Ccleaner Erased partition recovery : HELP

sap17 · May 29, 2012, 6:24am

I have a machine which is running windows 7 64 bit ultimate edition.It has two partitions with the second partition acting as the backup. Both are located on the same physical drive of 1 TB Seagate. I accidentally ran the wipe option for the second partition with the option to wipe all. Though I terminated the operation within a few seconds now the partition is being reflected as RAW in the windows disk management. When I try to access it windows prompts me to format the partition. I ran partition minitool to recover partition and it is showing the files to be intact. Is there some way I can get the partition to be active without losing the Data stored on it? I am sanguine of an early response. I am at email address removed by moderator to avoid member being spammed

Alan_B · May 29, 2012, 8:12am

Minitool Partition Wizard can make your backup Active.

BUT you CANNOT do anything like that without seriously crippling the ability of Windows to Boot up.

By default Win 7 has a 100 MB Boot partition with no drive letter, and THIS should be active,

and the main system partition C:\ follows that.and cannot be active without crippling the Boot Partition.

Your backup partition (whatever that might be) is NOT part of Win 7.

When You used Minitool and it showed you the files :-

did you complete all the actions to select the beginning and end of the original partition ?

Was the "Apply" icon active and did you click and commit and did it all happen ?

Was a drive letter allocated ?

Can Windows Explorer see that partition and the files within ?

What actually makes you think further actions are needed.

I strongly suggest that you post screen shots of what you are doing.

N.B. Years ago I downloaded a Boot CD ISO from the Minitool site.

A year or so later my Laptop failed to boot and the Boot CD showed me my HDD had no partitions,

but the Recovery Wizard then located all the boundaries of where partitions once existed,

and after perhaps an hour all 6 partitions were back and Windows was running again.

sap17 · May 30, 2012, 4:46am

Dear Alan, I have accidentally run the wipe drive option After that the partition is being reflected as raw. The complete data is there and can be viewed using minitool partition recovery software. It has helped me in recovering the data too in an unorganized manner with the filenames changed. Now one of the options is to format the partition and start reusing it which I do not want to do. I think the wipe action has deleted some boot table. Is there some way to restore it? I cancelled the action within a few seconds after realizing my mistake. Operating System is windows 7 64 bit ultimate edition, HDD is Seagate 1 TB , Intel I5 2500k Processor and asus p8z68v motherboard with 4 gb 1666Mhz Corsair ram. I tried Running testdisk 6.14 but a small window opens up saying that test disk has stopped and windows is checking for the problem. Moreover I disabled the anti virus and tried again but the same result. However the C Drive and a 100 MB windows system partition are fine and the computer is running fine. Solicit your assistanceNo I used Test Disk the one under the link x64 as I have a windows 7 64 bit edition running. I extracted all the files through winrar in a folder named Testdisk on the C:\ Drive of the Machine. Then I right clicked and clicked on the Command "Run as Administrator". A window like the one you get when you open command prompt Flashes for a second and then vanishes on its own. I would not know where I am going wrong. I ran a program HxD and the sectors which have got erased are Sector 839075013 definitely as it has all 00. In fact the Values end at the end of Sector 839074950. The next sector ie 839074951 has all its values as 00. Then the Data i.e. figures in sector start at 840853829. Thus the total number of erased sectors are 17,78,879. So it roughly amounts to approx. 10 seconds of wiping. I have been able to recover bulk of the Data through a recovery software called partition mini tool which did a raw recovery and has recovered almost all files. However the names of the files have been serially listed and the all the jpeg files are in one folder. Same for the Mpeg, Mov, word filesetc and the names have been altered to read 1,2,3 etc. The results obtained by running Sectinspector are as listed below. Hope this helps.

