{"id":58090,"date":"2026-11-04T16:03:37","date_gmt":"2026-11-04T08:03:37","guid":{"rendered":"https:\/\/www.amagicsoft.com\/?p=58090"},"modified":"2026-11-04T16:03:37","modified_gmt":"2026-11-04T08:03:37","slug":"mbr-partition-deletion-test","status":"publish","type":"post","link":"https:\/\/www.amagicsoft.com\/it\/kb\/lab\/mbr-partition-deletion-test.html","title":{"rendered":"Test di eliminazione della partizione MBR: prima e dopo in WinHex"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"58090\" class=\"elementor elementor-58090\" data-elementor-post-type=\"post\">\n\t\t\t\t<div class=\"elementor-element elementor-element-j5wjbv0 dtec-docx-root dtec-post-58090 e-flex e-con-boxed e-con e-parent\" data-id=\"j5wjbv0\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-5s88px4 elementor-widget elementor-widget-text-editor\" data-id=\"5s88px4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>This <strong>MBR partition deletion test<\/strong> shows how a missing partition can become unallocated while its NTFS boot sector remains readable. In the recorded case, deleting the middle partition removed its mapping from the MBR table. The following partition occupied the second table slot, and the third slot was empty. Reconstructing an entry later made E: visible again, and subsequent checks confirmed that the recovered data was complete.<\/p>\n<p>The case concerns primary NTFS partitions on a basic MBR data disk with 512-byte logical sectors. It explains the recorded WinHex changes and their consequences. For the underlying structure, see the <a href=\"https:\/\/www.amagicsoft.com\/wiki\/mbr-partition-table.html\">MBR partition table guide<\/a>.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-17hqoed elementor-toc--minimized-on-tablet elementor-widget elementor-widget-table-of-contents\" data-id=\"17hqoed\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;headings_by_tags&quot;:[&quot;h2&quot;,&quot;h3&quot;],&quot;exclude_headings_by_selector&quot;:&quot;.faq-no-toc, h2:contains(Data Recovery Assessment)&quot;,&quot;marker_view&quot;:&quot;bullets&quot;,&quot;no_headings_message&quot;:&quot;No headings were found on this page.&quot;,&quot;icon&quot;:{&quot;value&quot;:&quot;fas fa-circle&quot;,&quot;library&quot;:&quot;fa-solid&quot;},&quot;minimize_box&quot;:&quot;yes&quot;,&quot;minimized_on&quot;:&quot;tablet&quot;,&quot;hierarchical_view&quot;:&quot;yes&quot;,&quot;min_height&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_tablet&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]},&quot;min_height_mobile&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:[]}}\" data-widget_type=\"table-of-contents.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__header\">\n\t\t\t\t\t\t<h4 class=\"elementor-toc__header-title\">\n\t\t\t\tTable of Contents\t\t\t<\/h4>\n\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--expand\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__17hqoed\" aria-expanded=\"true\" aria-label=\"Open table of contents\"><i aria-hidden=\"true\" class=\"fas fa-chevron-down\"><\/i><\/div>\n\t\t\t\t<div class=\"elementor-toc__toggle-button elementor-toc__toggle-button--collapse\" role=\"button\" tabindex=\"0\" aria-controls=\"elementor-toc__17hqoed\" aria-expanded=\"true\" aria-label=\"Close table of contents\"><i aria-hidden=\"true\" class=\"fas fa-chevron-up\"><\/i><\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<div id=\"elementor-toc__17hqoed\" class=\"elementor-toc__body\">\n\t\t\t<div class=\"elementor-toc__spinner-container\">\n\t\t\t\t<i class=\"elementor-toc__spinner eicon-animation-spin eicon-loading\" aria-hidden=\"true\"><\/i>\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bhd828w elementor-widget elementor-widget-heading\" data-id=\"bhd828w\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Test Disk and Evidence<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-zonfuvo elementor-widget elementor-widget-text-editor\" data-id=\"zonfuvo\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The historical test record shows a separate disk labeled Disk 1 in Windows Disk Management. Disk numbers and drive letters identify this case only; they are not instructions for selecting another computer\u2019s disk.<\/p>\n<table><tbody><tr><td><p><strong>Item<\/strong><\/p><\/td><td><p><strong>Recorded condition<\/strong><\/p><\/td><\/tr><tr><td><p>Test disk<\/p><\/td><td><p>Basic MBR disk, displayed as 2.00 GB<\/p><\/td><\/tr><tr><td><p>Initial volumes<\/p><\/td><td><p>D: 1.00 GB; E: 500 MB; F: 521 MB, as displayed by Disk Management<\/p><\/td><\/tr><tr><td><p>File system<\/p><\/td><td><p>NTFS on all three volumes<\/p><\/td><\/tr><tr><td><p>Deleted object<\/p><\/td><td><p>Middle primary partition, originally E:<\/p><\/td><\/tr><tr><td><p>Inspection tools<\/p><\/td><td><p>Windows Disk Management and WinHex<\/p><\/td><\/tr><tr><td><p>Logical sector size<\/p><\/td><td><p>512 bytes, also encoded as <code class=\"dtec-inline-code\">00 02<\/code> in the NTFS boot sector<\/p><\/td><\/tr><tr><td><p>Test outcome<\/p><\/td><td><p>E: reappeared as a 499 MB NTFS primary partition; subsequent checks confirmed that the recovered data was complete<\/p><\/td><\/tr><\/tbody><\/table>\n<p>The screenshots record the layout before deletion, the unallocated region afterward, surviving boot-sector information, and reconstruction. The Windows build, WinHex version, underlying HDD\/SSD\/virtual-disk type, and test date were not recorded.