I had an SD card with one partition (apparently it was Mac HFS formatted – I can't remember, but that is what TestDisk says). I mistakenly picked it to flash to create a LiveUSB which destroyed the original filesystem and overwrote about 1-2 GB of data. I don't care at all about the LiveUSB partition, and even about losing some of the original data. I'm just hoping to get as much recovered as possible.
I used TestDisk 7.1. I selected the appropriate rdisk (on MacOS) and TestDisk detected EFI GPT for the partition table. Then I ran Analyse, first Quick Search and then Deeper Search. Both times, I got the result that there were Mac HFS partitions that could not be recovered. It also reported sizes that were way bigger than the drive itself. I didn't really know what do do from there, so I quit out, and tried running PhotoRec.
PhotoRec was able to find files from the original partition (yay!), but without their original names. I know that is what PhotoRec does, but if there is any way to recover the original directory structure, that would save me a LOT of time. I quit out of PhotoRec in favor of asking for some help here before continuing.
Here is the log from the TestDisk run:
Code: Select all
Sun Sep 27 01:20:15 2020
Command line: TestDisk
TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Darwin, kernel 19.6.0 (Darwin Kernel Version 19.6.0: Thu Jun 18 20:49:00 PDT 2020; root:xnu-6153.141.1~1/RELEASE_X86_64) x86_64
Compiler: GCC 4.2
ext2fs lib: none, ntfs lib: none, reiserfs lib: none, ewf lib: none, curses lib: ncurses 5.7
Hard disk list
Disk /dev/disk2 - 250 GB / 232 GiB - 488552448 sectors, sector size=512
Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors, sector size=512
Partition table type (auto): EFI GPT
Disk /dev/rdisk2 - 250 GB / 232 GiB
Partition table type: EFI GPT
Partition table type (auto): EFI GPT
Partition table type (auto): EFI GPT
Disk /dev/rdisk2 - 250 GB / 232 GiB
Partition table type: EFI GPT
Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=488552447 (expected 488552447)
hdr_lba_start=34
hdr_lba_end=488552414
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
1 P EFI System 2048 2394111 2392064 [Tails]
gpt_change_part_type
Change partition type:
1 P EFI System 2048 2394111 2392064 [Tails]
Change partition type:
1 P Unknown 2048 2394111 2392064 [Tails]
Analyse Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=488552447 (expected 488552447)
hdr_lba_start=34
hdr_lba_end=488552414
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 2394111 2392064 [Tails]
search_part()
Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
FAT32 at 2048/0/1
FAT1 : 32-2367
FAT2 : 2368-4703
start_rootdir : 4704 root cluster : 2
Data : 4704-2392063
sectors : 2392064
cluster_size : 8
no_of_cluster : 298420 (2 - 298421)
fat_length 2336 calculated 2332
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 63 (FAT) != 1 (HD)
FAT32 at 2048/0/1
FAT: cluster=2(0x2), pos=6752
EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
check_FAT: Bad number of sectors per cluster
LVM magic value at 119950619/0/1
LVM magic value at 119950875/0/1
HFS magic value at 121565845/0/1
part_size 1761739010
Mac HFS 121565845 1883304854 1761739010
HFS blocksize=16777216, 902 GB / 840 GiB
This partition ends after the disk limits. (start=121565845, size=1761739010, end=1883304854, disk end=488552448)
HFS magic value at 121565847/0/1
HFS magic value at 130066204/0/1
part_size 2040004866
Mac HFS 130066204 2170071069 2040004866
HFS blocksize=16777216, 1044 GB / 972 GiB
This partition ends after the disk limits. (start=130066204, size=2040004866, end=2170071069, disk end=488552448)
HFS magic value at 130066206/0/1
0 0000 0000 00 00 00 00 00 00 00 00
Unknown 181199776 1628878407 1447678632
FATX, 741 GB / 690 GiB
0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.
LVM magic value at 323921532/0/1
Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (250 GB / 232 GiB) seems too small! (< 1111 GB / 1034 GiB)
The following partitions can't be recovered:
Mac HFS 121565845 1883304854 1761739010
HFS blocksize=16777216, 902 GB / 840 GiB
Mac HFS 130066204 2170071069 2040004866
HFS blocksize=16777216, 1044 GB / 972 GiB
Results
P EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
interface_write()
1 P EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
search_part()
Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
FAT32 at 2048/0/1
FAT1 : 32-2367
FAT2 : 2368-4703
start_rootdir : 4704 root cluster : 2
Data : 4704-2392063
sectors : 2392064
cluster_size : 8
no_of_cluster : 298420 (2 - 298421)
fat_length 2336 calculated 2332
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 63 (FAT) != 1 (HD)
FAT32 at 2048/0/1
FAT: cluster=2(0x2), pos=6752
EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
FAT32 at 2054/0/1
FAT1 : 32-2367
FAT2 : 2368-4703
start_rootdir : 4704 root cluster : 2
Data : 4704-2392063
sectors : 2392064
cluster_size : 8
no_of_cluster : 298420 (2 - 298421)
fat_length 2336 calculated 2332
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 63 (FAT) != 1 (HD)
set_FAT_info: name from BS used
FAT32 at 2054/0/1
FAT: cluster=2(0x2), pos=6752
EFI System 2048 2394111 2392064 [EFI System Partition] [Tails]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
FAT32 at 2054/0/1
FAT1 : 32-2367
FAT2 : 2368-4703
start_rootdir : 4704 root cluster : 2
Data : 4704-2392063
sectors : 2392064
cluster_size : 8
no_of_cluster : 298420 (2 - 298421)
fat_length 2336 calculated 2332
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 63 (FAT) != 1 (HD)
set_FAT_info: name from BS used
FAT32 at 2054/0/1
FAT: cluster=2(0x2), pos=6758
FAT: cluster=771(0x303), pos=12910
FAT: cluster=1540(0x604), pos=19062
MS Data 2054 2394117 2392064 [Tails]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
FAT32 at 2060/0/1
FAT1 : 32-2367
FAT2 : 2368-4703
start_rootdir : 4704 root cluster : 2
Data : 4704-2392063
sectors : 2392064
cluster_size : 8
no_of_cluster : 298420 (2 - 298421)
fat_length 2336 calculated 2332
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 63 (FAT) != 1 (HD)
set_FAT_info: name from BS used
FAT32 at 2060/0/1
FAT: cluster=2(0x2), pos=6764
FAT: cluster=1539(0x603), pos=19060
FAT: cluster=3076(0xc04), pos=31356
FAT: cluster=4613(0x1205), pos=43652
FAT: cluster=6150(0x1806), pos=55948
FAT: cluster=7687(0x1e07), pos=68244
FAT: cluster=9224(0x2408), pos=80540
FAT: cluster=10761(0x2a09), pos=92836
FAT: cluster=12298(0x300a), pos=105132
FAT: cluster=13835(0x360b), pos=117428
FAT: cluster=15372(0x3c0c), pos=129724
FAT: cluster=16909(0x420d), pos=142020
FAT: cluster=18446(0x480e), pos=154316
FAT: cluster=19983(0x4e0f), pos=166612
FAT: cluster=21520(0x5410), pos=178908
FAT: cluster=23057(0x5a11), pos=191204
FAT: cluster=24594(0x6012), pos=203500
FAT: cluster=26131(0x6613), pos=215796
FAT: cluster=27668(0x6c14), pos=228092
FAT: cluster=29205(0x7215), pos=240388
FAT: cluster=30742(0x7816), pos=252684
FAT: cluster=32279(0x7e17), pos=264980
FAT: cluster=33816(0x8418), pos=277276
FAT: cluster=35353(0x8a19), pos=289572
FAT: cluster=36890(0x901a), pos=301868
FAT: cluster=38427(0x961b), pos=314164
