I was moving software from an External HDD to my new NAS.

The the NAS died on me .

Now I wont to restore the deleted data on the first External hard drive.

Since I have not write any software over the "deleted" files , I want to repair the names and location. (MBR ????)

I know this is possible with any recovery software , but then I have to back it up to another drive.

I wonder if there is software that repairs just the names and location so i dont need an other HDD and it should save lots of time . (Im talking about 1.3 TB)

The HDD Format is NTFS

Who can help me !!!!

FYI, the MBR does not contain filenames / locations.


That is a really bad plan IMHO, because you you are suggesting to make changes to the disk which contains your only copy of your data.

If you really want to follow this (crazy ) plan, which means that your data is not worth the cost of buying some more storage in order to do a safer recovery attempt, then you can search for NTFS undelete programs. I have seen them in the past but, as I said, I would not use them due to the high risks. As always: Your data, your risk, your choice. Just don't say that you were not warned...

Thank you Mr Vulcan

You are so right and so wrong .
Everything you say may be right but it is all about LOGIC (Vulcans know ).

If there are programs (and we all know) what can read and restore our data on a HDD by telling their location (Wherever that is MBR , FAT whatever) it should be a slice of cake to restore these headers instead using these headers to copy the software to a new location.

Because my lack of knowledge how a HDD really works its data and where it store's it data headers , I'm asking for help to make me understand how it is possible or why it is not impossible.

The only thing I know now know a : MBR contains no data about the files
b : You think it's not wise to do so (Understandable)

Ask You're self why shouldn’t it work or how would it work .
Think outside the BOX

Since that is your opinion, I won't waste my time on any more replies after this one.


The important words in your comment are "should be". Actually I know quite well how NTFS undelete utilities work.

Since you say that I'm wrong in my previous advice against using an NTFS undelete utility due to the risks, you must (a) be an expert proogrammer; (b) have checked the source code for your chosen NTFS undelete utility for any errors; and (c) therefore be able to 100% trust that utility to be bug-free and operate correctly when it is writing to the disk containing your only copy of the data - without ever causing any corruption of your data.

There are many NTFS undelete utilities which you can try. Perhaps you will be lucky; perhaps not. Your choice is how much risk you want to take. As I said before: Your data, your risk, your choice. Have fun!

1. Were you really "moving the files" or copying the files big difference ?
2. Did the NAS Die while you were "moving" the files ?

You ask: Now I wont to restore the deleted data on the first External hard drive

3. Can you tell me how many drives the NAS has ? 1 ? Make and Model of the NAS and internal hard drive(s)

You sate: The HDD Format is NTFS

Once we know the NAS information we hopefully can "confirm" this is true or false as many single drive NAS systems are Linux based and not NTFS format

I think OP needs to understand better how partition structure works.

_________________
http://www.northwind.gr
SandForce SSD Recovery
Ransomware Reverse Engineering - NoMoreRansom! partners

I'm not sure how NTFS works, so forgive me if the following reasoning is flawed.

Let's assume that your drive still contains remnants of files that were deleted at some earlier time. What would now happen if you were to undelete these files? Would the bodies of these earlier files be crosslinked with the contents of those more recent files that you wish to recover, in which case your file system would be irretrievably corrupted by the recovery process?

In other words, let's say your software has undeleted an older file that used to occupy sectors A, B, and C, and let's also assume that is has restored the file's corresponding entry in the $MFT. What would happen if your software now finds a newer file that occupies those same sectors? How would it now update the $MFT? AISI, the only safe approach would be to undelete both files and copy them to another drive or partition.

_________________
A backup a day keeps DR away.