Secure Zone has gone missing

My work laptop runs Windows XP with Acronis TrueImage 8.0. The hard disc in the laptop has two partitions C: (40GB - for work use, with the standard company build on it) and E: (20GB - as a test partion for guest operating systems). The C: partion is encrypted using PGP Whole Disk Encryption, whereas the E: partion is unencrypted. For backup I have a Maxtor USB disc drive with a small Boot Partion (85MB) plus a 100GB Acronis Secure Zone (hidden partition) and an 89GB unhidden partion on the remaining part of the USB disc. In the Secure Zone I have/had a full image of my laptop C: drive taken in February 09 plus an additional incremental image backup taken in April 09. I recently accidentally trashed the hard drive of my laptop by installing a new operating system in the E: partition without first decrypting the C: drive (so it trashed the MBR). The whole disk drive was replaced with one containing a clean standard build image. I checked I could successfully restore data from my backup, using Explore Image (and successfully restored a few small folders) to prove everything worked.

I then decrypted the laptop drive, repartioned it as before, creating an E: drive, installed my test operating system in E:, rebooted to work work build and used Acronis True Image to create a backup image of the new C: drive outside the Secure Zone on the unhidden partition on my USB hard disc. Having completed that successfully I then attempted to restore all my missing files from the previous image backups in the Secure Zone, only to find the Secure Zone seems to have disappeared. I now cannot retrieve any of my previous backups,, even though I am confident they are still on the USB disc drive.

Has anyone come across this sort of problem before? Can anyone help? Any suggestions would be gratefully received.

Cheers

Geoff.

 

Geoff:

If you look at the external USB disk with Windows XP Disk Management, does the Acronis Secure Zone (ASZ) partition show up? If so, your suspicions are correct and the ASZ is still present.

If you have partitioning software then just change the type identifier on the ASZ partition from its current value of 0BCh (Acronis Secure Zone) to 0Ch (FAT32 LBA). The partition should then show up in Windows and you can gain normal access to your image files on the partition. You can then use this opportunity to copy the images from the ASZ to any other storage medium if you want to keep them around long-term.

After you are finished you could delete the partition and use TI to create a new ASZ. Or, format the partition as NTFS and keep it visible in Windows so that you don't have this problem again. Personally I prefer keeping backups on a normal, visible partition so that they can be copied, pasted and deleted at will. You lose that capability when using the ASZ, and as you found out, it is possible to lose access to the ASZ in certain situations.

Post back if you don't have access to partitioning software so that I can suggest a couple of alternatives.

 

Hello Geoff and Mark,

Thank you for using Acronis True Image

Geoff,

If Acronis Secure Zone is seen with Disk Management utility, you can try to get the access to the archives under Acronis Booting Rescue Media. If you see unallocated space instead of Acronis Secure Zone, please download Acronis Report utility available here and run it, create a report and attach to your post.

This would provide us with detailed information on the hard disk partition structure.

Don't perform any other operations on this unallocated space.

Thank you.

--
Oleg Lee

 

Thanks for the response. I have checked with XP Disk Manager. It shows something quite confusing. The top half of the right hand Windows lists the volumes and for the USB disc it shows the 259MB FAT boot partition (I erroneously said it was 85MB in my original post), and the 89GB unhidden NTFS Partition (Vol label USBPers), with no evidence of the hidden 100GB Secure Zone partion. However the graphical representation of the disc volumes in the bottom half of the right hand pane show the 259MB FAT Partition and a single NTFS partition of 189GB rather than two separate 89GB and a 100GB partitions. I've attached image file containing a "print window" of the Disk Manager so you can see clearly what I mean.

I've also downloaded and run the Report tool as requested and attached the resulting report to this post too.

Thanks for your help so far guys. Much appreciated.

 

kOlo

Thanks for your efforts so far. As you can see from my reply to the other post the ASZ doesn't really show up correctly in Disk Manager. I do have access to Partition Magic 8.0, but unfortunately wouldn't know how to use it to change partition types as you suggested. I will do some further investigation on that and post back. If you have any otrher suggestions after reading these responses please let me know.

Thanks

Geoff.

 

Geoff:

There doesn't seem to be any evidence of an Acronis Secure Zone on your external disk, other than the confusing data from Windows Disk Management. And the Acronis report that you ran only contains data from your internal hard disk and nothing from the external disk.

You probably have a damaged partition table on the external disk, so heed Oleg's advice about avoiding any write operations to the external disk for the time being. However, it should be safe to print a copy of the partition table, so if you have Partition Magic 8.0 installed, run the program ptedit32 from your PM8 folder. Select the external disk from the drop-down list and make a screen shot of the display. Don't make any changes to the partition table and don't hit the "Save Changes" button and this should be safe to do. Here is an example of what you should see but with different data values particular to your disk:

 

I have a similar problem-

When I tried to backup using the Acronis live CD:

1.) While backing up, I received a Disc error and after canceling and rebooting, 2.) my Acronis Secure Zone disappeared.
3.) Can a virus on the host drive, corrupt the ASZ partition table?

 

I finally got that trick to work

 

Here is my report!

If you see any suspected Boot Malware, let me know. This back up drive has been acting funny for about a month before the acronis secure zone disappeared. In my previous post I mention that I converted the ACZ to fat 32x.


