Sep 23 2009

Windows Hangs at Startup Screen and Safe Mode Fails to Boot

Published by admin under Data Recovery

A common Microsoft Windows logo (1992-2000)Image via Wikipedia

You might run into several Windows boot issues for the reasons like infected system drivers, virus infection, missing or corrupted Windows system files and others. To help fixing such problems, Windows includes some tools and Recovery Console commands. But if neither of them works, you will need to repair your Windows installation or ultimately, remove it to install a new one. If you experience data loss in such situations, you are suggested to use your backup or scan the disk using a commercial Data Recovery Software.

 

 

To illustrate, consider that you use a Windows based computer system. You experience that when you start your computer, it hangs at Windows startup screen and fails to boot. When you try to boot the system in Windows safe boot, it executes the below files and the process halts:

 

 

 

multi(0)disk(0)rdisk(0)partition(1)\WINNT\System32\ntoskrnl.exe
multi(0)disk(0)rdisk(0)partition(1)\WINNT\System32\hal.dll
multi(0)disk(0)rdisk(0)partition(1)\WINNT\System32\BOOTVID.dll
multi(0)disk(0)rdisk(0)partition(1)\WINNT\System32\config\system

 

 

 

Further, when you try to boot the system using Windows boot disk, it gives NTDETECT failure error and you cannot access the data.

 

 

Cause

 

Among other possible reasons, few of them are:

  • One of the primary boot files, like MBR, Boot.ini, is damaged

  • You computer is infected from virus that has replaced the Bootvid.dll file required by Windows to display graphical image

Solution

 

To solve the existing issue, you can consider applying the following steps:

  • Insert the Windows installation CD and boot the computer using it

  • Press any key when prompted to start from CD

  • Pres ‘R’ to start Recovery Console when the Setup starts

  • Select the target Windows installation

  • Specify the administrator password, if any

  • The command prompt will appear. You can then execute appropriate repair commands like Bootcfg, Fixboot and Fixmbr

  • Type Exit to exit the Recovery Console

If this doesn’t help fixing the described Windows boot problem, try repairing or reinstalling Windows installation. When you perform clean Windows installation, you lose data that can be restored from backup. But if no good backup exists, use an efficient data recovery utility.

 

 

Data recovery software are safe tools that are primarily designed to recover lost data from a logically crashed disk. Using high-end scanning algorithms, these tools prove to be reliable and powerful Partition Recovery products.

Reblog this post [with Zemanta]

No responses yet

Sep 05 2009

Data Recovery From “ Trojan-Dropper.Win32.Agent.albv” Malware Infected System

Published by admin under Data Recovery

SEOUL, SOUTH KOREA - DECEMBER 7:  Employees of...Image by Getty Images via Daylife

Such as computer viruses, malware encroach upon your computer system causing several issues wherever this malicious code pleases, so you are not completely sure about what’s happening. These programs sometimes cause big damage to the file system, operating system, stored files, applications and other system resources. The most popular and destructive example of malware is “Trojan-Dropper.Win32.Agent.albv.” It might cause serious damage to you Windows computer and results into critical data loss situations. In these critical circumstances, you need to go for data recovery solutions to retrieve lost, missing and inaccessible data.
Information about Trojan-Dropper.Win32.Agent.albv malware
This highly destructive malware was first detected on 29 March, 2009. This 23552 sized program has a very malicious impact on your computer system. This malware copies executable file as given below:
%WinDir%\system\svhost.exe
This malicious program edits the Windows registry and adds a link to executable file svhost.exe as shown below, in order to ensure that the executable file is executed on startup.
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
“WSVCHO” = “%WinDir%\system\svhost.exe”
This malware also affects the external storage devices such as external hard drive or flash drive. It copies an executable file in the root of the removable device with file name as “wlan.exe.” It also creates autorun.inf file in root directory of every storage device that would launch executable file every time when you open the infected device.
This malevolent piece of code affects your entire system and ultimately cause data loss. To prevent such situations from being occurred, you should use anti-malware software. When your system gets infected by this malware, you can go for malware remover tools. These applications are able to search all of the malware infected files and remove them.

