Retrieving FAT32 partition from an unallocated portion of an external HD [on hold]
Clash Royale CLAN TAG#URR8PPP
up vote
0
down vote
favorite
I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it reformatted the whole drive, creating a 30MB FAT16 partition at the beginning, as well as a mountable 600+MB partition, that can't be viewed in gparted for some reason, and an unallocated partition for the rest of the 320GB of the drive. I have tried to run commands such as gpart and TestDisk with no desirable, but promising results, they have identified a 10GB NTFS partition that existed in the drive alongside the targeted FAT32, but not the FAT32 partition itself. This other partition didn't have any relevant data, but it had folders which were retrieved with the same name as they had, with system files on them.
I'm currently backing up the drive into divided 2GB .img files, which I believe may take 2-4 more hours.
partition data-recovery ntfs external-hdd fat32
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
asked Aug 8 '15 at 17:19
miguel nunes
41
put on hold as unclear what you're asking by Rui F Ribeiro, RalfFriedl, Isaac, G-Man, 200_success 2 days ago
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
add a comment |
up vote
0
down vote
favorite
I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it reformatted the whole drive, creating a 30MB FAT16 partition at the beginning, as well as a mountable 600+MB partition, that can't be viewed in gparted for some reason, and an unallocated partition for the rest of the 320GB of the drive. I have tried to run commands such as gpart and TestDisk with no desirable, but promising results, they have identified a 10GB NTFS partition that existed in the drive alongside the targeted FAT32, but not the FAT32 partition itself. This other partition didn't have any relevant data, but it had folders which were retrieved with the same name as they had, with system files on them.
I'm currently backing up the drive into divided 2GB .img files, which I believe may take 2-4 more hours.
partition data-recovery ntfs external-hdd fat32
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
asked Aug 8 '15 at 17:19
miguel nunes
41
put on hold as unclear what you're asking by Rui F Ribeiro, RalfFriedl, Isaac, G-Man, 200_success 2 days ago
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
1
If you already tried Testdisk, try using Photorec, it is more focused on recovering data from disks with damaged or deleted partition tables. Doing this right is anything but easy and quick, sad to say. This link is a great tutorial on the use of Testdisk and Photorec, I would say these tools are your best bet for recovering some of what you lost. Be patient, your data is still on the disk, only the partition tables were changed, some recovery can be done with patience and alot of effort. dedoimedo.com/computers/linux-data-recovery.html
– nomad.rc
Aug 8 '15 at 17:33
@nomad.rc When you say 'some' are you putting it on the safe side, or do you mean it's likely that some of the data is irrecoverable? Thanks for the link, I'll see what I can do.
– miguel nunes
Aug 8 '15 at 17:50
@nomad.rc What is a partition table, anyway? Is it a hidden file on the drive that is the first layer of what is read by an OS? Could there be a way to trick my computer to believe that the FAT32 partition is really there, and that the information it has that the region is unallocated is actually wrong? I'm running Photorec, and it seems to be extracting lots of files. My computer is extremely slow right now, as a result. Its only problem seems to be that it doesn't keep the file paths, but hey, it's better than nothing.
– miguel nunes
Aug 8 '15 at 18:38
1
Based on what you wrote, I suspect that you used theddcommand backwards, the program used your external drive as the destination for your live usb/cd image file, when you wanted the usb stick to be the destination drive. So your previous partition table is lost. Some, most, or all of the previous data on your external hd could have been overwritten by the accident withdd. That's what Testdisk and Photorec are for, but how much, if any, you can recover, depends entirely on what disk sectors were overwritten with new data. See what you can get from Photorec, that's your best bet imo.
– nomad.rc
Aug 9 '15 at 5:40
You overwrote the first 630MB+ of the drive. The FAT for a 320GB disk using 4KB clusters will be 320MB. (The math seems to work out very simply :-). So I think you have overwritten the primary FAT and backup FAT copy pretty much entirely (they are stored one after another) andphotorecis all you can do.
