XP SP3 update catastrophe - data recovery possible?

  • Thread starter Thread starter ToolPackinMama
  • Start date Start date
T

ToolPackinMama

A friend of mine was downloading/applying SP3 and (I was not present and
don't know the details) something went very wrong. When they rebooted,
their computer still functioned but no drivers were loaded and their
programs and documents were apparently lost.

System restore was no help.

Is there a way to recover their documents?
 
ToolPackinMama said:
A friend of mine was downloading/applying SP3 and (I was not
present and don't know the details) something went very wrong.
When they rebooted, their computer still functioned but no drivers
were loaded

How did they get into Windows?
and their programs and documents were apparently lost.

That sounds strange too.
System restore was no help.

Is there a way to recover their documents?

Simple and easy. Just copy it back from the removable media they copied
it to.
 
Jan said:
Have your friend attempt to boot in safe mode by hitting the F8 key on
startup and see if anything new might be available. He might also attempt a
previous Restore Point

Both of those options were tried to no avail. To my horror no restore
points were available, and Safe Mode looks the same as regular mode,
except uglier.
If none of the programs seem to work then your friend might be inclined
to use the XP install disk and try for a Repair Install (not the Repair
using the DOS screen) to get things right again. It may or may not work, but
at this point choices are limited.

I am fixin' to try that now but I don't want to be hasty. Nothing has
been overwritten yet.
If the missing information is very valuable then if it were me I would
go the degree taking out the hard drive and hooking it up to another XP
system as a second hard drive to see if the information could be seen and
recovered.

Yes, I can do that.
 
Dave said:
OK, that makes no sense at all. If you can run system restore, then at
least you can get into windows. Or by saying system restore was no help,
were you saying that your friend couldn't RUN system restore?

There are no restore points. It won't even let us look back one month
to look for any.
If you can run system restore, that right there means that windows is
running OK as an operating system.

It amazingly runs, but as if only the OS is there. The motherboard
drivers (video, ethernet, etc.) aren't installed/recognized.
So either the files are still there and your friend simply forgot where he
saved them, OR

Is this some kind of funky installation where the OS is on one hard drive
and the programs and data are on another? I can see that causing an Oh SHIT
moment if say, your SATA drivers got hosed somehow and windows itself is
running off of an IDE drive.

I will be exploring the drive in a little bit. I brought the thing home
with me.

The thought occurred to me that I could possibly shrink the main
partition, set it inactive and load a clean install to a new second
partition. Would that possibly preserve whatever can be salvaged from
the garbled first partition? I am concerned that resizing the partition
might overwrite salvagable data.
We'd need a lot more information to figure this one out. List the exact
make/model of mainboard and the exact make/model of each and every hard
drive.

Ah, I'll get that info to you a bit later.
Also, does windows run at all?

Yes it does but all that shows up is the bare-naked OS and default
stuff. Documents folder is empty - and it shouldn't be. Office XP is
not there, and it used to be.
 
John said:
Simple and easy. Just copy it back from the removable media they copied
it to.

IF ONLY.

This person knew to save back ups and had some - but they are three
months out of date.

Way to go, huh?
 
ToolPackinMama said:
A friend of mine was downloading/applying SP3 and (I was not present and
don't know the details) something went very wrong. When they rebooted,
their computer still functioned but no drivers were loaded and their
programs and documents were apparently lost.

System restore was no help.

Is there a way to recover their documents?

Writing to the drive(s) with a borked o/s is asking for more trouble,
and altering the partition table fits that description.

A safe way to procede: get a (free) live-CD of some flavor of Linux.
You can boot it from the CD drive and use it to explore the hard
drive(s) and copy data files to removable media (CDRW, pen drive,
etc), or with a little more investment in learning, transfer files
via the network. It runs entirely from RAM and the CD - no writing
to the HD. There's a learning curve, but the investment in time
will support saving anything readable.

Copy off what needs to be saved. Then it's safe to experiment with
rescuing Windows or reinstalling.
 
ToolPackinMama said:
A friend of mine was downloading/applying SP3 and (I was not present and
don't know the details) something went very wrong. When they rebooted,
their computer still functioned but no drivers were loaded and their
programs and documents were apparently lost.

System restore was no help.

Is there a way to recover their documents?

OK, that makes no sense at all. If you can run system restore, then at
least you can get into windows. Or by saying system restore was no help,
were you saying that your friend couldn't RUN system restore?

If you can run system restore, that right there means that windows is
running OK as an operating system. It might not be doing everything you
want it to do, but you can use windows to access files on your hard
drive(s).

So either the files are still there and your friend simply forgot where he
saved them, OR

Is this some kind of funky installation where the OS is on one hard drive
and the programs and data are on another? I can see that causing an Oh SHIT
moment if say, your SATA drivers got hosed somehow and windows itself is
running off of an IDE drive.

