cgsecurity.org

I am trying to recover my Win 7 64-bit system. Please see below:
Partition table type (auto): Intel
Disk \\.\PhysicalDrive0 - 240 GB / 223 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive0 - 240 GB / 223 GiB - CHS 29185 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 * HPFS - NTFS 0 32 33 29185 80 63 468860080
1 * HPFS - NTFS 0 32 33 29185 80 63 468860080

search_part()
Disk \\.\PhysicalDrive0 - 240 GB / 223 GiB - CHS 29185 255 63

Results

interface_write()

No partition found or selected for recovery

So I have figured out that the bootable SSD has now been converted from NTFS to RAW. I believe that I need to recreate the MFT and MBR? Can someone confirm this approach and direct me to the best way to accomplish this? I have TestDisk and PartedMagic to work with....Thanks in advance for any assistance!

Did you use testdisk 64bit?
The 32bit version is recommended.
Also I recommend to select Disk instead of PhysicalDrive.
Can you run testdisk / Advanced / Boot and upload a snapshot?
If your boot sector and its backup are both bad, you can run a RebuildBS.
If it was successful, you can use the menu List to have a try to list your files.
Have you been able to list your files?

Fiona

When I use the 32-bit version, I get something about unknown sub-system. So back to using the 64-bit version I have also selected the Disk and was not successful at RebuildingBS. The Advanced Search is not showing any files either Any other thoughts?

I get something about unknown sub-system.

I've no idea what OS do you currently use?
A genuine 64bit OS has no 32bit virtual machine like WoW64.
For example, if you're running windows on an Itanium machine.
Can you run TestDisk Deeper Search?
I've only the result of Quick Search.
After Analyse / Quick Search and at the results pressing enter will take you to the menu Write, where you can find Deeper Search.
Deeper Search searches additional for a backup of the boot sector and displays the partition for recovery.
You also should have a try to list your files by selecting the found partition and pressing p.
On NTFS partitions, the backup of the boot sector is the last sector of the partition.
So the scan may take some time.

Fiona

Fiona - thanks for the responses. The O/S is (was) Windows 7 64-bit Utl. on a 240GB SSD. I'll try your other suggestions now.

One other thing, I have been booting from a USB formatted with Pindrives universal USB installer, that loads a Win 7-64-bit ISO and also has testdisk copied to it. Is there a better starting point for my situation?

I'm using Knoppix as a LiveCD.
On Knoppix I've created a bootable USB flash drive.
The size of the flashdrive is 64 GB.
I've used 9 GB for Knoppix and created an overlay out of the remained available space for copying data.
During automatically flash drive creation, Knoppix will ask how much space for an overlay should be used.
A smaller flash drive would be ok too.
On programs / Knoppix, you can run a root terminal/console.
To get administrator privileges (superuser), you can type:
sudo -s
testdisk
It starts testdisk and you can work with.
It's only a suggestion.

Fiona

Fiona - I have tried Knoppix, win 7-64 and 32 bit, and a gparted bootable USB. I ran the quick and deeper searches with no data found from all of them. I have also tried to rebuild the BS with no success either. I was only able to obtain the testdisk log from the Win-32 testdisk and have attached it. Please advise what to attempt next....Thank you.

Here is the log file from the Win7-64bit. Looks to be more readable too.