NTFS partition - first 512MB overwritten

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
pysiak
Posts: 1
Joined: 26 Mar 2017, 11:11

NTFS partition - first 512MB overwritten

#1 Post by pysiak »

Hi, I'm looking for hints on recovering a disk. Situation is:
1. USB Disk was NTFS formatted for ~1TB
2. I accidentally flashed an image designated for an SD card onto the disk
3. This means the boot sector, MBR, partition table, and first 512MB were overwritten on the NTFS.
4. This also means, the rest of the data, including $MFTMirr is there. (GetDataBack demo is able to recover data using $MFTMirr)
5. But I want to fix the Partition table and primary MFT *ON* the disk as I don't have another 1TB disk and it also is a more exciting thing to attempt.
6. The partition table contains a small FAT16 from that SD image.

How to recreate the partition table and MFT from MFTMIRR. I realize the first 512MB of the disk will be crap, but I feel it's possible to do in-place.

Thanks in advance!
Pysiak

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: NTFS partition - first 512MB overwritten

#2 Post by cgrenier »

Run TestDisk, Analyse, Quick Search, Stop, Deeper Search.
Set the NTFS partition to recover as *(bootable) or P(rimary). On next screen, choose Wite, confirm, BackupBS, confirm, Quit and restart your computer.

Locked