FAT: cluster=39964(0x9c1c), pos=326460
FAT: cluster=41501(0xa21d), pos=338756
FAT: cluster=43038(0xa81e), pos=351052
FAT: cluster=44575(0xae1f), pos=363348
FAT: cluster=46112(0xb420), pos=375644
FAT: cluster=47649(0xba21), pos=387940
FAT: cluster=49186(0xc022), pos=400236
FAT: cluster=50723(0xc623), pos=412532
FAT: cluster=52260(0xcc24), pos=424828
FAT: cluster=53797(0xd225), pos=437124
FAT: cluster=55334(0xd826), pos=449420
FAT: cluster=56871(0xde27), pos=461716
FAT: cluster=58408(0xe428), pos=474012
FAT: cluster=59945(0xea29), pos=486308
FAT: cluster=61482(0xf02a), pos=498604
FAT: cluster=63019(0xf62b), pos=510900
FAT: cluster=64556(0xfc2c), pos=523196
FAT: cluster=66093(0x1022d), pos=535492
FAT: cluster=67630(0x1082e), pos=547788
FAT: cluster=69167(0x10e2f), pos=560084
FAT: cluster=70704(0x11430), pos=572380
FAT: cluster=72241(0x11a31), pos=584676
FAT: cluster=73778(0x12032), pos=596972
FAT: cluster=75315(0x12633), pos=609268
FAT: cluster=76852(0x12c34), pos=621564
FAT: cluster=78389(0x13235), pos=633860
FAT: cluster=79926(0x13836), pos=646156
FAT: cluster=81463(0x13e37), pos=658452
FAT: cluster=83000(0x14438), pos=670748
FAT: cluster=84537(0x14a39), pos=683044
FAT: cluster=86074(0x1503a), pos=695340
FAT: cluster=87611(0x1563b), pos=707636
FAT: cluster=89148(0x15c3c), pos=719932
FAT: cluster=90685(0x1623d), pos=732228
FAT: cluster=92222(0x1683e), pos=744524
FAT: cluster=93759(0x16e3f), pos=756820
FAT: cluster=95296(0x17440), pos=769116
FAT: cluster=96833(0x17a41), pos=781412
FAT: cluster=98370(0x18042), pos=793708
FAT: cluster=99907(0x18643), pos=806004
FAT: cluster=101444(0x18c44), pos=818300
FAT: cluster=102981(0x19245), pos=830596
FAT: cluster=104518(0x19846), pos=842892
FAT: cluster=106055(0x19e47), pos=855188
FAT: cluster=107592(0x1a448), pos=867484
FAT: cluster=109129(0x1aa49), pos=879780
FAT: cluster=110666(0x1b04a), pos=892076
FAT: cluster=112203(0x1b64b), pos=904372
FAT: cluster=113740(0x1bc4c), pos=916668
FAT: cluster=115277(0x1c24d), pos=928964
FAT: cluster=116814(0x1c84e), pos=941260
FAT: cluster=118351(0x1ce4f), pos=953556
FAT: cluster=119888(0x1d450), pos=965852
FAT: cluster=121425(0x1da51), pos=978148
FAT: cluster=122962(0x1e052), pos=990444
FAT: cluster=124499(0x1e653), pos=1002740
FAT: cluster=126036(0x1ec54), pos=1015036
FAT: cluster=127573(0x1f255), pos=1027332
FAT: cluster=129110(0x1f856), pos=1039628
FAT: cluster=130647(0x1fe57), pos=1051924
FAT: cluster=132184(0x20458), pos=1064220
FAT: cluster=133721(0x20a59), pos=1076516
FAT: cluster=135258(0x2105a), pos=1088812
FAT: cluster=136795(0x2165b), pos=1101108
FAT: cluster=138332(0x21c5c), pos=1113404
FAT: cluster=139869(0x2225d), pos=1125700
FAT: cluster=141406(0x2285e), pos=1137996
FAT: cluster=142943(0x22e5f), pos=1150292
FAT: cluster=144480(0x23460), pos=1162588
FAT: cluster=146017(0x23a61), pos=1174884
FAT: cluster=147554(0x24062), pos=1187180
FAT: cluster=149091(0x24663), pos=1199476
FAT: cluster=150628(0x24c64), pos=1211772
FAT: cluster=152165(0x25265), pos=1224068
FAT: cluster=153702(0x25866), pos=1236364
FAT: cluster=155239(0x25e67), pos=1248660
FAT: cluster=156776(0x26468), pos=1260956
FAT: cluster=158313(0x26a69), pos=1273252
FAT: cluster=159850(0x2706a), pos=1285548
FAT: cluster=161387(0x2766b), pos=1297844
FAT: cluster=162924(0x27c6c), pos=1310140
