• Now's your chance win big! Join our community and get entered to win a RTX 2060 GPU, plus more! Join here.

    Pi Cast Episode 3 streams live on Tuesday, August 4th at 2:30 pm ET (7:30 PM BST). Watch live right here!

    Catch Scharon on the Tom's Hardware Show live on Thursday, August 6th at 2:00 pm ET (7:00 PM BST). Click here!

Question Rebuild NTFS Partition Table?

Andrew5

Honorable
Oct 27, 2014
37
0
10,530
0
Hello,
My friend's SSD partition table got completely wiped (except for the EFI partition), and he does not have a backup. I did some diagnostics and ruled out that the SSD is not failing, though I'll keep an eye on it.

I was able to retrieve the files using some recovery tools, but none of the recovery tools were able to "rebuild" the partition table so that I can boot from Windows and use the drive again, despite the files actually being there and the partition being recognized as "RAW" instead of "NTFS".

Is there a way of rebuilding the partition or at least restoring everything to one drive or another without reinstalling drivers and programs again?

It would be a pain to reinstall Windows and the hundreds of programs.

If not, is there a way of automatically backing up everything at regular intervals and being able to restore that backup later on and get everything restored (including programs and drivers, not just documents) as if nothing happened, in one click?

Thanks,
Andrew
 

USAFRet

Titan
Moderator
Mar 16, 2013
125,865
4,358
159,940
19,667
If the tools you've used recovered "some of it"...that is likely all you will get.
100% recovery in the original condition is unlikely.

Time to bite the bullet and reinstall.

For the future, backups to a different drive.
I use Macrium Reflect for this. All my systems and drives are backed up nightly.
Click click 100% recovery. (Yes, I had to do this once after a totally failed SSD)

Some variation of this will work for just about everyone:
Scale up or down as needed.
 
There appear to be 3 large unallocated areas which have been wiped. There is no "F" or "B" in the Indicators, which means that there is no boot sector or file system. Normally when you delete or format a partition in an SSD, the OS sends a TRIM command which zeros all the content of that partition. I suspect that is what happened.

BTW, you can capture the screen content using the PrtScn key or the Windows Snip tool. No need for a camera.
 

Andrew5

Honorable
Oct 27, 2014
37
0
10,530
0
There appear to be 3 large unallocated areas which have been wiped. There is no "F" or "B" in the Indicators, which means that there is no boot sector or file system. Normally when you delete or format a partition in an SSD, the OS sends a TRIM command which zeros all the content of that partition. I suspect that is what happened.

BTW, you can capture the screen content using the PrtScn key or the Windows Snip tool. No need for a camera.
The OS isn't even bootable, so I was running DMDE off of a live WinPE image. Didn't think I could screenshot on WinPE.

At this point, I'll just reinstall Windows and make sure everything is working. My friend told me (thankfully) that there wasn't anything really important on the drive, so I'll just copy what I was able to recover after reinstalling.
 

ASK THE COMMUNITY