.2³ ÀÄÄÁÄÄÁÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÙ ReadWrite Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 060802-205710 RC:0 : 00000000 u=00000000 x=00C168D4 this=00000000 Base=00000000 DFSee OS2 version : 4.28 executing: cr log hpfs 5679 -disk:1 -at:65,c Execute timestamp : Tuesday 06-08-2002 20:58:50 Specified size : 00b17800 = 5679.0 MB Found fsp-area 2 : 00b179d4 = 5679.2 MB type: Pri/Log FreeSpace Aligned PART size : 00b179d4 = 5679.2 MB New part position : 00000000 = 0.0 MB from Begin freespace 000fef01 = 509.9 MB from start of disk Calc. net size : 00b17995 = 5679.2 MB In freespace area : 02 at rel pos: 0000003F Part-table in EBR : 000fef01 = i13: 00 01 41 = Cyl: 65 H: 0 S: 1 = 000fef01 First part sector : 000fef40 = i13: 01 01 41 = Cyl: 65 H: 1 S: 1 = 000fef40 Last part sector : 00c168d4 = i13: fe ff 14 = Cyl: 788 H:254 S:63 = 00c168d4 CREATE log hpfs 5679 1 @65,c Freespace ID 02 : 5679.2 MB disk 1 Type Inst-FSys 07 : 5679.2 MB Logical Create the partition as shown ? [Y/N] : y Update Ptable at : 000FEF01 Using entry 0 for a type 07 partition Update Ptable at : 00000000 Using entry 1 for a type 05 partition Create partition : successful New selectable as : 02 and set as default for 'part auto' Execute autoshow : 'part -r -d:1 -Create!' ÚÄÄÂÄÄÂÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄ¿ ³id³PD³Vol³Type, description³Format ³Creator ³VolumeLabel³LVM Volume,³ Size MB³ ÃÄÄÅÄÄÅÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄ´ ³01³ 1³>C:³Prim 07 Inst-FSys³HPFS ³IBM 4.50³OS2 ³eCS, eCS ³ 509.8³ ³02³ 1³ --³Log 07 Inst-FSys³HPFS ³OS2 20.0³WORK ³ ³ 5679.2³ ÀÄÄÁÄÄÁÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÙ ReadWrite Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 060802-205910 RC:0 : 000FEF01 u=00000000 x=000FEF01 this=00000000 Base=00000000 ========= End output (edited logfile) for this scenario ============= _______________________________________________________________________________ #200 Fix damaged partition tables 2) eCS system trashed by Windows-98 FDISK while removing a partition Description: ------------ This was a functioning eComStation system that had multiple partitions and also a bootable Win-98. On trying to create a 10GiB FAT32 partition at some stage the Win-98 FDISK was used that eventually wiped out all the logical partitions. Most important things missing are a 10 GiB JFS and two 5 GiB HPFS partitions. DFSDISKI.SK? logfile extract: ----------------------------- Most important info here: the output from the bsfind or list -s All the stuff below that (even more than included here) is just for double checking and further identification. DFSee OS2 version : 4.28 executing: fdisk Execute timestamp : Tuesday 30-07-2002 13:38:44 Number of disks : 1 LogGeo Disk 1 Cyl : 4865 H:255 S:63 = 7.84 MB DiskSize : 04A891C1 = 38162 MB +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |id|PD|Vol|Type, description|Format |Creator |VolumeLabel|LVM Volume| Size MB| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |01| 1|> |Prim 0a Boot-Mgr |BMGR |fdisk ||, [ BOOT M| 7.8| |02| 1|*W:|Hide 16 FAT16 |FAT16 |MSWIN4.1|WIN |Win, FAT | 1027.6| |03| 1|*C:|Prim 07 Inst-FSys|HPFS |IBM 4.50|ESC |eCS, HPFS | 1027.6| |04| 1| |Pri/Log FreeSpace|-- -- --|-- -- --|- - - - - -| | 36099.2| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ Read-Only Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 300702-133844 RC:0 : 00000000 u=00000000 x=04A891C0 this=00000000 Base=00000000 DFSee OS2 version : 4.28 executing: part $* Execute timestamp : Tuesday 30-07-2002 13:38:44 +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |id|PD|Vol|Type, description| Begin |End sect| Cylinders | Sectors | Size MB| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ |01| 1| |Track-0 Area +MBr| 0| 3e| 0 - 0| 3f| 0.031| |01| 1|> |Prim 0a Boot-Mgr | 3f| 3ec0| 0 - 0| 3e82| 7.8| |02| 1|*W:|Hide 16 FAT16 | 3ec1| 205b83| 1 - 131| 201cc3| 1027.6| |03| 1|*C:|Prim 07 Inst-FSys| 205b84| 407846| 132 - 262| 201cc3| 1027.6| |04| 1| |Pri/Log FreeSpace| 407847| 4a891c0| 263 - 4864| 468197a| 36099.2| +--+--+---+-----------------+--------+--------+-----------+----------+--------+ Read-Only Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 300702-133844 RC:0 : 00000000 u=00000000 x=04A891C0 this=00000000 Base=00000000 DFSee OS2 version : 4.28 executing: bsfind Execute timestamp : Tuesday 30-07-2002 13:38:44 LogGeo Disk 1 Cyl : 4865 H:255 S:63 = 7.84 MB DiskSize : 04A891C1 = 38162 MB Search sect types : MBR, EBR, boot and LVM on cylinder boundaries only (fast) Fast search-mode! : progress not shown; press to abort ... .00000 (inserted) : 00000000 = Master Boot Rec Cyl: 0 H: 0 S: 1 = 00000000 .00001 : 0000003E = LVM disk/vol info Cyl: 0 H: 0 S:63 = 0000003E .00002 : 0000003F = Fsys boot sector Cyl: 0 H: 1 S: 1 = 0000003F .00003 7.8 MB : 00003EC1 = Fsys boot sector Cyl: 1 H: 0 S: 1 = 00003EC1 .00004 1027.6 MB : 00205B84 = Fsys boot sector Cyl: 132 H: 0 S: 1 = 00205B84 .00005 1027.6 MB : 00407885 = LVM disk/vol info Cyl: 263 H: 0 S:63 = 00407885 .00006 : 00407886 = Fsys boot sector Cyl: 263 H: 1 S: 1 = 00407886 .00007 6000.8 MB : 00FBFF04 = Extended Boot Rec Cyl:1028 H: 0 S: 1 = 00FBFF04 .00008 1945.4 MB : 0138C9FC = Extended Boot Rec Cyl:1276 H: 0 S: 1 = 0138C9FC .00009 2055.2 MB : 01790382 = Extended Boot Rec Cyl:1538 H: 0 S: 1 = 01790382 .00010 : 017903C0 = LVM disk/vol info Cyl:1538 H: 0 S:63 = 017903C0 .00011 : 017903C1 = Fsys boot sector Cyl:1538 H: 1 S: 1 = 017903C1 .00012 10001.4 MB : 02B18EBC = LVM signature sec Cyl:2812 H:254 S:63 = 02B18EBC .00013 : 02B18EBD = Extended Boot Rec Cyl:2813 H: 0 S: 1 = 02B18EBD .00014 : 02B18EFB = LVM disk/vol info Cyl:2813 H: 0 S:63 = 02B18EFB .00015 0.0 MB : 02B18EFC = Fsys boot sector Cyl:2813 H: 1 S: 1 = 02B18EFC .00016 4996.7 MB : 034DB4FA = Extended Boot Rec Cyl:3450 H: 0 S: 1 = 034DB4FA .00017 : 034DB538 = LVM disk/vol info Cyl:3450 H: 0 S:63 = 034DB538 .00018 : 034DB539 = Fsys boot sector Cyl:3450 H: 1 S: 1 = 034DB539 to-End 11099.6 MB : 04A891C0 = Cyl:4864 H:254 S:63 = 04A891C0 19 matching sector(s) found DFSee OS2 version : 4.28 executing: list -b Execute timestamp : Tuesday 30-07-2002 13:39:26 ... Shown sector LSN : 01790382 = Extended Boot Rec Cyl:1538 H: 0 S: 1 = 01790382 Position Fl|BeginCHS|Tp| EndCHS | BR-offset |sectors [Partition Table ] +==+--------+==+--------+------------+-----------+ -001BE- 01 80 fe ff ff 35 fe ff ff 3f 00 00 00 fc 8a 38 01 [C. 5. ?...ne8] -001CE- 01 00 fe ff ff 05 fe ff ff 76 16 71 02 3d 26 9c 00 [.. . vq=&L.] -001DE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] -001EE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] +==+--------+==+--------+------------+-----------+ Partition index 0 : Type 35 = Warp-LVM <-------------------- Active/Bootable Begin sector PSN : 017903C1 = Cyl: 1538 H: 1 S: 1 CHS Cyl: 1023 H:254 S:63 End sector PSN : 02B18EBC = Cyl: 2812 H:254 S:63 CHS Cyl: 1023 H:254 S:63 Bootsect. offset : 0000003F Sectors : 01388AFC = 10001 MB Partition index 1 : Type 05 = Extended Begin sector PSN : 02711676 = Cyl: 2550 H: 0 S: 1 CHS Cyl: 1023 H:254 S:63 End sector PSN : 030D3CB2 = Cyl: 3186 H:254 S:63 CHS Cyl: 1023 H:254 S:63 Bootsect. offset : 02711676 Sectors : 009C263D = 4997 MB Shown sector LSN : 017903C0 = LVM disk/vol info Cyl:1538 H: 0 S:63 = 017903C0 Disk geometry Cyl : 4865 H:255 S:63 = 7.84 MB Disksize : 04A891C1 = 38162 MB Phys disk Id : 75cbe407 Name : [ D1 ] Boot disk Id : 75cbe407 Install Flags : 00000000 LVM sectorCRC : 970d275a checked, OK Partition 1st PSN : 017903C1 size : 01388AFC = 10001 MB Volume letter : D: bmgr : not selectable Volume ser Id : c62f3f2f Name : eCSData Partition Id : 4185e04a Name : Violet_JFS Shown sector LSN : 017903C1 = Fsys boot sector Cyl:1538 H: 1 S: 1 = 017903C1 -00000- 01 ac 1f 00 49 42 4d 20 34 2e 35 30 00 02 40 01 00 [4.IBM 4.50.