Accidentally formatted second (data drive)

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
waterbound
Posts: 3
Joined: 24 Jan 2015, 19:00

Accidentally formatted second (data drive)

#1 Post by waterbound »

After running the program test disk the results seem to indicate the correct partitions, normal for a Dell Laptop, the recovery partition and then it showed two NTFS partitions. I don't care about the recovery partition, I had previously wiped and formatted the drive once I successfully installed my SSD.
Last edited by waterbound on 26 Jan 2015, 16:49, edited 1 time in total.

waterbound
Posts: 3
Joined: 24 Jan 2015, 19:00

Re: Accidentally formatted second (data drive)

#2 Post by waterbound »

I have attached a log of my attempts thus far and looking for clarification.

Here are the specifics (ignore first post - I rambled) :

1.) Drive that was attempted full format: TOSHIBA MK6461GSY 640G

2.) Drive is used as secondary data drive

3.) Drive was original DELL laptop primary drive with Win7 OS and recovery partition

4.) I thought I had repartitioned and reformatted to use entire drive for secondary drive, this was completed and has been in use for a few years as secondary drive.

5.) When using Testdisk, it appears the original recovery partition shows up during the initial scan.

6.) There are no defects or faults with the drive but I did make an image to test with so as not to write to this drive.

The following is the log from my first attempts, nothing has been written or altered since I formatted the drive.

]Mon Jan 26 08:44:25 2015
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, January 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-01-19T21:26:37
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=120031478784
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=5341184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=106896384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=624290526720
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=15734960640
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - INTEL SSDSA2CW120G3, S/N:544252503331343932304a4232314c304e472020, FW:4PC10362
Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63, sector size=512 - TOSHIBA MK6461GSY, S/N:2020202020202020202032205031544753355431, FW:MC000D
Drive D: - 5341 KB / 5216 KiB - CHS 1 64 32, sector size=2048 - Optiarc DVD+-RW AD-7717H, FW:101A

Partition table type (auto): Intel
Disk /dev/sdb - 640 GB / 596 GiB - TOSHIBA MK6461GSY
Partition table type: Intel

Analyse Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63
Geometry from i386 MBR: head=255 sector=63
FAT16 at 0/1/1
Info: size boot_sector 208782, partition 208782
FAT1 : 1-204
FAT2 : 205-408
start_rootdir : 409
Data : 441-208780
sectors : 208782
cluster_size : 4
no_of_cluster : 52085 (2 - 52086)
fat_length 204 calculated 204
NTFS at 13/0/1
NTFS at 1926/0/1
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=6
Current partition structure:
1 * FAT16 >32M 0 1 1 12 254 63 208782 [DellUtility]
2 P HPFS - NTFS 13 0 1 1925 254 63 30732345
3 P HPFS - NTFS 1926 0 1 77824 254 63 1219317435

search_part()
Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63
FAT16 at 0/1/1
FAT1 : 1-204
FAT2 : 205-408
start_rootdir : 409
Data : 441-208780
sectors : 208782
cluster_size : 4
no_of_cluster : 52085 (2 - 52086)
fat_length 204 calculated 204

FAT16 at 0/1/1
FAT16 >32M 0 1 1 12 254 63 208782 [DellUtility]
FAT16, blocksize=2048, 106 MB / 101 MiB
NTFS at 13/0/1
filesystem size 30732345
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13 0 1 1925 254 63 30732345
NTFS, blocksize=4096, 15 GB / 14 GiB
NTFS at 1926/0/1
filesystem size 1219317435
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1926 0 1 77824 254 63 1219317435
NTFS, blocksize=4096, 624 GB / 581 GiB
file_pread(5,2,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(5,1,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(5,8,buffer,1250263814(77825/82/24)) lseek err Invalid argument
file_pread(5,1,buffer,1250263814(77825/82/24)) lseek err Invalid argument
file_pread(5,8,buffer,1250263942(77825/84/26)) lseek err Invalid argument
file_pread(5,8,buffer,1250264070(77825/86/28)) lseek err Invalid argument
file_pread(5,8,buffer,1250264198(77825/88/30)) lseek err Invalid argument
file_pread(5,8,buffer,1250264326(77825/90/32)) lseek err Invalid argument
file_pread(5,8,buffer,1250264454(77825/92/34)) lseek err Invalid argument
file_pread(5,8,buffer,1250264582(77825/94/36)) lseek err Invalid argument
file_pread(5,8,buffer,1250264710(77825/96/38)) lseek err Invalid argument
file_pread(5,8,buffer,1250264838(77825/98/40)) lseek err Invalid argument
file_pread(5,8,buffer,1250264966(77825/100/42)) lseek err Invalid argument
file_pread(5,1,buffer,1250265087(77825/102/37)) lseek err Invalid argument
file_pread(5,1,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(5,14,buffer,1250265089(77825/102/39)) lseek err Invalid argument
file_pread(5,3,buffer,1250265103(77825/102/53)) lseek err Invalid argument
file_pread(5,3,buffer,1250265150(77825/103/37)) lseek err Invalid argument
file_pread(5,8,buffer,1250265166(77825/103/53)) lseek err Invalid argument
file_pread(5,11,buffer,1250265213(77825/104/37)) lseek err Invalid argument
file_pread(5,2,buffer,1250267135(77825/135/6)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=6

Results
* FAT16 >32M 0 1 1 12 254 63 208782 [DellUtility]
FAT16, blocksize=2048, 106 MB / 101 MiB
P HPFS - NTFS 13 0 1 1925 254 63 30732345
NTFS, blocksize=4096, 15 GB / 14 GiB
P HPFS - NTFS 1926 0 1 77824 254 63 1219317435
NTFS, blocksize=4096, 624 GB / 581 GiB
interface_load
Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63 Sun Jan 25 18:59:33 2015
1 * FAT16 >32M 0 1 1 12 254 63 208782
2 P HPFS - NTFS 13 0 1 1925 254 63 30732345
3 P HPFS - NTFS 1926 0 1 77824 254 63 1219317435

interface_write()
1 * FAT16 >32M 0 1 1 12 254 63 208782 [DellUtility]
2 P HPFS - NTFS 13 0 1 1925 254 63 30732345
3 P HPFS - NTFS 1926 0 1 77824 254 63 1219317435

I don't care about the recovery partition, just the data which I believe in the third line. Any attempts in listing files etc returns with the same error, nothing to list or see etc..

Hoping someone can provide next steps. Thanks in advance!

waterbound
Posts: 3
Joined: 24 Jan 2015, 19:00

Re: Accidentally formatted second (data drive)

#3 Post by waterbound »

So no matter how I try to repair this HD, I can always restore my Dell Recovery partition but can never get my data partition to show up and list files.

I'm not sure what I am doing wrong, looking at my log above I always get 3 lines:
FAT Dell Recovery partition
NTFS partition 14GB
NTFS partition 580GB

I have tried everything,changed the 3rd partition to logical, primary etc, set the 2nd partition to Deleted etc., tried every possible variable, always can get the Dell Recovery partition to show up but never my data drive, what am I doing wrong? The data is there and I assume it's the 3rd partition that I need but do I need to recover the 1st Dell recovery as well. At this point I have found a backup of most of my data so this is to hopefully to learn what I'm doing wrong and hopefully restore the remaining data.

Is there a possibility that the two NTFS partitions are necessary to restore the drive?

Come on, does anyone get resolution? I've been checking all of the threads but none seem to get responses or resolution etc., I will donate if I can validate this will work I just cannot figure out what or where my issues are.

Locked