--------------

Date and time:

28-May-12

20:20

--------------

Date and time:

29-May-12

14:50

0001.033

Sector Inspector Copyright Microsoft Corporation 2003

===========================================================================

Target - \\.\PHYSICALDRIVE0

121601 Cylinders

255 Heads

63 Sectors Per Track

512 BytesPerSector

12 MediaType

===========================================================================

Master Boot Record

===========================================================================

| B | FS TYPE | START | END | | |

| F | (hex) | C H S| C H S| RELATIVE | TOTAL |

===========================================================================

| * | 07 | 0 32 33| 12 223 19| 2048| 204800|

| | 07 | 12 223 20|1023 254 63| 206848| 838866054|

| | 0f |1023 254 63|1023 254 63| 839074950| 1114445115|

| | 00 | 0 0 0| 0 0 0| 0| 0|

===========================================================================

Disk Signature 0x3cd88b72

Partition #1 NTFS backup boot sector at LBN 206847.

Partition #2 NTFS backup boot sector at LBN 839072901.

LBN 0 [C 0, H 0, S 1]

0x0000 33 c0 8e d0 bc 00 7c 8e-c0 8e d8 be 00 7c bf 00 3ÀŽÐ¼.|ŽÀŽØ¾.|¿.

0x0010 06 b9 00 02 fc f3 a4 50-68 1c 06 cb fb b9 04 00 .¹..üó¤Ph .Ëû¹..

0x0020 bd be 07 80 7e 00 00 7c-0b 0f 85 0e 01 83 c5 10 ½¾.€~..|..…..ƒÅ

0x0030 e2 f1 cd 18 88 56 00 55-c6 46 11 05 c6 46 10 00 âñÍ ˆV.UÆF .ÆF .

0x0040 b4 41 bb aa 55 cd 13 5d-72 0f 81 fb 55 aa 75 09 ´A»ªUÍ ]r. ûUªu.

0x0050 f7 c1 01 00 74 03 fe 46-10 66 60 80 7e 10 00 74 ÷Á..t.þF f`€~ .t

0x0060 26 66 68 00 00 00 00 66-ff 76 08 68 00 00 68 00 &fh....fÿv.h..h.

0x0070 7c 68 01 00 68 10 00 b4-42 8a 56 00 8b f4 cd 13 |h..h .´BŠV.‹ôÍ

0x0080 9f 83 c4 10 9e eb 14 b8-01 02 bb 00 7c 8a 56 00 ŸƒÄ žë ¸..».|ŠV.

0x0090 8a 76 01 8a 4e 02 8a 6e-03 cd 13 66 61 73 1c fe Šv.ŠN.Šn.Í fas þ

0x00a0 4e 11 75 0c 80 7e 00 80-0f 84 8a 00 b2 80 eb 84 N u.€~.€.„Š.²€ë„

0x00b0 55 32 e4 8a 56 00 cd 13-5d eb 9e 81 3e fe 7d 55 U2äŠV.Í ]ëž >þ}U

0x00c0 aa 75 6e ff 76 00 e8 8d-00 75 17 fa b0 d1 e6 64 ªunÿv.è .u ú°Ñæd

0x00d0 e8 83 00 b0 df e6 60 e8-7c 00 b0 ff e6 64 e8 75 èƒ.°ßæ`è|.°ÿædèu

0x00e0 00 fb b8 00 bb cd 1a 66-23 c0 75 3b 66 81 fb 54 .û¸.»Í f#Àu;f ûT

0x00f0 43 50 41 75 32 81 f9 02-01 72 2c 66 68 07 bb 00 CPAu2 ù..r,fh.».