<\/p>\n<p>There is no saved pre-deletion LBA 0 dump. Consequently, this is a case analysis rather than a complete byte-for-byte deletion audit. The original entry\u2019s exact bytes cannot be presented as a measured baseline.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-39e6c8l elementor-widget elementor-widget-image\" data-id=\"39e6c8l\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-before-after-english.webp\" title=\"\" alt=\"MBR partition deletion test\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-j9blivz elementor-widget elementor-widget-heading\" data-id=\"j9blivz\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Changed in the MBR Partition Table?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3eqrjnw elementor-widget elementor-widget-text-editor\" data-id=\"3eqrjnw\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The MBR is at disk LBA 0. Its partition table occupies offsets <code class=\"dtec-inline-code\">0x1BE\u20130x1FD<\/code>, with four 16-byte records. The signature bytes <code class=\"dtec-inline-code\">55 AA<\/code> occupy <code class=\"dtec-inline-code\">0x1FE\u20130x1FF<\/code>.<\/p>\n<p>Each record includes a partition type, starting LBA, and sector count. These describe a disk region; they do not contain its folders or file contents.<\/p>\n<h3>The Following Partition Occupied Slot 2<\/h3>\n<p>WinHex\u2019s post-deletion screenshot contains these two occupied records:<\/p>\n<table><tbody><tr><td><p><strong>MBR field<\/strong><\/p><\/td><td><p><strong>Slot 1, associated with D:<\/strong><\/p><\/td><td><p><strong>Slot 2, associated with F:<\/strong><\/p><\/td><\/tr><tr><td><p>Record begins<\/p><\/td><td><p><code class=\"dtec-inline-code\">0x1BE<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">0x1CE<\/code><\/p><\/td><\/tr><tr><td><p>Type<\/p><\/td><td><p><code class=\"dtec-inline-code\">07<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">07<\/code><\/p><\/td><\/tr><tr><td><p>Starting-LBA bytes<\/p><\/td><td><p><code class=\"dtec-inline-code\">80 00 00 00<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">80 A0 2F 00<\/code><\/p><\/td><\/tr><tr><td><p>Starting LBA, decimal<\/p><\/td><td><p>128<\/p><\/td><td><p>3,121,280<\/p><\/td><\/tr><tr><td><p>Sector-count bytes<\/p><\/td><td><p><code class=\"dtec-inline-code\">00 00 20 00<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">00 48 10 00<\/code><\/p><\/td><\/tr><tr><td><p>Sector count, decimal<\/p><\/td><td><p>2,097,152<\/p><\/td><td><p>1,067,008<\/p><\/td><\/tr><\/tbody><\/table>\n<p>Slots 3 and 4 are zero-filled. The missing middle volume has no record describing its start and size.<\/p>\n<p>The recorded sequence therefore supports compaction of the surviving records: F: occupies slot 2 after the middle partition is removed. <strong>Deleting the second partition does not necessarily leave the second slot empty.<\/strong> Other tools may clear a record without rearranging the remaining entries.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-31eipwy elementor-widget elementor-widget-image\" data-id=\"31eipwy\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/winhex-mbr-partition-table-after-deletion.webp\" title=\"\" alt=\"MBR Partition Table\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-opz8jjs elementor-widget elementor-widget-text-editor\" data-id=\"opz8jjs\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>Post-deletion LBA 0: the surviving entries describe D: and F:. The third and fourth records are empty, and the MBR signature is present.<\/em><\/p>\n<p>WinHex also lists a middle NTFS region without a drive letter. Its partition list can include detected file systems beyond those currently registered in the MBR. The raw records establish what the table actually contains; a detected NTFS region alone does not establish that Windows has mounted it.<\/p>\n<h3>Reading the Bytes Correctly<\/h3>\n<p>MBR multi-byte address fields use little-endian order. For example:<\/p>\n<ol><li>80 A0 2F 00 -&gt; 0x002FA080 -&gt; LBA 3,121,280<\/li><\/ol>\n<p>These are logical-sector addresses. The <a href=\"https:\/\/www.amagicsoft.com\/kb\/disk-partition\/lba.html\">logical block addressing guide<\/a> explains how the sector size and address origin affect their interpretation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-wgkrwt6 elementor-widget elementor-widget-heading\" data-id=\"wgkrwt6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Why Did E: Become Unallocated?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3s3cdff elementor-widget elementor-widget-text-editor\" data-id=\"3s3cdff\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Windows normally uses partition records to identify the disk regions that contain volumes. Once the middle region has no valid mapping, it is no longer available as the original E: volume through ordinary file access.<\/p>\n<p>That explains the black Unallocated bar. It does not show that every sector in the region contains zeros.<\/p>\n<p>Deleting a partition also differs from deleting its individual files. File deletion changes file-system records. Partition deletion changes the disk layout through which the operating system reaches that file system. The <a href=\"https:\/\/www.amagicsoft.com\/wiki\/ntfs-master-file-table.html\">NTFS Master File Table<\/a> stores file records inside the volume; it is separate from the four MBR partition records.