Andy said:
Hi All,
I am in a emergency mode need some help to save myself for major
disaster.
I has to reformat my c drive so I copied everything to my external
firewire
drive called J.
When I inserted my xp cd I wanted to format the c:drive but
accidentaly I
marked j(exterbal drive) and hit the l button to delete all data. but
before
I hit the enter I realize and hit F3 to quit. It did not even start
formating
I just marked for deleting but again I quit at confirmation.
Now I cannot see my J drive.(I did not format the computer) When I
realize
the mistake I just wanted to go back and check the j drive and I
cannot see J
drive. Please help
I need the data on J drive badly
My guess is that the partition entry in the partition table got deleted.
The formatting never started but the partition doesn't exist anymore.
If you run FDISK (from a bootable floppy) or Disk Management
(diskmgmt.msc) in Windows XP, does it show any partitions on that drive?
You could try to simply create a new partition which is the same size as
what you had before and starts at the same sector offset. If you had
one partition that encompassed the entire size of the drive then that is
not so hard to figure out as you create a partition that also
encompasses the entire drive.
The problem comes in that creating a partition that encompasses the same
sectors as the old partition there still is no entry within the
partition table entry itself to say what type of partition it is. If it
was NTFS, you need to edit the partition table entry to note that it is
an NTFS partition type. I use the partition table editor that is
included with Partition Magic. You can also download it from their FTP
site at:
ftp://ftp.symantec.com/public/english_us_canada/tools/pq/utilities/
I think it is in the ptedit.zip file (the ptedit32.zip file is probably
only for use when ran under Windows). You might also be able to use the
DISKPART utility provided with Windows XP by using its SELECT and CREATE
commands to create a partition table entry.
You'll need to know what are the values to enter into the partition
table entry for each partition type. I usually Google for a partition
type list, like the one found at
http://www.bitzenbytes.com/Content-Arcanum-18-1-58.html. Just to be
sure 07 for HPFS/NTFS was the correct value from that list, I used
DISKPART to check:
DISKPART
list disk
select disk 0 (in my case, there is only one disk)
list partition
select partition 2 (this is my NTFS-formatted Windows XP partition;
the first one is FAT32 for Windows ME)
detail partition
From the output of the last command to show the details of the
NTFS-formatted primary partition where Windows XP is installed:
Partition 2
Type : 07
Hidden: No
Active: Yes
So, yes, 07 is the correct value to put into the partition table entry
for an NTFS partition type. If the partition table entry has been
deleted but the partition itself was never touched then you can recreate
the partition table entry (by using FDISK, for example) that matches the
same sectors that the partition used before. However, that only defines
the new partition to encompass the same portion of the disk that the old
partition occupied. It doesn't define the *type* of the partition and
that's where a partition table editor is needed. Obviously all of this
is performing surgery at a very low and critical level in the storage
subsytem so you do this at your own risk. You may want to use a drive
imaging program that saves PHYSICAL image filesets (it reads by sectors
rather than by logical reads through the file system).
Obviously a utility that looks at the contents of a partition to guess
at its file type (and even detect where are the partitions) would make
it easier but it may not guess correctly, but then neither might you.
You could trial the demo version of Active@
(
http://www.partition-recovery.com/) to see if it will work but it
probably won't actually complete the partition undelete since, after
all, they want you to buy it ($30). Be aware that Knoppix runs Linux so
you'll have to become familiar with a Unix environment and Unix
commands.