New
#91
I'll do it and ill be careful :)
Recover data from a diskpart > clean command
-
-
New #92
First it gave me an error which I suppose is due to my disk being USB connected. Then it showed the results almost within seconds. Pasting the screens below.
-
New #93
That is bad news. Backup boot sector is also seems to be wiped and that is why "TestDisk" and "Partition Wizard" deep scans failed to detect a partition. To my knowledge, undeleting the partition is impossible at this point. However the NTFS MFT will be hopefully there without damage. Most of the data recovery tools will be able to recover files with original names and folder structure.
Let's examine whether DMDE can reconstruct the file system. Please follow the below steps.
1. Press the NTFS search button. On the next window, choose "Search".
2. DMDE will now search for a valid NTFS file system. You will see a a window similar to the below example with progress shown in the bottom.
This will be a sector by sector search so will take time to complete. After it completes, take a screenshot and upload with the next reply. Also use the "Save" button and save the search result in a local folder with a name of your choice.
-
New #94
If it finds the $MFT mirror it can reconstruct the original $MFT. Afterwards you can regenerate the boot sector and backup bootsector from the MFT. Testdisk can do that!
-
New #95
To add to what has already been decided (that the screenshot of Sector 2048 in post #85 is not a NTFS/Volume Boot Record/Partition Boot Record) here is how a normal NTFS record will show in Bootice . This is just by way of information to all those interested and following this thread.Supplements Kaktussoft's post#86 with a real life sector map.
NTFS Flag 4E 54 46 53 MBR Boot Record Signature: 55 AA
-
New #96
Theoretically it is possible but for this to work a partition entry with correct values is required. I am still experimenting all possibilities by virtually recreating a damaged partition. Let's check whether DMDE can find the MFT entries and recreate the partition structure.If it finds the $MFT mirror it can reconstruct the original $MFT. Afterwards you can regenerate the boot sector and backup bootsector from the MFT. Testdisk can do that!
@lonewolfs
If DMDE found a valid entry after search completes, first save the search result, take snapshot and then click on "Open Volume". Then check whether your original folder structure can be seen like in the below example.
Make sure to not open the volume until the search finishes.Last edited by Anshad Edavana; 25 Jun 2014 at 14:23.
-
New #97
Hi Anshad, Jumanji and everyone
Sorry it took sometime for me to finish the scan but here it is ...
Please advice me on how to go ahead
-
New #98
I opened the volume as it said the first one NTFS 0 in my previous post and this one exactly has my the directory structure I intend to recover. Also having kept a lot of patience I am really glad to see the directory structure back :)
Once more sorry for the late response and I won't do anything in haste right now and wait for your instructions. This is very important that I recover this data :)
Pasting a snapshot below... and thanks a lot for all the help.
-
New #99
Great. I really appreciate your patience and willingness to follow instructions :).
Yes, it is possible to recover the partition as DMDE confirmed the start sector as 63. Basically what we are going to do is ;
1. Rebuild partition table with found values.
2. Rebuild NTFS Boot sector and backup boot sector.
3. Use CHKDSK to fix the damage caused by DISKPART ( zeroed 1985 sectors between LBA63 and LBA2048 - these sectors may probably contain Index allocation info ).
I would say 90% chance for success and 10% chance for partiality data corruption. If you are ready to take the risk, i will post step by step instructions.
-
Quote
Related Discussions