Recover previous partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
overclocked
Posts: 6
Joined: 09 Jan 2018, 12:39

Recover previous partition

#1 Post by overclocked »

I am trying to find the previous partiton. I did all steps... I did deep search too.

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.10.0-28-generic (#32~16.04.2-Ubuntu SMP Thu Jul 20 10:19:48 UTC 2017) x86_64
Compiler: GCC 4.4
Compilation date: 2015-04-18T13:03:42
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.7
/dev/sda: LBA, LBA48, DCO support
/dev/sda: size 500118192 sectors
/dev/sda: user_max 500118192 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
/dev/sr0 is not an ATA disk
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - MTFDDAK256MAM-1K1, S/N:1250092062A6, FW:0909
Disk /dev/sdf - 4007 MB / 3822 MiB - CHS 1018 124 62, sector size=512 - TOSHIBA TransMemory, FW:PMAP
Disk /dev/sdg - 4007 MB / 3822 MiB - CHS 1018 124 62, sector size=512 - TOSHIBA TransMemory, FW:PMAP
Disk /dev/sdh - 15 GB / 14 GiB - CHS 14800 64 32, sector size=512, FW:8.07
Disk /dev/sr0 - 47 GB / 44 GiB - 23301376 sectors (RO), sector size=2048 - hp BD B DH8B2SHB, S/N:226303900624, FW:SHDQ

write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 1/0/1,lba=2048
Partition table type (auto): EFI GPT
Disk /dev/sda - 256 GB / 238 GiB - MTFDDAK256MAM-1K1
Partition table type: EFI GPT

Analyse Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=500118191 (expected 500118191)
hdr_lba_start=34
hdr_lba_end=500118158
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
3 P MS Reserved 2834432 3096575 262144 [Microsoft reserved partition]
Current partition structure:
1 P Unknown 2048 2097151 2095104 [Basic data partition]
2 P EFI System 2097152 2834431 737280 [EFI system partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2834432 3096575 262144 [Microsoft reserved partition]
3 P MS Reserved 2834432 3096575 262144 [Microsoft reserved partition]
4 P MS Data 3096576 477091839 473995264 [Basic data partition]
5 P MS Data 477091840 500117503 23025664 [Basic data partition]

search_part()
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
NTFS at 0/32/33
filesystem size 2095104
sectors_per_cluster 8
mft_lcn 87296
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=1072693248, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size 2095104
sectors_per_cluster 8
mft_lcn 87296
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2048 2097151 2095104
NTFS, blocksize=4096, 1072 MB / 1023 MiB
FAT32 at 130/138/9
FAT1 : 6766-7478
FAT2 : 7479-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-737279
sectors : 737280
cluster_size : 8
no_of_cluster : 91136 (2 - 91137)
fat_length 713 calculated 713

FAT32 at 130/138/9
MS Data 2097152 2834431 737280 [SYSTEM]
FAT32, blocksize=4096, 377 MB / 360 MiB
NTFS at 192/192/1
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1585446912, part_size=242685575168, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 192/192/1
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 3096576 477091839 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
NTFS at 29697/151/23
filesystem size 23025664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 454066177 477091840 23025664
NTFS found using backup sector, blocksize=4096, 11 GB / 10 GiB
NTFS at 29697/151/23
filesystem size 23025664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 477091840 500117503 23025664
NTFS, blocksize=4096, 11 GB / 10 GiB

Results
P MS Data 2048 2097151 2095104
NTFS, blocksize=4096, 1072 MB / 1023 MiB
P MS Data 2097152 2834431 737280 [SYSTEM]
FAT32, blocksize=4096, 377 MB / 360 MiB
MS Data 3096576 477091839 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
MS Data 454066177 477091840 23025664
NTFS found using backup sector, blocksize=4096, 11 GB / 10 GiB
MS Data 477091840 500117503 23025664
NTFS, blocksize=4096, 11 GB / 10 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 2095104 linear /dev/sda 2048" | dmsetup create test0
echo "0 737280 linear /dev/sda 2097152" | dmsetup create test1
echo "0 473995264 linear /dev/sda 3096576" | dmsetup create test2
echo "0 23025664 linear /dev/sda 454066177" | dmsetup create test3
echo "0 23025664 linear /dev/sda 477091840" | dmsetup create test4
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_ucstoutf8: iconv_open failed