@.] -00010- 01 02 00 02 00 00 f8 e3 04 3f 00 ff 00 3f 00 00 00 [...od?. .?...] -00020- 01 3b 4c 38 01 80 01 29 c0 75 c0 18 65 43 53 44 61 [;L8C)+u+eCSDa] -00030- 01 74 61 00 00 00 00 4a 46 53 20 20 20 20 20 e0 78 [ta....JFS ax] Bootsector format : JFS Part. creator : IBM 4.50 Partition label : eCSData Bytes per sector : Hex 200 = 512 64 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1 = 8 MB Big nr of sectors : 01384C3B = 9994 MB = 1273.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x29 = 41 (usually 0x28, 0x29 or 0x80) Volume-serial nr : 18C075C0 Shown sector LSN : 02B18EBC = LVM signature sec Cyl:2812 H:254 S:63 = 02B18EBC LVM Partition Id : 4185e04a Name : Violet_JFS Volume Id : c62f3f2f Name : eCSData Boot disk Id : 75cbe407 Disk : [ D1 ] Volume letter : D: Part 1st PSN : 017903c1 = i13: 01 81 02 = Cyl: 1538 H: 1 S: 1 = 017903c1 Part last PSN : 02b18ebc = i13: fe bf fc = Cyl: 2812 H:254 S:63 = 02b18ebc Part size : 01388AFC = 10001 MB Reserved area : 000010D0 = 2152 Kb Reported size : 01387A2C = 9999 MB LVM version : 1.0 fake EBR PSN : 02b18e7d Sequence nr : 00000000 Next : 00000000 LVM comment : LVM sectorCRC : cc256fa7 checked, OK Feature prim. PSN : 02B17E39 Feature-id : 101 = Bad block relocation Secondary PSN : 02B17DF5 alloc size : 00000044 = 34 Kb Version nr : 1.0 status-ind : active Feature prim. PSN : 02B17DF1 Feature-id : 100 = Drive Linking Secondary PSN : 02B17DED alloc size : 00000004 = 2048 b Version nr : 1.0 status-ind : active ... Shown sector LSN : 02B18EBD = Extended Boot Rec Cyl:2813 H: 0 S: 1 = 02B18EBD Position Fl|BeginCHS|Tp| EndCHS | BR-offset |sectors [Partition Table ] +==+--------+==+--------+------------+-----------+ -001BE- 01 00 fe ff ff 07 fe ff ff 3f 00 00 00 fe 25 9c 00 [.. .. ?....%L.] -001CE- 01 00 fe ff ff 05 fe ff ff b3 3c 0d 03 3d 26 9c 00 [.. . |<.=&L.] -001DE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] -001EE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] +==+--------+==+--------+------------+-----------+ Partition index 0 : Type 07 = Inst-FSys Begin sector PSN : 02B18EFC = Cyl: 2813 H: 1 S: 1 CHS Cyl: 1023 H:254 S:63 End sector PSN : 034DB4F9 = Cyl: 3449 H:254 S:63 CHS Cyl: 1023 H:254 S:63 Bootsect. offset : 0000003F Sectors : 009C25FE = 4997 MB Partition index 1 : Type 05 = Extended Begin sector PSN : 030D3CB3 = Cyl: 3187 H: 0 S: 1 CHS Cyl: 1023 H:254 S:63 End sector PSN : 03A962EF = Cyl: 3823 H:254 S:63 CHS Cyl: 1023 H:254 S:63 Bootsect. offset : 030D3CB3 Sectors : 009C263D = 4997 MB Shown sector LSN : 02B18EFB = LVM disk/vol info Cyl:2813 H: 0 S:63 = 02B18EFB Disk geometry Cyl : 4865 H:255 S:63 = 7.84 MB Disksize : 04A891C1 = 38162 MB Phys disk Id : 75cbe407 Name : [ D1 ] Boot disk Id : 75cbe407 Install Flags : 00000000 LVM sectorCRC : 23e9eb01 checked, OK Partition 1st PSN : 02B18EFC size : 009C25FE = 4997 MB Volume letter : F: bmgr : not selectable Volume ser Id : 939099e3 Name : Progs Partition Id : d946265b Name : Progs Shown sector LSN : 02B18EFC = Fsys boot sector Cyl:2813 H: 1 S: 1 = 02B18EFC -00000- 01 eb 4d 90 4f 53 32 20 32 30 2e 30 00 02 08 01 00 [lMEOS2 20.0...] -00010- 01 00 00 02 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [....o..?. .?...] -00020- 01 fe 25 9c 00 80 00 28 f4 3b 00 ea 50 52 4f 47 53 [.%L.C.([;.kPROGS] -00030- 01 00 20 20 20 20 20 48 50 46 53 20 20 20 20 00 00 [. HPFS ..] Bootsector format : HPFS Part. creator : OS2 20.0 Partition label : PROGS Bytes per sector : Hex 200 = 512 8 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1 = 8 MB Big nr of sectors : 009C25FE = 4997 MB = 636.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x28 = 40 (usually 0x28, 0x29 or 0x80) Boot drive-letter : 0x00 = Not bootable, data partition Volume-serial nr : EA003BF4 ... Shown sector LSN : 034DB4FA = Extended Boot Rec Cyl:3450 H: 0 S: 1 = 034DB4FA Position Fl|BeginCHS|Tp| EndCHS | BR-offset |sectors [Partition Table ] +==+--------+==+--------+------------+-----------+ -001BE- 01 00 fe ff ff 07 fe ff ff 3f 00 00 00 fe 25 9c 00 [.. .. ?....%L.] -001CE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] -001DE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] -001EE- 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [................] +==+--------+==+--------+------------+-----------+ Partition index 0 : Type 07 = Inst-FSys Begin sector PSN : 034DB539 = Cyl: 3450 H: 1 S: 1 CHS Cyl: 1023 H:254 S:63 End sector PSN : 03E9DB36 = Cyl: 4086 H:254 S:63 CHS Cyl: 1023 H:254 S:63 Bootsect. offset : 0000003F Sectors : 009C25FE = 4997 MB Shown sector LSN : 034DB538 = LVM disk/vol info Cyl:3450 H: 0 S:63 = 034DB538 Disk geometry Cyl : 4865 H:255 S:63 = 7.84 MB Disksize : 04A891C1 = 38162 MB Phys disk Id : 75cbe407 Name : [ D1 ] Boot disk Id : 75cbe407 Install Flags : 00000000 LVM sectorCRC : 6399cecf checked, OK Partition 1st PSN : 034DB539 size : 009C25FE = 4997 MB Volume letter : G: bmgr : not selectable Volume ser Id : 2b2cfe86 Name : Data Partition Id : 61fa413e Name : Data Shown sector LSN : 034DB539 = Fsys boot sector Cyl:3450 H: 1 S: 1 = 034DB539 -00000- 01 eb 4d 90 4f 53 32 20 32 30 2e 30 00 02 08 01 00 [lMEOS2 20.0...] -00010- 01 00 00 02 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [....o..?. .?...] -00020- 01 fe 25 9c 00 80 00 28 8b 56 80 24 44 41 54 41 00 [.%L.C.(iVC$DATA.] -00030- 01 20 20 20 20 20 20 48 50 46 53 20 20 20 20 00 00 [ HPFS ..] Bootsector format : HPFS Part. creator : OS2 20.0 Partition label : DATA Bytes per sector : Hex 200 = 512 8 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1 = 8 MB Big nr of sectors : 009C25FE = 4997 MB = 636.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x28 = 40 (usually 0x28, 0x29 or 0x80) Boot drive-letter : 0x00 = Not bootable, data partition Volume-serial nr : 2480568B ========= End output (edited logfile) for this DFSDISK? ============= Analysis: --------- Knowing that we are looking for a 10GiB JFS and two 5GiB HPFS, the size info and the LVM-info that is listed in the bsfind output quickly leads to the right partitions: JFS, starting at cylinder 1535 size 1001 HPFS, starting at cylinder 2813 size 4997 HPFS, starting at cylinder 3450 size 4997 Recovery scenario: ------------------ The commands below will recreate the 10GiB JFS 'eCSData' and the two 4996 MB HPFS partitions 'Progs' and 'Data' DFSOS2.EXE -log:resin02 cr log jfs 10000 -disk:1 -at:1538,c cr log hpfs 4995 -disk:1 -at:2813,c cr log hpfs 4995 -disk:1 -at:3450,c part -r q Recovery log extract: --------------------- DFSee OS2 version : 4.28 executing: fdisk -r- Execute timestamp : Saturday 03-08-2002 20:11:58 ÚÄÄÂÄÄÂÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄ¿ ³id³PD³Vol³Type, description³Format ³Creator ³VolumeLabel³LVM Volume,³ Size MB³ ÃÄÄÅÄÄÅÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄ´ ³01³ 1³> ³Prim 0a Boot-Mgr ³BMGR ³fdisk ³®eCS ¯³, [ BOOT MA³ 7.8³ ³02³ 1³*W:³Hide 16 FAT16 ³FAT16 ³MSWIN4.1³WIN ³Win, FAT ³ 1027.6³ ³03³ 1³*C:³Prim 07 Inst-FSys³HPFS ³IBM 4.50³ESC ³eCS, HPFS ³ 1027.6³ ³04³ 1³ ³Pri/Log FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 36099.2³ ÀÄÄÁÄÄÁÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÙ ReadWrite Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 030802-201159 RC:0 : 00000000 u=00000000 x=04A891C0 this=00000000 Base=00000000 DFSee OS2 version : 4.28 executing: cr log jfs 10000 -disk:1 -at:1538,c Execute timestamp : Saturday 03-08-2002 20:12:47 Specified size : 01388000 = 10000.0 MB Found fsp-area 4 : 0468197a = 36099.2 MB type: Pri/Log FreeSpace Aligned PART size : 01388b3b = 10001.4 MB New part position : 01388b3b = 10001.4 MB from Begin freespace 01790382 = 12064.4 MB from start of disk Calc. net size : 01388afc = 10001.4 MB In freespace area : 04 at rel pos: 01388B7A Part-table in EBR : 01790382 = i13: 00 81 02 = Cyl: 1538 H: 0 S: 1 = 01790382 First part sector : 017903c1 = i13: 01 81 02 = Cyl: 1538 H: 1 S: 1 = 017903c1 Last part sector : 02b18ebc = i13: fe bf fc = Cyl: 