0x0100 00 66 68 00 02 00 00 66-68 08 00 00 00 66 53 66 .fh....fh....fSf

0x0110 53 66 55 66 68 00 00 00-00 66 68 00 7c 00 00 66 SfUfh....fh.|..f

0x0120 61 68 00 00 07 cd 1a 5a-32 f6 ea 00 7c 00 00 cd ah...Í Z2öê.|..Í

0x0130 18 a0 b7 07 eb 08 a0 b6-07 eb 03 a0 b5 07 32 e4 ·.ë. ¶.ë. µ.2ä

0x0140 05 00 07 8b f0 ac 3c 00-74 09 bb 07 00 b4 0e cd ...‹ð¬<.t.»..´.Í

0x0150 10 eb f2 f4 eb fd 2b c9-e4 64 eb 00 24 02 e0 f8 ëòôëý+Éädë.$.àø

0x0160 24 02 c3 49 6e 76 61 6c-69 64 20 70 61 72 74 69 $.ÃInvalid parti

0x0170 74 69 6f 6e 20 74 61 62-6c 65 00 45 72 72 6f 72 tion table.Error

0x0180 20 6c 6f 61 64 69 6e 67-20 6f 70 65 72 61 74 69 loading operati

0x0190 6e 67 20 73 79 73 74 65-6d 00 4d 69 73 73 69 6e ng system.Missin

0x01a0 67 20 6f 70 65 72 61 74-69 6e 67 20 73 79 73 74 g operating syst

0x01b0 65 6d 00 00 00 63 7b 9a-72 8b d8 3c 00 00 80 20 em...c{šr‹Ø<..€

0x01c0 21 00 07 df 13 0c 00 08-00 00 00 20 03 00 00 df !..ß ...... ...ß

0x01d0 14 0c 07 fe ff ff 00 28-03 00 86 14 00 32 00 fe ..þÿÿ.(..† .2.þ

0x01e0 ff ff 0f fe ff ff 86 44-03 32 3b 15 6d 42 00 00 ÿÿ.þÿÿ†D.2; mB..

0x01f0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 55 aa ..............Uª

---------------------------------------------------------------------------

Primary Partition 1

NTFS BIOS Parameter Block Information

BytesPerSector : 512

Sectors Per Cluster : 8

ReservedSectors : 0

Fats : 0

RootEntries : 0

Small Sectors : 0 ( 0 MB )

Media Type : 248 ( 0xf8 )

SectorsPerFat : 0

SectorsPerTrack : 63

Heads : 255

Hidden Sectors : 2048

Large Sectors : 0 ( 0 MB )

ClustersPerFRS : 246

Clust/IndxAllocBuf : 1

NumberSectors : 204799 ( 99.9995 MB )

MftStartLcn : 8533

Mft2StartLcn : 2

SerialNumber : 15761000687620749003

Checksum : 0 (0x0)

---------------------------------------------------------------------------

LBN 2048 [C 0, H 32, S 33]

0x0000 eb 52 90 4e 54 46 53 20-20 20 20 00 02 08 00 00 ëR NTFS .....

0x0010 00 00 00 00 00 f8 00 00-3f 00 ff 00 00 08 00 00 .....ø..?.ÿ.....

0x0020 00 00 00 00 80 00 80 00-ff 1f 03 00 00 00 00 00 ....€.€.ÿ ......

0x0030 55 21 00 00 00 00 00 00-02 00 00 00 00 00 00 00 U!..............

0x0040 f6 00 00 00 01 00 00 00-cb 76 52 ba 9e 52 ba da ö.......ËvRºžRºÚ

0x0050 00 00 00 00 fa 33 c0 8e-d0 bc 00 7c fb 68 c0 07 ....ú3ÀŽÐ¼.|ûhÀ.

