Time Machine nuked external
Posted: 04 Aug 2015, 14:07
So my friend just gave me this 1TB WD Passport.
It was plugged into a Mac and apparently the Mac thought it was ok to reformat the NTFS drive into HFS+ and start using it for Time Machine. She yanked it ASAP but it seems to have written 20-30 odd MiBs of stuff.
I think I'm stuck using photorec and starting over but I want to give testdisk a shot.
I've been trying both the analyse and advanced menus. http://www.cgsecurity.org/wiki/Data_Rec ... _partition
But I can't seem to get anything useful. http://dpaste.com/1RR90NW
It does talk about NTFS farther down. Is this enough to rebuild the MBR (or GPT, I'm not even sure what WD ships on these drives)
Any hints would be great.
It was plugged into a Mac and apparently the Mac thought it was ok to reformat the NTFS drive into HFS+ and start using it for Time Machine. She yanked it ASAP but it seems to have written 20-30 odd MiBs of stuff.
I think I'm stuck using photorec and starting over but I want to give testdisk a shot.
I've been trying both the analyse and advanced menus. http://www.cgsecurity.org/wiki/Data_Rec ... _partition
But I can't seem to get anything useful. http://dpaste.com/1RR90NW
It does talk about NTFS farther down. Is this enough to rebuild the MBR (or GPT, I'm not even sure what WD ships on these drives)
Code: Select all
MS Data 567622795 567628968 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 567628968 567635141 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 617457435 617463608 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 617463608 617469781 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 617988947 617995120 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 617995120 618001293 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB