I'm trying to recover data from a hdd for a friend from work. He was using it on an old win98 PC (so I guess it was a FAT 16 filesystem). When he installed the drive on a new PC his Windows XP can't recognize the filesystem and give an error message saying that the drive is unformatted.
I tried to mount the hdd under linux but no partitions appear to be associated with the drive (I have only /dev/sdb associated with that drive and no /dev/sdb1 or sdb2 etc).
I've found many articles on the web on how to recover partitions (with scripts like dd and ddrescue) but how do I make it when I have no partitions and the system say my drive is unpartioned?
Is it possible to create a new partition without loosing the data?
you might want to give photorec and testdisk a run - i've seen them recover data and entire file systems under similar circumstances
I have a 500GB hard drive I've been keeping around to recover data from that I removed from a failing NAS drive that got sort of... erratic at the end. I finally got rid of the NAS when during a firmware update it removed the partition table.
Fast forward to a week ago, when I was building a new PC, and a mixup resulted in me placing the hard drive in question in the new PC and installing Windows XP on the first 100GB. I'm presuming any data on that first 100GB is now gone, but for the rest of it, is there any way I can recover it at home, as professional data recovery is currently too expensive?
I have a blank 1TB HDD if I can store any images of that hard drive on. The problem was definitely with the NAS and not the hard drive, as the hard drive had a successful install of Windows when mistakenly place in the new PC, and there were capacitors in the NAS's circuitry clearly broken.
The data I want to recover (in order of priority) is:
(I don't need a backup lecture, and if you can hold it in from nagging Jeff Atwood for it, you can hold it in from nagging me for it)
You can use PhotoRec in this situation. It's a free application that scans your harddrive for file headers and tries to recover as many files possible. I've had luck restoring documents and photos from harddrives where the partition table got messed up and other file recovery apps failed.
A default Windows install shouldn't be more than about 10GB (even on Vista), so there's reasonable odds that some of your data is still there. The best software I've used for this kind of thing is Runtime's GetDataBack for NTFS. It has an option to recover files from sustained filesystem damage, such as reinstalling an OS on top.
Put the drive into another machine, and run a scan with that, and see how much stuff it shows up. I think there are trials for GetDataBack, but the full version is only $80, which isn't an extortionate price for your data.
i recommend WinHex, certainly one of the best program available in the realm of computer forensics (if not THE best). if it's just 'file recovery' you need, the 'lite' version, called Davory, will suffice, it is using the same technology. both programs are able to recover data from formatted drives, even if partially overwritten. the personal license for Davory costs €33 or $48.
just make sure to select the physical disc and not any of the newly created partitions from the drive selection menu.
Winhex saved my bacon countless times!
The easiest thing would be to use a software tool to recover the files. I've used Active@ Partition Recovery and Restorer 2000.
A nice thing about the data recovery tools like these is that you can try them to see what the software finds before buying them.
If you absolutely know how the disk was previously partitioned, for example because you made a disk image of it a couple years ago, you may be able to use a Linux live CD to boot the system and then use fdisk to rewrite the partition table. With the parition table restored, other data recovery tools may work better.