0x0060 1f 1e 68 66 00 cb 88 16-0e 00 66 81 3e 03 00 4e hf.Ëˆ ..f >..N

0x0070 54 46 53 75 15 b4 41 bb-aa 55 cd 13 72 0c 81 fb TFSu ´A»ªUÍ r. û

0x0080 55 aa 75 06 f7 c1 01 00-75 03 e9 dd 00 1e 83 ec Uªu.÷Á..u.éÝ. ƒì

0x0090 18 68 1a 00 b4 48 8a 16-0e 00 8b f4 16 1f cd 13 h .´HŠ ..‹ô Í

0x00a0 9f 83 c4 18 9e 58 1f 72-e1 3b 06 0b 00 75 db a3 ŸƒÄ žX rá;...uÛ£

0x00b0 0f 00 c1 2e 0f 00 04 1e-5a 33 db b9 00 20 2b c8 ..Á.... Z3Û¹. +È

0x00c0 66 ff 06 11 00 03 16 0f-00 8e c2 ff 06 16 00 e8 fÿ. .. ..ŽÂÿ. .è

0x00d0 4b 00 2b c8 77 ef b8 00-bb cd 1a 66 23 c0 75 2d K.+Èwï¸.»Í f#Àu-

0x00e0 66 81 fb 54 43 50 41 75-24 81 f9 02 01 72 1e 16 f ûTCPAu$ ù..r

0x00f0 68 07 bb 16 68 70 0e 16-68 09 00 66 53 66 53 66 h.» hp. h..fSfSf

0x0100 55 16 16 16 68 b8 01 66-61 0e 07 cd 1a 33 c0 bf U h¸.fa..Í 3À¿

0x0110 28 10 b9 d8 0f fc f3 aa-e9 5f 01 90 90 66 60 1e ( ¹Ø.üóªé_. f`

0x0120 06 66 a1 11 00 66 03 06-1c 00 1e 66 68 00 00 00 .f¡ .f.. . fh...

0x0130 00 66 50 06 53 68 01 00-68 10 00 b4 42 8a 16 0e .fP.Sh..h .´BŠ .

0x0140 00 16 1f 8b f4 cd 13 66-59 5b 5a 66 59 66 59 1f . ‹ôÍ fY[ZfYfY

0x0150 0f 82 16 00 66 ff 06 11-00 03 16 0f 00 8e c2 ff .‚ .fÿ. .. ..ŽÂÿ

0x0160 0e 16 00 75 bc 07 1f 66-61 c3 a0 f8 01 e8 09 00 . .u¼. faÃ ø.è..

0x0170 a0 fb 01 e8 03 00 f4 eb-fd b4 01 8b f0 ac 3c 00 û.è..ôëý´.‹ð¬<.

0x0180 74 09 b4 0e bb 07 00 cd-10 eb f2 c3 0d 0a 41 20 t.´.»..Í ëòÃ..A

0x0190 64 69 73 6b 20 72 65 61-64 20 65 72 72 6f 72 20 disk read error

0x01a0 6f 63 63 75 72 72 65 64-00 0d 0a 42 4f 4f 54 4d occurred...BOOTM

0x01b0 47 52 20 69 73 20 6d 69-73 73 69 6e 67 00 0d 0a GR is missing...

0x01c0 42 4f 4f 54 4d 47 52 20-69 73 20 63 6f 6d 70 72 BOOTMGR is compr

0x01d0 65 73 73 65 64 00 0d 0a-50 72 65 73 73 20 43 74 essed...Press Ct

0x01e0 72 6c 2b 41 6c 74 2b 44-65 6c 20 74 6f 20 72 65 rl+Alt+Del to re

0x01f0 73 74 61 72 74 0d 0a 00-8c a9 be d6 00 00 55 aa start...Œ©¾Ö..Uª

---------------------------------------------------------------------------

Primary Partition 2

NTFS BIOS Parameter Block Information

BytesPerSector : 512

Sectors Per Cluster : 8

ReservedSectors : 0

Fats : 0

RootEntries : 0

Small Sectors : 0 ( 0 MB )

Media Type : 248 ( 0xf8 )

SectorsPerFat : 0

SectorsPerTrack : 63

Heads : 255

Hidden Sectors : 206848

Large Sectors : 0 ( 0 MB )

ClustersPerFRS : 246

Clust/IndxAllocBuf : 1

NumberSectors : 838866053 ( 409603 MB )

MftStartLcn : 786432

Mft2StartLcn : 2

SerialNumber : 15591678983522308804

Checksum : 0 (0x0)

---------------------------------------------------------------------------

LBN 206848 [C 12, H 223, S 20]

0x0000 eb 52 90 4e 54 46 53 20-20 20 20 00 02 08 00 00 ëR NTFS .....

0x0010 00 00 00 00 00 f8 00 00-3f 00 ff 00 00 28 03 00 .....ø..?.ÿ..(..

0x0020 00 00 00 00 80 00 80 00-85 14 00 32 00 00 00 00 ....€.€.… .2....

0x0030 00 00 0c 00 00 00 00 00-02 00 00 00 00 00 00 00 ................

0x0040 f6 00 00 00 01 00 00 00-c4 52 c5 60 6d c5 60 d8 ö.......ÄRÅ`mÅ`Ø