When the malware remover removes the file or the file gets deleted due to system data structure corruption, data loss occurs in both cases and require hard drive recovery to be resolved. This is the case of logical failure and recovery is possible through third party applications.
These applications are known as data recovery software. They use high-end scanning mechanisms to methodically scan your damaged hard drive and retrieve all of the data from it. The partition recovery software come equipped with interactive and simple graphical user interface to enable easy recovery.

Reblog this post [with Zemanta]

No responses yet

Aug 14 2009

Data Recovery for Solid State Drives

Published by admin under Data Recovery

Open casing of 2.5” traditional hard disk driv...Image via Wikipedia

SSDs or Solid State Drives offer fast data access, high performance and typically are more durable than conventional hard drives since they don’t have no moving components. Since few of its major advantages, SSDs keep an important presence in world of storage media. They are extremely fast to allow data access, are shock proof and use solid state memory to store the data persistently. But the fact is data loss can occur in these drives also. SSDs are highly vulnerable to some of the defects that a typical hard drive is not as vulnerable to. However, with the help of Data Recovery Service experts, you can recover from such situations and hence recover the lost data.

 

Causes of failure

 

Few most common causes that can crash a solid state drive are:

 

  • Power interruption

  • Strong magnetic fields

  • Electrostatic charges

  • Physical damages

 

Apart from mentioned ailments, SSDs possess write cycles that are limited in number. Due to this fact, the drive might lose its ability to write more data and might wear out completely.

 

Recovery

 

Many Data Recovery companies offer cross-compatible recovery service for the complete range of drive manufacturers. Due to difference in factors like performance-boosting algorithms, controller technology and wear-leveling, each of the drives is unique in its own sense. Also, the fact that new operating systems use the drive for few complicated tasks and index the files using dissimilar techniques make recovering data from such drives more taxing as compared to conventional hard drives So, each drive demands a particular set of tools and understanding to recover data from. Hence, Data Recovery Service is possible for SSDs but all you require is to search for a specialist company that master recovery from your disk’s brand and operating system.

 

Recovering data from SSDs needs highly advanced procedures such as replacing the burnt ICs, memory chips etc. The processes might also include making drive images to ensure data security. Also adding to data security, the drives are opened in safe surroundings of Clean Rooms.

Reblog this post [with Zemanta]

No responses yet

Jul 09 2009

Data Recovery- A Solution for Storage Media Failure

Published by admin under Data Recovery

Most of the computer users must have experienced the data loss at one or the other time. Data loss is generally indicated by some symptoms by your computer which range from scrapping noises coming from your hard drive to the inaccessibility of stored data and some sort of error messages. It can also be identified by the situations where your hard drive can no longer be recognized by your computer. The result of data loss is always devastating to end user, whether the use is an individual with personal data or a business with no proper backup of its critical data. Most of the users believe when the data is lost, its gone everlastingly. However, it is wrong as data recovery is possible in most of the cases using proper solutions.

The very first thing that you should always do in case of data loss is to stop using the damaged or affected storage media as further use of failed media could make the recovery process difficult or may cause permanent data loss. Several users try things like repartitioning or reformatting the hard drive in attempt to make it accessible. But by continuing to use the failed media, the lost data may get overwritten and it may irretrievable.

The most important step towards Hard Drive Recovery is to find out the cause of data loss. The recovery solution depends upon the factor, which has lead to data loss. There are two major causes of data loss:

    Physical Failure

    Logical Failure

The physical failure generally occurs due to damage to the hardware components or hard drive such as electrical board, controllers, read/write head, platters, spindle motor and so forth. It could take place because of accidental dropdown, power surges, natural disasters and more. In such cases, the recovery is possible through Data Recovery service.

On the other hand, logical failure is resulted by the damage to system data structure or other logical components. In this case, the physical components remain intact but the data becomes inaccessible due to missing file pointers and references. It is caused by file system corruption, hard drive formatting, accidental deletion, operating system malfunction, virus infection, improper system shutdown and other similar reasons. Recovery in such case is possible in an easy and quick way using third party hard drive recovery software.

Reblog this post [with Zemanta]

No responses yet

Jun 16 2009

Why Clean Rooms Are Required For Data Recovery

Published by admin under Data Recovery

NASA's Glenn Research Center cleanroom.Image via Wikipedia


Different users have different views about what the Clean Rooms are and why they actually are important for data recovery. Fundamentally the Clean Rooms are safe and controlled laboratory environments, which are designed to avoid minute airborne contaminants that could be dust or even pollen.