Speed IFace Hs-Bs-Tg Model
Num NT L9NO Size FSsize Free FS Type Label ABCHSV
---- ----- ---- ----- ----- ----- ------ --------------- ----------- ------
1- d(0) 298G 9M
7.8M free ------
-2 table 05 Extended A-----
-5 p(1) CCCC 7.3G 7.3G 4M FAT32 0B FAT32 HELPER --C---
-6 p(2) DDDD 291G 291G 0b FAT32 0C FAT32 LBA -EE---
Disk 1 properties:
BIOS number: 0x80
Geometry: 38914 255 63
Total sectors: 625142448
BIOS HDPT properties:
Geometry: 1024 255 63
Phys. geometry: 16383 16 63
Precompensation cyl.: 128
Landing cylinder: 16383
Reserved: 0x00
Defect aap present: 0
Disabled ECC retry: 0
Disabled access retry: 0
BIOS extension properties:
Extension version: 3.0
Functions supported: Ext. EDD
Transparent DMA: 0
CHS information: None
Removable drive: 0
Write with verify: 0
Change-line: 0
Lockable drive: 0
Geometry: 16383 16 63
Total sectors: 625142448
Sector size: 512
MBR 1-*:
Sector 0 (0 0 1)
000 90 E9 7D 01 FA 33 C0 8E D0 8E C0 8E D8 BC 00 7C é}.ú3ÀŽÐŽÀŽØ¼.|
010 8B F4 FB BF 00 06 B9 00 01 F3 A5 BB 20 06 FF E3 ‹ôû¿..¹..ó¥» .ÿã
020 90 90 BE 7D 07 81 3C AA 55 75 11 E8 58 00 73 0C ¾}.<ªUu.èX.s.
030 E8 65 00 72 07 E8 B1 00 72 3B EB 2C BE 7D 07 C7 èe.r.è±.r;ë,¾}.Ç
040 04 00 00 BA 80 00 BE BE 07 B9 04 00 F6 04 80 75 ...º€.¾¾.¹..ö.€u
050 07 83 C6 10 E2 F6 EB 1D 8A 74 01 8B 4C 02 BB 00 .ƒÆ.âöë.Št.‹L.».
060 7C B8 01 02 CD 13 72 0D 81 3E FE 7D 55 AA 75 05 |¸..Í.r.>þ}Uªu.
070 EA 00 7C 00 00 BE 6A 07 AC 0A C0 74 FE BB 07 00 ê.|..¾j.¬.Àtþ»..
080 B4 0E CD 10 EB F2 BB 00 7E C6 07 13 C6 47 01 00 ´.Í.ëò».~Æ..ÆG..
090 B2 80 B8 00 E0 CD 13 C3 BF 00 7E BA F0 01 B3 A0 ²€¸.àÍ.ÿ.~ºð.³*
0A0 E8 84 00 72 0C B1 01 E8 48 00 72 05 E8 19 00 73 è„.r.±.èH.r.è..s
0B0 16 F6 C3 10 75 05 80 CB 10 EB E5 81 FA 70 01 74 .öÃ.u.€Ë.ëåúp.t
0C0 05 BA 70 01 EB D8 F9 C3 81 BD FE 01 55 AA 75 17 .ºp.ëØùýþ.Uªu.
0D0 8B 75 02 81 FE BE 01 77 0E 03 F7 81 3C AA 55 75 ‹u.þ¾.w..÷<ªUu
0E0 06 F6 44 02 01 75 01 F9 C3 BF 00 7C B1 0A E8 01 .öD..u.ùÿ.|±.è.
0F0 00 C3 52 57 83 C2 02 B0 01 EE 42 8A C1 EE 42 32 .ÃRWƒÂ.°.îBŠÁîB2
100 C0 EE 42 EE 42 8A C3 EE 42 B0 20 EE E8 33 00 EC ÀîBîBŠÃîB° îè3.ì
110 24 FD 3C 58 75 0D 83 EA 07 B9 00 01 FA F3 6D FB $ý<Xu.ƒê.¹..úómû
120 F8 EB 01 F9 5F 5A C3 52 83 C2 07 EC A8 80 75 0F øë.ù_ZÃRƒÂ.쨀u.
130 4A 8A C3 EE 42 EC 24 D0 3C 50 75 03 F8 EB 01 F9 JŠÃîBì$Ð<Pu.øë.ù
140 5A C3 51 8B 0E 6C 04 83 C1 12 81 C2 FF 01 EC 8A ZÃQ‹.l.ƒÁ.Âÿ.ìŠ
150 E0 80 E4 D8 80 FC 58 74 06 3B 0E 6C 04 75 EF 81 à€äØ€üXt.;.l.uï
160 EA FF 01 B9 00 20 E2 FE 59 C3 0D 0A 45 72 72 6F êÿ.¹. âþYÃ..Erro
170 72 20 4C 6F 61 64 69 6E 67 20 4F 53 00 AA 55 00 r Loading OS.ªU.
180 00 E9 80 FE 00 00 00 00 00 00 00 00 00 00 00 00 .é€þ............
1B0 00 00 00 00 00 00 00 00 07 E1 C4 49 00 00 00 00 .........áÄI....
1C0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 ..............€.
1D0 01 01 05 FE FF FF C1 3E 00 00 00 98 42 25 00 00 ...þÿÿÁ>...˜B%..
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 1 (0 0 2)
All 00
Sector 2 (0 0 3)
000 00 00 04 00 01 00 00 00 00 00 00 00 57 13 01 00 ............W...
010 3E FB FD FF 00 00 00 00 00 00 00 00 00 00 00 00 >ûýÿ............
090 00 00 00 00 00 00 00 00 83 FA A0 FF D6 07 01 00 ........ƒú*ÿÖ...
0A0 01 00 1E 00 17 00 11 00 35 00 44 02 08 00 00 00 ........5.D.....
Sector 3 (0 0 4)
All 00
Sector 4 (0 0 5)
All 00
Sector 5 (0 0 6)
All 00
Sector 6 (0 0 7)
All 00
Sector 7 (0 0
All 00
Sector 8 (0 0 9)
000 90 E9 7D 01 FA 33 C0 8E D0 8E C0 8E D8 BC 00 7C é}.ú3ÀŽÐŽÀŽØ¼.|
010 8B F4 FB BF 00 06 B9 00 01 F3 A5 BB 20 06 FF E3 ‹ôû¿..¹..ó¥» .ÿã
020 90 90 BE 7D 07 81 3C AA 55 75 11 E8 58 00 73 0C ¾}.<ªUu.èX.s.
030 E8 65 00 72 07 E8 B1 00 72 3B EB 2C BE 7D 07 C7 èe.r.è±.r;ë,¾}.Ç
040 04 00 00 BA 80 00 BE BE 07 B9 04 00 F6 04 80 75 ...º€.¾¾.¹..ö.€u
050 07 83 C6 10 E2 F6 EB 1D 8A 74 01 8B 4C 02 BB 00 .ƒÆ.âöë.Št.‹L.».
060 7C B8 01 02 CD 13 72 0D 81 3E FE 7D 55 AA 75 05 |¸..Í.r.>þ}Uªu.
070 EA 00 7C 00 00 BE 6A 07 AC 0A C0 74 FE BB 07 00 ê.|..¾j.¬.Àtþ»..
080 B4 0E CD 10 EB F2 BB 00 7E C6 07 13 C6 47 01 00 ´.Í.ëò».~Æ..ÆG..
090 B2 80 B8 00 E0 CD 13 C3 BF 00 7E BA F0 01 B3 A0 ²€¸.àÍ.ÿ.~ºð.³*
0A0 E8 84 00 72 0C B1 01 E8 48 00 72 05 E8 19 00 73 è„.r.±.èH.r.è..s
0B0 16 F6 C3 10 75 05 80 CB 10 EB E5 81 FA 70 01 74 .öÃ.u.€Ë.ëåúp.t
0C0 05 BA 70 01 EB D8 F9 C3 81 BD FE 01 55 AA 75 17 .ºp.ëØùýþ.Uªu.
0D0 8B 75 02 81 FE BE 01 77 0E 03 F7 81 3C AA 55 75 ‹u.þ¾.w..÷<ªUu
0E0 06 F6 44 02 01 75 01 F9 C3 BF 00 7C B1 0A E8 01 .öD..u.ùÿ.|±.è.
0F0 00 C3 52 57 83 C2 02 B0 01 EE 42 8A C1 EE 42 32 .ÃRWƒÂ.°.îBŠÁîB2
100 C0 EE 42 EE 42 8A C3 EE 42 B0 20 EE E8 33 00 EC ÀîBîBŠÃîB° îè3.ì
110 24 FD 3C 58 75 0D 83 EA 07 B9 00 01 FA F3 6D FB $ý<Xu.ƒê.¹..úómû
120 F8 EB 01 F9 5F 5A C3 52 83 C2 07 EC A8 80 75 0F øë.ù_ZÃRƒÂ.쨀u.
130 4A 8A C3 EE 42 EC 24 D0 3C 50 75 03 F8 EB 01 F9 JŠÃîBì$Ð<Pu.øë.ù
140 5A C3 51 8B 0E 6C 04 83 C1 12 81 C2 FF 01 EC 8A ZÃQ‹.l.ƒÁ.Âÿ.ìŠ
150 E0 80 E4 D8 80 FC 58 74 06 3B 0E 6C 04 75 EF 81 à€äØ€üXt.;.l.uï
160 EA FF 01 B9 00 20 E2 FE 59 C3 0D 0A 45 72 72 6F êÿ.¹. âþYÃ..Erro
170 72 20 4C 6F 61 64 69 6E 67 20 4F 53 00 AA 55 00 r Loading OS.ªU.
180 00 E9 80 FE 00 00 00 00 00 00 00 00 00 00 00 00 .é€þ............
1B0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 01 ..............€.
1C0 01 00 0C FE 3F 00 3F 00 00 00 82 8A A1 12 00 00 ...þ?.?...‚Š¡...
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 9 (0 0 10)
All 00
Sector 10 (0 0 11)
190 28 96 C4 17 00 00 00 00 00 00 00 00 00 00 00 00 (–Ä.............
Sector 11 (0 0 12)
All 00
Sector 12 (0 0 13)
All 00
Sector 13 (0 0 14)
All 00
Sector 14 (0 0 15)
All 00
Sector 15 (0 0 16)
All 00
Sector 16 (0 0 17)
All 00
Sector 17 (0 0 1
All 00
Sector 18 (0 0 19)
All 00
Sector 19 (0 0 20)
