LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (http://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   NTFS File Sytem Recovery after mke2fs (http://www.linuxquestions.org/questions/linux-newbie-8/ntfs-file-sytem-recovery-after-mke2fs-832899/)

Mandarim 09-17-2010 04:13 PM

NTFS File Sytem Recovery after mke2fs
 
Hello guys, first Time posting and I didnt find any better category..

PLEASE HELP

By mistake I did mke2fs to my Windows NTFS Particion
To my understanding It has Modified the inodes only,
Can I recover somehow the NTFS inodes?, I lost everything and I know the things are there.

I've tryed particion recover, but that's not the problem, the particion is there, and it's NTFS, but the filesystem isnt

Does anyone know how to undo this!!!

Thank you!

xeleema 09-17-2010 10:12 PM

Greetingz!

There's only one way I can think of that *might* work;

1) First make sure the partition type is set correctly. Use 'fdisk' to check/set the "ID".
You should have something that looks like this;
Code:

[root@linuxbox ~]# fdisk -l /dev/hda

Disk /dev/hda: 200.0 GB, 200049647616 bytes
255 heads, 63 sectors/track, 24321 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes

  Device Boot      Start        End      Blocks  Id  System
/dev/hda1  *          1          13      102400    7  HPFS/NTFS
/dev/hda2              13      24322  195256320    7  HPFS/NTFS
[root@linuxbox ~]#

2) Then try to use a data recovery tool (like Media Recovery) to get any data out of the partition(s).
After that, reformat the drive and reinstall the Windows Operating system.

NOTE: Notice how I said "data", not "Programs" or "Registry Settings" or "The Operating System". The drive is effectively trashed, nothing short of a full format and restore from backups will restore it to "like new" status.

tommcd 09-17-2010 11:10 PM

A System Rescue CD could also possibly recover your data. It could also reformat your Windows partition for you after you recover your data:
http://www.sysresccd.org/Main_Page

prayag_pjs 09-17-2010 11:16 PM

Hi,

Try some recovery softwares like power data recovery.It helped me few months back.

Mandarim 09-18-2010 04:46 AM

Here's my output from fdisk:

Disk /dev/sda: 300.1 GB, 300090728448 bytes
255 heads, 63 sectors/track, 36483 cylinders
Units = cylinders of 16065 * 512 = 8225280 bytes
Disk identifier: 0xeb9deb9d

Device Boot Start End Blocks Id System
/dev/sda1 * 1 33911 272384000 7 HPFS/NTFS
/dev/sda2 33912 36483 20659590 5 Extended
/dev/sda5 33912 35253 10779583+ 83 Linux
/dev/sda6 35254 35399 1172713+ 82 Linux swap / Solaris
/dev/sda7 35400 36483 8707198+ 83 Linux


And now here's the output from testdisk:
Disk /dev/sda - 300 GB / 279 GiB - CHS 36483 255 63
Partition Start End Size in sectors
1 * HPFS - NTFS 0 32 33 33910 93 39 544768000

Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Big problem, I've tried Active @ Boot cd which have Active @ partition recover, Active @ Undelete, etc... And I thinking of delete the partition and try to recover, not sure though...

Thanks for your quick reply, I Will keep posting results
More ideas anyone?

syg00 09-18-2010 05:07 AM

Quote:

Originally Posted by Mandarim (Post 4101047)
By mistake I did mke2fs to my Windows NTFS Particion
To my understanding It has Modified the inodes only,
Can I recover somehow the NTFS inodes?, I lost everything and I know the things are there.

It isn't simply a matter of "inodes only".
The people who make testdisk also do photorec - a file scraper (not just photos). Supports NTFS, but in truth I've never had a lot of luck with NTFS recovery.
I hope you do better.

Need I mention my sigline ... ?.

Mandarim 09-18-2010 08:56 AM

Ok, I'm recovering all data with photorec, it's going to take a while and so long directory structure and file names... :(
After this I'll give more shots on recovering i-nodes, seems imposible though since I've no image or log of any kind.

Thank you for reply, I'll keep you posted

Is there anymore I can do?
I feel terrible, It took 2 min to ruin all my data, witch it's steel there, AGHRRRRRR

Peculiar problem
Does some know if NTFS keep a file on disk with that structure (MFT)?

Mandarim 09-18-2010 11:48 PM

With a windows live cd and GETDATABACK for NTSF I manage to recover almost everything, with directory structure and proper names. :D I'm so happy

Thank you all

xeleema 09-19-2010 02:15 AM

Really?
That's *awesome*! Any links you could provide would be really appreciated!
Also, if you could mark this as [SOLVED] that would let others know there's a fix for this.
Have a good one!

Mandarim 09-19-2010 08:07 AM

OK so I used a winXP Live CD I had at home, I think VistaEP work as well
Then I used GETDATABACK NTSF PORTABLE, here is the torrent link:

http://dl.btjunkie.org/torrent/GetDa...wnload.torrent

Use this apliccation on your external hard drive, if you use a pen drive your external hdd will not read, at least my didnt.
And through options setect extended search (or something like that), a matching partition size and START - END will appear after you scan.

And that's it!

Got all my data!!!! weeeeeee

From format you cant run though...

rozen 05-09-2011 06:17 AM

recover data after corruption in file system
 
Data loss is the normal problem for computer user. But if you want to restore deleted files and folders then you have to recover all data. Now you can recover data either by manual methods or by using recovery software. But manual methods are for those who are technically sound person so if you are not technically skilled then you must use recovery software to recover data from fat or ntfs file system without any loss. For more information visit: keep spam away from LQ!


All times are GMT -5. The time now is 05:23 PM.