dir_partition inode=5
MS Data 3096576 477091839 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
Directory /
5 dr-xr-xr-x 0 0 0 22-Jan-2018 23:03 .
5 dr-xr-xr-x 0 0 0 22-Jan-2018 23:03 ..
9427 dr-xr-xr-x 0 0 0 3-Dec-2017 01:04 $RECYCLE.BIN
357877 dr-xr-xr-x 0 0 0 3-Dec-2017 17:15 ArcTemp
3771 dr-xr-xr-x 0 0 0 11-Aug-2012 01:09 Boot
1456 dr-xr-xr-x 0 0 0 3-Dec-2017 01:09 NVIDIA
4621 dr-xr-xr-x 0 0 0 26-Jul-2012 07:33 PerfLogs
4622 dr-xr-xr-x 0 0 0 6-Jan-2018 11:57 Program Files
17307 dr-xr-xr-x 0 ntfs_mst_post_read_fixup_warn: magic: 0xe12e79da size: 1024 usa_ofs: 63129 usa_count: 1656: Invalid argument
Record 0 has no FILE magic (0xe12e79da)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0xe12e79da size: 1024 usa_ofs: 63129 usa_count: 1656: Invalid argument
Record 0 has no FILE magic (0xe12e79da)
Failed to load $MFT: Input/output error
0 0 12-Jan-2018 12:15 Program Files (x86)
17375 dr-xr-xr-x 0 0 0 26-Dec-2017 22:56 ProgramData
17488 dr-xr-xr-x 0 0 0 11-Aug-2012 00:16 Recovery
4609 dr-xr-xr-x 0 0 0 3-Dec-2017 01:03 SWSETUP
4611 dr-xr-xr-x 0 0 0 3-Dec-2017 01:03 SYSTEM.SAV
6597 dr-xr-xr-x 0 0 0 22-Jan-2018 02:32 System Volume Information
17489 dr-xr-xr-x 0 0 0 3-Dec-2017 01:02 Users
17620 dr-xr-xr-x 0 0 0 11-Jan-2018 10:14 Windows
98 dr-xr-xr-x 0 0 0 3-Dec-2017 01:03 hp
4601 dr-xr-xr-x 0 0 0 11-Aug-2012 00:16 inetpub
403313 dr-xr-xr-x 0 0 0 11-Jan-2018 10:13 sources
35 -r--r--r-- 0 0 0 3-Dec-2017 03:22 13NA1RC8601.restore
34097 -r--r--r-- 0 0 1 2-Jun-2012 14:30 BOOTNXT
736 -r--r--r-- 0 0 0 3-Dec-2017 03:23 OS
274645 -r--r--r-- 0 0 232960 7-Nov-2007 13:12 VC_RED.MSI
12411 -r--r--r-- 0 0 1442522 7-Nov-2007 13:09 VC_RED.cab
34094 -r--r--r-- 0 0 398156 26-Jul-2012 03:44 bootmgr
12330 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.1028.txt
12331 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.1031.txt
12332 -r--r--r-- 0 0 10134 7-Nov-2007 13:00 eula.1033.txt
12372 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.1036.txt
12375 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.1040.txt
12394 -r--r--r-- 0 0 118 7-Nov-2007 13:00 eula.1041.txt
12395 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.1042.txt
12325 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.2052.txt
12335 -r--r--r-- 0 0 17734 7-Nov-2007 13:00 eula.3082.txt
13091 -r--r--r-- 0 0 1110 7-Nov-2007 13:00 globdata.ini
119 -r--r--r-- 0 0 27435802624 23-Jan-2018 07:19 hiberfil.sys
13163 -r--r--r-- 0 0 562688 7-Nov-2007 13:03 install.exe
13170 -r--r--r-- 0 0 843 7-Nov-2007 13:00 install.ini
13171 -r--r--r-- 0 0 76304 7-Nov-2007 13:03 install.res.1028.dll
13172 -r--r--r-- 0 0 96272 7-Nov-2007 13:03 install.res.1031.dll
13173 -r--r--r-- 0 0 91152 7-Nov-2007 13:03 install.res.1033.dll
13092 -r--r--r-- 0 0 97296 7-Nov-2007 13:03 install.res.1036.dll
13096 -r--r--r-- 0 0 95248 7-Nov-2007 13:03 install.res.1040.dll
13098 -r--r--r-- 0 0 81424 7-Nov-2007 13:03 install.res.1041.dll
13162 -r--r--r-- 0 0 79888 7-Nov-2007 13:03 install.res.1042.dll
13174 -r--r--r-- 0 0 75792 7-Nov-2007 13:03 install.res.2052.dll
13095 -r--r--r-- 0 0 96272 7-Nov-2007 13:03 install.res.3082.dll
154 -r--r--r-- 0 0 4563402752 23-Jan-2018 07:19 pagefile.sys
6602 -r--r--r-- 0 0 268435456 23-Jan-2018 07:19 swapfile.sys
12406 -r--r--r-- 0 0 5686 7-Nov-2007 13:00 vcredist.bmp
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