We'd need a lot more information to figure this one out. List the exact
make/model of mainboard and the exact make/model of each and every hard
drive. Also, does windows run at all? (I'm assuming it does). If more
than one hard drive, WHAT, exactly, is on each physical disk? (OS, apps,
data, backup files, etc) -Dave
 
Bryce said:
A safe way to procede: get a (free) live-CD of some flavor of Linux.
You can boot it from the CD drive and use it to explore the hard
drive(s) and copy data files to removable media (CDRW, pen drive,
etc)

That is an excellent idea, thanks.
 
Dave said:
What the frick were they doing trying to install a service pack without
completing a data backup first?

Like most people, they are not as savvy as you or I.
 
John said:
That sounds about right, but they seriously need a wake-up call.

No, there was not multiple OSes or multiple partitions or multiple
profiles. It was one partition, with one OS, dedicated entirely to one
profile.
 
Dave said:
Again I'm wondering if you lost a hard drive by losing the driver for the HD
controller.

Well, it's EIDE built into the mainboard. Nothing fancy.
 
ToolPackinMama said:
IF ONLY.

This person knew to save back ups and had some - but they are three
months out of date.

Way to go, huh?

What the frick were they doing trying to install a service pack without
completing a data backup first? The SP install is not likely to ruin any
data, but it is at least somewhat likely to screw up your OS bad enough that
a fresh install might be needed. So it's better to do the backup before the
OS is screwed, obviously. But then hindsight and all... -Dave
 
There are no restore points. It won't even let us look back one month
to look for any.

That is somewhat predictable. A lot of the files that would be needed to do
a restore were over-written. I haven't installed SP3 on XP, but I do
remember a warning on another SP install from Microsoft that clearly stated
that system restore wouldn't be possible after the update.
It amazingly runs, but as if only the OS is there. The motherboard
drivers (video, ethernet, etc.) aren't installed/recognized.

That's just plain bizarre. If what you just wrote is EXACTLY as you report
it, then you MIGHT just need to install all the mainboard drivers to set
this machine right.
I will be exploring the drive in a little bit. I brought the thing home
with me.

The thought occurred to me that I could possibly shrink the main
partition, set it inactive and load a clean install to a new second
partition. Would that possibly preserve whatever can be salvaged from
the garbled first partition? I am concerned that resizing the partition
might overwrite salvagable data.

I'd be concerned about that, also. Don't do it.

Yes it does but all that shows up is the bare-naked OS and default
stuff. Documents folder is empty - and it shouldn't be. Office XP is
not there, and it used to be.

Again I'm wondering if you lost a hard drive by losing the driver for the HD
controller. -Dave
 
OK, here are the specs of the dear old machine:

It's a computer I assembled for a married couple (who are pals o mine)
(4-5?) years ago. In all that time the only thing that went wrong
before now is it needed its original power supply replaced. Other than
that it has been very reliable.

EPOX EP-8RGM31 (socket A) all in one mainboard. Not sure about the CPU
probably a T-bird 1700 or thereabouts. It's an N-force 2 I think.
There is 512 MB of Rosewill PC 3200 RAM in it. A generic FDD, a generic
DVD drive, and a Seagate 75 G. IDE drive - that they never used more
than 15 G. of.

I tried downloading the manual in PDF format from the EPOX web site,
several times, but the connection keeps getting reset.

I took the hard drive out and put it in an external IDE enclosure I had
knocking around, and used my own Windows PC to look at what is visible
on the drive.

I found nothing hidden anywhere. It looks for all the world like a
drive that just had the OS newly installed - nothing but the generic
sample sounds in the music folder, for example. But there are traces of
the disaster - a couple of user-created folders exist, but they are
empty of contents.

Mechanically there seems to be nothing wrong with the computer. It's
just old and not very sexy. But something did go seriously wrong during
that update.

I get the feeling there is more to their story than I was told. But
since they are not one bit tech-savvy, they don't know how to tell me
what they did during the update procedure that botched things so badly.
 
OK, here are the specs of the dear old machine:
It's a computer I assembled for a married couple (who are pals o mine)
(4-5?) years ago. In all that time the only thing that went wrong before
now is it needed its original power supply replaced. Other than that it
has been very reliable.

EPOX EP-8RGM31 (socket A) all in one mainboard. Not sure about the CPU
probably a T-bird 1700 or thereabouts. It's an N-force 2 I think. There
is 512 MB of Rosewill PC 3200 RAM in it. A generic FDD, a generic DVD
drive, and a Seagate 75 G. IDE drive - that they never used more than 15
G. of.