All 00
Sector 20 (0 0 21)
All 00
Sector 21 (0 0 22)
All 00
Sector 22 (0 0 23)
All 00
Sector 23 (0 0 24)
All 00
Sector 24 (0 0 25)
All 00
Sector 25 (0 0 26)
All 00
Sector 26 (0 0 27)
All 00
Sector 27 (0 0 2
All 00
Sector 28 (0 0 29)
All 00
Sector 29 (0 0 30)
000 44 50 46 50 00 00 00 00 00 00 00 00 00 00 00 00 DPFP............
010 53 53 54 31 32 38 53 47 4B CD D1 6E 43 A9 F6 AF SST128SGKÍÑnC©ö¯
020 47 45 4F 31 32 38 53 47 03 0C 39 56 58 19 32 3F GEO128SG..9VX.2?
1F0 52 45 53 45 52 56 45 44 42 59 44 49 59 44 44 52 RESERVEDBYDIYDDR
Sector 30 (0 0 31)
All 00
Sector 31 (0 0 32)
All 00
Sector 32 (0 0 33)
All 00
Sector 33 (0 0 34)
All 00
Sector 34 (0 0 35)
All 00
Sector 35 (0 0 36)
All 00
Sector 36 (0 0 37)
All 00
Sector 37 (0 0 3
All 00
Sector 38 (0 0 39)
All 00
Sector 39 (0 0 40)
All 00
Sector 40 (0 0 41)
All 00
Sector 41 (0 0 42)
All 00
Sector 42 (0 0 43)
All 00
Sector 43 (0 0 44)
All 00
Sector 44 (0 0 45)
All 00
Sector 45 (0 0 46)
All 00
Sector 46 (0 0 47)
All 00
Sector 47 (0 0 4
All 00
Sector 48 (0 0 49)
All 00
Sector 49 (0 0 50)
All 00
Sector 50 (0 0 51)
All 00
Sector 51 (0 0 52)
All 00
Sector 52 (0 0 53)
All 00
Sector 53 (0 0 54)
All 00
Sector 54 (0 0 55)
All 00
Sector 55 (0 0 56)
All 00
Sector 56 (0 0 57)
All 00
Sector 57 (0 0 5
All 00
Sector 58 (0 0 59)
All 00
Sector 59 (0 0 60)
All 00
Sector 60 (0 0 61)
All 00
Sector 61 (0 0 62)
All 00
Sector 62 (0 0 63)
All 00
Free space 1-*:
Table 1-2:
Sector 16065 (1 0 1)
1B0 00 00 00 00 00 F2 0E 00 00 00 00 00 00 00 00 01 .....ò..........
1C0 01 01 0B FE FF B9 3F 00 00 00 3A 9C E9 00 00 00 ...þÿ¹?...:œé...
1D0 C1 BA 05 FE FF FF 79 9C E9 00 87 FB 58 24 00 00 Áº.þÿÿyœé.‡ûX$..
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Partition 1-5:
Sector 16128 (1 1 1)
000 EB 58 90 4D 53 57 49 4E 34 2E 31 00 02 08 20 00 ëXMSWIN4.1... .
010 02 00 00 00 00 F8 00 00 3F 00 FF 00 3F 00 00 00 .....ø..?.ÿ.?...
020 34 9C E9 00 4A 3A 00 00 00 00 00 00 02 00 00 00 4ώ.J:..........
030 01 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
040 80 00 29 41 A4 DE 43 48 45 4C 50 45 52 20 20 20 €.)A¤ÞCHELPER
050 20 20 46 41 54 33 32 20 20 20 FA 33 C9 8E D1 BC FAT32 ú3ɎѼ
060 F8 7B 8E C1 BD 78 00 C5 76 00 1E 56 16 55 BF 22 ø{ŽÁ½x.Åv..V.U¿"
070 05 89 7E 00 89 4E 02 B1 0B FC F3 A4 8E D9 BD 00 .‰~.‰N.±.üó¤ŽÙ½.
080 7C C6 45 FE 0F 8B 46 18 88 45 F9 38 4E 40 7D 25 |ÆEþ.‹F.ˆEù8N@}%
090 8B C1 99 BB 00 07 E8 97 00 72 1A 83 EB 3A 66 A1 ‹Á™»..è—.r.ƒë:f¡
0A0 1C 7C 66 3B 07 8A 57 FC 75 06 80 CA 02 88 56 02 .|f;.ŠWüu.€Ê.ˆV.
0B0 80 C3 10 73 ED BF 02 00 83 7E 16 00 75 45 8B 46 €Ã.sí¿..ƒ~..uE‹F
0C0 1C 8B 56 1E B9 03 00 49 40 75 01 42 BB 00 7E E8 .‹V.¹..I@u.B».~è
0D0 5F 00 73 26 B0 F8 4F 74 1D 8B 46 32 33 D2 B9 03 _.s&°øOt.‹F23Ò¹.
0E0 00 3B C8 77 1E 8B 76 0E 3B CE 73 17 2B F1 03 46 .;Èw.‹v.;Îs.+ñ.F
0F0 1C 13 56 1E EB D1 73 0B EB 27 83 7E 2A 00 77 03 ..V.ëÑs.ë'ƒ~*.w.
100 E9 FD 02 BE 7E 7D AC 98 03 F0 AC 84 C0 74 17 3C éý.¾~}¬˜.ð¬„Àt.<
110 FF 74 09 B4 0E BB 07 00 CD 10 EB EE BE 81 7D EB ÿt.´.»..Í.ëî¾}ë
120 E5 BE 7F 7D EB E0 98 CD 16 5E 1F 66 8F 04 CD 19 å¾}ëà˜Í.^.f.Í.
130 41 56 66 6A 00 52 50 06 53 6A 01 6A 10 8B F4 60 AVfj.RP.Sj.j.‹ô`
140 80 7E 02 0E 75 04 B4 42 EB 1D 91 92 33 D2 F7 76 €~..u.´Bë.‘’3Ò÷v
150 18 91 F7 76 18 42 87 CA F7 76 1A 8A F2 8A E8 C0 .‘÷v.B‡Ê÷v.ŠòŠèÀ
160 CC 02 0A CC B8 01 02 8A 56 40 CD 13 61 8D 64 10 Ì..̸..ŠV@Í.ad.
170 5E 72 0A 40 75 01 42 03 5E 0B 49 75 B4 C3 03 18 ^r.@u.B.^.Iu´Ã..
180 01 27 0D 0A 49 6E 76 61 6C 69 64 20 73 79 73 74 .'..Invalid syst
190 65 6D 20 64 69 73 6B FF 0D 0A 44 69 73 6B 20 49 em diskÿ..Disk I
1A0 2F 4F 20 65 72 72 6F 72 FF 0D 0A 52 65 70 6C 61 /O errorÿ..Repla
1B0 63 65 20 74 68 65 20 64 69 73 6B 2C 20 61 6E 64 ce the disk, and
1C0 20 74 68 65 6E 20 70 72 65 73 73 20 61 6E 79 20 then press any
1D0 6B 65 79 0D 0A 00 00 00 49 4F 20 20 20 20 20 20 key.....IO
1E0 53 59 53 4D 53 44 4F 53 20 20 20 53 59 53 7E 01 SYSMSDOS SYS~.
1F0 00 57 49 4E 42 4F 4F 54 20 53 59 53 00 00 55 AA .WINBOOT SYS..Uª
Sector 16129 (1 1 2)
000 52 52 61 41 00 00 00 00 00 00 00 00 00 00 00 00 RRaA............
1E0 00 00 00 00 72 72 41 61 FB 03 00 00 F5 20 00 00 ....rrAaû...õ ..
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 16130 (1 1 3)
000 FA 66 0F B6 46 10 66 8B 4E 24 66 F7 E1 66 03 46 úf.¶F.f‹N$f÷áf.F
010 1C 66 0F B7 56 0E 66 03 C2 33 C9 66 89 46 FC 66 .f.·V.f.Â3Éf‰Füf
020 C7 46 F8 FF FF FF FF FA 66 8B 46 2C 66 83 F8 02 ÇFøÿÿÿÿúf‹F,fƒø.
030 0F 82 CF FC 66 3D F8 FF FF 0F 0F 83 C5 FC 66 0F .‚Ïüf=øÿÿ..ƒÅüf.
040 A4 C2 10 FB 52 50 FA 66 C1 E0 10 66 0F AC D0 10 ¤Â.ûRPúfÁà.f.¬Ð.
050 66 83 E8 02 66 0F B6 5E 0D 8B F3 66 F7 E3 66 03 fƒè.f.¶^.‹óf÷ãf.
060 46 FC 66 0F A4 C2 10 FB BB 00 07 8B FB B9 01 00 Füf.¤Â.û»..‹û¹..
070 E8 BE FC 0F 82 AA FC 38 2D 74 1E B1 0B 56 BE D8 è¾ü.‚ªü8-t.±.V¾Ø
080 7D F3 A6 5E 74 19 03 F9 83 C7 15 3B FB 72 E8 4E }ó¦^t..ùƒÇ.;ûrèN
090 75 D6 58 5A E8 66 00 72 AB 83 C4 04 E9 64 FC 83 uÖXZèf.r«ƒÄ.édüƒ
0A0 C4 04 8B 75 09 8B 7D 0F 8B C6 FA 66 C1 E0 10 8B Ä.‹u.‹}.‹ÆúfÁà.‹
0B0 C7 66 83 F8 02 72 3B 66 3D F8 FF FF 0F 73 33 66 Çfƒø.r;f=øÿÿ.s3f
0C0 48 66 48 66 0F B6 4E 0D 66 F7 E1 66 03 46 FC 66 HfHf.¶N.f÷áf.Füf
0D0 0F A4 C2 10 FB BB 00 07 53 B9 04 00 E8 52 FC 5B .¤Â.û»..S¹..èRü[
0E0 0F 82 3D FC 81 3F 4D 5A 75 08 81 BF 00 02 42 4A .‚=ü?MZu.¿..BJ
0F0 74 06 BE 80 7D E9 0E FC EA 00 02 70 00 03 C0 13 t.¾€}é.üê..p..À.
100 D2 03 C0 13 D2 E8 18 00 FA 26 66 8B 01 66 25 FF Ò.À.Òè..ú&f‹.f%ÿ
110 FF FF 0F 66 0F A4 C2 10 66 3D F8 FF FF 0F FB C3 ÿÿ.f.¤Â.f=øÿÿ.ûÃ
120 BF 00 7E FA 66 C1 E0 10 66 0F AC D0 10 66 0F B7 ¿.~úfÁà.f.¬Ð.f.·
130 4E 0B 66 33 D2 66 F7 F1 66 3B 46 F8 74 44 66 89 N.f3Òf÷ñf;FøtDf‰
140 46 F8 66 03 46 1C 66 0F B7 4E 0E 66 03 C1 66 0F Føf.F.f.·N.f.Áf.