– sourcejedi
Nov 17 at 1:30
add a comment |
up vote
0
down vote
favorite
up vote
0
down vote
favorite
I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it reformatted the whole drive, creating a 30MB FAT16 partition at the beginning, as well as a mountable 600+MB partition, that can't be viewed in gparted for some reason, and an unallocated partition for the rest of the 320GB of the drive. I have tried to run commands such as gpart and TestDisk with no desirable, but promising results, they have identified a 10GB NTFS partition that existed in the drive alongside the targeted FAT32, but not the FAT32 partition itself. This other partition didn't have any relevant data, but it had folders which were retrieved with the same name as they had, with system files on them.
I'm currently backing up the drive into divided 2GB .img files, which I believe may take 2-4 more hours.
partition data-recovery ntfs external-hdd fat32
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
asked Aug 8 '15 at 17:19
miguel nunes
41
I was going to create a liveusb out of my external HD, as indicated in the archwiki, using the dd command, except I didn't know what the result of the command would be. I then realized that it reformatted the whole drive, creating a 30MB FAT16 partition at the beginning, as well as a mountable 600+MB partition, that can't be viewed in gparted for some reason, and an unallocated partition for the rest of the 320GB of the drive. I have tried to run commands such as gpart and TestDisk with no desirable, but promising results, they have identified a 10GB NTFS partition that existed in the drive alongside the targeted FAT32, but not the FAT32 partition itself. This other partition didn't have any relevant data, but it had folders which were retrieved with the same name as they had, with system files on them.
I'm currently backing up the drive into divided 2GB .img files, which I believe may take 2-4 more hours.
partition data-recovery ntfs external-hdd fat32
partition data-recovery ntfs external-hdd fat32
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
asked Aug 8 '15 at 17:19
miguel nunes
41
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
asked Aug 8 '15 at 17:19
miguel nunes
41
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
edited Nov 16 at 2:06
Rui F Ribeiro
38.2k1475123
38.2k1475123
asked Aug 8 '15 at 17:19
miguel nunes
41
asked Aug 8 '15 at 17:19
miguel nunes
41
asked Aug 8 '15 at 17:19
miguel nunes
41
41
put on hold as unclear what you're asking by Rui F Ribeiro, RalfFriedl, Isaac, G-Man, 200_success 2 days ago
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
put on hold as unclear what you're asking by Rui F Ribeiro, RalfFriedl, Isaac, G-Man, 200_success 2 days ago
Please clarify your specific problem or add additional details to highlight exactly what you need. As it's currently written, it’s hard to tell exactly what you're asking. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.
1
If you already tried Testdisk, try using Photorec, it is more focused on recovering data from disks with damaged or deleted partition tables. Doing this right is anything but easy and quick, sad to say. This link is a great tutorial on the use of Testdisk and Photorec, I would say these tools are your best bet for recovering some of what you lost. Be patient, your data is still on the disk, only the partition tables were changed, some recovery can be done with patience and alot of effort. dedoimedo.com/computers/linux-data-recovery.html
– nomad.rc
Aug 8 '15 at 17:33
@nomad.rc When you say 'some' are you putting it on the safe side, or do you mean it's likely that some of the data is irrecoverable? Thanks for the link, I'll see what I can do.
– miguel nunes
Aug 8 '15 at 17:50
@nomad.rc What is a partition table, anyway? Is it a hidden file on the drive that is the first layer of what is read by an OS? Could there be a way to trick my computer to believe that the FAT32 partition is really there, and that the information it has that the region is unallocated is actually wrong? I'm running Photorec, and it seems to be extracting lots of files. My computer is extremely slow right now, as a result. Its only problem seems to be that it doesn't keep the file paths, but hey, it's better than nothing.
– miguel nunes
Aug 8 '15 at 18:38
1
Based on what you wrote, I suspect that you used theddcommand backwards, the program used your external drive as the destination for your live usb/cd image file, when you wanted the usb stick to be the destination drive. So your previous partition table is lost. Some, most, or all of the previous data on your external hd could have been overwritten by the accident withdd. That's what Testdisk and Photorec are for, but how much, if any, you can recover, depends entirely on what disk sectors were overwritten with new data. See what you can get from Photorec, that's your best bet imo.
– nomad.rc
Aug 9 '15 at 5:40
You overwrote the first 630MB+ of the drive. The FAT for a 320GB disk using 4KB clusters will be 320MB. (The math seems to work out very simply :-). So I think you have overwritten the primary FAT and backup FAT copy pretty much entirely (they are stored one after another) andphotorecis all you can do.