Overall sounds like it should be rock solid. Other than the rosewill RAM.
(What were you thinking???) Ha Ha Seriously, I used to love Epox, one of
my favorite brands of mainboard. Good stuff.
I tried downloading the manual in PDF format from the EPOX web site,
several times, but the connection keeps getting reset.

I don't think the manual for the motherboard is going to help you in this
situation, after I read what else you had to write.
I took the hard drive out and put it in an external IDE enclosure I had
knocking around, and used my own Windows PC to look at what is visible on
the drive.

Nothing wrong with that.
I found nothing hidden anywhere. It looks for all the world like a drive
that just had the OS newly installed - nothing but the generic sample
sounds in the music folder, for example.

How's the saying go? If it walks like a duck...
But there are traces of the disaster - a couple of user-created folders
exist, but they are empty of contents.

How do you figure that's traces of a disaster? Do you see a date on the
folders? When were they created?
Mechanically there seems to be nothing wrong with the computer.

I'd almost be willing to bet my next paycheck that the hardware is OK.
It's
just old and not very sexy. But something did go seriously wrong during
that update.

Not during the update.

I get the feeling there is more to their story than I was told.

Yeah, it's likely the update caused the system to be unbootable, so someone
(possibly thinking they were being helpful!) tried to install Windows by
formatting Drive C:

That's my best guess anyway.
But since they are not one bit tech-savvy, they don't know how to tell me
what they did during the update procedure that botched things so badly.

Serious question...can you CONFIRM that SP3 is installed? I'm betting if
you check, you will find that -Windows- was recently installed. Heck, it
might not even have SP1 on that hard drive.

To me, this sounds like a clear-cut case of Operator Headspace. Not on your
part. On the usual users of the system. Think about this a second...what
are the odds that a service pack install would update OS files and at the
same time delete almost every other file on the hard drive? I like to
insult Microsoft at every possible opportunity but even Microsoft is not
quite THAT incompetent. (YET?)

Dude, there is definitely more to the story than what you were told. And I
bet the users are acting more stupid than they actually are. Go with what
you see. This was a fresh install of Windows on a formatted drive. Maybe
SP3 was (at least attempted) at one point. But that's not what got the hard
drive in the condition it's currently in.

But how you approach this problem now is going to be rather delicate. You
can't go accusing the users of destroying their own hard drive. (they might
be innocent anyway...maybe it was a 'helpful' cousin who happened to be in
the house at the time)

I'd suggest you do your best to search the hard drive for any useful user
files. After that, just finish the install of Windows including all service
packs and put any other software on there that they might use. Try to get
it to a useful state, even though at this point, the user data is probably
gone. -Dave
 
Dave said:
Serious question...can you CONFIRM that SP3 is installed? I'm betting
if you check, you will find that -Windows- was recently installed.

No, but you can tell from the boot splash that it is not just raw XP,
because of the absent copyright date.
Heck, it might not even have SP1 on that hard drive.

To me, this sounds like a clear-cut case of Operator Headspace. Not on
your part. On the usual users of the system. Think about this a
second...what are the odds that a service pack install would update OS
files and at the same time delete almost every other file on the hard
drive?

It does sound impossible. I have never seen such a thing before.
Dude, there is definitely more to the story than what you were told.

Well, after what you said I realized that what must have happened is
some helpful friend other than my own fair self must have tried to
repair the OS - before they had the wits to call me.
But how you approach this problem now is going to be rather delicate.
You can't go accusing the users of destroying their own hard drive.
(they might be innocent anyway...maybe it was a 'helpful' cousin who
happened to be in the house at the time)

Yeah... yeah.
I'd suggest you do your best to search the hard drive for any useful
user files.

Oh, I searched and searched, already. Ain't no findin'.
After that, just finish the install of Windows including
all service packs and put any other software on there that they might
use.

Yeah, they already authorized me to do that, but I was wanting to be a
bigger hero. :/

Thanks for your thoughts.
 
ToolPackinMama said:
EPOX EP-8RGM31 (socket A) all in one mainboard. Not sure about the CPU
probably a T-bird 1700 or thereabouts.

OK the CPU (for those who still care) is an AMD Athlon XP 3200 with a
standard retail pack heatsink/fan.

This has been a sturdily reliable little desktop. I just reformatted
and reloaded XP (and SP3), and it runs like a rabbit.

Don't be dissin' the cheap Rosewill RAM, LOL, it works great!

They got their money's worth out of it. I have to warn them to prepare
to buy a new computer, though, cos nothing lasts forever.
 
ToolPackinMama said:
Well, after what you said I realized that what must have happened is some
helpful friend other than my own fair self must have tried to repair the
OS - before they had the wits to call me.

I've got a buddy of mine with a computer I built for him. He found another
one of his friends likes to work on computers too, so now when he has a
problem, the other friend breaks it a little more before he ends up asking
me for help.

Jon
 
Back
Top