MS Data 454066177 477091840 23025664
NTFS found using backup sector, blocksize=4096, 11 GB / 10 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_ucstoutf8: iconv_open failed


dir_partition inode=5
MS Data 477091840 500117503 23025664
NTFS, blocksize=4096, 11 GB / 10 GiB
Directory /
5 dr-xr-xr-x 0 0 0 22-Jan-2018 23:03 .
5 dr-xr-xr-x 0 0 0 22-Jan-2018 23:03 ..
386 dr-xr-xr-x 0 0 0 3-Dec-2017 01:04 $RECYCLE.BIN
161 dr-xr-xr-x 0 0 0 3-Dec-2017 02:58 EFI
37 dr-xr-xr-x 0 0 0 3-Dec-2017 02:58 Recovery
329 dr-xr-xr-x 0 0 0 3-Dec-2017 02:58 RecoveryImage
393 dr-xr-xr-x 0 0 0 3-Dec-2017 02:58 SOURCES
384 dr-xr-xr-x 0 0 0 3-Dec-2017 01:57 System Volume Information
39 dr-xr-xr-x 0 0 0 3-Dec-2017 02:58 boot
306 dr-xr-xr-x 0 0 0 3-Dec-2017 02:58 hp
391 -r--r--r-- 0 0 0 3-Dec-2017 01:03 BT_HP.FLG
389 -r--r--r-- 0 0 748 3-Dec-2017 02:58 CSP.DAT
390 -r--r--r-- 0 0 10840 3-Dec-2017 02:58 DeployRp.log
378 -r--r--r-- 0 0 0 3-Dec-2017 02:55 RPCONFIG.LOG
35 -r--r--r-- 0 0 398156 26-Jul-2012 06:44 bootmgr
36 -r--r--r-- 0 0 1350896 26-Jul-2012 07:57 bootmgr.efi
392 -r--r--r-- 0 0 44 3-Dec-2017 01:03 language.ini

interface_write()
1 P MS Data 2048 2097151 2095104
2 P MS Data 2097152 2834431 737280 [SYSTEM]
3 P MS Data 3096576 477091839 473995264

search_part()
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
NTFS at 0/32/33
filesystem size 2095104
sectors_per_cluster 8
mft_lcn 87296
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=1072693248, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size 2095104
sectors_per_cluster 8
mft_lcn 87296
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2048 2097151 2095104
NTFS, blocksize=4096, 1072 MB / 1023 MiB
NTFS at 99/188/2
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 1596107 1602280 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 99/188/2
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 1602280 1608453 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 130/138/8
filesystem size 2095104
sectors_per_cluster 8
mft_lcn 87296
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2048 2097151 2095104
NTFS found using backup sector, blocksize=4096, 1072 MB / 1023 MiB
NTFS at 130/138/8
filesystem size 2095104
sectors_per_cluster 8
mft_lcn 87296
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2097151 4192254 2095104
NTFS, blocksize=4096, 1072 MB / 1023 MiB
FAT32 at 130/138/9
FAT1 : 6766-7478
FAT2 : 7479-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-737279
sectors : 737280
cluster_size : 8
no_of_cluster : 91136 (2 - 91137)
fat_length 713 calculated 713

FAT32 at 130/138/9
MS Data 2097152 2834431 737280 [SYSTEM]
FAT32, blocksize=4096, 377 MB / 360 MiB
FAT32 at 130/138/15
FAT1 : 6766-7478
FAT2 : 7479-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-737279
sectors : 737280
cluster_size : 8
no_of_cluster : 91136 (2 - 91137)
fat_length 713 calculated 713
FAT differs, FAT sectors=704-713/713
set_FAT_info: name from BS used

FAT32 at 130/138/15
MS Data 2097152 2834431 737280 [NO NAME]
FAT32, blocksize=4096, 377 MB / 360 MiB
FAT32 at 130/138/15
FAT1 : 6766-7478
FAT2 : 7479-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-737279
sectors : 737280
cluster_size : 8
no_of_cluster : 91136 (2 - 91137)
fat_length 713 calculated 713
FAT differs, FAT sectors=704-713/713
set_FAT_info: name from BS used