<\/p>\n<p>The screenshots demonstrate surviving boot metadata. Without a complete disk comparison, they do not prove that every other sector was unchanged. They also cannot establish unchanged boot code or disk-signature bytes, because the original LBA 0 dump is unavailable.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6dxac3k elementor-widget elementor-widget-heading\" data-id=\"6dxac3k\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Finding the Deleted Partition\u2019s NTFS Boot Sector<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-okapubc elementor-widget elementor-widget-text-editor\" data-id=\"okapubc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The first surviving partition provides a useful starting hypothesis:<\/p>\n<ol><li>D: starting LBA                 = 128<\/li><li>D: partition length            = 2,097,152 sectors<\/li><li>First LBA after D:              = 2,097,280<\/li><li>Byte offset with 512-byte LBAs  = 2,097,280 \u00d7 512<\/li><li>                               = 1,073,807,360<\/li><li>                               = 0x40010000<\/li><\/ol>\n<p>The original record also shows D:\u2019s backup boot sector at LBA 2,097,279, immediately before this address. A neighboring partition need not start immediately afterward, so this arithmetic identifies a candidate, not a universal rule.<\/p>\n<p>At LBA 2,097,280, WinHex displays an NTFS boot sector with several mutually consistent fields:<\/p>\n<table><tbody><tr><td><p><strong>Boot-sector offset<\/strong><\/p><\/td><td><p><strong>Recorded bytes<\/strong><\/p><\/td><td><p><strong>Interpretation<\/strong><\/p><\/td><\/tr><tr><td><p><code class=\"dtec-inline-code\">0x00<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">EB 52 90<\/code><\/p><\/td><td><p>Boot-code jump instruction in this NTFS sector<\/p><\/td><\/tr><tr><td><p><code class=\"dtec-inline-code\">0x03<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">4E 54 46 53 20 20 20 20<\/code><\/p><\/td><td><p>OEM identifier <code class=\"dtec-inline-code\">NTFS<\/code> with trailing spaces<\/p><\/td><\/tr><tr><td><p><code class=\"dtec-inline-code\">0x0B<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">00 02<\/code><\/p><\/td><td><p>512 bytes per sector<\/p><\/td><\/tr><tr><td><p><code class=\"dtec-inline-code\">0x1C<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">80 00 20 00<\/code><\/p><\/td><td><p>Hidden-sectors field: 2,097,280<\/p><\/td><\/tr><tr><td><p><code class=\"dtec-inline-code\">0x28<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">FF 97 0F 00 00 00 00 00<\/code><\/p><\/td><td><p>NTFS sector-count field: 1,021,951<\/p><\/td><\/tr><tr><td><p><code class=\"dtec-inline-code\">0x1FE<\/code><\/p><\/td><td><p><code class=\"dtec-inline-code\">55 AA<\/code><\/p><\/td><td><p>Boot-sector end marker<\/p><\/td><\/tr><\/tbody><\/table>\n<p>Offsets in this table are relative to the NTFS boot sector, not LBA 0.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c673qtc elementor-widget elementor-widget-image\" data-id=\"c673qtc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/winhex-deleted-ntfs-boot-sector-lba-2097280.webp\" title=\"\" alt=\"Finding the Deleted Partition\u2019s NTFS Boot Sector\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a89ln8y elementor-widget elementor-widget-text-editor\" data-id=\"a89ln8y\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>The original WinHex capture shows the candidate NTFS boot sector at LBA 2,097,280. Its location and hidden-sectors field agree.<\/em><\/p>\n<p>The four-byte value at <code class=\"dtec-inline-code\">0x1C<\/code> is <strong>not the NTFS reserved-sectors field<\/strong>. Confusing these fields would misidentify the partition start. Likewise, searching for <code class=\"dtec-inline-code\">EB 52 90<\/code> alone is insufficient: old boot-sector copies and unrelated matching bytes can produce misleading hits. Confirm the file-system identifier, sector size, boundaries, and accessible metadata together.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e252qa elementor-widget elementor-widget-heading\" data-id=\"6e252qa\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Reconstructing the Entry: What the Record Shows<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-elnibhs elementor-widget elementor-widget-text-editor\" data-id=\"elnibhs\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The documented reconstruction first preserved F: by copying its record into slot 3. It then populated slot 2 for the missing NTFS region.<\/p>\n<p>The recorded slot 2 contains:<\/p>\n<table><tbody><tr><td><p><strong>Field<\/strong><\/p><\/td><td><p><strong>Recorded value<\/strong><\/p><\/td><\/tr><tr><td><p>Boot indicator<\/p><\/td><td><p><code class=\"dtec-inline-code\">00<\/code><\/p><\/td><\/tr><tr><td><p>Partition type<\/p><\/td><td><p><code class=\"dtec-inline-code\">07<\/code>, consistent with the detected NTFS volume<\/p><\/td><\/tr><tr><td><p>Starting-LBA bytes<\/p><\/td><td><p><code class=\"dtec-inline-code\">80 00 20 00<\/code> = 2,097,280<\/p><\/td><\/tr><tr><td><p>Sector-count bytes<\/p><\/td><td><p><code class=\"dtec-inline-code\">FF 97 0F 00<\/code> = 1,021,951<\/p><\/td><\/tr><\/tbody><\/table>\n<p>This MBR partition table before\/after comparison distinguishes observed states from the unavailable original bytes:<\/p>\n<table><tbody><tr><td><p><strong>State<\/strong><\/p><\/td><td><p><strong>Windows layout or outcome<\/strong><\/p><\/td><td><p><strong>MBR evidence<\/strong><\/p><\/td><\/tr><tr><td><p>Before deletion<\/p><\/td><td><p>D:, E:, and F: visible in Disk Management<\/p><\/td><td><p>Original LBA 0 bytes not captured<\/p><\/td><\/tr><tr><td><p>After deletion<\/p><\/td><td><p>Middle region Unallocated<\/p><\/td><td><p>Slot 1: D:; slot 2: F:; slots 3\u20134: empty<\/p><\/td><\/tr><tr><td><p>Reconstruction<\/p><\/td><td><p>E: subsequently reappears<\/p><\/td><td><p>Slot 1: D:; slot 2: reconstructed NTFS record; slot 3: preserved F:<\/p><\/td><\/tr><\/tbody><\/table>\n<p>The first row describes the original visible layout; it does not establish the original slot order byte by byte.