6

The first 7GB of a 500GB NTFS partiton was accidentally overwritten with another file. Is it possible to recover some of the data in the remaining 493 GB of the NTFS volume? The partition table is intact. The executed command was:

dd if=file of=/dev/sdc1

Thanks

Edit: My question is different. I overwrite first 7GB of NTFS partition. Other question mostly deals with hardware failures or bad sectors.

coolman
  • 231

3 Answers3

7

SOLUTION: None of suggested solutions worked for my case. I partly solved my problem with RecuperaBit. RecuperaBit could recover a lot of small files, including important ones. But it failed to recover big (bigger than 1 GB) files.

In my opinion, only RecuperaBit solution should be advised such (beginning of NTFS volume overwritten) cases.

Thanks to everyone answered and tried to find a solution for me.

coolman
  • 231
2

On linux you can recover all the files in the not overwritten part with https://help.ubuntu.com/community/DataRecovery/NtfsUndelete

There are also similar tools for windows.

Very important is, that you do not write anymore to the disk, also restore the files to another disk. Otherwise you limit your chances of success.

edlerd
  • 176
1

You would have to use a program like TestDisk to undelete files from your NTFS partition. EDIT: Although if you have a native program installed, as mentioned by edlerd, you may want to go with that instead

It's hard to say what data will or won't be available to you, but as long as you didn't overwrite all of it, I think you should be able to find some stuff.

Disclaimer: I haven't used TestDisk myself. It was the first result when I Googled "linux tool recover deleted partition". I have used similar tools in the past, however - you may want to shop around and see which you trust the most/find the most comfortable to use.

thegrapesoda
  • 116
  • 3