Data Recovery Noob
Posts: 1
Joined: Tue Jan 08, 2019 1:13 pm

Overwrote NTFS header with GRUB core.img

Tue Jan 08, 2019 1:19 pm

So I was trying to fix my non-booting Windows by installing GRUB. I marked the Windows data partition (/dev/sda4) as BIOS_GRUB in GParted and did and update-grub /dev/sda, with the idea that grub MBR code will execute Windows bootloader.

However grub took the /dev/sda4 partition and used it for it's core.img

And now by Windows NTFS partition is gone. Or is it? I read that the core.img file only has like 32KB which totally overwrote the NTFS partition header. But the data must still be there. I tried to use ntfsfix -n /dev/sda4 but unsuccessfully:

Mounting volume... NTFS signature is missing.
Attempting to correct errors... NTFS signature is missing.
Failed to startup volume: Invalid argument
NTFS signature is missing.
Trying the alternate boot sector
The alternate bootsector is usable
The startup data can be fixed, but no change was requested
Volume is corrupt. You should run chkdsk.
No change made

Without touching the computer I would like to get other peoples opinions on how to fix this. So is there a way to fix the NTFS header that was corrupted by core.img?

Here is my boot info note that only /dev/sda is relevant, am currently on /dev/sdc Manjaro I moved the BIOS_GRUB flag away from /dev/sda4

User avatar
Forum Admin
Posts: 3639
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Overwrote NTFS header with GRUB core.img

Tue Jan 08, 2019 1:47 pm

MatejBellus wrote:Source of the post would like to get other peoples opinions on how to fix this.

Stop trying to "fix" it. You've already caused more damage than you can fix. Priority one is getting the data back. Your first step (one you should already be wishing you did) should be to clone the HDD to another drive. You can use ddrescue to do this since you're already in Linux. Here's a tutorial for using ddrescue.

After you get a full clone I'd start by scanning with some good data recovery software such as R-Studio and recover all the files you need out to a third device.

If you're hellbent on making it bootable, you can probably just do a fresh install of Windows afterward, and then copy all the recovered data over the top of the fresh install. It may or may not work, but it's worth a shot.

Return to “SSD & Flash Data Recovery”

Who is online

Users browsing this forum: No registered users and 3 guests