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52x0m01 elementor-widget elementor-widget-image\" data-id=\"52x0m01\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/winhex-mbr-entry-reconstruction-record.webp\" title=\"\" alt=\"NTFS reserved-sectors field\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1v5bd3k elementor-widget elementor-widget-text-editor\" data-id=\"1v5bd3k\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>The reconstruction capture shows start bytes <\/em><code class=\"dtec-inline-code\"><em>80 00 20 00<\/em><\/code><em> and length bytes <\/em><code class=\"dtec-inline-code\"><em>FF 97 0F 00<\/em><\/code><em>. These are the recorded values, not generic recovery parameters.<\/em><\/p>\n<h3>Why the Length Needs an Additional Check<\/h3>\n<p>An MBR record requires the complete partition length. The NTFS boot-sector count should not automatically be copied into that field.<\/p>\n<p>The preceding D: volume provides a cross-check within the same record: its MBR length is 2,097,152 sectors, while its backup NTFS boot sector contains <code class=\"dtec-inline-code\">FF FF 1F 00 00 00 00 00<\/code>, or 2,097,151.<\/p>\n<p>For the NTFS layout documented in the Linux NTFS implementation, the boot-sector count is one less than the complete span including the backup boot sector. Applying that relationship to this candidate gives:<\/p>\n<ol><li>Recorded NTFS count       = 1,021,951<\/li><li>Candidate complete span  = 1,021,952 sectors<\/li><li>Candidate backup LBA     = 2,097,280 + 1,021,951<\/li><li>                         = 3,119,231<\/li><\/ol>\n<p>The candidate span would encode as <code class=\"dtec-inline-code\">00 98 0F 00<\/code>, rather than the recorded <code class=\"dtec-inline-code\">FF 97 0F 00<\/code>. The latter describes a partition ending one sector earlier.<\/p>\n<p>This is a boundary calculation, not a verified replacement value. Confirm the actual backup sector and the original partition extent before writing anything. The original partition could also have included trailing space beyond the NTFS volume. F: starts at LBA 3,121,280, leaving 2,048 sectors after the candidate complete NTFS span; that gap must not automatically be absorbed into the recovered volume.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-jcqbm9b elementor-widget elementor-widget-heading\" data-id=\"jcqbm9b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Did the MBR Deletion Recovery Test Succeed?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-gy4dbus elementor-widget elementor-widget-text-editor\" data-id=\"gy4dbus\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The test succeeded: reconstructing the MBR entry restored access to E:, and subsequent checks confirmed that the recovered data was complete. The final Disk Management screenshot shows the partition recognized as NTFS with Healthy (Primary Partition) status.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9ue8z8m elementor-widget elementor-widget-image\" data-id=\"9ue8z8m\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" src=\"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-recovery-recognized-english.webp\" title=\"\" alt=\"MBR Deletion Recovery Test Succeed\" loading=\"lazy\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-nwk5kux elementor-widget elementor-widget-text-editor\" data-id=\"nwk5kux\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><em>After reconstruction, E: is visible as a 499 MB NTFS primary partition. <\/em><\/p>\n<p>The initial screenshot displayed 500 MB; the final one displays 499 MB. That difference, together with the sector-count issue, prevents a claim that the exact original boundaries were restored. Displayed capacity alone cannot supply the missing original sector count. Complete data recovery and exact restoration of the original partition extent are separate conclusions.<\/p>\n<p>The data on the recovered partition was checked after reconstruction and confirmed to be complete. <strong>This test therefore demonstrated both restored partition access and complete data recovery.<\/strong> The result applies to this particular test; recovery on another disk depends on whether its file-system metadata and file contents remain intact.<\/p>\n<p>When repeating this experiment, validate the recovered files as well as the partition structure:<\/p>\n<ol><li>Its boundaries include the validated file-system extent and do not overlap another partition.<\/li><li>The primary and backup boot-sector locations agree with the proposed layout.<\/li><li>Directories and expected filenames can be read.<\/li><li>Important files can be copied to another disk and opened in their applications.<\/li><li>Compare file sizes with the original baseline when available. If pre-deletion hashes exist, compare those as an additional integrity check.<\/li><\/ol>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-eb9cvb0 elementor-widget elementor-widget-heading\" data-id=\"eb9cvb0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">When Can the Partition and Its Files Be Recovered?