FAT: cluster=164461(0x2826d), pos=1322436
FAT: cluster=165998(0x2886e), pos=1334732
FAT: cluster=167535(0x28e6f), pos=1347028
FAT: cluster=169072(0x29470), pos=1359324
FAT: cluster=170609(0x29a71), pos=1371620
FAT: cluster=172146(0x2a072), pos=1383916
FAT: cluster=173683(0x2a673), pos=1396212
FAT: cluster=175220(0x2ac74), pos=1408508
FAT: cluster=176757(0x2b275), pos=1420804
FAT: cluster=178294(0x2b876), pos=1433100
FAT: cluster=179831(0x2be77), pos=1445396
FAT: cluster=181368(0x2c478), pos=1457692
FAT: cluster=182905(0x2ca79), pos=1469988
FAT: cluster=184442(0x2d07a), pos=1482284
FAT: cluster=185979(0x2d67b), pos=1494580
FAT: cluster=187516(0x2dc7c), pos=1506876
FAT: cluster=189053(0x2e27d), pos=1519172
FAT: cluster=190590(0x2e87e), pos=1531468
FAT: cluster=192127(0x2ee7f), pos=1543764
FAT: cluster=193664(0x2f480), pos=1556060
FAT: cluster=195201(0x2fa81), pos=1568356
FAT: cluster=196738(0x30082), pos=1580652
FAT: cluster=198275(0x30683), pos=1592948
FAT: cluster=199812(0x30c84), pos=1605244
FAT: cluster=201349(0x31285), pos=1617540
FAT: cluster=202886(0x31886), pos=1629836
FAT: cluster=204423(0x31e87), pos=1642132
FAT: cluster=205960(0x32488), pos=1654428
FAT: cluster=207497(0x32a89), pos=1666724
FAT: cluster=209034(0x3308a), pos=1679020
FAT: cluster=210571(0x3368b), pos=1691316
FAT: cluster=212108(0x33c8c), pos=1703612
FAT: cluster=213645(0x3428d), pos=1715908
FAT: cluster=215182(0x3488e), pos=1728204
FAT: cluster=216719(0x34e8f), pos=1740500
FAT: cluster=218256(0x35490), pos=1752796
FAT: cluster=219793(0x35a91), pos=1765092
FAT: cluster=221330(0x36092), pos=1777388
FAT: cluster=222867(0x36693), pos=1789684
FAT: cluster=224404(0x36c94), pos=1801980
FAT: cluster=225941(0x37295), pos=1814276
FAT: cluster=227478(0x37896), pos=1826572
FAT: cluster=229015(0x37e97), pos=1838868
FAT: cluster=230552(0x38498), pos=1851164
FAT: cluster=232089(0x38a99), pos=1863460
FAT: cluster=233626(0x3909a), pos=1875756
FAT: cluster=235163(0x3969b), pos=1888052
FAT: cluster=236700(0x39c9c), pos=1900348
FAT: cluster=238237(0x3a29d), pos=1912644
FAT: cluster=239774(0x3a89e), pos=1924940
FAT: cluster=241311(0x3ae9f), pos=1937236
FAT: cluster=242848(0x3b4a0), pos=1949532
FAT: cluster=244385(0x3baa1), pos=1961828
FAT: cluster=245922(0x3c0a2), pos=1974124
FAT: cluster=247459(0x3c6a3), pos=1986420
FAT: cluster=248996(0x3cca4), pos=1998716
FAT: cluster=250533(0x3d2a5), pos=2011012
FAT: cluster=252070(0x3d8a6), pos=2023308
FAT: cluster=253607(0x3dea7), pos=2035604
FAT: cluster=255144(0x3e4a8), pos=2047900
FAT: cluster=256681(0x3eaa9), pos=2060196
FAT: cluster=258218(0x3f0aa), pos=2072492
FAT: cluster=259755(0x3f6ab), pos=2084788
FAT: cluster=261292(0x3fcac), pos=2097084
FAT: cluster=262829(0x402ad), pos=2109380
FAT: cluster=264366(0x408ae), pos=2121676
FAT: cluster=265903(0x40eaf), pos=2133972
FAT: cluster=267440(0x414b0), pos=2146268
FAT: cluster=268977(0x41ab1), pos=2158564
FAT: cluster=270514(0x420b2), pos=2170860
FAT: cluster=272051(0x426b3), pos=2183156
FAT: cluster=273588(0x42cb4), pos=2195452
FAT: cluster=275125(0x432b5), pos=2207748
FAT: cluster=276662(0x438b6), pos=2220044
FAT: cluster=278199(0x43eb7), pos=2232340
FAT: cluster=279736(0x444b8), pos=2244636
FAT: cluster=281273(0x44ab9), pos=2256932
FAT: cluster=282810(0x450ba), pos=2269228
FAT: cluster=284347(0x456bb), pos=2281524