2812 H:254 S:63 = 02b18ebc CREATE log jfs 10000 1 @1538,c Freespace ID 04 : 36099.2 MB disk 1 Type Warp-LVM 35 : 10001.4 MB Logical Create the partition as shown ? [Y/N] : y Update Ptable at : 01790382 Using entry 0 for a type 35 partition Update Ptable at : 00000000 Using entry 3 for a type 05 partition Create partition : successful New selectable as : 04 and set as default for 'part auto' Execute autoshow : 'part -r -d:1 -Create!' ÚÄÄÂÄÄÂÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄ¿ ³id³PD³Vol³Type, description³Format ³Creator ³VolumeLabel³LVM Volume,³ Size MB³ ÃÄÄÅÄÄÅÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄ´ ³01³ 1³> ³Prim 0a Boot-Mgr ³BMGR ³fdisk ³®eCS ¯³, [ BOOT MA³ 7.8³ ³02³ 1³*W:³Hide 16 FAT16 ³FAT16 ³MSWIN4.1³WIN ³Win, FAT ³ 1027.6³ ³03³ 1³*C:³Prim 07 Inst-FSys³HPFS ³IBM 4.50³ESC ³eCS, HPFS ³ 1027.6³ ³04³ 1³ ³Logical FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 10001.4³ ³04³ 1³ D:³Log 35 Warp-LVM ³JFS ³fdisk ³eCSData ³eCSData, Vi³ 10001.4³ ³05³ 1³ ³Logical FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 16096.4³ ÀÄÄÁÄÄÁÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÙ ReadWrite Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 030802-201317 RC:0 : 01790382 u=00000000 x=01790382 this=00000000 Base=00000000 DFSee OS2 version : 4.28 executing: cr log hpfs 4995 -disk:1 -at:2813,c Execute timestamp : Saturday 03-08-2002 20:14:08 Specified size : 009c1800 = 4995.0 MB Found fsp-area 5 : 01f70304 = 16096.4 MB type: Logical FreeSpace Aligned PART size : 009c263d = 4996.8 MB New part position : 00000000 = 0.0 MB from Begin freespace 02b18ebd = 22065.8 MB from start of disk Calc. net size : 009c25fe = 4996.7 MB In freespace area : 05 at rel pos: 0000003F Part-table in EBR : 02b18ebd = i13: 00 81 fd = Cyl: 2813 H: 0 S: 1 = 02b18ebd First part sector : 02b18efc = i13: 01 81 fd = Cyl: 2813 H: 1 S: 1 = 02b18efc Last part sector : 034db4f9 = i13: fe 7f 79 = Cyl: 3449 H:254 S:63 = 034db4f9 CREATE log hpfs 4995 1 @2813,c Freespace ID 05 : 16096.4 MB disk 1 Type Inst-FSys 07 : 4996.7 MB Logical Create the partition as shown ? [Y/N] : y Update Ptable at : 02B18EBD Using entry 0 for a type 07 partition Update Ptable at : 00000000 Using entry 3 for a type 05 partition Update Ptable at : 01790382 Using entry 1 for a type 05 partition Create partition : successful New selectable as : 05 and set as default for 'part auto' Execute autoshow : 'part -r -d:1 -Create!' ÚÄÄÂÄÄÂÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄ¿ ³id³PD³Vol³Type, description³Format ³Creator ³VolumeLabel³LVM Volume,³ Size MB³ ÃÄÄÅÄÄÅÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄ´ ³01³ 1³> ³Prim 0a Boot-Mgr ³BMGR ³fdisk ³®eCS ¯³, [ BOOT MA³ 7.8³ ³02³ 1³*W:³Hide 16 FAT16 ³FAT16 ³MSWIN4.1³WIN ³Win, FAT ³ 1027.6³ ³03³ 1³*C:³Prim 07 Inst-FSys³HPFS ³IBM 4.50³ESC ³eCS, HPFS ³ 1027.6³ ³04³ 1³ ³Logical FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 10001.4³ ³04³ 1³ D:³Log 35 Warp-LVM ³JFS ³fdisk ³eCSData ³eCSData, Vi³ 10001.4³ ³05³ 1³ F:³Log 07 Inst-FSys³HPFS ³OS2 20.0³PROGS ³Progs, Prog³ 4996.7³ ³06³ 1³ ³Logical FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 11099.6³ ÀÄÄÁÄÄÁÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÙ ReadWrite Store 1 : PhysDisk : 1 PartId 00 = -- mode=FDISK 030802-201430 RC:0 : 02B18EBD u=00000000 x=02B18EBD this=00000000 Base=00000000 DFSee OS2 version : 4.28 executing: cr log hpfs 4995 -disk:1 -at:3450,c Execute timestamp : Saturday 03-08-2002 20:14:56 Specified size : 009c1800 = 4995.0 MB Found fsp-area 6 : 015adcc7 = 11099.6 MB type: Logical FreeSpace Aligned PART size : 009c263d = 4996.8 MB New part position : 00000000 = 0.0 MB from Begin freespace 034db4fa = 27062.6 MB from start of disk Calc. net size : 009c25fe = 4996.7 MB In freespace area : 06 at rel pos: 0000003F Part-table in EBR : 034db4fa = i13: 00 41 7a = Cyl: 3450 H: 0 S: 1 = 034db4fa First part sector : 034db539 = i13: 01 41 7a = Cyl: 3450 H: 1 S: 1 = 034db539 Last part sector : 03e9db36 = i13: fe ff f6 = Cyl: 4086 H:254 S:63 = 03e9db36 CREATE log hpfs 4995 1 @3450,c Freespace ID 06 : 11099.6 MB disk 1 Type Inst-FSys 07 : 4996.7 MB Logical Create the partition as shown ? [Y/N] : y Update Ptable at : 034DB4FA Using entry 0 for a type 07 partition Update Ptable at : 00000000 Using entry 3 for a type 05 partition Update Ptable at : 02B18EBD Using entry 1 for a type 05 partition Create partition : successful New selectable as : 06 and set as default for 'part auto' Execute autoshow : 'part -r -d:1 -Create!' ÚÄÄÂÄÄÂÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄÄÄÄÂÄÄÄÄÄÄÄÄ¿ ³id³PD³Vol³Type, description³Format ³Creator ³VolumeLabel³LVM Volume,³ Size MB³ ÃÄÄÅÄÄÅÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄÄÄÄÅÄÄÄÄÄÄÄÄ´ ³01³ 1³> ³Prim 0a Boot-Mgr ³BMGR ³fdisk ³®eCS ¯³, [ BOOT MA³ 7.8³ ³02³ 1³*W:³Hide 16 FAT16 ³FAT16 ³MSWIN4.1³WIN ³Win, FAT ³ 1027.6³ ³03³ 1³*C:³Prim 07 Inst-FSys³HPFS ³IBM 4.50³ESC ³eCS, HPFS ³ 1027.6³ ³04³ 1³ ³Logical FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 10001.4³ ³04³ 1³ D:³Log 35 Warp-LVM ³JFS ³fdisk ³eCSData ³eCSData, Vi³ 10001.4³ ³05³ 1³ F:³Log 07 Inst-FSys³HPFS ³OS2 20.0³PROGS ³Progs, Prog³ 4996.7³ ³06³ 1³ G:³Log 07 Inst-FSys³HPFS ³OS2 20.0³DATA ³Data, Data ³ 4996.7³ ³07³ 1³ ³Logical FreeSpace³-- -- --³-- -- --³- - - - - -³ ³ 6102.8³ ÀÄÄÁÄÄÁÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÄÄÄÁÄÄÄÄÄÄÄÄÙ ========= End output (edited logfile) for this scenario ============= _______________________________________________________________________________ #300 Fix multibootsystem damaged by Linux tools 3) Mixed OS/2, Windows and Linux system trashed by Linux Disk-Druid Description: ------------ This is about a system where Linux Disk-Druid was used to create a new logical partition in some freespace in the middle of the disk. It managed to rewrite the chain of logical partitions in a non-sorted ordering (OK for Linux but a disaster for DOS, OS/2 and Windows). It also destroyed the LVM-information on five of the logical partitions because the EBR sectors with partition tables were not placed at their standard sector (1st in track) but on the last one, where LVM lives ... DFSDISKI.SK? logfile extract: ----------------------------- Note: In this case the output for the 'bsfind' command is not very useful. The display tables below show that there are warnings about some logicals that are not aligned properly, this also results in some very small areas of freespace as shown in the second (numeric) table. DFSee Dos version : 5.17 executing: fdisk Execute timestamp : Wednesday 23-04-2003 12:45:14 WARNING disk nr 1 : EBR at 01b1a3e7 links BACK to earlier EBR, illegal order! Number of disks : 2 Ext Int13 version : 2.1 flags: 0005 Support for GetParam, Read and Write: yes Extended Int-13 : Present, will be used on each cylinder >= 1024) Ph-Geo disk 1 Cyl : 1871 H:255 S:63 = 7.84 MB Disksize : 01CABFE0 = 14680 MB LogGeo Disk 1 Cyl : 1871 H:255 S:63 = 7.84 MB DiskSize : 01CAA48F = 14677 MB WARNING disk nr 1 : EBR at 01b1a3e7 links BACK to earlier EBR, illegal order! Note: The line above is a very strong indication that Linux created an illegal ordering in the logical chain. It can also be seen in the output of the "walk" command, later on. Ext Int13 version : 2.1 flags: 0005 Support for GetParam, Read and Write: yes Extended Int-13 : Present, will be used on each cylinder >= 1024) Ph-Geo disk 2 Cyl : 1871 H:255 S:63 = 7.84 MB Disksize : 01CABFE0 = 14680 MB LogGeo Disk 2 Cyl : 1871 H:255 S:63 = 7.84 MB DiskSize : 01CAA48F = 14677 MB Pid02=-- WARNING : Primary does not start on head-0 (cylinder boundary) EBR05=E: WARNING : Extended does not start on head-0 (cylinder boundary) EBR06=F: WARNING : Extended does not start on head-0 (cylinder boundary) EBR07=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR08=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR09=G: WARNING : Extended does not start on head-0 (cylinder boundary) +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|LVM Volume| Size MB| +--+--------------+--------+-----------<[ D1 ] >--------+ |01|>--|Prim 0a Boot-Mgr | 2|BMGR |fdisk ||, [ BOOT M| 7.8| |02| --|Hide 1b FAT32 | 1|FAT32 |MSWIN4.1|NO NAME |WIN ME, WI| 1200.1| |03| C:|Prim 07 Inst-FSys| 3|HPFS |OS2 20.0|OS2 |OS/2 v4, O| 753.0| |04| D:|Log 07 Inst-FSys| 5|HPFS |OS2 20.0| |OS/2 Data,| 1004.0| |05| E:|Log 0b FAT32 | 6|FAT32 |MSWIN4.1| |--No-LVM-i| 2000.3| |06| F:|Log 06 FAT16 | 7|FAT |IBM 20.0|TRANSFER |--No-LVM-i| 203.9| |07| --|Log 83 LinuxExt2| 8|none |fdisk | |--No-LVM-i| 4996.7| |08| --|Log 82 LinuxSwap| 9|SWAP |fdisk | |--No-LVM-i| 509.8| |09| |FreeSpace Logical| |-- -- --|-- -- --|- - - - - -| | 3200.5| |09| G:|Log 07 Inst-FSys|10|HPFS |IBM 4.50|eComStation|--No-LVM-i| 800.1| +--+--------------+--------+-----------<[ D2 ] >--------+ |10| |FreeSpace Primary| |-- -- --|-- -- --|- - - - - -| | 7.8| |10| H:|Log 07 Inst-FSys| 5|HPFS |OS2 20.0|BACKUP OS2 |Backup, Ba| 502.0| |12| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 14166.7| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ Repeat table of partitions and freespace with all numeric information on partition begin and end sectors, sizes and starting cylinder. Separate lines are included here for every extended partition container. Also, ALL warnings even very minor ones will be displayed here. DFSee Dos version : 5.17 executing: part -e -n -w Execute timestamp : Wednesday 23-04-2003 12:45:15 Pid02=-- WARNING : Primary does not start on head-0 (cylinder boundary) EBR04=D: minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Int13 access limited to 1st 6071.4 MB out of 12715.5 MB Pid04=D: minor-W : Logical partition is marked as active EBR05=E: WARNING : Extended does not start on head-0 (cylinder boundary) Pid05=E: minor-W : Logical partition is marked as active EBR06=F: WARNING : Extended does not start on head-0 (cylinder boundary) Pid06=F: minor-W : Logical partition is marked as active EBR07=-- minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Int13 access limited to 1st 2863.1 MB out of 4996.7 MB EBR07=-- WARNING : Extended does not start on head-0 (cylinder boundary) Pid07=-- minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Int13 access limited to 1st 2863.1 MB out of 4996.7 MB Pid07=-- minor-W : Not formatted or LVM multiple partition continuation EBR08=-- minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Partition starts after cylinder 1023, no BIOS/INT-13 access. EBR08=-- WARNING : Extended does not start on head-0 (cylinder boundary) Pid08=-- minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Partition starts after cylinder 1023, no BIOS/INT-13 access. EBR09=G: minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Partition starts after cylinder 1023, no BIOS/INT-13 access. EBR09=G: WARNING : Extended does not start on head-0 (cylinder boundary) Pid09=G: minor-W : Logical partition is marked as active Pid09=G: minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Partition starts after cylinder 1023, no BIOS/INT-13 access. Pid10=H: minor-W : Logical partition is marked as active +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux| Begin |End sect| Cylinders | Sectors | Size MB| +--+--------------+--------+-----------<[ D1 ] >--------+ |01| |MBR +Track-0 Area| | 0| 3e| 0 - 0| 3f| 0.031| |01|>--|Prim 0a Boot-Mgr | 2| 3f| 3ec0| 0 - 0| 3e82| 7.8| |02| |FreeSpace Wasted | | 3ec1| 3eff| 1 - 1| 3f| 0.031| |02| --|Hide 1b FAT32 | 1| 3f00| 25c019| 1 - 153| 25811a| 1200.1| |03| C:|Prim 07 Inst-FSys| 3| 25c01a| 3d4879| 154 - 249| 178860| 753.0| |04| |mbr 05 Extended | 4| 3d487a| 1caa48e| 250 - 1870| 18d5c15| 12715.5| |04| D:|Log 07 Inst-FSys| 5| 3d48b9| 5ca8f9| 250 - 377| 1f6041| 1004.0| |05| |FreeSpace Logical| | 5ca8fa| 5ca937| 378 - 378| 3e| 0.030| |05| |ebr 05 Extended | | 5ca938| 9b2b38| 378 - 632| 3e8201| 2000.3| |05| E:|Log 0b FAT32 | 6| 5ca939| 9b2b38| 378 - 632| 3e8200| 2000.3| |06| |FreeSpace Logical| | 9b2b39| 9b2b76| 633 - 633| 3e| 0.030| |06| |ebr 05 Extended | | 9b2b77| a18ad2| 633 - 658| 65f5c| 203.9| |06| F:|Log 06 FAT16 | 7| 9b2b78| a18ad2| 633 - 658| 65f5b| 203.9| |07| |FreeSpace Logical| | a18ad3| a18b10| 659 - 659| 3e| 0.030| |07| |ebr 05 Extended | | a18b11| 13db10f| 659 - 1295| 9c25ff| 4996.7| |07| --|Log 83 LinuxExt2| 8| a18b12| 13db10f| 659 - 1295| 9c25fe| 4996.7| |08| |FreeSpace Logical| | 13db110| 13db14d|1296 - 1296| 3e| 0.030| |08| |ebr 05 Extended | | 13db14e| 14da010|1296 - 1360| feec3| 509.8| |08| --|Log 82 LinuxSwap| 9| 13db14f| 14da010|1296 - 1360| feec2| 509.8| |09| |FreeSpace Logical| | 14da011| 1b1a3e6|1361 - 1769| 6403d6| 3200.5| |09| |ebr 05 Extended | | 1b1a3e7| 1caa48e|1769 - 1870| 1900a8| 800.1| |09| G:|Log 07 Inst-FSys|10| 1b1a3e8| 1caa48e|1769 - 1870| 1900a7| 800.1| +--+--------------+--------+-----------<[ D2 ] >--------+ |10| |FreeSpace Primary| | 0| 3ec0| 0 - 0| 3ec1| 7.8| |10| |mbr 05 Extended | 1| 3ec1| fef00| 1 - 64| fb040| 502.0| |10| H:|Log 07 Inst-FSys| 5| 3f00| fef00| 1 - 64| fb001| 502.0| |12| |FreeSpace Pri/Log| | fef01| 1caa48e| 65 - 1870| 1bab58e| 14166.7| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ The illegal order in the logical-chain can be seen very well in the fragment of the "walk" command output as shown below (edited): DFSee Dos version : 5.17 executing: walk 1 WARNING disk nr 1 : EBR at 01b1a3e7 links BACK to earlier EBR, illegal order! LogGeo Disk 1 Cyl : 1871 H:255 S:63 = 7.84 MB DiskSize : 01CAA48F = 14677 MB Shown sector LSN : 00000000 = Master Boot Rec C: 0 H: 0 S: 1 = 00000000 Shown sector LSN : 003D487A = Extended Boot Rec C: 250 H: 0 S: 1 = 003D487A Shown sector LSN : 005CA938 = Extended Boot Rec C: 378 H: 0 S:63 = 005CA938 Shown sector LSN : 009B2B77 = Extended Boot Rec C: 633 H: 0 S:63 = 009B2B77 Shown sector LSN : 01B1A3E7 = Extended Boot Rec C: 1769 H: 0 S:63 = 01B1A3E7 WARNING: links BACK to an earlier EBR sector, illegal order! Shown sector LSN : 00A18B11 = Extended Boot Rec C: 659 H: 0 S:63 = 00A18B11 Shown sector LSN : 013DB14E = Extended Boot Rec C: 1296 H: 0 S:63 = 013DB14E When looking at cylinder values of each "Shown sector " line, you can clearly see that the last partition on the disk links back to two others that are in the middle of the disk. Also, when looking at one of the EBR sector CHS values, it is clear that for five of them the EBR is located at a nonstandard sector (63 instead of 1): The EBR sectors should have been at CHS xxx,0,1 instead of xxx,0,63 ========= End output (edited logfile) for this DFSDISK? ============= Analysis: --------- The problems here are with the extended-partition chain which is not built in a standard way. The EBRs are at the wrong track positions and there is a backward-link. At the moment there is no DFSee command that will correct the chain in one go, a specific "FIXCHAIN" command is under consideration. So the only, and still 'simple' way to correct the problems is to delete the incorrect extended partitions, and recreate them in the same place, same size and same type. DFSee will take care of the right order and correct placement of the EBR sectors. Recovery scenario: ------------------ Note: this scenario uses a new feature introduced in version 5.18 to address partitions using a RELATIVE partition ID. This is extremely useful to make the script independent from the number of disks, and allows easy testing on a virtual disk. The script is delivered as a sample with DFSee as "recover2.dfs" The script starts with making a backup of the current disk using PSAVE and then deletes the five incorrect logicals. After this they are all recreated with the right size, type and so on ... Because the order of some partitions changes, the script ends with a confirmation pop-up warning to the user to update the related Linux files like "fstab" and Grub/Lilo. ;Recovery script sample, delete a few and recreate some partitions on disk 1 ; ;To recover real disk with (many) confirmations : DFSxxx.EXE run recovery ;To recover real disk, no questions asked at all: DFSxxx.EXE -b run recovery ; ;To test on a virtual: DFSxxx.EXE run recovery virt dfstart.pd1 import dfsdiski.sn1 ; The files dfstart.pd1, dfsdiski.sn1 and dfsdiski.bn1 are required for the test. ; ;;defaultparam 1 disk ;;defaultparam 2 1 ;;defaultparam 3 say ;;defaultparam 4 Starting recovery ; log rec_$1 fdisk $1 $2 #$3 $4 -data ; ; Make extra backup of current disk psave . beforec Backup current disk before the recovery ; ; Delete using relative partition number on current disk ; delete 9,r -d delete 8,r -d delete 7,r -d delete 6,r -d delete 5,r -d ; ; recreate logical partitions on current disk, including LVM information ; cr log 0b 2000 -at:378,c -d -L:"-p:Fat32Data -v:WinData -l:d" cr log 06 203 -at:633,c -d -L:"-p:Fat16Data -v:Transfer -l:e" cr log 83 4996 -at:659,c -d -L:"-p:Ext2Linux -v:LinuxBoot -l- -menu" cr log 82 509 -at:1296,c -d -L:"-p:SwapLinux -v:LinuxSwap -l-" cr log hpfs 800 -at:1769,c -d -L:"-p:eCSSystem -v:eComStation -l:l -menu" ; ; show result ; part -r part -n -e -d ; confirm Remember to update Linux /etc/fstab file and GRUB/LILO configuration q Recovery log extract: --------------------- Note: These are fragments of the logfile from the above script when run on a virtual disk as follows: DFSOS2.EXE virt dfstart.pd1 import dfsdiski.sn1 Note the corrected order in the "ux" column when looking at the very first and the last table displayed. Appending to log : 'rec_virt.log' (7-bit ASCII) Registration : DFSee 5.xx reg-nr for 'support@dfsee.com': 1917085765 Store 1 : Unused : -- mode=FDISK 030503-151030 RC:0 : 00000000 u=00000000 x=00000000 this=00000000 Base=00000000 DFSee-OS2 version : 5.18 executing: fdisk virt dfstart.pd1 DFS FDISK command : virt dfstart.pd1 New virtual disk : V1 created as disknr: 2 with Geo Cyl: 1871 H:255 S:63 Number of disks : 2, with 1 physical and 1 virtual LogGeo Vdsk 2 Cyl : 1871 H:255 S:63 = 7.84 MB VdskSize : 01CAA48F = 14677 MB WARNING disk nr 2 : Master boot record is not valid, no partitions recognized Run PRESTORE from : dfstart.pd1 to new Virtual disk V1 (disk 2) DFSee-OS2 version : 5.18 executing: prestore -c- 2 dfstart.pd1 ====== Saved disk info description ====== (dfstart.pd1) Saved disk sectors (MBR, EBR, BOOTREC and LVM) DFSee Dos; version 5.17 02-04-2003 (c) 1994-2003; Jan van Wijk PSAVE disk:1 on 23-04-2003 12:46:52 with 9 partitions, 3 primary Geo Cyl: 1871 H:255 S:63 = 7.84 MB size : 01CAA48F = 14677 MB dfstart Backup important sectors by dfstart ------ To be restored on current disk 2 with geometry: LogGeo Vdsk 2 Cyl : 1871 H:255 S:63 = 7.84 MB VdskSize : 01CAA48F = 14677 MB New virtual disk : V1 (disk 2) partitions initialized using dfstart.pd1 Number of disks : 2, with 1 physical and 1 virtual Ph-Geo disk 1 Cyl : 14946 H:255 S:63 = 7.84 MB Disksize : 0E4FF780 = 117247 MB LogGeo Disk 1 Cyl : 14946 H:255 S:63 = 7.84 MB DiskSize : 0E4FBFE2 = 117240 MB LogGeo Vdsk 2 Cyl : 1871 H:255 S:63 = 7.84 MB VdskSize : 01CAA48F = 14677 MB WARNING disk nr 2 : EBR at 01b1a3e7 links BACK to earlier EBR, illegal order! Pid10= WARNING : Active (bootable), but not on 1st disk Will not boot using a standard BIOS Pid10= WARNING : IBM BootManager found on disk other than 1 Pid11=C: WARNING : Primary does not start on head-0 (cylinder boundary) EBR14=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR15=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR16=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR17=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR18=-- WARNING : Extended does not start on head-0 (cylinder boundary) +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|LVM Volume, Parti| Size MB| +--+--------------+--------+-----------<[ D1 ] >--------+ |10|} |Prim 0a Boot-Mgr | 2|BMGR |fdisk | |, [ BOOT MANAGER | 7.8| |11|*C:|Hide 1b FAT32 | 1|FAT32 |MSWIN4.1|NO NAME |WIN ME, WIN ME | 1200.1| |12|*M:|Prim 07 Inst-FSys| 3|HPFS |OS2 20.0|OS2 |OS/2 v4, OS/2 v4 | 753.0| |13| N:|Log 07 Inst-FSys| 5|HPFS |OS2 20.0| |OS/2 Data, OS/2 P| 1004.0| |14| --|Log 0b FAT32 | 6|FAT32 |MSWIN4.1| |--No-LVM-info-- | 2000.3| |15| --|Log 06 FAT16 | 7|FAT |IBM 20.0|NO NAME |--No-LVM-info-- | 203.9| |16| --|Log 83 LinuxExt2| 9|none |fdisk | |--No-LVM-info-- | 4996.7| |17| --|Log 82 LinuxSwap|10|SWAP |fdisk | |--No-LVM-info-- | 509.8| |18| |FreeSpace Logical| |-- -- --|-- -- --|- - - - - -| | 3200.5| |18| --|Log 07 Inst-FSys| 8|HPFS |IBM 4.50|eComStation|--No-LVM-info-- | 800.1| +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ DFSee-OS2 version : 5.18 executing: import dfsdiski.sn1 -data Reading LSNs from: dfsdiski.sn1, press to abort. Finished reading 24 LSN(s) from dfsdiski.sn1 Write 00000018 = 12 Kb sectors from data file dfsdiski.bn1 to Store 1 : Virtual (in-memory) disk 2 mode = FDISK using the sector numbers from dfsdiski.sn1 ? [Y/N] : y Importing from : dfsdiski.bn1, press to abort. Progress 512 b/dot: 00000000 ........................ DFSee-OS2 version : 5.18 executing: psave beforec Backup disk before the recovery Saving for disk 2 : rleleHeHe+eHeHbbbbbbb done saving. Sectors saved are : 14 MBR/EBR or LVM and 7 boot sectors in 'Backup.PD2' ReadWrite Store 1 : VirtDisk : 2 PartId 00 = -- mode=FDISK 030503-151051 RC:0 : 00000000 u=00000000 x=01B1A3E8 this=00000000 Base=00000000 DFSee-OS2 version : 5.18 executing: delete 9,r -d DFS partition Id : 18 on Phdisk number:2 Part-table PSN : 01B1A3E7 = EBR(4), entry:0 System Indicator : 07 = Inst-FSys Log:HPFS eComStation Partition size : 001900A7 = 800 MB First part sector : 01b1a3e8 = i13: 01 81 e9 = Cyl: 1769 H: 1 S: 1 = 01b1a3e8 Last part sector : 01caa48e = i13: fe ff 4e = Cyl: 1870 H:254 S:63 = 01caa48e Partition 18 disk 2, logical HPFS Label 'eComStation' by IBM 4.50 Partition size: 001900A7 = 800 MB Delete this partition ? [Y/N] : y WARNING disk nr 2 : EBR at 01b1a3e7 links BACK to earlier EBR, illegal order! Write EBR link in : 00000000 Using entry 3 for a type 05 partition Write EBR link in : 009B2B77 Using entry 1 for a type 00 partition Write EBR link in : 009B2B77 Using entry 1 for a type 05 partition Partition deleted, partition table type byte set to zero Process BR finished Execute autoshow : 'part -r -disk:2 -Only!' Pid10= WARNING : Active (bootable), but not on 1st disk Will not boot using a standard BIOS Pid10= WARNING : IBM BootManager found on disk other than 1 Pid11=C: WARNING : Primary does not start on head-0 (cylinder boundary) EBR14=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR15=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR16=-- WARNING : Extended does not start on head-0 (cylinder boundary) EBR17=-- WARNING : Extended does not start on head-0 (cylinder boundary) +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|LVM Volume, Parti| Size MB| +--+--------------+--------+-----------<[ D1 ] >--------+ |10|} |Prim 0a Boot-Mgr | 2|BMGR |fdisk | |, [ BOOT MANAGER | 7.8| |11|*C:|Hide 1b FAT32 | 1|FAT32 |MSWIN4.1|NO NAME |WIN ME, WIN ME | 1200.1| |12|*M:|Prim 07 Inst-FSys| 3|HPFS |OS2 20.0|OS2 |OS/2 v4, OS/2 v4 | 753.0| |13| N:|Log 07 Inst-FSys| 5|HPFS |OS2 20.0| |OS/2 Data, OS/2 P| 1004.0| |14| --|Log 0b FAT32 | 6|FAT32 |MSWIN4.1| |--No-LVM-info-- | 2000.3| |15| --|Log 06 FAT16 | 7|FAT |IBM 20.0|NO NAME |--No-LVM-info-- | 203.9| |16| --|Log 83 LinuxExt2| 8|none |fdisk | |--No-LVM-info-- | 4996.7| |17| --|Log 82 LinuxSwap| 9|SWAP |fdisk | |--No-LVM-info-- | 509.8| |19| |FreeSpace Logical| |-- -- --|-- -- --|- - - - - -| | 4000.6| +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ ReadWrite Store 1 : VirtDisk : 2 PartId 00 = -- mode=FDISK 030503-151118 RC:0 : 00000000 u=00000000 x=01B1A3E7 this=00000000 Base=00000000 DFSee-OS2 version : 5.18 executing: delete 8,r -d DFSee-OS2 