cgsecurity.org

cgrenier, you said:

If you really want to work on the clone,
- start by using testdisk on the original disk, Analyse, Backup, Quit
- run testdisk on the clone, Analyse, use Load to get the locations recorded by Backup previously, for each partition, set the partition type, on next screen, choose ...

...Also I'm reasoning somewhat mechanically about where the head was on the platter at the time of power-cut. I could not see the screen at the time and though the laptop was shutdown. I chose shutdown, but it had restarted anyway. I had power-cycled the external USB RAID during this time--during ...

Can the header be recreated from from the password?

Can you suggest a good place or person to ask? I can't access the DC forum.

....

This problem, based on the basic behavior of the disk, seems to be about corruption in the MBR of this GPT disk. I'm assuming that all disks, even GPT ones, have an ...

The TrueCrypt/DiskCryptor materials mention backing up the header of the encrypted container. I did not do that for this drive. Does anyone know whether restoration of the saved header is the only way to repair the partition?

o new registrations are allowed on the DiskCryptor forum. I cannot ask ...

There was a problem with disk space, which is now fixed. I've done another analyze and a backup.log is currently being created. So far this is the contents of the backup.log file:

#1525895149 Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364794 255 63
1 : start= 34, size= 262144, Id=00, P
2 : start ...

The status message below is confusing. I cursored rightward and chose Backup with Enter, but the "Analyze cylinder..." and the check_FAT messages seem to indicate another Analyze is in progress. I do see a backup.log file created at the right time, but it's size is 1 KB, and it hasn't changed for ...

I'm currently creating a Backup from the above screen. Is this the correct thing to do now, or should I continue trying to get TestDisk to list a corrupted NTFS partition? This drive is not a boot drive; it's just a data drive.

Below is a screenshot of a second analyze. You can see the basic data partition and how there is no filesystem marker. The partition whose first segment (I think) was corrupted is definitely NTFS. Can I write the marker without deleting the table?

I hit Enter and see the "No partition found or selected from memory." message and the Deeper Search choice, but I can't select it.

Can someone suggest a next step?