Partition can't be recovered
Posted: 19 Dec 2014, 04:48
Hi, I'm trying to recover a partition, I've deleted the partition but I didn't formatted, so the data is still there. Testdisk found it but it says it can't be recovered perhaps it founds the right name of the partition [Secundario].
Runnning photorec didn't found this partition [Secundario], what can I do?
This is the log from Testdisk:
_____________________________________________________
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119926685696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=102655590400
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 15505 240 63, sector size=512 - SPCC Sol id State Dis, S/N:FEB4074416B200179352, FW:S8FM
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63, sector size=512 - SAMSUNG HD103SJ, S/N:S246J90B809193, FW:1AJ1
Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - SAMSUNG HD103SJ
Partition table type: Intel
Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63
Geometry from i386 MBR: head=240 sector=63
NTFS at 13/163/20
NTFS at 0/32/33
Current partition structure:
1 E extended 0 32 32 13 239 63 209633
2 P HPFS - NTFS 13 163 20 13274 50 18 200499200
No partition is bootable
Space conflict between the following two partitions
1 E extended 0 32 32 13 239 63 209633
2 P HPFS - NTFS 13 163 20 13274 50 18 200499200
5 L HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 13/163/20
filesystem size 200499200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13 163 20 13274 50 18 200499200
NTFS, blocksize=4096, 102 GB / 95 GiB
NTFS at 13274/50/19
filesystem size 1953515071
sectors_per_cluster 8
mft_lcn 26898432
mftmirr_lcn 26112002
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13274 50 19 142474 226 1 1953515071 [Secundario]
NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=200706048, size=1953515071, end=2154221118, disk end=1953525168)
file_pread(5,1,buffer,1953525759(129201/105/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(129201/105/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(129201/105/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(129201/105/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(129201/106/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(129201/106/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(129201/107/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(129201/137/57)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1102 GB / 1027 GiB)
The following partition can't be recovered:
HPFS - NTFS 13274 50 19 142474 226 1 1953515071 [Secundario]
NTFS, blocksize=4096, 1000 GB / 931 GiB
Warning: the current number of heads per cylinder is 240 but the correct value may be 255.
Results
* HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 13 163 20 13274 50 18 200499200
NTFS, blocksize=4096, 102 GB / 95 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
2 P HPFS - NTFS 13 163 20 13274 50 18 200499200
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
______________________________________________________________
The partition I want to recover is:
HPFS - NTFS 13274 50 19 142474 226 1 1953515071 [Secundario]
NTFS, blocksize=4096, 1000 GB / 931 GiB
Thanks for your help!
Runnning photorec didn't found this partition [Secundario], what can I do?
This is the log from Testdisk:
_____________________________________________________
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119926685696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=102655590400
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 15505 240 63, sector size=512 - SPCC Sol id State Dis, S/N:FEB4074416B200179352, FW:S8FM
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63, sector size=512 - SAMSUNG HD103SJ, S/N:S246J90B809193, FW:1AJ1
Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - SAMSUNG HD103SJ
Partition table type: Intel
Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63
Geometry from i386 MBR: head=240 sector=63
NTFS at 13/163/20
NTFS at 0/32/33
Current partition structure:
1 E extended 0 32 32 13 239 63 209633
2 P HPFS - NTFS 13 163 20 13274 50 18 200499200
No partition is bootable
Space conflict between the following two partitions
1 E extended 0 32 32 13 239 63 209633
2 P HPFS - NTFS 13 163 20 13274 50 18 200499200
5 L HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 13/163/20
filesystem size 200499200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13 163 20 13274 50 18 200499200
NTFS, blocksize=4096, 102 GB / 95 GiB
NTFS at 13274/50/19
filesystem size 1953515071
sectors_per_cluster 8
mft_lcn 26898432
mftmirr_lcn 26112002
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13274 50 19 142474 226 1 1953515071 [Secundario]
NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=200706048, size=1953515071, end=2154221118, disk end=1953525168)
file_pread(5,1,buffer,1953525759(129201/105/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(129201/105/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(129201/105/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(129201/105/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(129201/106/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(129201/106/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(129201/107/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(129201/137/57)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 129201 240 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1102 GB / 1027 GiB)
The following partition can't be recovered:
HPFS - NTFS 13274 50 19 142474 226 1 1953515071 [Secundario]
NTFS, blocksize=4096, 1000 GB / 931 GiB
Warning: the current number of heads per cylinder is 240 but the correct value may be 255.
Results
* HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 13 163 20 13274 50 18 200499200
NTFS, blocksize=4096, 102 GB / 95 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 13 163 19 204800 [Reservado para el sistema]
2 P HPFS - NTFS 13 163 20 13274 50 18 200499200
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
______________________________________________________________
The partition I want to recover is:
HPFS - NTFS 13274 50 19 142474 226 1 1953515071 [Secundario]
NTFS, blocksize=4096, 1000 GB / 931 GiB
Thanks for your help!