WD2002FAEX-007BA0

[unknown]

Hello!
Customer says there's two HDD's connected to the PC one of them for OS and the other (drive in topic) is one partition 2 T.B has all data on it. He tried to install a new OS but he surprised that the 2 T.B drive is formatted.
I tried logical scan until first 10000000 sectors with R-Studio and DMDE but no luck. In similar cases scanning the first 10 million sectors will show at least folders structure.

Any thoughts?
Thanks in advance

Attachments

0&2048.rar

(1.01 KiB) Downloaded 318 times

[rogfanther]

Customer formatted ( and choose option to fully clean ) the wrong drive during setup ?

[MindMergepk]

normally if drive is over written with new OS means old MFT is gone which is located normally at 3GB position all you can have is Raw recovery if possible at all.

sector 2048 shows a partition of size : 262143 sectors so the next data partition would be starting from sector 264192.

I am afraid there wont be much option to retrieve the old folder structure.

[unknown]

Customer formatted ( and choose option to fully clean ) the wrong drive during setup ?

I don't think so. After full scan with r-studio all I get is 317GB in extra found files contains garbage data. Also in hex all sectors until 3906000000 contains data (not 00's).

normally if drive is over written with new OS means old MFT is gone which is located normally at 3GB position all you can have is Raw recovery if possible at all.

sector 2048 shows a partition of size : 262143 sectors so the next data partition would be starting from sector 264192.

I am afraid there wont be much option to retrieve the old folder structure.

If drive overwritten with new OS at least it would show new folders related to new OS (users, program files, windows...etc) none of them appears even with full scan.
My guess is someone encrypt the drive with bit locker or whatever and then reformatted.

Anyway the customer has take the drive yesterday while I was in my vacation.