Help please. I am unsure of what to do

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
AnnainOK
Posts: 4
Joined: 09 Oct 2014, 15:17

Help please. I am unsure of what to do

#1 Post by AnnainOK »

I don't know how to proceed, and I don't want to lose the data on my hd.


I have a Toshiba 1T hdd. It was in two partitions, one for my operating system (c:) and one for my document files (e). I was trying to do a clean install on the (c:) partition, but something happened and it just kept messing up. I could not get it to install--I had multiple failed setups. At that point, I pulled the drive out and attached it to my bench machine and found I could not access the drive. (Windows telling me to format (e:), which I didn't do.)

So, I found TESTDISK and thought I'd try it. I have zero experience with using this software, and after reading the tutorial, I'm still a bit confused. SO. Here I am, asking for help. I have pictures this drive that I'd not had the chance to backup for a couple months, and I honestly would rather not lose them if at all possible--everything else is inconsequential in the ultimate scheme of things--but I'd like to recover the documents as well if possible.

I need to know how to proceed.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Help please. I am unsure of what to do

#2 Post by Fiona »

Can you run a diagnose running Analyse, Quick Search and if nothing is found Deeper Search too?
If a partition is found, please mark it and press p to have a try to list your files.
In your testdisk folder, you'll find a file called testdisk.log.
Please open it using an editor or wordpad and copy and paste the content into your next post.
As long as you don't use the menu "Write", nothing will be changed and it's a diagnose only.

AnnainOK
Posts: 4
Joined: 09 Oct 2014, 15:17

Re: Help please. I am unsure of what to do

#3 Post by AnnainOK »

Thanks. This just doesn't sound good to me at all...but that's why I asked. I appreciate your time. :)

The drive in question is the Toshiba.

_____________________________________________________________



Wed Oct 8 20:24:32 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-10-05T21:22:25
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=159996968960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=5137573888
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000204886016
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19452 255 63, sector size=512 - ST316031 8AS, S/N:V50Y7BGT, FW:CC44
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Drive D: - 5137 MB / 4899 MiB - CHS 1224 64 32, sector size=2048 - HL-DT-ST DVD+-RW GT10N, FW:A106
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 15200 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type DE: no test
check_part_i386 failed for partition type 07
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=8
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=8
Current partition structure:
1 P Dell Utility 0 1 1 4 254 63 80262
Invalid NTFS or EXFAT boot
2 * HPFS - NTFS 5 0 1 16 254 63 192780
2 * HPFS - NTFS 5 0 1 16 254 63 192780
Invalid NTFS or EXFAT boot
3 P HPFS - NTFS 17 0 1 50987 254 63 818849115
3 P HPFS - NTFS 17 0 1 50987 254 63 818849115
4 E extended LBA 50988 0 1 121600 254 63 1134397845

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 15200 255 63
NTFS at 15199/254/63
filesystem size 115780392
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 7236274
clusters_per_mft_record -12
clusters_per_index_record -12
HPFS - NTFS 7993 1 1 15199 254 63 115780392
NTFS found using backup sector, blocksize=32768, 474 GB / 441 GiB
NTFS at 15199/254/63
filesystem size 115780392
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 7236274
clusters_per_mft_record -12
clusters_per_index_record -12
file_pread(5,4096,buffer,244200303(15200/195/19)) lseek err Invalid argument
file_pread(5,1,buffer,244200303(15200/195/19)) lseek err Invalid argument
NTFS: Can't read MFT
HPFS - NTFS 15199 254 63 22406 253 62 115780392
NTFS, blocksize=32768, 474 GB / 441 GiB
This partition ends after the disk limits. (start=244187999, size=115780392, end=359968390, disk end=244190646)
file_pread(5,1,buffer,244190720(15200/43/12)) lseek err Invalid argument
file_pread(5,1,buffer,244190719(15200/43/11)) lseek err Invalid argument
file_pread(5,2,buffer,244190720(15200/43/12)) lseek err Invalid argument
file_pread(5,2,buffer,244190721(15200/43/13)) lseek err Invalid argument
file_pread(5,2,buffer,244190727(15200/43/19)) lseek err Invalid argument
file_pread(5,2,buffer,244190729(15200/43/21)) lseek err Invalid argument
file_pread(5,2,buffer,244190735(15200/43/27)) lseek err Invalid argument
file_pread(5,2,buffer,244190975(15200/47/15)) lseek err Invalid argument
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 15200 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1474 GB / 1373 GiB)
The following partition can't be recovered:
HPFS - NTFS 15199 254 63 22406 253 62 115780392
NTFS, blocksize=32768, 474 GB / 441 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2

Results
L HPFS - NTFS 7993 1 1 15199 254 63 115780392
NTFS found using backup sector, blocksize=32768, 474 GB / 441 GiB
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
1 E extended LBA 7993 0 1 15199 254 63 115780455
5 L HPFS - NTFS 7993 1 1 15199 254 63 115780392
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

AnnainOK
Posts: 4
Joined: 09 Oct 2014, 15:17

Re: Help please. I am unsure of what to do

#4 Post by AnnainOK »

Just curious if anyone has any ideas based upon my post? I find that I really need some documents for from this for my Cub Scouts! :)

Locked