Recovery and backup of hard disk partitions

Backup | recovery | Hard disk You can always feel the importance of hard disk partitioning. Admittedly, the status of hard disk partitions is no doubt, therefore, it has become a lot of virus attack object. Moreover, some unexpected situations, such as sudden power outages, can also cause the hard drive's primary boot partition data to be lost. As soon as the partition is damaged, the system is paralyzed and unable to move. So the technique of restoring and backing up a partition is a skill you have to master:

First of all, once the computer is unable to detect the hard drive, the hardware problem is eliminated, we should open
Start detecting partitions. In general, if one of the main boot areas or the bootstrapper and partition tables is corrupted, the loss of the hard drive will occur. Let's do a check:

Inspection and repair of partitioned tables

If the computer does not boot from the hard drive, we can try to access the hard drive after booting through a floppy disk. If the hard drive can be accessed, it is only the operating system is damaged, can be restored by reinstalling the operating system, or directly from the other computer's hard drive to the data to copy, if the hard disk can not access, it may be the primary boot area or bootable partition boot zone is corrupted. At this point, we can use Debug or tool software such as Norton Disk Editor to see if the hard drive's primary boot area is normal. Here we give an example of using debug to access the main boot area: (where xxxx represents the memory segment address, because of the computer's BIOS, operating system and configuration files, etc.), resulting in a different XXXX address section.

A:>debug

-A assembly instruction

XXXX:0100 mov ax,201 read a sector

XXXX:0103 mov bx,600 read to current paragraph 0600

XXXX:0106 mov cx,1 cylinder number =1

XXXX:0109 mov dx,80 Magnetic number = 0, drive letter =80

XXXX:010C INT 13 Disk read and write interrupts

xxxx:010e int 3 Breakpoint Interrupted

xxxx:010f

-G executes the above instructions

-D 600 Display primary boot area content

If there is no problem with the primary boot area, we'll have to check if the bootstrapper and partition tables are normal. If a program exception is found (by comparing it to a normal program), the bootstrapper may be disturbed. There are a number of ways to recover the bootstrapper, so let's first introduce the manual recovery approach: First, you have to get the file Mboot.dat from a working computer and start with a floppy disk, run the Debug program and enter the following command:

-N mboot.dat Read file Mboot.dat

-1 800 read to current paragraph 0800

-M 7be 1 9be Copy the original partition table to the normal primary boot area

XXXX:0100 mov ax,301 writes 0800 data back to the boot sector

XXXX:0103 mov bx,800

xxxx:0106

-R IP modifies the current instruction pointer

ip:010e 0100 The current instruction pointer points to 0100

-G execution

Remember, if the exact same hard disk partition table, if not, you can use software such as Diskedit, manually fill in the partition table for recovery.

Recovery of boot partitions with tool software

In addition to being able to take advantage of manual recovery, there are now a number of specialized tooling software that can also restore and back up the boot area of the system.

First to introduce fixmbr: This is a DOS-based application software. Its main function is to reconstruct the primary boot sector. The software modifies only the primary boot sector records and does not write to other sectors. The basic command format is as follows:

FIXMBR[DRIVE][/A][/D][/P][/Z][/H]

/a active DOS Partition (activate basic DOS Partition)

/d display MBR (show master boot record content)

/p Display partition (displays the structure of DOS partitions)

/z Zero MBR (clear master boot record area 0)

/h Help (Helpful information)

If you type fixmbr directly and press ENTER, the operation to check the MBR structure is performed by default. If you find that your system is not working properly, you will be prompted to fix it. Answer "YES" to search for partitions later. When the appropriate partition is searched, the system prompts you to modify the MBR and the answer yes begins to repair. If the search results are incorrect, but using the/z switch, restarting the system will revert to its original state.

In addition to FIXMBR, KV3000 is a anti-virus software, it also has a very strong ability to repair the partition. More exciting is that it can also be a backup of the system partition. In this way, even if the two partition tables on the hard disk are all corrupted, we can repair them with the partition table that is backed up on the floppy disk. Let's talk about KV3000 's backup first. Enter the following format command (kv3000/b or KV3000/HDPT. DAT), automatically backs up a virus-free master boot information file, named HDPT.DAT and HFBOOT.DAT, to disk A. When the hard drive master boot information is corrupted by the virus or the master boot record is damaged, you mainly enter "KV3000/HDPT." DAT "Restores the contents of the backup to the hard disk (the backup and the hard disk to be recovered must be the same block).

If you do not have a backup, KV3000 also allows you to repair the main boot information on the hard drive, and then perform KV3000, press the F6 key, you can see the hard drive hidden sector has been unable to boot, you can see the hard disk 0 0 column 1 sector master boot information is normal. If critical code is not found on the 0-side 0-Column 1-sector of the hard disk, the hard disk itself will not boot, even if the floppy disk is booted and cannot enter the hard drive. Can be found in the hidden sector of the hard disk, find, the system will appear in the table flashing red "80" and "55AA", and a sound to remind you, the line will appear a row of prompts, "F9=save to SIDE 0 CYLINDER 0 Sector 1!!! "。 At this time, click: "F9" key, you can just find the original hard disk master boot information to cover the hard disk 0 0 column 1 sectors, and then, the computer will reboot the hard drive, restore the boot performance of the hard disk, the floppy boot can also enter the hard disk.

In addition, if due to virus damage or operational errors, resulting in the hard drive master boot record and partition table damage, hard drive can not boot or floppy boot can not enter the hard disk, if the first use kv3000/b command on the floppy disk back up the master boot record, then available KV3000/HDPT. DAT's command to restore the hard disk master boot record, if you have not previously backed up the hard disk master boot information, then only use KV3000 to quickly rebuild the disk partition table function to try.

After the floppy disk boots the system, the implementation of KV3000, the main menu out, press the F10 key, can be related to the system parameters and hard disk partition Table Quick Test, if the hard disk partition table is not normal, KV3000 will first save the bad partition table to the floppy disk, and then automatically rebuild the hard disk partition table, so that the hard drive back to

If the hard disk has only one partition, and the file allocation table (FAT table), the file root (root table) has been seriously damaged by the virus, then, even if the C-disk partition table is restored, the C disk can not boot, you need to manually cooperate with other specialized repair software to recover the data. But if there are D, E, and other extended partitions, under normal circumstances, KV3000 can find the back has not been destroyed partition, rebuild a new hard disk main partition table, and then use the DOS system floppy disk boot computer, you can enter the hard drive D, E and other partitions.