For data recovery firms, the Clean Room is a necessary asset as hard disk repair needs exceptionally clean and secure working conditions. The airflow in Clean Room is completely clear. The Clean Rooms are also free from other harmful environmental factors as humidity, ESD (ElectroStatic Discharge), smoke, high temperature (viz. due to direct sunlight) or pressure.

The Clean Rooms are divided into different classes. With every class limiting permitted different number of dust particles per cubic meter and the maximum size of dust particles. Thus the Class 1 Clean Rooms allow maximum 1000 particles for each cubic meter.

The Clean Rooms are mainly used in semiconductor manufacturing, pharmaceuticals, hard drive recovery companies and biotech industries. The data recovery firms use Clean Rooms to ensure protected environments for storage media internals as hard drives and SSDs (Solid State Drives) in order to avoid further damage to disk internals that actually store the data viz. hard drive platters.

Why are the Clean Rooms necessary for physical Data Recovery?

The hard drive internals specifically hard disk platters, are extensively susceptible to damage from dust particles once opened. Even a microscopic dust particle could damage the sensitive platters and may separate the stored data for life. To avoid these situations, Hard Drive Recovery companies use Clean Rooms.

Hard drive technique continues apace with the drive being able to store a large amount of data but it becomes more compactly packed on disk platters and the possibilities of further damage are high. So, it would be better to find out a trusted and experienced Hard Drive Recovery company with high standard Clean Rooms and send your hard drive to it.

Along with a certified Clean Room, absolute and timely hard drive recovery also needs expertise of skillful and experienced data recovery professionals. Thus, you should send your hard drive to a data recovery company that has a team of trained and qualified recovery specialists.

Reblog this post [with Zemanta]

No responses yet

Jun 10 2009

Data loss due to problem in Security System

Published by admin under Data Recovery


STOP error messages in Windows NT based operating system (Vista, 2003, XP and 2000) primarily occur due to software or hardware corruption. Some software issues that might result in STOP error message are installation of a corrupted device driver, internal security issues, file system corruption and software bugs. After a STOP error message appears, the system becomes unbootable making all the data saved in the hard drive inaccessible. In such situations, a perfect solution is to restore the data from an up-to-date backup. However, in case of no backup availability or backup falling short of restoring the required data, an advanced data recovery application comes to rescue.

 

As a practical case, you encounter the below error message when you attempt to start your Windows based system:

 

“STOP: 0×00000029 (parameter 1, parameter 2, parameter 3, parameter 4)

SECURITY_SYSTEM”

The four parameters in the above error message differ due to system’s configuration.

 

Once the above error message appears, the data saved in the hard drive becomes inaccessible. Furthermore, you encounter the same STOP error message each time you attempt to boot your system.

 

Cause:

 

The above error message primarily occurs under any of the below two situations:

 

1      Some problem in internal security system of your computer

2      Device driver is corrupted

 

To avoid the occurrence of the above error message, you should always install the latest hardware drivers in your system.

 

Resolution:

 

To resolve the above STOP error message and access the data, you will need to take these actions:

 

1    Remove the new hardware (especially the chipset and video drivers) and reboot your system

2      Increase the RAM (Random Access Memory) and disk space of your system

3      Confirm the compatibility of the hardware and drivers by using Microsoft Hardware Compatibility List (HCL)

4      Select Last Known Good Configuration option while rebooting your system

 

However, if all the above measures fail to resolve the issue and the data still remains inaccessible, then you need to use advanced data recovery software. These data recovery applications employ advanced scanning methods to recover lost data from a formatted hard drive. Built with intuitive user-interface, automated recovery procedure and powerful features, these applications are as easy-to-understand and implement.

No responses yet

May 24 2009

Windows XP Shutdown Issues

Published by admin under Data Recovery

Windows XP is considered as a reliable and secure operating system. But at times, you experience certain difficulties while trying to shutdown Windows XP based computer. One of the reasons behind such behavior of Windows XP is hard disk damage or file system corruption. In such circumstances, it becomes essential for you to reformat or reparation the hard disk and to restore lost information from backup. However, if data backup appears to be corrupt or invalid, Data Recovery Tools can recover the lost or inaccessible files.

