Recover RAW to NTFS

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Post Reply
Message
Author
Heurazio
Posts: 3
Joined: 23 Apr 2020, 10:14

Recover RAW to NTFS

#1 Post by Heurazio »

Hi,

a few days ago one of my hard drives crashed when my PC got a BSOD. After this, the drive (originally NTFS is listed as RAW). Because the drive contains important information, I 'm uncertain how to continue.

I already did the analysis and tried a "Deeper Search" (this took multiple days and did not slightly finish). I know for sure the drive only contained two portions (one "Windows Reserved" and the data partition).

When looking into the analysis, I can see there are three portions:

Image

The #2 is the original NTFS partition. When looking into the file structure in the analysis ("p") I can't see any file.

My questions:
  • Why are there two #1?
    Is MS Reserved a correct type?
    How can I restore the filetype (NTFS) on #2?
    If the deeper search is not working because the disk is to big, how can I resolve the problem?
Best regards,
Heurazio

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 5305
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recover RAW to NTFS

#2 Post by cgrenier »

Please read the chapter about repairing filesystem in https://www.cgsecurity.org/testdisk.pdf and tell us what you have tried.

Heurazio
Posts: 3
Joined: 23 Apr 2020, 10:14

Re: Recover RAW to NTFS

#3 Post by Heurazio »

Hi,

I tried checkdisk with the result:

german/english:
Der Typ des Dateisystems ist NTFS.
Version und Status des Volumes konnten nicht festgestellt werden. CHKDSK wurde abgebrochen.
The type of the filesystem is NTFS. Version and status of the volume could not be determined. CHKDSK was canceled.
I also tried to repair the bootsektor using testdisk but both bootsektors (main and backup) are status "OK".

I tried to rebuild the Bootsektor but it's also running into an infinite loop (as you can see, the boarders are exceeded)

Image

Heurazio
Posts: 3
Joined: 23 Apr 2020, 10:14

Re: Recover RAW to NTFS

#4 Post by Heurazio »

When I try to repair the MFT I get:

Image

Post Reply