150 B7 5E 28 83 E3 0F 74 16 3A 5E 10 0F 83 A4 FB 52 ·^(ƒã.t.:^..ƒ¤ûR
160 66 8B C8 66 8B 46 24 66 F7 E3 66 03 C1 5A 52 66 f‹Èf‹F$f÷ãf.ÁZRf
170 0F A4 C2 10 FB 8B DF B9 01 00 E8 B4 FB 5A 0F 82 .¤Â.û‹ß¹..è´ûZ.‚
180 9F FB FB 8B DA C3 00 00 00 00 00 00 00 00 00 00 Ÿûû‹ÚÃ..........
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 16131 (1 1 4)
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 16132 (1 1 5)
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 16133 (1 1 6)
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 16134 (1 1 7)
000 EB 58 90 4D 53 57 49 4E 34 2E 31 00 02 08 20 00 ëXMSWIN4.1... .
010 02 00 00 00 00 F8 00 00 3F 00 FF 00 3F 00 00 00 .....ø..?.ÿ.?...
020 34 9C E9 00 4A 3A 00 00 00 00 00 00 02 00 00 00 4ώ.J:..........
030 01 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
040 80 00 29 41 A4 DE 43 48 45 4C 50 45 52 20 20 20 €.)A¤ÞCHELPER
050 20 20 46 41 54 33 32 20 20 20 FA 33 C9 8E D1 BC FAT32 ú3ɎѼ
060 F8 7B 8E C1 BD 78 00 C5 76 00 1E 56 16 55 BF 22 ø{ŽÁ½x.Åv..V.U¿"
070 05 89 7E 00 89 4E 02 B1 0B FC F3 A4 8E D9 BD 00 .‰~.‰N.±.üó¤ŽÙ½.
080 7C C6 45 FE 0F 8B 46 18 88 45 F9 38 4E 40 7D 25 |ÆEþ.‹F.ˆEù8N@}%
090 8B C1 99 BB 00 07 E8 97 00 72 1A 83 EB 3A 66 A1 ‹Á™»..è—.r.ƒë:f¡
0A0 1C 7C 66 3B 07 8A 57 FC 75 06 80 CA 02 88 56 02 .|f;.ŠWüu.€Ê.ˆV.
0B0 80 C3 10 73 ED BF 02 00 83 7E 16 00 75 45 8B 46 €Ã.sí¿..ƒ~..uE‹F
0C0 1C 8B 56 1E B9 03 00 49 40 75 01 42 BB 00 7E E8 .‹V.¹..I@u.B».~è
0D0 5F 00 73 26 B0 F8 4F 74 1D 8B 46 32 33 D2 B9 03 _.s&°øOt.‹F23Ò¹.
0E0 00 3B C8 77 1E 8B 76 0E 3B CE 73 17 2B F1 03 46 .;Èw.‹v.;Îs.+ñ.F
0F0 1C 13 56 1E EB D1 73 0B EB 27 83 7E 2A 00 77 03 ..V.ëÑs.ë'ƒ~*.w.
100 E9 FD 02 BE 7E 7D AC 98 03 F0 AC 84 C0 74 17 3C éý.¾~}¬˜.ð¬„Àt.<
110 FF 74 09 B4 0E BB 07 00 CD 10 EB EE BE 81 7D EB ÿt.´.»..Í.ëî¾}ë
120 E5 BE 7F 7D EB E0 98 CD 16 5E 1F 66 8F 04 CD 19 å¾}ëà˜Í.^.f.Í.
130 41 56 66 6A 00 52 50 06 53 6A 01 6A 10 8B F4 60 AVfj.RP.Sj.j.‹ô`
140 80 7E 02 0E 75 04 B4 42 EB 1D 91 92 33 D2 F7 76 €~..u.´Bë.‘’3Ò÷v
150 18 91 F7 76 18 42 87 CA F7 76 1A 8A F2 8A E8 C0 .‘÷v.B‡Ê÷v.ŠòŠèÀ
160 CC 02 0A CC B8 01 02 8A 56 40 CD 13 61 8D 64 10 Ì..̸..ŠV@Í.ad.
170 5E 72 0A 40 75 01 42 03 5E 0B 49 75 B4 C3 03 18 ^r.@u.B.^.Iu´Ã..
180 01 27 0D 0A 49 6E 76 61 6C 69 64 20 73 79 73 74 .'..Invalid syst
190 65 6D 20 64 69 73 6B FF 0D 0A 44 69 73 6B 20 49 em diskÿ..Disk I
1A0 2F 4F 20 65 72 72 6F 72 FF 0D 0A 52 65 70 6C 61 /O errorÿ..Repla
1B0 63 65 20 74 68 65 20 64 69 73 6B 2C 20 61 6E 64 ce the disk, and
1C0 20 74 68 65 6E 20 70 72 65 73 73 20 61 6E 79 20 then press any
1D0 6B 65 79 0D 0A 00 00 00 49 4F 20 20 20 20 20 20 key.....IO
1E0 53 59 53 4D 53 44 4F 53 20 20 20 53 59 53 7E 01 SYSMSDOS SYS~.
1F0 00 57 49 4E 42 4F 4F 54 20 53 59 53 00 00 55 AA .WINBOOT SYS..Uª
Sector 16135 (1 1
000 52 52 61 41 00 00 00 00 00 00 00 00 00 00 00 00 RRaA............
1E0 00 00 00 00 72 72 41 61 FD 03 00 00 00 00 00 00 ....rrAaý.......
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 16136 (1 1 9)
All 00
Sector 16137 (1 1 10)
All 00
Sector 16138 (1 1 11)
All 00
Sector 16139 (1 1 12)
All 00
Sector 16140 (1 1 13)
All 00
Sector 16141 (1 1 14)
All 00
Sector 16142 (1 1 15)
All 00
Sector 16143 (1 1 16)
All 00
Sector 16144 (1 1 17)
All 00
Sector 16145 (1 1 1
All 00
Sector 16146 (1 1 19)
All 00
Sector 16147 (1 1 20)
All 00
Sector 16148 (1 1 21)
All 00
Sector 16149 (1 1 22)
All 00
Sector 16150 (1 1 23)
All 00
Sector 16151 (1 1 24)
All 00
Sector 16152 (1 1 25)
All 00
Sector 16153 (1 1 26)
All 00
Sector 16154 (1 1 27)
All 00
Sector 16155 (1 1 2
All 00
Sector 16156 (1 1 29)
All 00
Sector 16157 (1 1 30)
All 00
Sector 16158 (1 1 31)
All 00
Sector 16159 (1 1 32)
All 00
Table 1-*:
Sector 15326010 (954 0 1)
1B0 00 00 00 00 00 F2 0E 00 00 00 00 00 00 00 00 01 .....ò..........
1C0 C1 BA 0C FE FF FF 3F 00 00 00 48 FB 58 24 00 00 Áº.þÿÿ?...HûX$..
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Partition 1-6:
Sector 15326073 (954 1 1)
000 E9 A9 01 42 4F 4F 54 57 49 5A 30 00 02 40 20 00 é©.BOOTWIZ0..@ .
010 02 00 00 00 00 F8 00 00 3F 00 FF 00 3F 00 00 00 .....ø..?.ÿ.?...
020 0C FB 58 24 B6 22 01 00 00 00 00 00 02 00 00 00 .ûX$¶"..........
030 01 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
040 80 00 29 90 B6 4B 9D 41 43 52 4F 4E 49 53 20 53 €.)¶KACRONIS S
050 5A 20 46 41 54 33 32 20 20 20 00 00 00 00 00 00 Z FAT32 ......
1A0 00 00 00 00 00 00 00 00 00 00 00 00 33 C0 8E D0 ............3ÀŽÐ
1B0 BC 00 7C FB FC 8E D8 EB 2F 0D 4E 6F 6E 2D 73 79 ¼.|ûüŽØë/.Non-sy
1C0 73 74 65 6D 20 64 69 73 6B 2C 20 70 72 65 73 73 stem disk, press
1D0 20 61 6E 79 20 6B 65 79 2E 2E 2E 07 00 42 4F 4F any key.....BOO
1E0 54 57 49 5A 20 53 59 53 BE B9 7D AC B4 0E B3 07 TWIZ SYS¾¹}¬´.³.
1F0 CD 10 AC 84 C0 75 F5 98 CD 16 CD 19 00 00 55 AA Í.¬„Àuõ˜Í.Í...Uª
Sector 15326074 (954 1 2)
000 52 52 61 41 00 00 00 00 00 00 00 00 00 00 00 00 RRaA............
1E0 00 00 00 00 72 72 41 61 E9 A0 06 00 02 00 00 00 ....rrAaé*......
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 15326075 (954 1 3)
000 FA 66 0F B6 46 10 66 8B 4E 24 66 F7 E1 66 03 46 úf.¶F.f‹N$f÷áf.F
010 1C 66 0F B7 56 0E 66 03 C2 33 C9 66 89 46 FC 66 .f.·V.f.Â3Éf‰Füf
020 C7 46 F8 FF FF FF FF FA 66 8B 46 2C 66 83 F8 02 ÇFøÿÿÿÿúf‹F,fƒø.
030 0F 82 CF FC 66 3D F8 FF FF 0F 0F 83 C5 FC 66 0F .‚Ïüf=øÿÿ..ƒÅüf.
040 A4 C2 10 FB 52 50 FA 66 C1 E0 10 66 0F AC D0 10 ¤Â.ûRPúfÁà.f.¬Ð.
050 66 83 E8 02 66 0F B6 5E 0D 8B F3 66 F7 E3 66 03 fƒè.f.¶^.‹óf÷ãf.
060 46 FC 66 0F A4 C2 10 FB BB 00 07 8B FB B9 01 00 Füf.¤Â.û»..‹û¹..
070 E8 BE FC 0F 82 AA FC 38 2D 74 1E B1 0B 56 BE D8 è¾ü.‚ªü8-t.±.V¾Ø
080 7D F3 A6 5E 74 19 03 F9 83 C7 15 3B FB 72 E8 4E }ó¦^t..ùƒÇ.;ûrèN