 

Consider a situation, where you click to shut down your Windows XP system and it shows one of the following symptoms:

 

  • You receive an error message related to a file or service
  • Your computer system stops responding

 

Cause

 

A Windows XP computer shows above behavior due to the following causes:

 

  • Faulty file or service
  • Device driver issues
  • System or program file problems
  • Incorrect CMOS (Complementary Metal Oxide Semiconductor)/BIOS (Basic Input Output System) settings
  • Hard disk or file system damage

 

Solution

 

To solve this problem, you need to take these steps:

 

  • If you receive an error message pertaining to a file or service, you need to follow these methods:

 

1     Check the specific file or service listed under one of the tabs of msconfig.exe (Start > Run > msconfig). You need to turn off this file or service by unchecking it.

2      If you can’t find the file or service listed under msconfig.exe tabs, then it might be the case of improper removal of a program or Windows component. To solve this, you require reinstalling it and then removing it properly using Add or Remove programs tool.

  • If you observe that your computer stops responding whenever you try to shut it down, follow these steps:

 

1     Try to shut down after booting the system using the Safe Mode option

2     If the problem persists, it can be a device driver issue. You can use Device Manager to examine and solve the same.

3     Next, you can use System Restore or Last Known Good Configuration option functionality.

4      If the same problem keeps coming back, try to perform an in-place upgrade of Windows XP that is repair the corrupted Windows installation.

5      Check for one or more improper CMOS/BIOS settings.

6      If you still experience that Windows is getting stuck while shutting down, run chkdsk utility through Recovery Console to determine and correct file system issues. If it fails to fix them, you need to reformat or repartition the hard disk and use your recent data backup to restore the lost data. In case of backup problems, you can use Disk Recovery applications.

7     If chkdsk can’t access the hard disk, contact a Data Recovery company for help as your hard disk might be damaged.

No responses yet

May 19 2009

ATAPI Hard Disk Corruption Issues

Published by admin under Data Recovery

Designed for Windows XP computer hardware logoImage via Wikipedia

ATAPI (Advanced Technology Attachment Packet Interface) is an interface that enables your computer to support optical drives as CD-ROM, tape drives and other similar devices. ATAPI adds to the controlling power of your computer so that the basic IDE interface and controllers can be used for other device types, like CD-ROM and tape drives. But at times, you observe serious hard disk issues while using ATAPI hard disk in Windows XP. The hard disk metadata information gets corrupted. In such situations, you need to use your recent data backup to restore the lost files. However, if you discover that the data backup is not up-to-date or corrupt, you need to scan your hard disk with Data Recovery Tools for salvaging the lost files.

 

As a practical scenario, if you are using an ATAPI hard disk that is larger than 137 GB in size, you might observe one or more of the following symptoms:

 

  • You choose to resume from hibernation and the computer restarts instead
  • You encounter issues while starting, shutting down or restarting your computer
  • You notice hard disk corruption when you choose to enter in hibernation or standby mode
  • You experience problems while running programs and saving or opening documents
  • An unrecoverable Windows error occurs and you experience hard disk damage when Windows writes a memory dump file

 

These issues are specific to Windows XP (Home Edition, Professional, Home Edition SP1 and Table PC Edition).

 

Cause

 

There are two particular reasons for the above issues:

 

  • When ATAPI driver writes memory dump or hibernation files, it doesn’t use 48-bit LBA (Logical Block Addressing)
  •  For a large and  48-bit LBA enabled hard disk, flush cache command is not issued when you enter Windows into standby or hibernation mode

 

Solution

 

To solve the above problems, you can practice the following solutions:

 

  • Use the CHKDSK command to diagnose and repair the hard disk
  • If the problem continues, you can reformat the hard disk and hence refresh all metadata information. You need to use your recent data backup to restore the lost files. When the data backup is damaged or unable to offer required information, you need to use Data Recovery Software. With high-end scanning algorithms, these Data Recovery tools can provide you safe recovery in all logical data loss scenarios.