FAT: cluster=285884(0x45cbc), pos=2293820
FAT: cluster=287421(0x462bd), pos=2306116
FAT: cluster=288958(0x468be), pos=2318412
FAT: cluster=290495(0x46ebf), pos=2330708
FAT: cluster=292032(0x474c0), pos=2343004
FAT: cluster=293569(0x47ac1), pos=2355300
FAT: cluster=295106(0x480c2), pos=2367596
FAT: cluster=296643(0x486c3), pos=2379892
MS Data 2060 2394123 2392064 [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
check_FAT: Bad number of sectors per cluster
LVM magic value at 119950619/0/1
LVM magic value at 119950875/0/1
HFS magic value at 121565845/0/1
part_size 1761739010
Mac HFS 121565845 1883304854 1761739010
HFS blocksize=16777216, 902 GB / 840 GiB
This partition ends after the disk limits. (start=121565845, size=1761739010, end=1883304854, disk end=488552448)
HFS magic value at 121565847/0/1
HFS magic value at 130066204/0/1
part_size 2040004866
Mac HFS 130066204 2170071069 2040004866
HFS blocksize=16777216, 1044 GB / 972 GiB
This partition ends after the disk limits. (start=130066204, size=2040004866, end=2170071069, disk end=488552448)
HFS magic value at 130066206/0/1
0 0000 0000 00 00 00 00 00 00 00 00
Unknown 181199776 1628878407 1447678632
FATX, 741 GB / 690 GiB
0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.
LVM magic value at 323921532/0/1
Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (250 GB / 232 GiB) seems too small! (< 1111 GB / 1034 GiB)
The following partitions can't be recovered:
Mac HFS 121565845 1883304854 1761739010
HFS blocksize=16777216, 902 GB / 840 GiB
Mac HFS 130066204 2170071069 2040004866
HFS blocksize=16777216, 1044 GB / 972 GiB
Results
EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
MS Data 2054 2394117 2392064 [Tails]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
MS Data 2060 2394123 2392064 [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
interface_write()
No partition found or selected for recovery
simulate write!
Analyse Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=488552447 (expected 488552447)
hdr_lba_start=34
hdr_lba_end=488552414
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 2048 2394111 2392064 [Tails]
search_part()
Disk /dev/rdisk2 - 250 GB / 232 GiB - 488552448 sectors
FAT32 at 2048/0/1
FAT1 : 32-2367
FAT2 : 2368-4703
start_rootdir : 4704 root cluster : 2
Data : 4704-2392063
sectors : 2392064
cluster_size : 8
no_of_cluster : 298420 (2 - 298421)
fat_length 2336 calculated 2332
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 63 (FAT) != 1 (HD)
FAT32 at 2048/0/1
FAT: cluster=2(0x2), pos=6752
EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
Search for partition aborted
Results
P EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
FAT32, blocksize=4096, 1224 MB / 1168 MiB
interface_write()
1 P EFI System 2048 2394111 2392064 [EFI System Partition] [TAILS]
simulate write!
Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=488552447 (expected 488552447)
hdr_lba_start=34
hdr_lba_end=488552414
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
1 P EFI System 2048 2394111 2392064 [Tails]
Partition table type (auto): EFI GPT
Disk /dev/rdisk2 - 250 GB / 232 GiB
Partition table type: None
Interface Advanced
P Unknown 0 488552447 488552448
Change partition type:
P HFS 0 488552447 488552448
TestDisk exited normally.