– sourcejedi
Nov 17 at 1:30
add a comment |
1
If you already tried Testdisk, try using Photorec, it is more focused on recovering data from disks with damaged or deleted partition tables. Doing this right is anything but easy and quick, sad to say. This link is a great tutorial on the use of Testdisk and Photorec, I would say these tools are your best bet for recovering some of what you lost. Be patient, your data is still on the disk, only the partition tables were changed, some recovery can be done with patience and alot of effort. dedoimedo.com/computers/linux-data-recovery.html
– nomad.rc
Aug 8 '15 at 17:33
@nomad.rc When you say 'some' are you putting it on the safe side, or do you mean it's likely that some of the data is irrecoverable? Thanks for the link, I'll see what I can do.
– miguel nunes
Aug 8 '15 at 17:50
@nomad.rc What is a partition table, anyway? Is it a hidden file on the drive that is the first layer of what is read by an OS? Could there be a way to trick my computer to believe that the FAT32 partition is really there, and that the information it has that the region is unallocated is actually wrong? I'm running Photorec, and it seems to be extracting lots of files. My computer is extremely slow right now, as a result. Its only problem seems to be that it doesn't keep the file paths, but hey, it's better than nothing.
– miguel nunes
Aug 8 '15 at 18:38
1
Based on what you wrote, I suspect that you used theddcommand backwards, the program used your external drive as the destination for your live usb/cd image file, when you wanted the usb stick to be the destination drive. So your previous partition table is lost. Some, most, or all of the previous data on your external hd could have been overwritten by the accident withdd. That's what Testdisk and Photorec are for, but how much, if any, you can recover, depends entirely on what disk sectors were overwritten with new data. See what you can get from Photorec, that's your best bet imo.
– nomad.rc
Aug 9 '15 at 5:40
You overwrote the first 630MB+ of the drive. The FAT for a 320GB disk using 4KB clusters will be 320MB. (The math seems to work out very simply :-). So I think you have overwritten the primary FAT and backup FAT copy pretty much entirely (they are stored one after another) andphotorecis all you can do.
– sourcejedi
Nov 17 at 1:30
1
1
If you already tried Testdisk, try using Photorec, it is more focused on recovering data from disks with damaged or deleted partition tables. Doing this right is anything but easy and quick, sad to say. This link is a great tutorial on the use of Testdisk and Photorec, I would say these tools are your best bet for recovering some of what you lost. Be patient, your data is still on the disk, only the partition tables were changed, some recovery can be done with patience and alot of effort. dedoimedo.com/computers/linux-data-recovery.html
– nomad.rc
Aug 8 '15 at 17:33
If you already tried Testdisk, try using Photorec, it is more focused on recovering data from disks with damaged or deleted partition tables. Doing this right is anything but easy and quick, sad to say. This link is a great tutorial on the use of Testdisk and Photorec, I would say these tools are your best bet for recovering some of what you lost. Be patient, your data is still on the disk, only the partition tables were changed, some recovery can be done with patience and alot of effort. dedoimedo.com/computers/linux-data-recovery.html
– nomad.rc
Aug 8 '15 at 17:33
@nomad.rc When you say 'some' are you putting it on the safe side, or do you mean it's likely that some of the data is irrecoverable? Thanks for the link, I'll see what I can do.
– miguel nunes
Aug 8 '15 at 17:50
@nomad.rc When you say 'some' are you putting it on the safe side, or do you mean it's likely that some of the data is irrecoverable? Thanks for the link, I'll see what I can do.
– miguel nunes
Aug 8 '15 at 17:50
@nomad.rc What is a partition table, anyway? Is it a hidden file on the drive that is the first layer of what is read by an OS? Could there be a way to trick my computer to believe that the FAT32 partition is really there, and that the information it has that the region is unallocated is actually wrong? I'm running Photorec, and it seems to be extracting lots of files. My computer is extremely slow right now, as a result. Its only problem seems to be that it doesn't keep the file paths, but hey, it's better than nothing.