version : 5.18 executing: delete 7,r -d DFSee-OS2 version : 5.18 executing: delete 6,r -d DFSee-OS2 version : 5.18 executing: delete 5,r -d DFSee-OS2 version : 5.18 executing: cr log 0b 2000 -at:378,c -d -L:"-p:Fat32Data -v:WinData -l:d" Specified size : 003e8000 = 2000.0 MB Found fsp-area 15 : 016dfb95 = 11711.4 MB type: FreeSpace Logical Aligned PART size : 003e823f = 2000.3 MB New part position : 00000000 = 0.0 MB from Begin freespace 005ca8fa = 2965.1 MB from start of disk Calc. net size : 003e8200 = 2000.3 MB In freespace area : 15 at rel pos: 0000003F Part-table in EBR : 005ca8fa = i13: 00 41 7a = Cyl: 378 H: 0 S: 1 = 005ca8fa First part sector : 005ca939 = i13: 01 41 7a = Cyl: 378 H: 1 S: 1 = 005ca939 Last part sector : 009b2b38 = i13: fe bf 78 = Cyl: 632 H:254 S:63 = 009b2b38 Create new EBR at : 005ca8fa on disk 2 CREATE log 0b 2000 0 @378,c Freespace ID 15 : 11711.4 MB disk 2 Type FAT32 0b : 2000.3 MB Logical Create the partition as shown ? [Y/N] : y Add to Ptable at : 005CA8FA Using entry 0 for a type 0b partition Write EBR link in : 003D487A Using entry 1 for a type 05 partition Create partition : successful Add default LVM : lvm 14 -p:Fat32Data -v:WinData -l:d DFSee-OS2 version : 5.18 executing: lvm 14 -p:Fat32Data -v:WinData -l:d * You can't use the '-p' option if a partition parameter is specified! Partition start : 005ca939 for partition 14 => no change Partition size : 003e823f = 2000.3 MB => 003e8200 = 2000.3 MB Volume name : => WinData (create new) Partition name : => Fat32Data (create new) Drive letter : -- => D: On BMGR menu : No => no change Installable flag : No => no change Cmd: lvm -l:d -p:Fat32Data -v:WinData Update LVM values for partition 14 to displayed values ? [Y/N] : y LVMinfo on disk 2 : 005ca938, partition: 14 Partition size : 003e823f = 2000.3 MB => 003e8200 = 2000.3 MB Volume name : => WinData Partition name : => Fat32Data Drive letter : -- => D: LVM info (DLAT) for partition 14 successfully updated Execute autoshow : 'part -r -disk:2 -Only!' Pid10= WARNING : Active (bootable), but not on 1st disk Will not boot using a standard BIOS Pid10= WARNING : IBM BootManager found on disk other than 1 Pid11=C: WARNING : Primary does not start on head-0 (cylinder boundary) +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|LVM Volume, Parti| Size MB| +--+--------------+--------+-----------<[ D1 ] >--------+ |10|} |Prim 0a Boot-Mgr | 2|BMGR |fdisk | |, [ BOOT MANAGER | 7.8| |11|*C:|Hide 1b FAT32 | 1|FAT32 |MSWIN4.1|NO NAME |WIN ME, WIN ME | 1200.1| |12|*M:|Prim 07 Inst-FSys| 3|HPFS |OS2 20.0|OS2 |OS/2 v4, OS/2 v4 | 753.0| |13| N:|Log 07 Inst-FSys| 5|HPFS |OS2 20.0| |OS/2 Data, OS/2 P| 1004.0| |14| D:|Log 0b FAT32 | 6|FAT32 |MSWIN4.1| |WinData, Fat32Dat| 2000.3| |16| |FreeSpace Logical| |-- -- --|-- -- --|- - - - - -| | 9711.2| +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ New selectable as : 14 and set as default for 'part auto' ReadWrite Store 1 : VirtDisk : 2 PartId 00 = -- mode=FDISK 030503-151142 RC:0 : 005CA938 u=00000000 x=005CA8FA this=00000000 Base=00000000 DFSee-OS2 version : 5.18 executing: cr log 06 203 -at:633,c -d -L:"-p:Fat16Data -v:Transfer -l:e" DFSee-OS2 version : 5.18 executing: cr log 83 4996 -at:659,c -d -L:"-p:Ext2Linux -v:LinuxBoot -l- -menu" DFSee-OS2 version : 5.18 executing: cr log 82 509 -at:1296,c -d -L:"-p:SwapLinux -v:LinuxSwap -l-" DFSee-OS2 version : 5.18 executing: cr log hpfs 800 -at:1769,c -d -L:"-p:eCSSystem -v:eComStation -l:l -menu" ReadWrite Store 1 : VirtDisk : 2 PartId 00 = -- mode=FDISK 030503-151201 RC:0 : 01B1A3E7 u=00000000 x=01B1A3A9 this=00000000 Base=00000000 DFSee-OS2 version : 5.18 executing: part -r Pid10= WARNING : Active (bootable), but not on 1st disk Will not boot using a standard BIOS Pid10= WARNING : IBM BootManager found on disk other than 1 Pid11=C: WARNING : Primary does not start on head-0 (cylinder boundary) +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|LVM Volume, Parti| Size MB| +--+--------------+--------+-----------<[ D1 ] >--------+ |10|} |Prim 0a Boot-Mgr | 2|BMGR |fdisk | |, [ BOOT MANAGER | 7.8| |11|*C:|Hide 1b FAT32 | 1|FAT32 |MSWIN4.1|NO NAME |WIN ME, WIN ME | 1200.1| |12|*M:|Prim 07 Inst-FSys| 3|HPFS |OS2 20.0|OS2 |OS/2 v4, OS/2 v4 | 753.0| |13| N:|Log 07 Inst-FSys| 5|HPFS |OS2 20.0| |OS/2 Data, OS/2 P| 1004.0| |14| D:|Log 0b FAT32 | 6|FAT32 |MSWIN4.1| |WinData, Fat32Dat| 2000.3| |15| E:|Log 06 FAT16 | 7|FAT |IBM 20.0|NO NAME |Transfer, Fat16Da| 203.9| |16|- |Log 83 LinuxExt2| 8|none |fdisk | |LinuxBoot, Ext2Li| 4996.7| |17| |Log 82 LinuxSwap| 9|SWAP |fdisk | |LinuxSwap, SwapLi| 509.8| |18| |FreeSpace Logical| |-- -- --|-- -- --|- - - - - -| | 3200.4| |18|*L:|Log 07 Inst-FSys|10|HPFS |IBM 4.50|eComStation|eComStation, eCSS| 800.1| +--+---+-----------------+--+--------+--------+-----------+-----------------+--------+ ========= End output (edited logfile) for this scenario ============= _______________________________________________________________________________ #400 Fix disk damaged by Windows FDISK 4) 2nd disk in Windows system trashed by FDISK (made one FAT32 out of it) Description: ------------ This was a 2-disk Windows system, where during the install of a new Windows on the first disk, the second disk was converted to a single FAT32 primary partition by mistake. DFSDISKI.SK? logfile extract: ----------------------------- Knowing the history, and expecting a single NTFS partition to have been on that disk, the first thing to look for is the spare bootsector that would be at the end of any NTFS partition. DFSee wNT version : 5.17 executing: fdisk Execute timestamp : Saturday 03-05-2003 07:36:08 Number of disks : 2 LogGeo Disk 1 Cyl : 9732 H:255 S:63 = 7.84 MB DiskSize : 0951A104 = 76340 MB LogGeo Disk 2 Cyl : 4863 H:255 S:63 = 7.84 MB DiskSize : 04A8143F = 38147 MB +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|BM-Name | Size MB| +--+--------------+--------+-------------------+ |01|>C:|Prim 07 Inst-FSys| 1|NTFS |Win NT | | | 76332.3| |03| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 7.8| +--+--------------+--------+-------------------+ |02| --|Prim 0c FAT32-Ext| 1|none |fdisk | | | 38146.5| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ DFSee wNT version : 5.17 executing: bsfind rebls cyl ;find partitioning sectors Execute timestamp : Saturday 03-05-2003 07:36:09 LogGeo Disk 2 Cyl : 4863 H:255 S:63 = 7.84 MB DiskSize : 04A8143F = 38147 MB Search sect types : 'rebls' on cylinder boundaries only (fast) Fast search-mode! : progress not shown; Do NOT press , except to abort ... .00000 (inserted) : 00000000 = Master Boot Rec C: 0 H: 0 S: 1 = 00000000 .00001 38138.7 MB: 04A7D57D = Fsys boot sector C: 4861 H:254 S:63 = 04A7D57D ToEnd 7.8 MB: 04A8143E = C: 4862 H:254 S:63 = 04A8143E The sector shown as "Fsys boot sector" and on sector "S:63" is most likely the spare bootsector for that NTFS, double check by looking at the contents: Shown sector LSN : 04A7D57D = Fsys boot sector C: 4861 H:254 S:63 = 04A7D57D -00000- eb 52 90 4e 54 46 53 20 20 20 20 00 02 08 00 00 [lRENTFS ....] -00010- 00 00 00 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [.....o..?. .?...] -00020- 00 00 00 00 80 00 80 00 3e d5 a7 04 00 00 00 00 [....C.C.>+o....] -00030- 04 00 00 00 00 00 00 00 53 7d 4a 00 00 00 00 00 [.......S}J.....] Bootsector format : NTFS Part. creator : Win NT Partition label : Bytes per sector : Hex 200 = 512 8 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1 = 8 MB Vol nr of sectors : 04A7D53E = 38139 MB = 4861.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x80 = 128 (usually 0x28, 0x29 or 0x80) Master File Table : 00000004 MFT duplicate LCN : 004A7D53 FILE record size : 00000002 = 1024 b (size value : 000000F6) INDX record size : 00000008 = 4096 b (size value : 00000001) From the size in cylinders, and the end-cylinder value, we can conclude that this was a primary NTFS starting at cylinder 0. ========= End output (edited logfile) for this DFSDISK? ============= Analysis: --------- The whole disk is a primary FAT32 now of 38246 MB. From the bsfind and spare boot sector display we can see that the NTFS partition that used to be there was a bit smaller (38139 MB) and was either a logical or a primary starting in cylinder 0. This is because the number of cylinders is NOT a round number. Calculating from the end-cylinder and size it is clear it must be a primary starting at cylinder 0. This means there will be 1 cylinder of freespace after this partition. (not uncommon) It is also clear that the initial boot sector for the NTFS partition has been cleared by the FDISK operation, so that needs to be recovered as well. The recovery will be: - delete FAT32 - create NTFS with right size - fix the bootsector Recovery scenario: ------------------ DFSWIN.EXE -log:fixbernie delete 2 2 ;delete partition 2 (on disk 2) cr pri ntfs 38138 -disk:2 ;create new NTFS of right size part 2 ;select the just created fs ntfs ;force DFSee NTFS mode fixboot ;rebuild the bootsector from spare part -r ;show result q ;quit DFSee Recovery log extract: --------------------- DFSee wNT version : 5.17 executing: fdisk -r- Execute timestamp : Saturday 03-05-2003 20:30:34 +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|BM-Name | Size MB| +--+--------------+--------+-------------------+ |01|>C:|Prim 07 Inst-FSys| 1|NTFS |Win NT | | | 76332.3| |03| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 7.8| +--+--------------+--------+-------------------+ |02| --|Prim 0c FAT32-Ext| 1|none |fdisk | | | 38146.5| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ DFSee wNT version : 5.17 executing: delete 2 2 Execute timestamp : Saturday 03-05-2003 20:30:40 DFS partition Id : 02 on Phdisk number:2 Part-table PSN : 00000000 = MBR(0), entry:0 System Indicator : 0c = FAT32-Ext Pri:none Partition size : 04A81400 = 38147 MB First part sector : 0000003f = i13: 01 01 00 = Cyl: 0 H: 1 S: 1 = 0000003f Last part sector : 04a8143e = i13: fe bf fe = Cyl: 4862 H:254 S:63 = 04a8143e Partition 2 disk 2, primary none Label '' by fdisk Partition size: 04A81400 = 38147 MB Delete this partition ? [Y/N] : y Partition deleted, partition table type byte set to zero Process BR finished Execute autoshow : 'part -r -disk:2 -Only!' Registration : not present! 2 days left for evaluation! +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|BM-Name | Size MB| +--+--------------+--------+-------------------+ |03| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 38146.5| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ ReadWrite Store 1 : PhysDisk : 2 PartId 00 = -- mode=FDISK 030503-203049 RC:0 : 00000000 u=00000000 x=00000000 this=00000000 Base=00000000 DFSee wNT version : 5.17 executing: cr pri ntfs 38138 -disk:2 Execute timestamp : Saturday 03-05-2003 20:31:03 Specified size : 04a7d000 = 38138.0 MB Found fsp-area 3 : 04a8143f = 38146.5 MB type: FreeSpace Pri/Log Aligned PART size : 04a7d57e = 38138.7 MB New part position : at Begin freespace Calc. net size : 04a7d53f = 38138.7 MB In freespace area : 03 at rel pos: 0000003F Part-table in MBR : 00000000 = i13: 00 01 00 = Cyl: 0 H: 0 S: 1 = 00000000 First part sector : 0000003f = i13: 01 01 00 = Cyl: 0 H: 1 S: 1 = 0000003f Last part sector : 04a7d57d = i13: fe bf fd = Cyl: 4861 H:254 S:63 = 04a7d57d CREATE pri ntfs 38138 2 Freespace ID 03 : 38146.5 MB disk 2 Type Inst-FSys 07 : 38138.7 MB Primary Create the partition as shown ? [Y/N] : y Add to Ptable at : 00000000 Using entry 0 for a type 07 partition Create partition : successful New selectable as : 02 and set as default for 'part auto' Execute autoshow : 'part -r -disk:2 -Only!' Registration : not present! 2 days left for evaluation! +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|BM-Name | Size MB| +--+--------------+--------+-------------------+ |02| --|Prim 07 Inst-FSys| 1|none |fdisk | | | 38138.7| |04| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 7.8| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ ReadWrite Store 1 : PhysDisk : 2 PartId 00 = -- mode=FDISK 030503-203105 RC:0 : 00000000 u=00000000 x=00000000 this=00000000 Base=00000000 DFSee wNT version : 5.17 executing: part 2 Execute timestamp : Saturday 03-05-2003 20:31:08 Registration : not present! 2 days left for evaluation! DFS partition Id : 02 disk nr : 2 = FixedDisk Diskgeo = Cyl: 4863 H:255 S:63 P-table for this : 00000000 = MBR, entry:0 System Indicator : 07 = Inst-FSys Linux device name: /dev/hdb1 FileSyst. format : none (Not usable, FORMAT or recovery required) Partition type : Primary Visible Bootrec-OEM-name: fdisk Partition Label : Boot capability : Not bootable by BIOS and MBR-code or OS/2 boot manager Bootsec checksum : 00000000 Bootsect. offset : 0000003F = 63 Dec Cylinder size : 3ec1 = 7.84 MB P-table in MBR : -000003f = i13: 00 01 00 = Cyl: 0 H: 0 S: 1 = 00000000 1st part sector : 00000000 = i13: 01 01 00 = Cyl: 0 H: 1 S: 1 = 0000003f Last part sector : 04a7d53e = i13: fe bf fd = Cyl: 4861 H:254 S:63 = 04a7d57d Partition size : 04A7D53F = 38139 MB = 4861.996 cylinders Cluster size : 00000001 = 512 b in 1 sector(s) of 512 bytes OS reported free : -- Removable not ready/no size info on FS: - Pid02=-- minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Int13 access limited to 1st 8032.5 MB out of 38138.7 MB Pid02=-- minor-W : Not formatted or invalid boot record First sector (0) is not a valid filesystem BOOT record! No filesystem known, using Binary mode. No dedicated analysis module for filesystem: Binary Using DFSee generic/auxiliary analysis mode for 'Binary' ReadWrite Store 1 : PhysDisk : 2 PartId 02 = -- mode=AUX 030503-203108 RC:0 : 00000000 u=00000000 x=04A7D53E this=00000000 Base=0000003F DFSee wNT version : 5.17 executing: fs ntfs Execute timestamp : Saturday 03-05-2003 20:31:11 First sector (0) is not a valid filesystem BOOT record! MftRECSize wrong! : 0, set to 2 sectors for analysis Damage could be recoverable using 'fixboot' DirReCSize wrong! : 0, set to 8 sectors for analysis Damage could be recoverable using 'fixboot' DFSee message 207 : Inconsistent structure ReadWrite Store 1 : PhysDisk : 2 PartId 02 = -- mode=NTFS 030503-203111 RC:207 : 00000000 u=00000000 x=04A7D53E this=00000000 Base=0000003F DFSee wNT version : 5.17 executing: fixboot Execute timestamp : Saturday 03-05-2003 20:31:15 Check possible NTFS boot record at LSN 04a7d53e: The following matching bootsector has been found: -00000- eb 52 90 4e 54 46 53 20 20 20 20 00 02 08 00 00 [lRENTFS ....] -00010- 00 00 00 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [.....o..?. .?...] -00020- 00 00 00 00 80 00 80 00 3e d5 a7 04 00 00 00 00 [....C.C.>+o....] -00030- 04 00 00 00 00 00 00 00 53 7d 4a 00 00 00 00 00 [.......S}J.....] Bootsector format : NTFS Part. creator : Win NT Partition label : Bytes per sector : Hex 200 = 512 8 sectors per cluster Media type : 0xF8 = harddisk Logical geometry : ff / 3f = 255 Heads, 63 Sectors Hidden sectors : 0000003F = 32 Kb Cyl size: 3EC1 = 8 MB Vol nr of sectors : 04A7D53E = 38139 MB = 4861.996 cylinders Physical disk nr : 0x80 = 128 (usually 0x80) Ext-BPB signature : 0x80 = 128 (usually 0x28, 0x29 or 0x80) Master File Table : 00000004 MFT duplicate LCN : 004A7D53 FILE record size : 00000002 = 1024 b (size value : 000000F6) INDX record size : 00000008 = 4096 b (size value : 00000001) Do you want to replace the bootsector (sector 0) with this spare one ? [Y/N] : y NTFS boot record successfully updated Resulting partition after replacing the bootsector: Registration : not present! 