FAT32 at 130/138/15
MS Data 2097158 2834437 737280 [NO NAME]
FAT32, blocksize=4096, 377 MB / 360 MiB
NTFS at 192/192/1
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1585446912, part_size=242685575168, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 192/192/1
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 3096576 477091839 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB

LVM magic value at 1082/123/19

ReiserFS Marker at 1123/110/19

LVM magic value at 1337/205/44

LVM magic value at 1449/140/48

LVM magic value at 2582/179/23

LVM magic value at 3386/177/38
FAT12 at 3392/148/29
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 3392/148/29
MS Data 54501832 54504711 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 3720/243/52
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 59770987 59777160 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 3720/243/52
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 59777160 59783333 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
FAT12 at 3721/86/54
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 3721/86/54
MS Data 59783336 59786215 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 3721/132/36
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 3721/132/36
MS Data 59786216 59789095 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB

recover_EXT2: s_block_group_nr=0/255, s_mnt_count=30/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8388352
recover_EXT2: part_size 67106816
MS Data 129308992 196415807 67106816
ext4 blocksize=4096 Large_file Sparse_SB Recover, 34 GB / 31 GiB



recover_EXT2: s_block_group_nr=0/255, s_mnt_count=13/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8388352
recover_EXT2: part_size 67106816
MS Data 305881344 372988159 67106816
ext4 blocksize=4096 Large_file Sparse_SB Recover, 34 GB / 31 GiB

recover_EXT2: s_block_group_nr=0/255, s_mnt_count=13/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8388352
recover_EXT2: part_size 67106816
MS Data 305881424 372988239 67106816
ext4 blocksize=4096 Large_file Sparse_SB Recover, 34 GB / 31 GiB

recover_EXT2: s_block_group_nr=0/255, s_mnt_count=13/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8388352
recover_EXT2: part_size 67106816
MS Data 305881512 372988327 67106816
ext4 blocksize=4096 Large_file Sparse_SB Recover, 34 GB / 31 GiB

recover_EXT2: s_block_group_nr=0/255, s_mnt_count=13/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8388352
recover_EXT2: part_size 67106816
MS Data 305881592 372988407 67106816
ext4 blocksize=4096 Large_file Sparse_SB Recover, 34 GB / 31 GiB


block_group_nr 243

recover_EXT2: "e2fsck -b 7962624 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=243/255, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8388352
recover_EXT2: part_size 67106816
MS Data 271094880 338201695 67106816
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 34 GB / 31 GiB
FAT32 at 20877/176/12
FAT1 : 32-16399
FAT2 : 16400-32767
start_rootdir : 32768 root cluster : 2
Data : 32768-33552383
sectors : 33552384
cluster_size : 16
no_of_cluster : 2094976 (2 - 2094977)
fat_length 16368 calculated 16368
set_FAT_info: name from BS used

FAT32 at 20877/176/12
MS Data 335400104 368952487 33552384 [NO NAME]
FAT32, blocksize=8192, 17 GB / 15 GiB
FAT32 at 20877/176/18
FAT1 : 32-16399
FAT2 : 16400-32767
start_rootdir : 32768 root cluster : 2
Data : 32768-33552383
sectors : 33552384
cluster_size : 16
no_of_cluster : 2094976 (2 - 2094977)
fat_length 16368 calculated 16368
set_FAT_info: name from BS used

FAT32 at 20877/176/18
MS Data 335400110 368952493 33552384 [NO NAME]
FAT32, blocksize=8192, 17 GB / 15 GiB
FAT12 at 21093/32/12
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 21093/32/12
MS Data 338861072 338863951 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 21093/77/57
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 21093/77/57
MS Data 338863952 338866831 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT16 at 21577/128/56
check_FAT: Unusual number of reserved sectors 4 (FAT), should be 1.
FAT1 : 4-23
FAT2 : 24-43
start_rootdir : 44
Data : 76-18019
sectors : 18020
cluster_size : 4
no_of_cluster : 4486 (2 - 4487)
fat_length 20 calculated 18
heads/cylinder 64 (FAT) != 255 (HD)
sect/track 32 (FAT) != 63 (HD)

FAT16 at 21577/128/56
MS Data 346642624 346660643 18020 [ANACONDA]
FAT16, blocksize=2048, 9226 KB / 9010 KiB

HFS+ magic value at 21578/159/58

HFS+ magic value at 21578/159/58
part_size 38128
Mac HFS 346660644 346698771 38128
HFS+ blocksize=4096 + Backup, 19 MB / 18 MiB