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-71ba3pu elementor-widget elementor-widget-text-editor\" data-id=\"71ba3pu\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>A deleted MBR partition entry experiment demonstrates why structural recovery can work: the mapping can disappear while enough of the file system survives to identify it again.<\/p>\n<p>The recovery path depends on what remains:<\/p>\n<table><tbody><tr><td><p><strong>Condition<\/strong><\/p><\/td><td><p><strong>Practical implication<\/strong><\/p><\/td><\/tr><tr><td><p>Consistent boot sectors, readable NTFS metadata, known boundaries<\/p><\/td><td><p>Partition reconstruction may restore access<\/p><\/td><\/tr><tr><td><p>Uncertain boundaries but readable file metadata<\/p><\/td><td><p>Recover files to another disk before changing the table<\/p><\/td><\/tr><tr><td><p>Overwritten file contents<\/p><\/td><td><p>Recreating the entry cannot restore the overwritten bytes<\/p><\/td><\/tr><tr><td><p>Encrypted data without the required key<\/p><\/td><td><p>Restoring the partition map does not decrypt the contents<\/p><\/td><\/tr><tr><td><p>Read errors or unstable hardware<\/p><\/td><td><p>Prioritize suitable imaging or specialist assessment<\/p><\/td><\/tr><\/tbody><\/table>\n<p>Partition reconstruction writes disk-layout information. File recovery extracts surviving files to another destination. Boot repair addresses startup structures. These operations solve different problems.<\/p>\n<p>For an actual missing drive, follow the <a href=\"https:\/\/www.amagicsoft.com\/hdd-recovery\/lost-partition-recovery.html\">lost partition recovery guide<\/a>. Avoid creating or formatting a replacement volume over the missing region before protecting its files.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0ohqufl elementor-widget elementor-widget-heading\" data-id=\"0ohqufl\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">How to Inspect the Same Evidence Safely in WinHex<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-mhgqwfc elementor-widget elementor-widget-text-editor\" data-id=\"mhgqwfc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Use a disk image or disposable test disk for experiments. Preserve an untouched copy before any reconstruction.<\/p>\n<ol><li>Identify the physical disk by capacity and layout, using <a href=\"https:\/\/www.amagicsoft.com\/wiki\/what-is-disk-management.html\">Windows Disk Management<\/a> for orientation.<\/li><li>Open the corresponding physical disk or image in WinHex using read-only\/view mode.<\/li><li>Inspect LBA 0 and record all four entries at <code class=\"dtec-inline-code\">0x1BE<\/code>, <code class=\"dtec-inline-code\">0x1CE<\/code>, <code class=\"dtec-inline-code\">0x1DE<\/code>, and <code class=\"dtec-inline-code\">0x1EE<\/code>.<\/li><li>Decode starting LBAs and lengths, then inspect candidate NTFS sectors using the correct logical-sector size.<\/li><li>Keep inspection separate from writing. Test any proposed reconstruction on a copy and perform the validation above.<\/li><\/ol>\n<p>For a new controlled deletion test, save LBA 0 before deletion, immediately afterward, and after reconstruction. Also preserve the relevant boot sectors and a file inventory with hashes. Those records establish which bytes changed and whether the recovered files match the originals.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-fk9rbdr elementor-widget elementor-widget-heading\" data-id=\"fk9rbdr\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">FAQs<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-pke5de8 faq-no-toc dtec-faq elementor-widget elementor-widget-elementskit-faq\" data-id=\"pke5de8\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"elementskit-faq.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"ekit-wid-con\" >\n                <div class=\"elementskit-single-faq elementor-repeater-item-4s02xs2\">\n            <div class=\"elementskit-faq-header\">\n                <h3 class=\"elementskit-faq-title\">Is deleting a partition the same as erasing the MBR?<\/h3>\n            <\/div>\n            <div class=\"elementskit-faq-body\">\n                No. A partition operation can change table records while leaving recognizable MBR code and the <code>55 AA<\/code> signature present. Erasing all of LBA 0 would remove additional information and is a different operation.            <\/div>\n        <\/div>\n                <div class=\"elementskit-single-faq elementor-repeater-item-wg2vz31\">\n            <div class=\"elementskit-faq-header\">\n                <h3 class=\"elementskit-faq-title\">Why can WinHex detect NTFS while Windows shows Unallocated?<\/h3>\n            <\/div>\n            <div class=\"elementskit-faq-body\">\n                WinHex can inspect sectors for file-system structures outside registered partitions. Windows normally needs a valid partition mapping before it can expose that region as an ordinary volume. Detection and mounting are different results.            <\/div>\n        <\/div>\n                <div class=\"elementskit-single-faq elementor-repeater-item-chiugje\">\n            <div class=\"elementskit-faq-header\">\n                <h3 class=\"elementskit-faq-title\">Does the drive letter E: exist inside an MBR entry?