HELP NEEDED and cer...
 
Notifications
Clear all

HELP NEEDED and certainly appreciated

16 Posts
5 Users
0 Likes
1,126 Views
(@geveze)
Posts: 6
Active Member
 

no partition is ok

only 40 Gb of 186GB is deleted and i recovered them with a active undelete

but also aprox 100GB of data has cannot open. I see the data is there. It takes 700MB disk space but still cannot open.

i see MFT recored and i remember scandisk is deleted some numeric files like MFT records. I guess i understand problem well

forget about mpg and jpg files but some txt files MUST to open

as you said i download winhex and cracked it. then using -right click recover- taked a copy of $MFT to a healty partition.

after this?

 
Posted : 18/01/2005 6:30 am
(@gmarshall139)
Posts: 378
Reputable Member
 

If the partition is ok, and you have at least part of your data available, then you must have a functional $mft file. As I said before, you have apparently lost part of your $mft. What you are recovering is only part of the MFT. Putting it in another partition will not do any good. Your text files, if they are very small (under 1kb) would be resident data, they would exist entirely within the master file table.

I wouldn't advise you to try to put the recovered $mft back on the original partition. You may overwrite your healthy mft and loose everything. If you can make a copy then try it on that. I would suggest that you search for and try to recover the files that are important to you.

 
Posted : 18/01/2005 2:32 pm
(@geveze)
Posts: 6
Active Member
 

there is no way to take a image of disk
because its 200GB

only 20GB of data accessible. so taked copy.

how can i merge deleted $mft files into $mft. 200GB has only one partiton.

i remember scandisk is deleted files like 786444,786445 ………

now i see some of my files deleted and moved to found.000 (files aprox 43GB).
meybe deleted $mft's is can there???

 
Posted : 18/01/2005 7:25 pm
(@gmarshall139)
Posts: 378
Reputable Member
 

Unless your very familiar with the mft I don't think you can merge them back together, I'm not aware of any product that will do that either. Even if you were it would be very difficult. As the $mft file grows it becomes fragmented. Embedded within the $MFT is the location on the disk of the continuing extents for the MFT file. It may well be this portion of the MFT file that was damaged, so now it doesn't know where to look for the remainder. You would have to get into the good portion of the MFT file with a hex editor and change or add the pointers to the sector that the recovered mft extent now resides on. It is way beyond what I can describe here. And understand I am only speaking about what is theoretically possible, I have never personally attempted it. You may try searching the microsoft knowledge base. It has probably come up before. Because of all this I restate my suggestion that you focus on recovering the files themselves that are important, rather than rebuilding the mft.

 
Posted : 18/01/2005 8:40 pm
(@collar)
Posts: 2
New Member
 

Hi,

I suppose you can trey really powerful data recovery tools to restore without corrupting data. Among them are Active@ undelete and Uneraser (for DOS). These are awesome soft indeed, as i've ised it before, they never failed or corrupted restored data. That is your real chance, give it a try.

http//www.active-undelete.com/

http//www.uneraser.com/

 
Posted : 02/12/2005 5:15 am
(@youcefb9)
Posts: 38
Eminent Member
 

If you want to recover your images and you have access to the unallocated space where these images were stored, you just need to use a carving tool, like foremost, and the rest is history.

you can get foremost from foundstone.com it's free.

 
Posted : 06/12/2005 11:14 pm
Page 2 / 2
Share: