Jump to content

energydream2007

Member
  • Posts

    29
  • Joined

  • Last visited

  • Donations

    0.00 USD 
  • Country

    Israel

Everything posted by energydream2007

  1. and If whatever you used is the correspondent to "-FWRITE", the first and last million sectors in your hard disk should be 00's. 1,000,000x512=512,000,000 bytes at the beginning and at the end of the disk should be 00's. Basically if you had a single whole partition on the disk you have "lost" all the initial part and all the end part, this includes the MBR, the PBR and the PBR mirror (besides some initial data). Since I presume that the drive was partitioned in a single, biggish, NTFS partition, it is very likely that the $MFT has not been overwritten. Open the disk in a disk editor (suggested Tiny Hexer): http://reboot.pro/8734/ and try checking sector # 6,291,519 (786432*8+63) compare with: If the $MFT is found, it is possible that we can manually recreate the filesystem (at least enough to run a chkdsk on it or however get the files together with the filenames). You need to make an image of the disk "as is", before starting fiddling with it, you will need another hard disk bigger than 320 Gb (or however 320 Gb free on any hard disk). Mind you it won't be easy, it will take some time and patience, and there is NO guarantee it will work. jaclaz Yes the Quick mode = -FWRITE. and ya the drive had 1 big ntfs partition with no OS on it. when im trying some recovery softs i can see they listing at least 1 $MFT entry. I do have 2TB free for the task. "Open the disk in a disk editor (suggested Tiny Hexer): http://reboot.pro/8734/" - i guess i need to image the whole drive 1:1 right? can suggest a good soft for this task? (and what the extension needs to be?) "and try checking sector # 6,291,519 (786432*8+63) compare with: " - can you be little more specipic about the steps needed in order to do this and rebuild the mft? im not sure what are you saying here man.
  2. If the Zero fill command was carried, the drive is filled with zero's . Unfortunately there is NO way on Earth you can recover ANYTHING from that drive. If you managed to recover the 26Gb of Data or *any* data it means that either you stopped the execution of the zero fil, or it ddn't work as expected. How long did the program run? How was it terminated? jaclaz No man the command completed successfully without termination man. i did the "Write Zeros to Drive" with the Quick option and it goes all the way up to 100% with no probs. (the data iv recovered is 100% real no raw stuff but just 26gb approximately)
  3. Hello. iv an hdd recovery question(s) and i hope you have some resolution: HDD: Western Digital - WD3200AAKS , its a 320GB 3.5\" drive (1 Partition on it that was NTFS with no OS on it - just important data like VMware projects) OK so i guess you know the Data Lifeguard Diagnostic tool by wd: http://support.wdc.com/product/download.asp?groupid=606&sid=30〈=en The version iv used is the latest (witch is 5.04f). (dont mind the drive listed) The problem is i did have a failed drive (other wd drive) witch i wanted to Zero Fill it by this tool but by mistake i did it for my good & healthy WD3200AAKS drive mention above. I did the quick "Write Zeros To Drive" command without having noticed its the wrong drive until booted to the OS. My question is: Is there any way to recover the partition after running a Zero Fill command? I did tried alot of recovering soft but its not working so good (from 320GB iv recovered something like 26GB witch are off course not in the original structure they were). i havnt find any software that can recover the ALL original partition data & the folder structure (or at least most of the data & the structure). Can you advise on the next step man? how to recover the data? TNX :]
  4. Hallo all. In need your help in compiling a batch file to a project , here is some info Ok so iv 4 users (named testuser1 | testuser2 | testuser3 | testuser4) and 2 groups (testmarketing | testsales) testuser1 is an Administrator and the rest are normal Users. testuser1 & testuser2 are members in testsales group. testuser2 , 3 & 4 are members of testmarketing also i have 3 folders - Market / Sales / All (the folders located in D partition) testsales group members have Full Access to Sales folder. testmarketing group members have Full Access to Market folder (note that testuser2 are a member in both testmarketing & testsales groups.) OK SO HOW TO DO THE FOLLOWING? 1. the folder named All - i want all users to have read permissions on that folder and the subfolders & files in it but only the creator owner of a subfolders & files will be able to delete them. 2. i need that the members of testsales group (testuser1 ,2) will be able to only read from the Market folder. 3. change the location of My Documents folder for all the users to be located in another partition from the default C (and to not have conflict between each user and his My Documents folder 4. how to set deny Full Access to the GPO folder (or any folder) to a specific user to prevent him from reading from it?
×
×
  • Create New...