<\/h3>\n            <\/div>\n            <div class=\"elementskit-faq-body\">\n                No. A legacy MBR entry contains fields such as type, start, and length, not a Windows drive letter. A reappearing letter is therefore insufficient to verify the original boundaries or file contents.            <\/div>\n        <\/div>\n                <div class=\"elementskit-single-faq elementor-repeater-item-udoeeii\">\n            <div class=\"elementskit-faq-header\">\n                <h3 class=\"elementskit-faq-title\">Can a backup NTFS boot sector restore the entire MBR?<\/h3>\n            <\/div>\n            <div class=\"elementskit-faq-body\">\n                No. It can help identify one NTFS volume\u2019s parameters, but it does not contain the complete four-entry disk layout. Other partitions must be identified and preserved separately.            <\/div>\n        <\/div>\n                <div class=\"elementskit-single-faq elementor-repeater-item-29qnq3t\">\n            <div class=\"elementskit-faq-header\">\n                <h3 class=\"elementskit-faq-title\">Does this experiment predict SSD recovery results?<\/h3>\n            <\/div>\n            <div class=\"elementskit-faq-body\">\n                No. The underlying device type and discard behavior were not recorded. On flash storage, recovery also depends on whether relevant blocks were discarded and what the controller subsequently returns; this record cannot establish those conditions.            <\/div>\n        <\/div>\n                <div class=\"elementskit-single-faq elementor-repeater-item-nhhd7o5\">\n            <div class=\"elementskit-faq-header\">\n                <h3 class=\"elementskit-faq-title\">Does Healthy status prove that every file survived?<\/h3>\n            <\/div>\n            <div class=\"elementskit-faq-body\">\n                No. It shows that Windows recognizes the volume at that stage. File integrity requires checking the actual contents. In this test, the recovered data was checked separately after reconstruction and confirmed to be complete.            <\/div>\n        <\/div>\n                                <script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Is deleting a partition the same as erasing the MBR?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. A partition operation can change table records while leaving recognizable MBR code and the <code>55 AA<\/code> signature present. Erasing all of LBA 0 would remove additional information and is a different operation.\"}},{\"@type\":\"Question\",\"name\":\"Why can WinHex detect NTFS while Windows shows Unallocated?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"WinHex can inspect sectors for file-system structures outside registered partitions. Windows normally needs a valid partition mapping before it can expose that region as an ordinary volume. Detection and mounting are different results.\"}},{\"@type\":\"Question\",\"name\":\"Does the drive letter E: exist inside an MBR entry?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. A legacy MBR entry contains fields such as type, start, and length, not a Windows drive letter. A reappearing letter is therefore insufficient to verify the original boundaries or file contents.\"}},{\"@type\":\"Question\",\"name\":\"Can a backup NTFS boot sector restore the entire MBR?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. It can help identify one NTFS volume\u2019s parameters, but it does not contain the complete four-entry disk layout. Other partitions must be identified and preserved separately.\"}},{\"@type\":\"Question\",\"name\":\"Does this experiment predict SSD recovery results?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The underlying device type and discard behavior were not recorded. On flash storage, recovery also depends on whether relevant blocks were discarded and what the controller subsequently returns; this record cannot establish those conditions.\"}},{\"@type\":\"Question\",\"name\":\"Does Healthy status prove that every file survived?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. It shows that Windows recognizes the volume at that stage. File integrity requires checking the actual contents. In this test, the recovered data was checked separately after reconstruction and confirmed to be complete.\"}}]}<\/script>\n                \n    <\/div>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>This MBR partition deletion test shows how a missing partition can become unallocated while its NTFS boot sector remains readable. In the recorded case, deleting the middle partition removed its mapping from the MBR table. The following partition occupied the second table slot, and the third slot was empty. Reconstructing an entry later made E: [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":58091,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[843],"tags":[841],"class_list":["post-58090","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-lab","tag-knowledge-base"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v25.0 (Yoast SEO v27.9) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>MBR Partition Deletion Test: WinHex Results | Amagicsoft<\/title>\n<meta name=\"description\" content=\"Follow MBR partition deletion test in WinHex. Examine missing entries, surviving NTFS boot sectors, reconstruction results, and limitations.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.amagicsoft.com\/it\/kb\/lab\/mbr-partition-deletion-test.html\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"MBR Partition Deletion Test: Before and After in WinHex\" \/>\n<meta property=\"og:description\" content=\"Follow MBR partition deletion test in WinHex. Examine missing entries, surviving NTFS boot sectors, reconstruction results, and limitations.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.amagicsoft.com\/it\/kb\/lab\/mbr-partition-deletion-test.html\" \/>\n<meta property=\"og:site_name\" content=\"Amagicsoft\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/amagicsoft.2024\/\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-04T08:03:37+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-test.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1350\" \/>\n\t<meta property=\"og:image:height\" content=\"760\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Jason\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Amagicsoft\" \/>\n<meta name=\"twitter:site\" content=\"@Amagicsoft\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jason\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html\"},\"author\":{\"name\":\"Jason\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#\\\/schema\\\/person\\\/0578d4121e816aeb4661c464e92daf57\"},\"headline\":\"MBR Partition Deletion Test: Before and After in WinHex\",\"datePublished\":\"2026-11-04T08:03:37+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html\"},\"wordCount\":1975,\"publisher\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.amagicsoft.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/mbr-partition-deletion-test.webp\",\"keywords\":[\"Knowledge Base\"],\"articleSection\":[\"Recovery Lab\"],\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html\",\"url\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html\",\"name\":\"MBR Partition Deletion Test: WinHex Results | Amagicsoft\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.amagicsoft.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/mbr-partition-deletion-test.webp\",\"datePublished\":\"2026-11-04T08:03:37+00:00\",\"description\":\"Follow MBR partition deletion test in WinHex. Examine missing entries, surviving NTFS boot sectors, reconstruction results, and limitations.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#primaryimage\",\"url\":\"https:\\\/\\\/www.amagicsoft.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/mbr-partition-deletion-test.webp\",\"contentUrl\":\"https:\\\/\\\/www.amagicsoft.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/mbr-partition-deletion-test.webp\",\"width\":1350,\"height\":760,\"caption\":\"MBR Partition Deletion Test\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/kb\\\/lab\\\/mbr-partition-deletion-test.html#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.amagicsoft.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"MBR Partition Deletion Test: Before and After in WinHex\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#website\",\"url\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/\",\"name\":\"Amagicsoft\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#organization\",\"name\":\"Amagicsoft\",\"url\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.amagicsoft.com\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/cropped-logo_512x512-1.webp\",\"contentUrl\":\"https:\\\/\\\/www.amagicsoft.com\\\/wp-content\\\/uploads\\\/2025\\\/04\\\/cropped-logo_512x512-1.webp\",\"width\":512,\"height\":512,\"caption\":\"Amagicsoft\"},\"image\":{\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/amagicsoft.2024\\\/\",\"https:\\\/\\\/x.com\\\/Amagicsoft\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.amagicsoft.com\\\/zh\\\/#\\\/schema\\\/person\\\/0578d4121e816aeb4661c464e92daf57\",\"name\":\"Jason\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e418e1d84edaecc0279eddcda6019a4b3148dfa0291bf7c28940c09838a090e?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e418e1d84edaecc0279eddcda6019a4b3148dfa0291bf7c28940c09838a090e?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5e418e1d84edaecc0279eddcda6019a4b3148dfa0291bf7c28940c09838a090e?s=96&d=mm&r=g\",\"caption\":\"Jason\"},\"description\":\"Jason is a data recovery and technical support specialist with over 15 years of hands-on experience. He has worked extensively with frontline users, troubleshooting difficult data loss cases and providing practical recovery solutions for accidental deletion, formatted drives, damaged file systems, lost partitions, system failures, and other recovery emergencies. His expertise also includes backup and restoration, file repair, and disaster recovery, with a strong emphasis on safe, reliable, and technically accurate guidance.\",\"url\":\"https:\\\/\\\/www.amagicsoft.com\\\/it\\\/author\\\/jason\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Test di eliminazione delle partizioni MBR: risultati di WinHex | Amagicsoft","description":"Segui la procedura di prova per l'eliminazione delle partizioni MBR in WinHex. Esamina le voci mancanti, i settori di avvio NTFS rimasti intatti, i risultati della ricostruzione e i limiti.