HFS+ magic value at 21578/159/60
part_size 38128
Mac HFS 346622520 346660647 38128
HFS+ found using backup sector!, 19 MB / 18 MiB

HFS+ magic value at 21581/0/4
part_size 38128
Mac HFS 346698768 346736895 38128
HFS+ blocksize=4096, 19 MB / 18 MiB

HFS+ magic value at 21581/0/6
part_size 38128
Mac HFS 346660644 346698771 38128
HFS+ found using backup sector!, 19 MB / 18 MiB
FAT12 at 21817/120/48
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 21817/120/48
MS Data 350497712 350500591 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 21817/166/30
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 21817/166/30
MS Data 350500592 350503471 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 21831/215/9
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 21831/215/9
MS Data 350728568 350731447 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 21833/3/51
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 350741211 350747384 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 21833/3/51
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 350747384 350753557 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB

HFS magic value at 22647/36/39
part_size 1636333214
Mac HFS 363826361 2000159574 1636333214
HFS blocksize=16777216, 837 GB / 780 GiB
This partition ends after the disk limits. (start=363826361, size=1636333214, end=2000159574, disk end=500118192)

HFS magic value at 22647/36/41

HFS magic value at 25123/60/47
part_size 1688998914
Mac HFS 403604821 2092603734 1688998914
HFS blocksize=16777216, 864 GB / 805 GiB
This partition ends after the disk limits. (start=403604821, size=1688998914, end=2092603734, disk end=500118192)

HFS magic value at 25123/60/49
FAT12 at 25264/115/8
check_FAT: Unusual media descriptor (0xf8!=0xf0)
FAT1 : 1-4
FAT2 : 5-8
start_rootdir : 9
Data : 41-4668
sectors : 4672
cluster_size : 4
no_of_cluster : 1157 (2 - 1158)
fat_length 4 calculated 4
heads/cylinder 64 (FAT) != 255 (HD)
sect/track 32 (FAT) != 63 (HD)

FAT12 at 25264/115/8
MS Data 405873412 405878083 4672 [NO NAME]
FAT12, blocksize=2048, 2392 KB / 2336 KiB
FAT12 at 25293/243/47
check_FAT: Unusual media descriptor (0xf8!=0xf0)
FAT1 : 1-12
FAT2 : 13-24
start_rootdir : 25
Data : 57-12536
sectors : 12540
cluster_size : 4
no_of_cluster : 3120 (2 - 3121)
fat_length 12 calculated 10
heads/cylinder 64 (FAT) != 255 (HD)
sect/track 32 (FAT) != 63 (HD)

FAT12 at 25293/243/47
MS Data 406347400 406359939 12540 [ANACONDA]
FAT12, blocksize=2048, 6420 KB / 6270 KiB
NTFS at 27398/97/27
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=225359363584, part_size=242685575168, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 27398/97/27
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 440155007 914150270 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
This partition ends after the disk limits. (start=440155007, size=473995264, end=914150270, disk end=500118192)

HFS magic value at 28548/209/12
part_size 3389017435
Mac HFS 458636798 3847654232 3389017435 [imation]
HFS blocksize=67108864, 1735 GB / 1616 GiB
This partition ends after the disk limits. (start=458636798, size=3389017435, end=3847654232, disk end=500118192)

HFS magic value at 28548/209/14

LVM magic value at 29398/62/58

HFS magic value at 29431/63/34
part_size 1636333214
Mac HFS 472813017 2109146230 1636333214
HFS blocksize=16777216, 837 GB / 780 GiB
This partition ends after the disk limits. (start=472813017, size=1636333214, end=2109146230, disk end=500118192)

