I don't really know how Photorec works, but I believe it relies on the MFT (not sure, but I think I tested Photorec as well - without successful recoveries).
What I did - I checked the beginning of each cluster (4KB size) and looked for the the magic bytes for .gz, .tgz and .iso files (the only ...
Search found 3 matches
- 10 May 2022, 13:48
- Forum: Filesystem repair
- Topic: NTFS MFTs (both!) gone - Recovery possible?
- Replies: 5
- Views: 8831
- 20 Apr 2022, 08:12
- Forum: Filesystem repair
- Topic: NTFS MFTs (both!) gone - Recovery possible?
- Replies: 5
- Views: 8831
Re: NTFS MFTs (both!) gone - Recovery possible?
Hi.
Thanks for the answers.
chkdsk failed after seconds! No way to get any info/data get from the drive using that tool. This sounds logical to me since it takes its info from one of the MFTs, which are both gone.
However meanwhile, I got the data back. All data, that is 300 GB! Except 5 files ...
Thanks for the answers.
chkdsk failed after seconds! No way to get any info/data get from the drive using that tool. This sounds logical to me since it takes its info from one of the MFTs, which are both gone.
However meanwhile, I got the data back. All data, that is 300 GB! Except 5 files ...
- 14 Apr 2022, 11:11
- Forum: Filesystem repair
- Topic: NTFS MFTs (both!) gone - Recovery possible?
- Replies: 5
- Views: 8831
NTFS MFTs (both!) gone - Recovery possible?
Hi.
The disk:
- External using USB bay
- Size 300 GB
- 1 NTFS partition (no hidden partition)
- Encrypted with TC back in 2008
- Password and keyfile are present - partition mounts correctly
- I did a dd image to experiment
The problem:
After mounting. the partition, I see checked the 2 MFTs ...
The disk:
- External using USB bay
- Size 300 GB
- 1 NTFS partition (no hidden partition)
- Encrypted with TC back in 2008
- Password and keyfile are present - partition mounts correctly
- I did a dd image to experiment
The problem:
After mounting. the partition, I see checked the 2 MFTs ...