2 days left for evaluation! DFS partition Id : 02 disk nr : 2 = FixedDisk Diskgeo = Cyl: 4863 H:255 S:63 P-table for this : 00000000 = MBR, entry:0 System Indicator : 07 = Inst-FSys Linux devicename: /dev/hdb1 FileSyst. format : NTFS Partition type : Primary Visible Bootrec-OEM-name: Win NT Partition Label : Other Drive Boot capability : Not bootable by BIOS and MBR-code or OS/2 boot manager Bootsec checksum : 343FBE45 Bootsect. offset : 0000003F = 63 Dec Cylinder size : 3ec1 = 7.84 MB P-table in MBR : -000003f = i13: 00 01 00 = Cyl: 0 H: 0 S: 1 = 00000000 1st part sector : 00000000 = i13: 01 01 00 = Cyl: 0 H: 1 S: 1 = 0000003f Last part sector : 04a7d53e = i13: fe bf fd = Cyl: 4861 H:254 S:63 = 04a7d57d Partition size : 04A7D53F = 38139 MB = 4861.996 cylinders Cluster size : 00000008 = 4096 b in 8 sector(s) of 512 bytes OS reported free : D: Free 3261.6 MB of 38138.7 MB on FS: NTFS Pid02=D: minor-W : Standard Int13 access (BIOS) ends at cyl 1023 = 8032.5 MB Int13 access limited to 1st 8032.5 MB out of 38138.7 MB Bootsec. checksum : 343FBE45 Nr of MFT records : 000E4C3D = 937021 decimal MFT Fragments: 1 ReadWrite Store 1 : PhysDisk : 2 PartId 02 = D: mode=NTFS 030503-203118 RC:0 : 00000000 u=FFFFFFC1 x=04A7D53E this=00000000 Base=0000003F DFSee wNT version : 5.17 executing: part -r Execute timestamp : Saturday 03-05-2003 20:31:21 Registration : not present! 2 days left for evaluation! +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|BM-Name | Size MB| +--+--------------+--------+-------------------+ |01|>C:|Prim 07 Inst-FSys| 1|NTFS |Win NT | | | 76332.3| |03| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 7.8| +--+--------------+--------+-------------------+ |02| D:|Prim 07 Inst-FSys| 1|NTFS |Win NT |Other Drive| | 38138.7| |04| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 7.8| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ ========= End output (edited logfile) for this scenario ============= _______________________________________________________________________________ #500 Fix disk damaged by crashing FDISK 5) Multi-boot system lost all partitions on FDISK crash, disk seems empty Description: ------------ This was an 80 GiB disk with Windows-XP resized to allow addition of an eComStation partition and some smaller data partitions. On one FDISK operation, just to look at the disk, something weird happened and the disk seemed to be empty afterwards (freespace). The original contents of the disk were roughly described in the email: +++++++++ start help email I have been careless and lost all partition data on the HD of one of my PCs (using FDISK, and I don't know what command did the damage since I was only looking). Anyway, now LVM reports no partition at all (i.e one giant free space), so that gave me a real good reason to register your tool and start playing with it. I have attached a zip file of the output of the dfsdisk command. Originally purchased with just XP Family installed, I used BootIt! to repartition it for other OS. As far as I remember, the 80GiB disk was organized as follows when the problem occurred (in ascending order, all sizes approximated): 1) a Hidden 3GiB recovery primary partition used to restore the disk to factory status, possible FAT32 (not sure) 2) a 65GiB NTFS XP primary partition 3) a 7MB Boot Manager primary partition 4) Remaining space as an extended partition consisting of: 5) a 2.5 GiB HPFS eCS 1.1 partition 6) a 7MB FAT partition I intended to try to install DrDOS to (but failed, obviously) 7) Free space for the remainder +++++++++ end email So from this, we know to look for about 7 partitions in the bsfind ... DFSDISKI.SK? logfile extract: ----------------------------- Number of disks : 1 LogGeo Disk 1 Cyl : 9964 H:255 S:63 = 7.84 MB DiskSize : 098A7FEC = 78160 MB WARNING disk nr 1 : Master boot record is not valid, no partitions recognized WARNING: No disk/partitions found, disks seem to be empty! +--+---+-----------------+--+--------+--------+-----------+----------+--------+ |ID|Vol|Type, description|ux|Format |Creator |VolumeLabel|BM-Name | Size MB| +--+--------------+--------+-------------------+ |01| |FreeSpace Pri/Log| |-- -- --|-- -- --|- - - - - -| | 78160.0| +--+---+-----------------+--+--------+--------+-----------+----------+--------+ LogGeo Disk 1 Cyl : 9964 H:255 S:63 = 7.84 MB DiskSize : 098A7FEC = 78160 MB Shown sector LSN : 00000000 = Unidentified data Cyl 0 H: 0 S: 1 = 00000000 -00000- 79 bc 49 34 7e 2c 91 11 75 b3 5a e8 e4 cd 97 b9 [y+I4~,au|Zie=u+] -00010- bc 75 c6 ab 78 c3 64 53 8c 58 9c 91 0b 20 64 53 [+u+2x+dSiXLa dS] - - -001E0- 0d 20 a5 24 86 d2 23 9e f1 35 4c f2 ec 81 00 e7 [. N$a+#Pr5L>mu.h] -001F0- 55 a8 49 da 46 7b f7 6e 1b 6a e6 33 47 65 1d 74 [U?I+F{~n.jg3Get] +++++++++++ from this MBR display it is clear that it was overwritten! DFSee OS2 version : 5.19 executing: bsfind rebls cyl Execute timestamp : Thursday 22-05-2003 19:20:49 LogGeo Disk 1 Cyl : 9964 H:255 S:63 = 7.84 MB DiskSize : 098A7FEC = 78160 MB Search sect types : 'rebls' on cylinder boundaries only (fast) Fast search-mode! : progress not shown; Do NOT press , except to abort ... .00000 (inserted) : 00000000 = Master Boot Rec Cyl 0 H: 0 S: 1 = 00000000 .00001 : 0000003E = LVM disk/vol info Cyl 0 H: 0 S:63 = 0000003E .00002 : 0000003F = Fsys boot sector Cyl 0 H: 1 S: 1 = 0000003F .00003 : 00000045 = Fsys boot sector Cyl 0 H: 1 S: 7 = 00000045 .00004 3059.3 MB: 005F9A06 = Fsys boot sector Cyl 390 H: 0 S: 1 = 005F9A06 .00005 64997.4 MB: 084EC4E3 = Fsys boot sector Cyl 8675 H:254 S:63 = 084EC4E3 .00006 : 084EC4E4 = Fsys boot sector Cyl 8676 H: 0 S: 1 = 084EC4E4 .00007 7.8 MB: 084F03A5 = Extended Boot Rec Cyl 8677 H: 0 S: 1 = 084F03A5 .00008 : 084F03AB = Fsys boot sector Cyl 8677 H: 0 S: 7 = 084F03AB .00009 : 084F03E3 = LVM disk/vol info Cyl 8677 H: 0 S:63 = 084F03E3 .00010 : 084F03E4 = Fsys boot sector Cyl 8677 H: 1 S: 1 = 084F03E4 .00011 : 084F03EA = Fsys boot sector Cyl 8677 H: 1 S: 7 = 084F03EA .00012 5004.6 MB: 08EB68A3 = Extended Boot Rec Cyl 9315 H: 0 S: 1 = 08EB68A3 .00013 : 08EB68E1 = LVM disk/vol info Cyl 9315 H: 0 S:63 = 08EB68E1 .00014 : 08EB68E2 = Fsys boot sector Cyl 9315 H: 1 S: 1 = 08EB68E2 .00015 2604.3 MB: 093CCAEF = Extended Boot Rec Cyl 9647 H: 0 S: 1 = 093CCAEF .00016 : 093CCB2D = LVM disk/vol info Cyl 9647 H: 0 S:63 = 093CCB2D .00017 : 093CCB2E = Fsys boot sector Cyl 9647 H: 1 S: 1 = 093CCB2E .00018 2486.6 MB: 098A7FEB = Fsys boot sector Cyl 9963 H:254 S:63 = 098A7FEB 19 matching sector(s) found DFSee OS2 version : 5.19 executing: list -b ;list them in detailed bootsector mode Execute timestamp : Thursday 22-05-2003 19:22:33 SN list contains : 19 sector(s) Shown sector LSN : 00000000 = Unidentified data Cyl 0 H: 0 S: 1 = 00000000 -00000- 79 bc 49 34 7e 2c 91 11 75 b3 5a e8 e4 cd 97 b9 [y+I4~,au|Zie=u+] -00010- bc 75 c6 ab 78 c3 64 53 8c 58 9c 91 0b 20 64 53 [+u+2x+dSiXLa dS] - - -001E0- 0d 20 a5 24 86 d2 23 9e f1 35 4c f2 ec 81 00 e7 [. N$a+#Pr5L>mu.h] -001F0- 55 a8 49 da 46 7b f7 6e 1b 6a e6 33 47 65 1d 74 [U?I+F{~n.jg3Get] Shown sector LSN : 0000003E = LVM disk/vol info Cyl 0 H: 0 S:63 = 0000003E Disk geometry Cyl : 9964 H:255 S:63 = 7.84 MB Disksize : 098A7FEC = 78160 MB Phys disk Id : 561cd839 Name : [ D1 ] Boot disk Id : 561cd839 Install Flags : 00000000 LVM sectorCRC : 463fafbe checked, OK Partition 1st PSN : 0000003F size : 005F99C7 = 3059 MB (not present!) Volume letter : none bmgr : not selectable Volume ser Id : 00000000 Name : Partition Id : cbcbe080 Name : Partition 1st PSN : 005F9A06 size : 07EF2ADE = 64997 MB (not present!) Volume letter : none bmgr : YES, on menu Volume ser Id : 2f85b351 Name : XP Family Partition Id : 737787e5 Name : XP Family Partition 1st PSN : 084EC4E4 size : 00003EC1 = 8033 Kb (not present!) Volume letter : none bmgr : not selectable Volume ser Id : 00000000 Name : Partition Id : da9db504 Name : [ BOOT MANAGER ] Shown sector LSN : 0000003F = Fsys boot sector Cyl 0 H: 1 S: 1 = 0000003F -00000- eb 58 90 4d 53 57 49 4e 34 2e 31 00 02 08 20 00 [lXEMSWIN4.1.. .] -00010- 02 00 00 00 00 f8 00 00 3f 00 ff 00 3f 00 00 00 [....o..?. .?...] -00020- 3c 83 5f 00 d5 17 00 00 00 00 00 00 02 00 00 00 [