Reblog this post [with Zemanta]

No responses yet

Apr 28 2009

Missing or Corrupt ntoskrnl.exe file

Published by admin under Data Recovery

In Windows NT based operating systems, ntoskrnl.exe runs as a critical process in the boot-up cycle of your computer. It is the kernel image for operating system and is responsible for system services like memory management, hardware virtualization. ntoskrnl.exe corruption primarily occurs due to operating system malfunctioning, unexpected system shutdown, malicious software like virus (w32.bolzano and variants) and more. Two foremost hazards that you might encounter after corruption of this file can be unbootable computer system and data inaccessibility. In such circumstances, the best way to recover your inaccessible data is by restoring it from an up-to-date backup. However, if no backup is available, then you need to use advanced Data Recovery Software to comprehensively recover your data.

 

In most cases, you might encounter any of the below error messages after ntoskrnl.exe file is either corrupt or missing:

 

“<windows root>
System32\NTOSKRNL.EXE is missing or corrupt”

Or

“Windows NT could not start because the below file is missing or corrupt:

Drive Letter:\WINNT\System32\Ntoskrnl.exe”

 

One of the above error messages can appear during system bootup. To resolve the issue, you will need to recreate ntoskrnl.exe by using these steps:

 

1.      You need to firstly insert the Microsoft Windows XP CD.

2.      Reboot your system. Next, press any key to boot from the CD.

3.      Press R on the Microsoft Windows XP setup screen to enter the Recovery Console.

4.      Enter the administrator password (if any).

5.      Use the following command:

      expand d:\i386\ntoskrnl.ex_ c:\windows\system32

6.      Type Y and then press Enter to overwrite the file.

7.      Type exit to reboot your system.

 

However, if you still receive any of the above error messages, then you will need to go for clean operating system reinstall. A clean reinstall will erase all data from the selected hard drive partition. To comprehensively recover and restore your lost files and folders, you will need to use powerful Data Recovery tools.

 

Such utilities ensure absolute recovery and restoration of data from a formatted hard drive partitions. These utilities use advanced scanning methods to perform absolute Data Recovery. With rich graphical interface and user-friendly documentation, these Data Recovery Software serve as self-explanatory applications.

No responses yet

Apr 20 2009

“UNEXPECTED KERNEL MODE TRAP” Error Message in Windows XP

Published by admin under Data Recovery

In Windows XP operating system, a STOP error can be caused due to various software issues as operating system file corruption, file system damage, driver issues, malicious software like virus or worm infection etc. The STOP errors can also be caused by hardware problems as motherboard chipset failure, faulty memory modules, hard drive problems etc. STOP error results as unbootable operating system and inaccessibility of data. To restore the lost data, you should use an updated data backup. However, if you have not created any backup or backup falls short of providing the required data, you should use efficient Data Recovery tools to recover lost data.

 

Consider a practical example, where you encounter the below STOP error message, when you attempt to boot your Windows XP based computer:

 

“STOP 0×0000007F (UNEXPECTED_KERNEL_MODE_TRAP)”

 

After the error message appears, data saved on the hard disk becomes inaccessible. In addition, you encounter the same error message each time you attempt to restart your system.

 

Cause:

 

The above STOP 0×7F error message occurs when a trap in the Kernel mode is caused by any of the below reasons:

·        Low-level hardware corruption like corrupt Random Access Memory (RAM)

·        Mismatched memory modules

·        A malfunctioning computer motherboard

·        Software corruption like File system damage, Operating system corruption etc.

Resolution:

To resolve the above error and access the data, you should follow these steps:

  • Test the system RAM by running diagnostic software provided by the computer manufacturer. Replace the RAM that is reported as corrupted.
  • In case of motherboard corruption, get the motherboard replaced.
  • If you are overclocking the speed of your processor, set it back to the speed at which it is designed to run.
  • Consult the hardware vendor for any updated hardware drivers and/or BIOS updates.
  • Try swapping or removing controllers, cards or other peripherals from your system.

 

However, if all the above procedures fail to determine the problem and you again receive STOP 0×7F error message, then you should reinstall the Windows XP operating system. A clean reinstall of Windows XP operating system will completely erase all data from the selected partition. For absolute recovery of lost data, you should use powerful Data Recovery Software. These utility software incorporate advanced scanning algorithms to completely recover your lost data from a formatted hard drive. Such Data Recovery tools provide simple user interface that makes them easy-to-understand without sound technical knowledge.

No responses yet

« Prev - Next »