HFS magic value at 29431/63/36
NTFS at 29697/151/22
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 3096576 477091839 473995264
NTFS found using backup sector, blocksize=4096, 242 GB / 226 GiB
NTFS at 29697/151/22
filesystem size 473995264
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 477091839 951087102 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
This partition ends after the disk limits. (start=477091839, size=473995264, end=951087102, disk end=500118192)
NTFS at 29697/151/23
filesystem size 23025664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 454066177 477091840 23025664
NTFS found using backup sector, blocksize=4096, 11 GB / 10 GiB
NTFS at 29697/151/23
filesystem size 23025664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 477091840 500117503 23025664
NTFS, blocksize=4096, 11 GB / 10 GiB
FAT12 at 29700/9/54
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 29700/9/54
MS Data 477131120 477133999 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 29700/55/36
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 29700/55/36
MS Data 477134000 477136879 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 30088/0/49
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 483357595 483363768 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 30088/0/49
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 483363768 483369941 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
FAT12 at 30088/171/52
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 30088/171/52
MS Data 483374544 483377423 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 30088/217/34
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 30088/217/34
MS Data 483377424 483380303 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 31130/223/5
filesystem size 23025664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 477091840 500117503 23025664
NTFS found using backup sector, blocksize=4096, 11 GB / 10 GiB
NTFS at 31130/223/5
filesystem size 23025664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS: Can't read MFT
MS Data 500117503 523143166 23025664
NTFS, blocksize=4096, 11 GB / 10 GiB
This partition ends after the disk limits. (start=500117503, size=23025664, end=523143166, disk end=500118192)
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (256 GB / 238 GiB) seems too small! (< 1969 GB / 1834 GiB)
The following partitions can't be recovered:
Mac HFS 191353136 1827686349 1636333214
HFS blocksize=16777216, 837 GB / 780 GiB
Mac HFS 363826361 2000159574 1636333214
HFS blocksize=16777216, 837 GB / 780 GiB
Mac HFS 403604821 2092603734 1688998914
HFS blocksize=16777216, 864 GB / 805 GiB
MS Data 440155007 914150270 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
Mac HFS 458636798 3847654232 3389017435 [imation]
HFS blocksize=67108864, 1735 GB / 1616 GiB
Mac HFS 472813017 2109146230 1636333214
HFS blocksize=16777216, 837 GB / 780 GiB
MS Data 477091839 951087102 473995264
NTFS, blocksize=4096, 242 GB / 226 GiB
MS Data 500117503 523143166 23025664
NTFS, blocksize=4096, 11 GB / 10 GiB

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recover previous partition

#2 Post by cgrenier »

The whole disk seems used. What partition are you looking for ? A deleted partition that have been replace by a new one ?
What was the type of the partition ? exFAT, NTFS, ext4 ? Have you seen it after Deeper Search ?

overclocked
Posts: 6
Joined: 09 Jan 2018, 12:39

Re: Recover previous partition

#3 Post by overclocked »

Yeah, it was whole disk. I was trying to find previous partition. I formatted and reinstall windows 8. It's NTFS. Yes, I used deeper search. I saw too many MS Data and a message (HD seems too small) after deeper search.

It has 250 gb SSD.


What partition are you looking for ? I am trying to search for partitions inside my partition C:
A deleted partition that have been replace by a new one ? (yes)
What was the type of the partition ? exFAT, NTFS, ext4 ? NTFS
Have you seen it after Deeper Search ? Yes, I have. I was not able to post full log here because it has more than 100,000 words. The log showed me that I have too many MS Data.

Thank you for answering back and approving the thread.

overclocked
Posts: 6
Joined: 09 Jan 2018, 12:39

Re: Recover previous partition

#4 Post by overclocked »

Update: You may watch two videos. That's what it shows like that.

Part 1:

https://www.youtube.com/watch?v=BhHQQFQpm_k

Part 2:

https://www.youtube.com/watch?v=e2_9VHJPHLM&t=7s

Sorry about part 2's wrong side.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recover previous partition

#5 Post by cgrenier »

Try to list the files from each partition that TestDisk has found. If it's a partition you want to recover, set it as P(rimary) or *(bootable) and on next screen, choose Write, confirm, Quit.
Note that you probably won't be able to boot from this disk anymore!

overclocked
Posts: 6
Joined: 09 Jan 2018, 12:39

Re: Recover previous partition

#6 Post by overclocked »

There are too many ms data. Most of them are ext4. Some of them are damaged. I haven't seen one partition with old files. If I add it as primary or *(bootable), that means I will boot that partition immediately? And what about "HHD seems too small"?

overclocked
Posts: 6
Joined: 09 Jan 2018, 12:39

Re: Recover previous partition

#7 Post by overclocked »

I forgot to add the picture here. You should be able to see the message. It says The HardDisk seems too small.
Attachments
Screenshot from 2018-02-21 21-22-18.jpg
Screenshot from 2018-02-21 21-22-18.jpg (103.53 KiB) Viewed 3598 times

overclocked
Posts: 6
Joined: 09 Jan 2018, 12:39

Re: Recover previous partition

#8 Post by overclocked »

I believe that there is still a partition. I am not sure how to solve "The hard disk seems too small!" issue.

Locked