– miguel nunes
Aug 8 '15 at 18:38
@nomad.rc What is a partition table, anyway? Is it a hidden file on the drive that is the first layer of what is read by an OS? Could there be a way to trick my computer to believe that the FAT32 partition is really there, and that the information it has that the region is unallocated is actually wrong? I'm running Photorec, and it seems to be extracting lots of files. My computer is extremely slow right now, as a result. Its only problem seems to be that it doesn't keep the file paths, but hey, it's better than nothing.
– miguel nunes
Aug 8 '15 at 18:38
1
1
Based on what you wrote, I suspect that you used the
dd command backwards, the program used your external drive as the destination for your live usb/cd image file, when you wanted the usb stick to be the destination drive. So your previous partition table is lost. Some, most, or all of the previous data on your external hd could have been overwritten by the accident with dd. That's what Testdisk and Photorec are for, but how much, if any, you can recover, depends entirely on what disk sectors were overwritten with new data. See what you can get from Photorec, that's your best bet imo.– nomad.rc
Aug 9 '15 at 5:40
Based on what you wrote, I suspect that you used the
dd command backwards, the program used your external drive as the destination for your live usb/cd image file, when you wanted the usb stick to be the destination drive. So your previous partition table is lost. Some, most, or all of the previous data on your external hd could have been overwritten by the accident with dd. That's what Testdisk and Photorec are for, but how much, if any, you can recover, depends entirely on what disk sectors were overwritten with new data. See what you can get from Photorec, that's your best bet imo.– nomad.rc
Aug 9 '15 at 5:40
You overwrote the first 630MB+ of the drive. The FAT for a 320GB disk using 4KB clusters will be 320MB. (The math seems to work out very simply :-). So I think you have overwritten the primary FAT and backup FAT copy pretty much entirely (they are stored one after another) and
photorec is all you can do.– sourcejedi
Nov 17 at 1:30
You overwrote the first 630MB+ of the drive. The FAT for a 320GB disk using 4KB clusters will be 320MB. (The math seems to work out very simply :-). So I think you have overwritten the primary FAT and backup FAT copy pretty much entirely (they are stored one after another) and
photorec is all you can do.– sourcejedi
Nov 17 at 1:30
add a comment |
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
active
oldest
votes
1
If you already tried Testdisk, try using Photorec, it is more focused on recovering data from disks with damaged or deleted partition tables. Doing this right is anything but easy and quick, sad to say. This link is a great tutorial on the use of Testdisk and Photorec, I would say these tools are your best bet for recovering some of what you lost. Be patient, your data is still on the disk, only the partition tables were changed, some recovery can be done with patience and alot of effort. dedoimedo.com/computers/linux-data-recovery.html
– nomad.rc
Aug 8 '15 at 17:33
@nomad.rc When you say 'some' are you putting it on the safe side, or do you mean it's likely that some of the data is irrecoverable? Thanks for the link, I'll see what I can do.
– miguel nunes
Aug 8 '15 at 17:50
@nomad.rc What is a partition table, anyway? Is it a hidden file on the drive that is the first layer of what is read by an OS? Could there be a way to trick my computer to believe that the FAT32 partition is really there, and that the information it has that the region is unallocated is actually wrong? I'm running Photorec, and it seems to be extracting lots of files. My computer is extremely slow right now, as a result. Its only problem seems to be that it doesn't keep the file paths, but hey, it's better than nothing.
– miguel nunes
Aug 8 '15 at 18:38
1
Based on what you wrote, I suspect that you used the
ddcommand backwards, the program used your external drive as the destination for your live usb/cd image file, when you wanted the usb stick to be the destination drive. So your previous partition table is lost. Some, most, or all of the previous data on your external hd could have been overwritten by the accident withdd. That's what Testdisk and Photorec are for, but how much, if any, you can recover, depends entirely on what disk sectors were overwritten with new data. See what you can get from Photorec, that's your best bet imo.– nomad.rc
Aug 9 '15 at 5:40
You overwrote the first 630MB+ of the drive. The FAT for a 320GB disk using 4KB clusters will be 320MB. (The math seems to work out very simply :-). So I think you have overwritten the primary FAT and backup FAT copy pretty much entirely (they are stored one after another) and
photorecis all you can do.– sourcejedi
Nov 17 at 1:30