One disk is two disks?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
PassNGrin
Posts: 32
Joined: 23 May 2020, 23:56

One disk is two disks?

#1 Post by PassNGrin »

So after my old laptop got stuck on a booting logo and kept restarting I removed its hard drive and attached it to a new computer by using a USB-SATA-something adapter.

I couldn't access its files due to a GPT Protection Partition that apparently is larger than the actual size of the hard drive storage.

AOMEI didn't work, because of an error code 4 or I didn't have the paid version

MiniTool doesn't exactly work because I want to see the old directory structure I had on there and it only restores files without their old names.

When I used TestDisk it listed two entries for the same drive for some reason?

/dev/sdb
\\.\PhysicalDrive1

What do these mean?

I'm not sure if it's even safe to analyse for a log.
Should I just give up and use PhotoRec?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: One disk is two disks?

#2 Post by cgrenier »

Use either one of the listed disk.

PassNGrin
Posts: 32
Joined: 23 May 2020, 23:56

Re: One disk is two disks?

#3 Post by PassNGrin »

Before I get back on topic, I just wanna say that apparently getting the SMART status isn't always reliable for checking for disk problems. I still wonder if it was a memory error though.

Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63
Partition Start End Size in sectors
1 P MS Data 29952 244062463 244032512
2 P MS Data 244062464 244190463 128000 [Recovery]

So before I got to this point I check the program files folder in the first partition and it turned out that the last thing that was modified was some Hi-Rez Software (I guess I should never play their games again, I really put off my computer problems too late).

I forgot to check if my documents were ok though, so I quit at that point and did another analyse.

now the second analyse took longer than usual, I got a read error at 0/53/61, and I stopped the scan at cylinder 16

I can still list my files, thank goodness. Checking out the last used user (me) reveals that the last modified things were NTUSER.DAT and... IntelGraphicsProfiles? I don't remember changing any graphics setting or profile that day
Also, none of my documents are in red so they're probably fine.

My main question: That partition size looks HUGE (9 digits), and as I've said before, the disk manager showed a partition larger than the drive could hold. The example step-by-step didn't cover this, so I quit out of that part cuz I'm afraid of messing up my data. What should I do from here?

Log of first Analyse:
Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63
check_FAT: number of bytes per sector mismatches 512 (FAT) != 4096 (HD)
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1085(0/17/15)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1085(0/17/15)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3397(0/53/59)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
NTFS at 1/220/28
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1952260096
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 29952 244062463 244032512
NTFS, blocksize=4096, 999 GB / 930 GiB
NTFS at 15192/47/24
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1024000
sectors_per_cluster 8
mft_lcn 42666
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 244062464 244190463 128000 [Recovery]
NTFS, blocksize=4096, 524 MB / 500 MiB
file_win32_pread(596,2,buffer,244190645(15200/41/63)) read err: read after end of file
file_win32_pread(596,2,buffer,244190645(15200/41/63)) read err: read after end of file

---

Log of second Analyse (I'm not sure why it does this twice):

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63
check_FAT: number of bytes per sector mismatches 512 (FAT) != 4096 (HD)
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1085(0/17/15)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3397(0/53/59)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
NTFS at 1/220/28
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1952260096
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 29952 244062463 244032512
NTFS, blocksize=4096, 999 GB / 930 GiB
NTFS at 15192/47/24
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1024000
sectors_per_cluster 8
mft_lcn 42666
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 244062464 244190463 128000 [Recovery]
NTFS, blocksize=4096, 524 MB / 500 MiB
Search for partition aborted

Results
P MS Data 29952 244062463 244032512
NTFS, blocksize=4096, 999 GB / 930 GiB
P MS Data 244062464 244190463 128000 [Recovery]
NTFS, blocksize=4096, 524 MB / 500 MiB

interface_write()
1 P MS Data 244062464 244190463 128000 [Recovery]

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63
check_FAT: number of bytes per sector mismatches 512 (FAT) != 4096 (HD)
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1085(0/17/15)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,3,buffer,1086(0/17/16)) read err: read after end of file
file_win32_pread(596,2,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,3,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,1,buffer,1087(0/17/17)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3397(0/53/59)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3398(0/53/60)) read err: read after end of file
file_win32_pread(596,2,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,3,buffer,3399(0/53/61)) read err: read after end of file
file_win32_pread(596,1,buffer,3399(0/53/61)) read err: read after end of file
NTFS at 1/220/28
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1952260096
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 29952 244062463 244032512
NTFS, blocksize=4096, 999 GB / 930 GiB
NTFS at 15192/47/24
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1024000
sectors_per_cluster 8
mft_lcn 42666
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 244062464 244190463 128000 [Recovery]
NTFS, blocksize=4096, 524 MB / 500 MiB
Search for partition aborted

Locked