Partition sector doesn't have the endmark 0xAA55

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
batz
Posts: 1
Joined: 25 Feb 2014, 01:00

Partition sector doesn't have the endmark 0xAA55

#1 Post by batz »

Hello, this is my first request for support, so I apologize if I left out any necessary information.

A co-worker was copying a large file to a data drive on a Windows 2003 server when the drive "suddenly disappeared." After his attempted reboot didn't work at making the server recognize it again, I pulled the drive and put it in an external USB enclosure to see if I could access it from my laptop. I ran TestDisk Analyse, Quick Search and Deeper Search, but it could not find any partitions.

The hard drive is 150GB, non-bootable, NTFS, and it contained one partition for the full size of the drive. Unfortunately, I don't know what the label of the partition was.

I tried to upload the log file as an attachment but kept getting a message that the file extensions I tried were not allowed, so below is a copy and paste of the log:

Mon Feb 24 16:20:10 2014
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=150039945216
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=150039945216
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=482821013504
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD50 00LPVT-22G33, S/N:W -DXW153CW26475, FW:01.0
Disk /dev/sdb - 150 GB / 139 GiB - CHS 18241 255 63, sector size=512 - WDC WD15 00ADFD-00NLR5, FW:7QR5

Partition table type default to Intel
Disk /dev/sdb - 150 GB / 139 GiB - WDC WD15 00ADFD-00NLR5
Partition table type: Intel

Analyse Disk /dev/sdb - 150 GB / 139 GiB - CHS 18241 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdb - 150 GB / 139 GiB - CHS 18241 255 63
file_pread(5,2,buffer,293048320(18241/105/41)) lseek err Invalid argument
file_pread(5,1,buffer,293048320(18241/105/41)) lseek err Invalid argument
file_pread(5,1,buffer,293048319(18241/105/40)) lseek err Invalid argument
file_pread(5,14,buffer,293048321(18241/105/42)) lseek err Invalid argument
file_pread(5,3,buffer,293048335(18241/105/56)) lseek err Invalid argument
file_pread(5,3,buffer,293048382(18241/106/40)) lseek err Invalid argument
file_pread(5,8,buffer,293048398(18241/106/56)) lseek err Invalid argument
file_pread(5,11,buffer,293048445(18241/107/40)) lseek err Invalid argument
file_pread(5,2,buffer,293050367(18241/138/9)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery

search_part()
Disk /dev/sdb - 150 GB / 139 GiB - CHS 18241 255 63
file_pread(5,2,buffer,293048320(18241/105/41)) lseek err Invalid argument
file_pread(5,1,buffer,293048320(18241/105/41)) lseek err Invalid argument
file_pread(5,1,buffer,293048319(18241/105/40)) lseek err Invalid argument
file_pread(5,14,buffer,293048321(18241/105/42)) lseek err Invalid argument
file_pread(5,3,buffer,293048335(18241/105/56)) lseek err Invalid argument
file_pread(5,3,buffer,293048382(18241/106/40)) lseek err Invalid argument
file_pread(5,8,buffer,293048398(18241/106/56)) lseek err Invalid argument
file_pread(5,11,buffer,293048445(18241/107/40)) lseek err Invalid argument
file_pread(5,2,buffer,293050367(18241/138/9)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.



Please let me know if you need any additional information.

Thanks very much in advance for any assistance provided!

Locked