Hey guys,

I received a hdd that is fisically fine, but it's seen as raw.

It's a Windows XP hdd that needs to be working.

Retrieving the files is not enough.

I noticed upon creating an image that the sector 0 of the hdd is full of 00's instead of showing the NTFS info.

Any ideas?

_________________
BTC Wallet - 3AoQPTBsz9PbfoanCx44Lw76Y2TwtKa1x5
Instagram https://www.instagram.com/datarecovery_morde.pt/

I'd try DMDE then. See if it picks up partitions. Sometimes it's enough to repair partition table + boot sector. Free version will let you do this. Basically right click 'found' partition and select 'insert to partition table' and 'restore boot sector from copy' (latter only if needed).

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service

Oh god, right. I'll report back.

_________________
BTC Wallet - 3AoQPTBsz9PbfoanCx44Lw76Y2TwtKa1x5
Instagram https://www.instagram.com/datarecovery_morde.pt/

Lba0 doesn't typically contain NTFS boot sector, it contains the MBR instead. So if only this sector was erased, you can easily rebuild the partition table in a hex editor. Never used DMDE, so cannot comment if it can do it.

pepe

_________________
Adatmentés - Data recovery

DMDE can do it in a few clicks. I used to laboriously rebuild the partitions by hand, but I now trust DMDE to do it for me.

_________________
A backup a day keeps DR away.

In this case pt-table is actually ok. Or, no: there is a partition table but may be wrong. Anyway LBA 0 can be largely zeros, just one entry and 55 AA signature is very well possible. Pt points to LBA 63 but is is not NTFS boot sector, LBA 64 is. Backup boot suggests partition needs to start at LBA 64 (file system + 1). We need to check BS in relation to MFT (offset to MFT in clusters) to see which location is correct.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service