Repair ntfs, overwritten by win32diskimager

Using TestDisk to repair the filesystem
Post Reply
Message
Author
stephan1975
Posts: 2
Joined: 03 Dec 2015, 14:37
Location: Pfarrkirchen, Rottal-Inn

Repair ntfs, overwritten by win32diskimager

#1 Post by stephan1975 » 04 Dec 2015, 10:15

Hi folks,

I hope some of you might be able to help me. Two days ago I accidentially wrote a raspbmc-image to my portable hdd instead of an sd-card. The hdd, which originally was formatted in ntfs, now shows the following structure:

*FAT16 >32M 0 130 3 7 165 30 114688 (boot)
P Linux 7 165 31 398 97 19 6277120
D HPFS - NTFS 25169 141 61 35612 162 6 167768064
D HPFS - NTFS 25251 69 35 35694 89 43 167768064


Entering the filelist of the ntfs partition shows that the filesystem is not readable, it might be corrupted.

Is there anything I can do? Or is the hdd beyond repair?

Any help is appreciated!

Best regards

Stephan

Sponsored links

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Repair ntfs, overwritten by win32diskimager

#2 Post by Fiona » 06 Dec 2015, 10:44

When you wrote into your NTFS-partition and file system, some files and folder structure can be overriden and your file system could be damaged.
When you didn´t write any data into your file system, please let me know.
Otherwise, only Datarecovery software could help reading underlying data.
Did you try PhotoRec?
http://www.cgsecurity.org/wiki/PhotoRec
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

Fiona

stephan1975
Posts: 2
Joined: 03 Dec 2015, 14:37
Location: Pfarrkirchen, Rottal-Inn

Re: Repair ntfs, overwritten by win32diskimager

#3 Post by stephan1975 » 06 Dec 2015, 11:26

Dear Fiona,

thank you very much for answering my request. No, I didn't do anything to the files themselves. No more active file actions were done to the hdd in the meantime.

Yes, I've tried photorec - even several times. Only if "Keep damaged files" in options is set to "Yes", there is a return of files - all of them, but they're all garbled. They're saved in "inode" folders. Unfortunately, they're not readable. I've tried it with different blocksizes, also with the blocksize of 4k. Maybe I should try some other values?

In the meantime, I've managed to restore the partition table. It doesn't change a lot, the partitions themselves are still as I've listed them in my first post.

Best regards

Stephan

Post Reply

Who is online

Users browsing this forum: No registered users and 3 guests