090 75 D6 58 5A E8 66 00 72 AB 83 C4 04 E9 64 FC 83 uÖXZèf.r«ƒÄ.édüƒ
0A0 C4 04 8B 75 09 8B 7D 0F 8B C6 FA 66 C1 E0 10 8B Ä.‹u.‹}.‹ÆúfÁà.‹
0B0 C7 66 83 F8 02 72 3B 66 3D F8 FF FF 0F 73 33 66 Çfƒø.r;f=øÿÿ.s3f
0C0 48 66 48 66 0F B6 4E 0D 66 F7 E1 66 03 46 FC 66 HfHf.¶N.f÷áf.Füf
0D0 0F A4 C2 10 FB BB 00 07 53 B9 04 00 E8 52 FC 5B .¤Â.û»..S¹..èRü[
0E0 0F 82 3D FC 81 3F 4D 5A 75 08 81 BF 00 02 42 4A .‚=ü?MZu.¿..BJ
0F0 74 06 BE 80 7D E9 0E FC EA 00 02 70 00 03 C0 13 t.¾€}é.üê..p..À.
100 D2 03 C0 13 D2 E8 18 00 FA 26 66 8B 01 66 25 FF Ò.À.Òè..ú&f‹.f%ÿ
110 FF FF 0F 66 0F A4 C2 10 66 3D F8 FF FF 0F FB C3 ÿÿ.f.¤Â.f=øÿÿ.ûÃ
120 BF 00 7E FA 66 C1 E0 10 66 0F AC D0 10 66 0F B7 ¿.~úfÁà.f.¬Ð.f.·
130 4E 0B 66 33 D2 66 F7 F1 66 3B 46 F8 74 44 66 89 N.f3Òf÷ñf;FøtDf‰
140 46 F8 66 03 46 1C 66 0F B7 4E 0E 66 03 C1 66 0F Føf.F.f.·N.f.Áf.
150 B7 5E 28 83 E3 0F 74 16 3A 5E 10 0F 83 A4 FB 52 ·^(ƒã.t.:^..ƒ¤ûR
160 66 8B C8 66 8B 46 24 66 F7 E3 66 03 C1 5A 52 66 f‹Èf‹F$f÷ãf.ÁZRf
170 0F A4 C2 10 FB 8B DF B9 01 00 E8 B4 FB 5A 0F 82 .¤Â.û‹ß¹..è´ûZ.‚
180 9F FB FB 8B DA C3 00 00 00 00 00 00 00 00 00 00 Ÿûû‹ÚÃ..........
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 15326076 (954 1 4)
All 00
Sector 15326077 (954 1 5)
All 00
Sector 15326078 (954 1 6)
All 00
Sector 15326079 (954 1 7)
000 E9 A9 01 42 4F 4F 54 57 49 5A 30 00 02 40 20 00 é©.BOOTWIZ0..@ .
010 02 00 00 00 00 F8 00 00 3F 00 FF 00 3F 00 00 00 .....ø..?.ÿ.?...
020 0C FB 58 24 B6 22 01 00 00 00 00 00 02 00 00 00 .ûX$¶"..........
030 01 00 06 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
040 80 00 29 90 B6 4B 9D 41 43 52 4F 4E 49 53 20 53 €.)¶KACRONIS S
050 5A 20 46 41 54 33 32 20 20 20 00 00 00 00 00 00 Z FAT32 ......
1A0 00 00 00 00 00 00 00 00 00 00 00 00 33 C0 8E D0 ............3ÀŽÐ
1B0 BC 00 7C FB FC 8E D8 EB 2F 0D 4E 6F 6E 2D 73 79 ¼.|ûüŽØë/.Non-sy
1C0 73 74 65 6D 20 64 69 73 6B 2C 20 70 72 65 73 73 stem disk, press
1D0 20 61 6E 79 20 6B 65 79 2E 2E 2E 07 00 42 4F 4F any key.....BOO
1E0 54 57 49 5A 20 53 59 53 BE B9 7D AC B4 0E B3 07 TWIZ SYS¾¹}¬´.³.
1F0 CD 10 AC 84 C0 75 F5 98 CD 16 CD 19 00 00 55 AA Í.¬„Àuõ˜Í.Í...Uª
Sector 15326080 (954 1
000 52 52 61 41 00 00 00 00 00 00 00 00 00 00 00 00 RRaA............
1E0 00 00 00 00 72 72 41 61 67 15 52 00 00 00 00 00 ....rrAag.R.....
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 15326081 (954 1 9)
000 FA 66 0F B6 46 10 66 8B 4E 24 66 F7 E1 66 03 46 úf.¶F.f‹N$f÷áf.F
010 1C 66 0F B7 56 0E 66 03 C2 33 C9 66 89 46 FC 66 .f.·V.f.Â3Éf‰Füf
020 C7 46 F8 FF FF FF FF FA 66 8B 46 2C 66 83 F8 02 ÇFøÿÿÿÿúf‹F,fƒø.
030 0F 82 CF FC 66 3D F8 FF FF 0F 0F 83 C5 FC 66 0F .‚Ïüf=øÿÿ..ƒÅüf.
040 A4 C2 10 FB 52 50 FA 66 C1 E0 10 66 0F AC D0 10 ¤Â.ûRPúfÁà.f.¬Ð.
050 66 83 E8 02 66 0F B6 5E 0D 8B F3 66 F7 E3 66 03 fƒè.f.¶^.‹óf÷ãf.
060 46 FC 66 0F A4 C2 10 FB BB 00 07 8B FB B9 01 00 Füf.¤Â.û»..‹û¹..
070 E8 BE FC 0F 82 AA FC 38 2D 74 1E B1 0B 56 BE D8 è¾ü.‚ªü8-t.±.V¾Ø
080 7D F3 A6 5E 74 19 03 F9 83 C7 15 3B FB 72 E8 4E }ó¦^t..ùƒÇ.;ûrèN
090 75 D6 58 5A E8 66 00 72 AB 83 C4 04 E9 64 FC 83 uÖXZèf.r«ƒÄ.édüƒ
0A0 C4 04 8B 75 09 8B 7D 0F 8B C6 FA 66 C1 E0 10 8B Ä.‹u.‹}.‹ÆúfÁà.‹
0B0 C7 66 83 F8 02 72 3B 66 3D F8 FF FF 0F 73 33 66 Çfƒø.r;f=øÿÿ.s3f
0C0 48 66 48 66 0F B6 4E 0D 66 F7 E1 66 03 46 FC 66 HfHf.¶N.f÷áf.Füf
0D0 0F A4 C2 10 FB BB 00 07 53 B9 04 00 E8 52 FC 5B .¤Â.û»..S¹..èRü[
0E0 0F 82 3D FC 81 3F 4D 5A 75 08 81 BF 00 02 42 4A .‚=ü?MZu.¿..BJ
0F0 74 06 BE 80 7D E9 0E FC EA 00 02 70 00 03 C0 13 t.¾€}é.üê..p..À.
100 D2 03 C0 13 D2 E8 18 00 FA 26 66 8B 01 66 25 FF Ò.À.Òè..ú&f‹.f%ÿ
110 FF FF 0F 66 0F A4 C2 10 66 3D F8 FF FF 0F FB C3 ÿÿ.f.¤Â.f=øÿÿ.ûÃ
120 BF 00 7E FA 66 C1 E0 10 66 0F AC D0 10 66 0F B7 ¿.~úfÁà.f.¬Ð.f.·
130 4E 0B 66 33 D2 66 F7 F1 66 3B 46 F8 74 44 66 89 N.f3Òf÷ñf;FøtDf‰
140 46 F8 66 03 46 1C 66 0F B7 4E 0E 66 03 C1 66 0F Føf.F.f.·N.f.Áf.
150 B7 5E 28 83 E3 0F 74 16 3A 5E 10 0F 83 A4 FB 52 ·^(ƒã.t.:^..ƒ¤ûR
160 66 8B C8 66 8B 46 24 66 F7 E3 66 03 C1 5A 52 66 f‹Èf‹F$f÷ãf.ÁZRf
170 0F A4 C2 10 FB 8B DF B9 01 00 E8 B4 FB 5A 0F 82 .¤Â.û‹ß¹..è´ûZ.‚
180 9F FB FB 8B DA C3 00 00 00 00 00 00 00 00 00 00 Ÿûû‹ÚÃ..........
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 15326082 (954 1 10)
All 00
Sector 15326083 (954 1 11)
All 00
Sector 15326084 (954 1 12)
All 00
Sector 15326085 (954 1 13)
000 66 0F B6 46 10 66 8B 4E 24 66 F7 E1 66 03 46 1C f.¶F.f‹N$f÷áf.F.
010 66 0F B7 56 0E 66 03 C2 66 89 46 FC 66 C7 46 F4 f.·V.f.Âf‰FüfÇFô
020 FF FF FF FF 66 8B 46 2C 66 83 F8 02 0F 82 A6 FC ÿÿÿÿf‹F,fƒø..‚¦ü
030 66 3D F8 FF FF 0F 0F 83 9C FC 66 50 66 83 E8 02 f=øÿÿ..ƒœüfPfƒè.
040 66 0F B6 5E 0D 8B F3 66 F7 E3 66 03 46 FC BB 00 f.¶^.‹óf÷ãf.Fü».
050 82 8B FB B9 01 00 E8 87 FC 38 2D 74 1E B1 0B 56 ‚‹û¹..è‡ü8-t.±.V
060 BE 70 7D F3 A6 5E 74 1B 03 F9 83 C7 15 3B FB 72 ¾p}ó¦^t..ùƒÇ.;ûr
070 E8 4E 75 DA 66 58 E8 65 00 72 BF 83 C4 04 E9 55 èNuÚfXèe.r¿ƒÄ.éU
080 FC 00 20 83 C4 04 8B 75 09 8B 7D 0F 8B C6 66 C1 ü. ƒÄ.‹u.‹}.‹ÆfÁ
090 E0 10 8B C7 66 83 F8 02 0F 82 3A FC 66 3D F8 FF à.‹Çfƒø..‚:üf=øÿ
0A0 FF 0F 0F 83 30 FC 66 50 66 83 E8 02 66 0F B6 4E ÿ..ƒ0üfPfƒè.f.¶N
0B0 0D 66 F7 E1 66 03 46 FC BB 00 00 06 8E 06 81 80 .f÷áf.Fü»...Ž.€
0C0 E8 1D FC 07 66 58 C1 EB 04 01 1E 81 80 E8 0E 00 è.ü.fXÁë...€è..
0D0 0F 83 02 00 72 D0 8A 56 40 EA 00 00 00 20 66 C1 .ƒ..rЊV@ê... fÁ
0E0 E0 02 E8 11 00 26 66 8B 01 66 25 FF FF FF 0F 66 à.è..&f‹.f%ÿÿÿ.f
0F0 3D F8 FF FF 0F C3 BF 00 7E 66 0F B7 4E 0B 66 33 =øÿÿ.ÿ.~f.·N.f3
100 D2 66 F7 F1 66 3B 46 F4 74 3A 66 89 46 F4 66 03 Òf÷ñf;Fôt:f‰Fôf.
110 46 1C 66 0F B7 4E 0E 66 03 C1 66 0F B7 5E 28 83 F.f.·N.f.Áf.·^(ƒ
120 E3 0F 74 16 3A 5E 10 0F 83 AB FB 52 66 8B C8 66 ã.t.:^..ƒ«ûRf‹Èf
130 8B 46 24 66 F7 E3 66 03 C1 5A 52 8B DF B9 01 00 ‹F$f÷ãf.ÁZR‹ß¹..
140 E8 9D FB 5A 8B DA C3 00 00 00 00 00 00 00 00 00 èûZ‹ÚÃ.........
1F0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA ..............Uª
Sector 15326086 (954 1 14)
All 00
Sector 15326087 (954 1 15)
All 00
Sector 15326088 (954 1 16)
All 00
Sector 15326089 (954 1 17)
All 00
Sector 15326090 (954 1 1
All 00
Sector 15326091 (954 1 19)
All 00
Sector 15326092 (954 1 20)
All 00
Sector 15326093 (954 1 21)
All 00
Sector 15326094 (954 1 22)
All 00
Sector 15326095 (954 1 23)
All 00
Sector 15326096 (954 1 24)
All 00
Sector 15326097 (954 1 25)
All 00
Sector 15326098 (954 1 26)
All 00
Sector 15326099 (954 1 27)
All 00
Sector 15326100 (954 1 2
All 00
Sector 15326101 (954 1 29)
All 00
Sector 15326102 (954 1 30)
All 00
Sector 15326103 (954 1 31)
All 00
Sector 15326104 (954 1 32)
All 00
Disk 1 MBR
First physical sector: 0 (0 0 1)
Table extended structure
Extended boot sector: 0
Extended hidden partitions: 00 Unused
00 Unused
00 Unused
00 Unused
Extended boot disk: 0x00
Extended patch flags: FAT16(-) MS-DOS7+(-) FAT32(-) OS/2(-)
Extended OS/2 patch: 0x00
Extended checksum (0x00): 0x00
Extended size (14): 0
NT signature: 0x49C4E107
Extended serial number: 0x0000
i f Start C H S End C H S Start Size Type
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
0 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
1 A 1 0 1 1023 254 63 16065 625121280 05 Extended
A 1 0 1 1023 254 63 16065 625121280 05 Extended
- 1 0 1 1 0 1 16065 1
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
2 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
3 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
Boot sign (0x0AA55): 0xAA55
Disk 1 Free space of size 7.8M
First physical sector: 1 (0 0 2)
Last physical sector: 16064 (0 254 63)
Total physical sectors: 16064
Disk 1 Table 2 of type 05 Extended
First physical sector: 16065 (1 0 1)
Table extended structure
Extended boot sector: 0
Extended hidden partitions: 00 Unused
00 Unused
00 Unused
00 Unused
Extended boot disk: 0x00
Extended patch flags: FAT16(-) MS-DOS7+(-) FAT32(-) OS/2(-)
Extended OS/2 patch: 0x00
Extended checksum (0xF2): 0xF2
Extended size (14): 14
NT signature: 0x00000000
Extended serial number: 0x0000
i f Start C H S End C H S Start Size Type
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
0 - 1 1 1 953 254 63 63 15309882 0B FAT32
- 1 1 1 953 254 63 63 15309882 0B FAT32
- 1 1 1 953 254 63 16128 15309882
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
1 - 954 0 1 1023 254 63 15309945 609811335 05 Extended
- 954 0 1 1023 254 63 15309945 609811335 05 Extended
- 954 0 1 954 0 1 15326010 1
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
2 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
3 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
Boot sign (0x0AA55): 0xAA55
Disk 1 Partition 5 of type 0B FAT32 and size 7.3G
First physical sector: 16128 (1 1 1)
Last physical sector: 15326009 (953 254 63)
Total physical sectors: 15309882
Clusters from FAT: 1910014
Clusters from Data: 1910000
Disk 1 Table of type 05 Extended
First physical sector: 15326010 (954 0 1)
Table extended structure
Extended boot sector: 0
Extended hidden partitions: 00 Unused
00 Unused
00 Unused
00 Unused
Extended boot disk: 0x00
Extended patch flags: FAT16(-) MS-DOS7+(-) FAT32(-) OS/2(-)
Extended OS/2 patch: 0x00
Extended checksum (0xF2): 0xF2
Extended size (14): 14
NT signature: 0x00000000
Extended serial number: 0x0000
i f Start C H S End C H S Start Size Type
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
0 - 954 1 1 1023 254 63 63 609811272 0C FAT32 LBA
- 954 1 1 1023 254 63 63 609811272 0C FAT32 LBA
- 954 1 1 38912 254 63 15326073 609811272
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
1 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
2 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
- - ---------- --- -- ---------- --- -- ---------- ---------- ----
3 - 0 0 0 0 0 0 0 0 00 Unused
- 0 0 0 0 0 0 0 0 00 Unused
Boot sign (0x0AA55): 0xAA55
Disk 1 Partition 6 of type 0C FAT32 LBA and size 291G
First physical sector: 15326073 (954 1 1)
Last physical sector: 625137344 (38912 254 63)
Total physical sectors: 609811272
Clusters from FAT: 9526014
Clusters from Data: 9525974
Disk 1 Partition 5
FS: FAT32
FSSize: 15309876 (7.3G)
BlockSize: 8 (4K)
BlockCount: 1910000 (7.3G)
FreeBlockCount: 1019 (4M)
ReservedSectors: 32 (16K)
FATSize: 14922 (7.3M)
FATCount: 2 (15M)
RootEntries: 0 (0b)
UsedRootEntries: 56 (1.8K)
InodeSize: 0 (0b)
InodeCount: 0 (0b)
BytesPerInode: 0 (0b)
VolumeLabel: HELPER
SerialNumber: 41 A4 DE 43 00 00 00 00 00 00 00 00 00 00 00 00
CheckPerformed: 1
UsefulInformation: 7765888574 (7.2G)
BadBlockCount: 0 (0b)
FreeInodeCount: 0 (0b)
FilesCount: 22514
DirectoriesCount: 1040
HardLinkCount: 0
SymLinkCount: 0
BlockDeviceCount: 0
CharDeviceCount: 0
SocketCount: 0
FifoCount: 0
JournalSize: 0 (0b)
Disk 1 Partition 6
FS: FAT32
File system error: 11 (FAT corrupted)
FSSize: 609811212 (291G)
BlockSize: 64 (32K)
BlockCount: 9525974 (291G)
FreeBlockCount: 0 (0b)
ReservedSectors: 32 (16K)
FATSize: 74422 (36M)
FATCount: 2 (73M)
RootEntries: 0 (0b)
UsedRootEntries: 0 (0b)
InodeSize: 0 (0b)
InodeCount: 0 (0b)
BytesPerInode: 0 (0b)
VolumeLabel:
SerialNumber: 90 B6 4B 9D 00 00 00 00 00 00 00 00 00 00 00 00
CheckPerformed: 0
UsefulInformation: 0 (0b)
BadBlockCount: 0 (0b)
FreeInodeCount: 0 (0b)
FilesCount: 0
DirectoriesCount: 1
HardLinkCount: 0
SymLinkCount: 0
BlockDeviceCount: 0
CharDeviceCount: 0
SocketCount: 0
FifoCount: 0
JournalSize: 0 (0b)

