Corrupt Partition / MBR Virus / Windows deleted Linux partition?
I recently ran into something I have never seen before on a friend's machine for whom I am doing a favor. Years ago I installed Ubuntu to dual boot alongside the pre-existing Windows 7 install. The disk looked something like this beforehand (I copied the data into a small spreadsheet) (sector size = 512 bytes):
A few days ago I'm told that Windows was showing signs of degredation in performance, and suddenly, Ubuntu could not boot. When I try to boot Ubuntu, grub complains: "no such partition" and drops me into the grub shell. I'm almost 100% confident no updated were applied by Ubuntu recently; whatever happened, happened while using Windows, was caused by a Windows update, or some malware in Windows. But which? But I digress...
The partitions table now looks very odd:
Anyone ever seen this? Any suggestions for a course of action before I potentially wreck this partition table? What might cause logical partitions to vanish and the other partitions to shif?
I'm tempted to just overwrite with my backup of the MBR and first 63 sectors. Although I just read up a little on extended partitions and I didn't know they're stored in the first sector before the partition they describe, so I don't have a backup copy of the 2 logical partitions, but presumably they still exist and if they don't am I hosed?
Thank you all in advance.
You should probably take a new copy of the boot sector as backup .. then maybe you could try testdisk and see if it can repair the partition table.
First of all was wins 7 the original Os or was it an upgrade from winsxp/vista to wins7?
Was this a Wubi install?
I myself would assume that it was originally winsxp, because of the PQ Service partition.
The PQ Service partition & System Reserved partitions are common on Acer Machines. What I find odd about your system is that the MBR is listed as it's own partition. Not only that but starting at 51 & ending at 50.
It seems to me someone started a factory restore.
I say this because Ive done a factory restore on the Acer which is in my signature & I'm presently responding to this post on.
Anyway as long as the that I was restoring to had data on it, it wouldn't complete the transaction.
I would say that you need to fix wins MBR.
|All times are GMT -5. The time now is 10:41 PM.|