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.amagicsoft.com\/it\/kb\/lab\/mbr-partition-deletion-test.html","og_locale":"it_IT","og_type":"article","og_title":"MBR Partition Deletion Test: Before and After in WinHex","og_description":"Follow MBR partition deletion test in WinHex. Examine missing entries, surviving NTFS boot sectors, reconstruction results, and limitations.","og_url":"https:\/\/www.amagicsoft.com\/it\/kb\/lab\/mbr-partition-deletion-test.html","og_site_name":"Amagicsoft","article_publisher":"https:\/\/www.facebook.com\/amagicsoft.2024\/","article_published_time":"2026-11-04T08:03:37+00:00","og_image":[{"width":1350,"height":760,"url":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-test.webp","type":"image\/webp"}],"author":"Jason","twitter_card":"summary_large_image","twitter_creator":"@Amagicsoft","twitter_site":"@Amagicsoft","twitter_misc":{"Scritto da":"Jason","Tempo di lettura stimato":"11 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#article","isPartOf":{"@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html"},"author":{"name":"Jason","@id":"https:\/\/www.amagicsoft.com\/zh\/#\/schema\/person\/0578d4121e816aeb4661c464e92daf57"},"headline":"MBR Partition Deletion Test: Before and After in WinHex","datePublished":"2026-11-04T08:03:37+00:00","mainEntityOfPage":{"@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html"},"wordCount":1975,"publisher":{"@id":"https:\/\/www.amagicsoft.com\/zh\/#organization"},"image":{"@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#primaryimage"},"thumbnailUrl":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-test.webp","keywords":["Knowledge Base"],"articleSection":["Recovery Lab"],"inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html","url":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html","name":"Test di eliminazione delle partizioni MBR: risultati di WinHex | Amagicsoft","isPartOf":{"@id":"https:\/\/www.amagicsoft.com\/zh\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#primaryimage"},"image":{"@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#primaryimage"},"thumbnailUrl":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-test.webp","datePublished":"2026-11-04T08:03:37+00:00","description":"Segui la procedura di prova per l'eliminazione delle partizioni MBR in WinHex. Esamina le voci mancanti, i settori di avvio NTFS rimasti intatti, i risultati della ricostruzione e i limiti.","breadcrumb":{"@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#primaryimage","url":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-test.webp","contentUrl":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2026\/11\/mbr-partition-deletion-test.webp","width":1350,"height":760,"caption":"MBR Partition Deletion Test"},{"@type":"BreadcrumbList","@id":"https:\/\/www.amagicsoft.com\/kb\/lab\/mbr-partition-deletion-test.html#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.amagicsoft.com\/"},{"@type":"ListItem","position":2,"name":"MBR Partition Deletion Test: Before and After in WinHex"}]},{"@type":"WebSite","@id":"https:\/\/www.amagicsoft.com\/zh\/#website","url":"https:\/\/www.amagicsoft.com\/zh\/","name":"Amagicsoft","description":"","publisher":{"@id":"https:\/\/www.amagicsoft.com\/zh\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.amagicsoft.com\/zh\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/www.amagicsoft.com\/zh\/#organization","name":"Amagicsoft","url":"https:\/\/www.amagicsoft.com\/zh\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/www.amagicsoft.com\/zh\/#\/schema\/logo\/image\/","url":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2025\/04\/cropped-logo_512x512-1.webp","contentUrl":"https:\/\/www.amagicsoft.com\/wp-content\/uploads\/2025\/04\/cropped-logo_512x512-1.webp","width":512,"height":512,"caption":"Amagicsoft"},"image":{"@id":"https:\/\/www.amagicsoft.com\/zh\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/amagicsoft.2024\/","https:\/\/x.com\/Amagicsoft"]},{"@type":"Person","@id":"https:\/\/www.amagicsoft.com\/zh\/#\/schema\/person\/0578d4121e816aeb4661c464e92daf57","name":"Jason","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/5e418e1d84edaecc0279eddcda6019a4b3148dfa0291bf7c28940c09838a090e?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5e418e1d84edaecc0279eddcda6019a4b3148dfa0291bf7c28940c09838a090e?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5e418e1d84edaecc0279eddcda6019a4b3148dfa0291bf7c28940c09838a090e?s=96&d=mm&r=g","caption":"Jason"},"description":"Jason \u00e8 uno specialista nel recupero dati e nell\u2019assistenza tecnica con oltre 15 anni di esperienza sul campo. Ha lavorato a lungo a stretto contatto con gli utenti finali, risolvendo casi complessi di perdita di dati e fornendo soluzioni pratiche di recupero in caso di cancellazione accidentale, unit\u00e0 formattate, file system danneggiati, partizioni perse, guasti di sistema e altre emergenze di recupero. La sua competenza comprende anche il backup e il ripristino, la riparazione dei file e il ripristino di emergenza, con particolare attenzione a fornire indicazioni sicure, affidabili e tecnicamente accurate.","url":"https:\/\/www.amagicsoft.com\/it\/author\/jason"}]}},"_links":{"self":[{"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/posts\/58090","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/comments?post=58090"}],"version-history":[{"count":3,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/posts\/58090\/revisions"}],"predecessor-version":[{"id":58097,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/posts\/58090\/revisions\/58097"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/media\/58091"}],"wp:attachment":[{"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/media?parent=58090"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/categories?post=58090"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.amagicsoft.com\/it\/wp-json\/wp\/v2\/tags?post=58090"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}