------ OS Selector report ------

--- Partition 1-5 content ---

--- Root dir content: ---
LS-120 IDE Driver <DIR>
DOWNLOAD <DIR>
DRIVERS <DIR>
Gateway Monitor Drivers <DIR>
I386 <DIR>
lexmark <DIR>
Dell <DIR>
LS-120 USB Driver <DIR>
MP3 <DIR>
MyHD 1.66E1 1-16-06 <DIR>
NVIDIA <DIR>
Ondata-Recsoft 3.2 Setup <DIR>
RealTek drivers <DIR>
Startup <DIR>
TPF 2005 DOC <DIR>
Intel10.1 <DIR>
fbf47f7 <DIR>
Documents and Settings <DIR>
ATI <DIR>
Program Files <DIR>
WINNT <DIR>
AUTOEXEC.BAT 0
CONFIG.SYS 0
IO.SYS 0
MSDOS.SYS 0
NTDETECT.COM 34724
arcldr.exe 150528
arcsetup.exe 163840
boot.ini 192
ntldr 214432
Recycled <DIR>
SHADOW.IDX 8192
System Volume Information <DIR>

autoexec.bat file is empty

config.sys file is empty

--- boot.ini file content: ---
[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINNT
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINNT="Microsoft Windows 2000 Professional" /fastdetect


--- Partition 1-6 content ---

--- Root dir content: ---
7E2F0537_E793_4461_B7B6_73A47574E9C1 0
ABE57.TIB 4294966784
ABE58.TIB 4294966784
ABE49.TIB 1132363776
ABE50.TIB 4294966784
ABE59.TIB 809391177
ABE60.TIB 3709885346
ABE51.TIB 322994176
ABA8.TIB 4294966784
ABA9.TIB 2410383187
ABE52.TIB 4294966784
ABE61.TIB 4294966784
ABE62.TIB 1881569286
ABE63.TIB 4294966784
ABE64.TIB 4294966784
ABE65.TIB 4294966784
ABE66.TIB 4294966784
ABA10.TIB 479267229
ABA11.TIB 505195443
ABA12.TIB 4294966784
ABA13.TIB 1496805475
ABA14.TIB 88551924
ABB2.TIB 2310975186
ABB.TIB 1394716022
ABB3.TIB 746160926
ABE53.TIB 2562210524
FAAC1.TIB 4294966784
FAAC2.TIB 0
ABE54.TIB 1793622016
ABE67.TIB 4294966784
ABE55.TIB 4294966784
ABE56.TIB 696156160
ABE68.TIB 4294966784
ABE69.TIB 4294966784
ABE70.TIB 978970796
ABE71.TIB 3547416078
ABE72.TIB 317088074
ABE73.TIB 861056078
ABE74.TIB 386508026
Ubuntu files 05-27-091.tib 4294966784
Ubuntu files 05-27-092.tib 158995856
ABA2.TIB 236954436
ABA.TIB 929440562
ABA3.TIB 195555153
ABA4.TIB 354818615
ABC1.TIB 4294966784
ABC2.TIB 725394019
ABC3.TIB 2643261667
ABC4.TIB 2001426031
ABC5.TIB 4259760467
f11.sys 22528
f11 <DIR>
SHADOW.IDX 32768
ABA5.TIB 326726
ABA6.TIB 3512252409
ABA7.TIB 866811904
ABD1.TIB 4294966784
ABD2.TIB 4294966784
ABD3.TIB 4294966784
ABD4.TIB 1124136059
FAAD1.TIB 4294966784
ABE.TIB 672123525
FAAD2.TIB 1495833087
ABE2.TIB 4294966784
ABE3.TIB 4294966784
ABE4.TIB 2858240615
ABE5.TIB 85219529
ABE6.TIB 79373978
ABE7.TIB 1316716127
ABE8.TIB 4294966784
ABE9.TIB 4294966784
ABE10.TIB 4294966784
ABE11.TIB 4294966784
ABE12.TIB 4294966784
ABE13.TIB 4294966784
ABE14.TIB 4294966784
ABE15.TIB 2396079959
ABE16.TIB 4294966784
ABE17.TIB 4294966784
ABE18.TIB 4294966784
ABE19.TIB 4294966784
ABE20.TIB 262634291
ABE21.TIB 4294966784
ABE22.TIB 4294966784
ABE23.TIB 4294966784
ABE24.TIB 4294966784
ABE25.TIB 4169153100
ABE26.TIB 470622464
ABE27.TIB 342844105
ABE28.TIB 4294966784
ABE29.TIB 4294966784
ABE30.TIB 4294966784
ABE31.TIB 4294966784
ABE32.TIB 4294966784
ABE33.TIB 4294966784
ABE34.TIB 4294966784
ABE35.TIB 3670785153
ABE36.TIB 1304221167
ABE37.TIB 4294966784
ABE38.TIB 4294966784
ABE39.TIB 3736799483
ABE40.TIB 1651543302
ABE41.TIB 4294966784
ABE42.TIB 4294966784
ABE43.TIB 2735669716
ABE44.TIB 4294966784
ABE45.TIB 202975798
ABE46.TIB 480302861
ABE47.TIB 4294966784
ABE48.TIB 1188724736

 

kOlo,

Sorry it's taken me a while to get back to you on this. I will defintely do what you suggest and post the information back here, but I cannot do it till tomorrow as I'm working on Customer sites at present.

Thanks for the help so far.

Cheers

Geoff.

 

Can the Acronis rep please interpret the above report for me?


Thankyou,

 

kOlo,

Here are the ptedit screen prints you requested. This one is for the USB Disc

and this one is for the main laptop disc

 

Geoff:

What ptedit32 shows for your external disk is consistent with what Windows Disk Management shows in its graphical illustration (post #4) -- just two partitions; a 258.83 MB boot partition and a 189.66 GB NTFS partition. There is no evidence of a third partition in the partition table. However, Windows Disk Management is somehow detecting that the size of the NTFS partition should be 89.08 GB in the textual portion of its window.

One other interesting test then might be to see what Windows Disk Check reports -- it should detect some errors in the data structure. However, I also see that Windows has not assigned a drive letter to the NTFS partition on the external disk. So to check the partition for errors you would need to do the following:
1. In Disk Management, right-click on the NTFS partition on your external disk and assign it a drive letter.
2. From a command prompt, run chkdsk x:, substituting the drive letter assigned in place of x:. You only want chkdsk to report errors; not to try to fix them, so don't append the /f or /r switches to the command.

This test is only of academic interest to see if Windows is aware of problems on the partition. Fixing this is a bigger issue. I can think of two approaches that might work (other than using a hex disk editor to find out where the NTFS partition really ends and the former ASZ really starts, and manually editing the partition table):

A. Try data recovery software like GetDataBack to see if it can find any of your image files. This is unlikely to succeed since they were FAT32 files originally and are now incorrectly identified as belonging to an NTFS partition.
B. If you have Acronis Disk Director they have a module called Acronis Recovery Expert that can reconstruct damaged or missing partitions. However, to use the module you would need to first delete the damaged partition and then let Recovery Expert search the uncommitted free space on the disk to find evidence of former partitions. If it succeeds it will reconstruct the correct partition table entries and your two partitions will magically re-appear.

If you go this route you should first remove any files from the NTFS partition that are valuable. Then use Disk Director (or Partition Magic) to delete the NTFS partition. Finally, start Acronis Recovery Expert and let it search for the missing partitions. If it succeeds you could then make the ASZ visible (as described in post #2) and recover your image files.

 

I tried connecting the USB drive to a different PC (my home desktop) and mounted the 189GB partition as the K: drive. I ran the chkdsk command as requested and have attached the output. You can also see that when I ran the Acronis Report tool earlier the report it generated didn't include the USB drive for some reason, so i repeated running the Acronis report on my home desktop and as far as I can tell the new report includes the k: drive so I have attached that too.

 

Geoff:

Chkdsk is reporting that the partition size should be 89.1 GB.

Also, I can see from the Acronis report that the boot sector of the NTFS partition shows that its size should be 186,803,817 sectors =(89.08 GiB).

This is sufficient information to try a forensic repair of your partition table if you're up for it. You can use ptedit32 to manually correct the second entry in the partition table and to reconstruct the values needed for the missing ASZ partition.

Note that doing a manual edit should be low risk. If we come up with what we think the correct values are and you change them and they are not correct, all you need to do is change them back to what they are now as shown in your first picture in post # 12. Give me a while to calculate the correct values and I'll post them.

 

Geoff:

Here are the changes needed. The first figure is your existing partition table. The second figure shows the edits that need to be made to fix the partition table (I did this on a VM so ignore the hard disk description at the top of the window).

After you have made the edits, click on the "Save Changes" button. Disconnect the USB disk and then plug it back in to allow Windows to refresh the disk info. Go to Windows Disk Management to see if the partition structure looks correct. You may need to assign drive letters to the NTFS and ASZ partitions.

If this works you should now see the Acronis Secure Zone mounted as a standard FAT32 partition and its contents should be visible in Windows. If it doesn't work, run ptedit again and change the partition table entries back to the original values.

 

Mark,

I did what you recommended. Here is the ptedit screen as evidence. I found I then had 3 partitions on the USB hard drive, as expected and the existing NTFS partition still contained the files I expected. Unfortunately the two FAT partitions do not appear to contain any files at all and Windows simply suggests they need to be formatted. Obviously I have not formatted the partition but there still seems no way to recover my backups data.

 

Mark,

I also tried using ptedit to change the sector type to BCh to see if that made it appear as an Acronis Secure Zone to True Image, but no joy that route either. It just appears as a local disc J: with nothing on it.

Geoff

 

Geoff:

A couple of other suggestions:

1. On the off chance that the Secure Zone was in a logical partition, change partition 3 Type to 05 (extended partition) and see what happens.

2. Change the Type to BCh (Acronis Secure Zone) and try looking at the zone from a TI boot CD.


I'm very sure that you should keep the change made to partition 2 (changing the Number of Sectors value to agree with what is stored in the NTFS partition's boot sector). It's just partition 3 that is in question. The values that I posted were determined by assuming that there was one more partition on the disk that started immediately following partition 2 and ended at the physical end of the disk. Either that assumption was incorrect, or else the formatting (FAT tables, etc) was destroyed earlier.

So the final hope for recovering any former images may be with data recovery software like GetDataBack (see post #13 for a link). That's worth a try before giving up and reformatting the partition.

 

Hello all,

Thank you for using Acronis True Image

Mr. Y,

Acronis Report is an internal Acronis utility, it was created for the internal usage only. We can't share the information on how to read the file, but this tool can be applied to view the partition structure.

Thank you.

--
Oleg Lee

 

Hi Guys, sorry for the long delay in responding but I've been off on holiday (2 weeks for us lucky Europeans). Anyway I tried the suggestions on changing the partition type and booting from a TI recovery disc without any luck so I decided to try out the GetDataBack trial. I used the GetDataBack FAT version to read the partition. It shows it's possible to recover 9 .tib files plus some other info if I buy the licence. Before I do I just wanted to check that if I recover all those .tib files its likely I'll then be able to use TrueImage to extract the my backed up data from them. I've attached a screen print of the output from the GetDataBack tool so you can see what it looks like.

Cheers

Geoff

 

Geoff:

I don't think anyone can give you a guarantee that file recovery will work. This looks disconcerting:



For TI to be able to recover an image from a .tib file that has been split into multiple files, all of the splits have to be present. From the above image it looks like you had a 32 GB file named AAA that has the typical FAT32 split size of 4 GB. Ordinarily all of the splits will be 4 GB except the last, which may be smaller. The 7th split in your picture isn't 4 GB, so GetDataBack may be having a problem recovering all of that split file.

I doubt that the recovered file would restore, but perhaps you will be able to explore or mount parts of the file set. I can't really predict what might happen, so it's a gamble on your part. Maybe someone else with experience with damaged files could add their opinion...

 

Mark,

I think that #7 is part of a different backup group. The dates make it look like there are two sets of images, one for 8/2 and one for 3/4. It may be a Full and an Incremental, for example (I haven't read through the entire thread).

 

You're right - I didn't look closely enough at the file dates

This makes it more likely that a file recovery will work, Geoff.

 

I think the displayed filenames are not ones created by TI. The older ones have higher numbers (TI wouldn't do this).

Once recovered, they would need to be separated by filename groups (newbackup1.tib, newbackup2.tib, etc. // oldbackup1.tib, oldbackup2.tib) before they can be used.