Computer hard disk is reinstalled system resulting in partition loss, multiple partitions become one large partition. Can the original partition data be recovered? Can the system disk be overwritten many times and the data can still be recovered? Today to share a case, the hard disk model is ST1000DM010, the customer is a laboratory of Zhejiang University, when installing the system, it is not clear what causes multiple partitions to become a large partition, and other partitions are all lost.
After making a mirror backup, manually find the original partition: First jump to the last position of the hard disk sector, and first press the NTFS partition ID to find it. We look for the backup of DBR or EBR from the back to the front, and after finding the backup, we judge the starting position according to the partition size and the end of the partition of the record, so that we can quickly find the original three primary partitions.
We enter these partition parameters into the software and load it virtually. The first partition because the user installed the system twice, it must not be opened, the data must be destroyed. After the second and third partitions are loaded virtually, the partitions are opened directly, and the data is all there. In this way, all partitions of the customer except the system disk are recovered.
But the solution of this failure is not over, the customer sent to repair before their own use of partition tools to try to restore, said that it is less than a few experimental data folder, we detected and judged that the second, third partition of the MFT directory is complete, and the original disk to do mirror backup when there is no bad block, so the loss of data is most likely in the first partition is overwritten and destroyed, later we according to the information provided by the customer in the original first partition to find MFT fragments, successfully found and extracted to restore, At this point, the whole data recovery process is perfectly concluded.