Data recovery

At the end of sector 0 (MBR) there are four characters "55AA". When you deactivate the MBR, it chances to "55BB".

I read about the 4 characters that get changed when you disable MBR. Can I assume with "55BB" Windows can still read the MBR (even if it's disable) but no updates. Is that a correct assumption? Thanks again
 
I read about the 4 characters that get changed when you disable MBR. Can I assume with "55BB" Windows can still read the MBR (even if it's disable) but no updates. Is that a correct assumption? Thanks again

Windows can see the drive (you can still use data recovery software) but it's not going to mount the drive or try to fix any corruption in the partition.
 
I always appreciate info's from the master! Thanks

I'm just curious, once the image is done, With DDI I normally deactivate MBR before connecting the drive to Windows. With disable MBR, I was able to get drive and file info. Does that mean the MBR is not 100% disable?

What program are you referring to when you say DDI?
Just wondering.
 
300 DDR

Does your shop have a PC3000? In my class, we found a few cases where drives that couldn't be fixed by a DeepSpar were corrected by the PC3000.
 
Hi pcman2010,
Yes we have a PC3000. And since we have one, we typically don't go straight to the DDI just because it's safer to use PC3000 first. On PC3K we backup everything (rom + firmware + tracks), turn off all background tasks on the hard drive (sector relocation, smart, background scans, etc.), check firmware modules, check heads, check to make sure LBA is accessible, then if it's all good, move to DDI.
 
I never use Windows for any kind of hard drive issues, it's not fault tolerant whatsoever. My basic rule of thumb is if it makes any noises, refer to a data recovery specialist. If it seems OK, check the SMART data before mounting in Linux. If it can mount it we're good to go. If not, refer.
 
Back
Top