Data recovery after cloning GHOST

                  Phenomenon: IBM notebook hard drive 60G. There are three areas: C (for data area), D (system disk), and E (data area).

use the GHOST system CD to do system to the C drive. But the operation is wrong, choose to restore the system to disk. After the ghost is completed, enter the system, the entire hard disk has only one partition C drive, which has the system file just GHOST. However, the original E partition data is completely lost.

Analysis: The general practice is to use special software to scan the entire hard drive directly, this data is out, but the directory structure is damaged, can not retain the original directory, and use a lot of junk files, if the hard disk capacity .., and E partitions and small, will do a lot of wasted effort, time is also relatively long in fact, for this mistake GHOST case, there can be faster and better recovery ideas

steps:

1: Since GHOST is a partition, it means that only the MBR and the 63 sector DBR are rewritten. The original DBR of other partitions is still retained. The data area is rarely overwritten. Therefore, you can use the disk tool to restore the original. All partitions, including C.

2:.. rebuild MBR using the tool into the system, will find that all partitions have been found, which all the data intact, the phenomenon does not cover the reconstruction of the original partition tools DISKMAN, WINHEX, RUNTIME if customers can provide more accurate original partition size, I recommend using DISKMAN interactive mode to restore

3:.. for the letter staggered phenomenon appears And can be disregarded,

4: For unallocated space appears a (C should be the original disk), or may be used WINHEX RUNTIME DBR this partition reconstruction according to the capacity of the display, the manual. Because the original backup of the C drive has also been rewritten (if the NTFS format may still be), the DISKMAN cannot be recovered. Must be rebuilt manually. If you don't manually rebuild the MBR, then use the software to scan this partition. Most of the data is still there.