Windows 10: Recovering partially zeroed-out NTFS partition?

I "accidentally" (right command, sadly wrong partition) zeroed-out the first 5GB of a 2TB harddisk using dd (linux). The partition is used as a "data-partition" for Windows10 (D: drive), using the entire disk. It's formatted in NTFS. Though mostly data, there are some programs (mostly games) installed there too. The partition has been regularly de-fragmented.

Although what was overwritten is hopelessly lost, I'd like to recover as much as possible of what remains - including fragments of partially overwritten files. Also replacing destroyed directories, so orphaned files can be added. First and foremost though, I need to get the NTFS filetable "re-synced" with what remains on the disk. If I remember correctly, the NTFS filetable is located towards the middle of the partition, and thus should be undamaged. It would also be very helpful to get a list of all completely and partially overwritten files and directories.

So what should I do? Which tools are available? (Preferably free, as I don't intend to make a habit out of this... ;-) What should be my workflow? Any good tips? Any good tutorials?

(I must admit I'm more comfortable with Linux than Windows, and thus prefer Linux-tools... But since this is NTFS, I suppose it's impossible not to use Windows-tools.)

submitted by /u/koppe74
[link] [comments]

:)

 

Corrupted NTFS Partition Table

I have a 160GB drive that for some reason or another has a corrupted NTFS partition table.

The NTFS partition (about 129GB) is inaccessible, (I get an error message stating that I need to format the drive inorder to use it.) and the remaining free space is in RAW format. For some reason the normal tools will not recognize the original NTFS partition and I cannot repair/recover the partition.

Can anyone recommend any tools that they've used to repair/recover NTFS partition information?

Part of me is thinking of just formatting the drive and then trying to recover what I can through recovery software.

Any idea's?

 

Move Win7 64 image from a partition NTFS to a new drive

EDIT: After reading your first post again, is there any reason that you would now need GPT? Are you just trying to move the windows install to a new disk or is there a new motherboard involved?

If you are already booting to an NTFS partition, then it makes me wonder if after copying to the new drive, the partition isn't getting marked as Active.

Following the same steps I posted above for startup repair, you can get to a command prompt and use diskpart to see if this is the case.

Code: In the command prompt: diskpart list disk select disk 0 (disk number may be different if you have other disks connected.) list partition select partition 0 (partition number number may vary, but you want to see the boot partition which is the same as your windows partition according to the screenshot on the OP) detail partition (This should have Active: Yes or No. If it says no, since we have the partition selected, you can just use the following command in diskpart) active[/quote]

 

How do you recover a deleted partition on a hard drive?

Try this, it works... it is open source...
TestDisk, Data Recovery

Quote from site: