NTFS datageddon. He...
 

  You don't need to be an 'investor' to invest in Singletrack: 6 days left: 95% of target - Find out more

[Closed] NTFS datageddon. Help appreciated.

12 Posts
7 Users
0 Reactions
50 Views
Posts: 7887
Free Member
Topic starter
 

So, turns out that you shouldn't drink and compute.

Having run many various Linux apps to make a bootable USB stick, all of which have had a massive flashing warning that they're going to hose your device's Partition, I managed to breeze past the equivalent warning on the W10 USB Media Creator....

I pointed it at one of my HDD's, thinking it would save the downloaded file there and then I would abort the process before it did a format. NOPE.

I now have a single 32GB partition showing and the rest is unformatted. 3.43GB is used, and 900-odd GB is Unallocated.

[img] [/img]

So-far, I have tried a Recuva session, however it is only looking within the allocated space, so finds nothing.

[img] [/img]

This data was my "Other Video/Downloads" drive, containing mostly things like Blackadder, Red Dwarf and GoT, so it's not the end of the world.

It was not backed-up as it didn't fit on the backup drive. I allowed this because the backup HDD was too full with versions and backups of the other data, OS, Movies etc.

Doesn't mean I don't want the data back if it's possible.

The way I see it, 4GB is hosed and probably most of the rest is OK....[i] if[/i] I can recover it. There's probably enough space on the other drives, if I share the recovered data out manually between them.

So...errr, [i]help?[/i]

What software can I point at the unallocated space? Or should I resize the partition back to the full drive volume and then use Recuva etc?

Since seeing the mistake, I have not written anything to the drive, obvs.


 
Posted : 06/05/2017 6:32 am
Posts: 6071
Free Member
 

I've had good results [url= http://gparted.org/livecd.php ]with GParted[/url] for various partition tasks. I AM NOT AN EXPERT and I don't know how well it'll do in your circumstances

It can be used [url= http://gparted.org/display-doc.php?name=help-manual#gparted-attempt-data-rescue ]to attempt data rescue[/url] (did I mention, IANAE)


 
Posted : 06/05/2017 8:10 am
Posts: 356
Full Member
 

you should be able to use testdisk to recover the old partition table.

The steps are all detailed here: [url= http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step#Partition_table_recovery ]TestDisk recovery[/url]

it's a powerful bit of kit; so be careful 🙂


 
Posted : 06/05/2017 9:29 am
 xora
Posts: 950
Full Member
 

Another vote for TestDisk, if that can't find the partition and repair the filesystem your probably gubbed and you'll end up running PhotoRec to find photos/videos.


 
Posted : 06/05/2017 9:39 am
Posts: 7887
Free Member
Topic starter
 

Hi,

I'm guessing the new partition table will have overwritten the old one, but all of the above are looking useful. Never noticed gparted could be used like that.

Hmmm....

(and thanks everyone)


 
Posted : 06/05/2017 9:45 am
Posts: 356
Full Member
 

testdisk should be able to find the signatures of the old partition even if the backup partition table has been modified ... fingers crossed !


 
Posted : 06/05/2017 10:54 am
Posts: 25815
Full Member
 

Odd that - I did something similarly stoopid the other day (SDD failed but I forgot that it wasn't showing up any more and so merrily deleted the partition on the top-showing drive when I started the reinstallation - that'll be all my data then)

Googled and saw that gparted might work but the page I found seemed complicated and didn't actually say that the content would be retained. I was in a rush (course, I could've used the back up copies but didn't really have time to create a time-machine and set that up 😳 ) and a bit scared so I paid for minitools partition wizard

Worked fine, but £30 stupidity tax


 
Posted : 06/05/2017 11:12 am
Posts: 25815
Full Member
 

(should add - I had deleted the partition but NOT reformatted the drive)


 
Posted : 06/05/2017 11:28 am
Posts: 7887
Free Member
Topic starter
 

Hmmm.

So far neither photorec nor testdisk have found any trace of the files, or the previous filesystem despite appearing to scan the entire drive, cylinder by cylinder. This is downright odd.

I'm pretty busy at the minute, but will provide some more info when I am back in front of the machine.

Getting tempted to expand the partition and set Recuva onto the case.... Though that will doubtless damage more files.


 
Posted : 10/05/2017 6:31 am
Posts: 7887
Free Member
Topic starter
 

Bugger-all.

I have no idea what the installer did(!!!), but nothing remains. Maybe it's offset the position of the allocation table, or summit, nothing's readable except an old linux swap. Certainly no NTFS.

Even tried Recuva and partition resize....not a dickybird.

*gets the Mint installer ready*


 
Posted : 11/05/2017 8:28 pm
Posts: 77347
Free Member
 

Sorry, I've only just seen this.

You're doing all the right things but NTFS isn't FAT, it's b-tree based. I'd hazard that recovering this will be like trying to plait sand.


 
Posted : 11/05/2017 8:45 pm
Posts: 7887
Free Member
Topic starter
 

It's OK lad, I'll just have to get some more stuff to watch 🙂

Only downside is I also planned to strip the machine, every single heatsink and regrease CPU, IOH, PCH, MOSFETs and both GPUs about now as well!

May take some time before that's done, then onto organising the data that's left, fixing the fact that one of my HDD's is still pointing at the SSD (hence a random extra boot delay and why I haven're submitted my start>STW score on the other thread)...

Then installing Mint and W10 again...like the good ol' days.

Should keep me busy 😉


 
Posted : 11/05/2017 9:09 pm
Posts: 15068
Full Member
 

Drinking and computing is bad.
I trashed a motherboard when refitting a cpu. Ruined the socket as I bent one pin by dropping the CPU right onto the pins in the socket.

I then attempted to straight the pin and bent loads more in the process. And managed to get thermal grease all over the place.

That was a £120 mistake.

I wonder if there's a porno neich for this. I could make serious money!
[img] [/img]


 
Posted : 11/05/2017 9:49 pm

6 DAYS LEFT
We are currently at 95% of our target!