Double override

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
matvrix
Posts: 6
Joined: 04 May 2015, 21:19

Double override

#1 Post by matvrix »

I have a 4tb external western digital HDD. It was ext4 formatted and was used only on the Fedora OS side of my laptop. This morning, I had to use the windows 7 OS and had stupidly selected to load this drive ''4tb1' as a HDD with GPT option so view the content using Ext2Fsd. GPT wizard was forcing me to format the drive. I didn't want to loose any data. So, booted back on Fedora. Having lost the mount, using 'disks' created a wrong partition - 'NTFS' instead of the desired - EXT4. So far no deliberate effort had been chosen to format the drive.
Having realised what had happend, tried to change the parition to EXT4..well, the wizard is asking format. Again, I have chosen no to.

Quesiton, I have been working rather deligently to recover the parition using 'testdisk 7.0'. It recognises this HDD as 'None'..Non partitioned media; when analysed followed were printed :

Disk /dev/sdd - 4000 GB / 3726 GiB - CHS 486401 255 63
Partition Start End Size in sectors
>P ext4 0 0 1 486401 80 63 7814037168 [4tb1]
P NTFS 0 32 33 486401 80 30 7814035087
P ext4 2493 172 46 4060 12 46 25163776
P ext4 2493 172 48 4060 12 48 25163776
P ext4 2520 211 58 4087 51 58 25163776
P ext4 2520 211 60 4087 51 60 25163776
P ext4 2521 21 59 4087 116 59 25163776
P ext4 2521 21 61 4087 116 61 25163776
P ext4 2521 86 60 4087 181 60 25163776
P ext4 2521 86 62 4087 181 62 25163776
P ext4 2521 249 31 2585 183 28 1024000
P ext4 2521 249 33 2585 183 30 1024000
P ext4 2522 26 63 2585 215 60 1024000
P ext4 2522 27 2 2585 215 62 1024000
P ext4 2525 139 47 4091 234 47 25163776
P ext4 2535 190 22 4102 30 22 25163776
P ext4 2535 190 24 4102 30 24 25163776
P ext4 2536 0 23 4102 95 23 25163776
P ext4 2536 0 25 4102 95 25 25163776
P ext4 2549 98 44 4115 193 44 25163776
P ext4 2549 98 46 4115 193 46 25163776
P ext4 2701 55 41 4267 150 41 25163776
P ext4 2701 55 43 4267 150 43 25163776
P ext4 3082 229 52 4649 69 52 25163776
P ext4 3082 241 24 4649 81 24 25163776
P ext4 3082 247 54 4649 87 54 25163776


What are the next steps. How could the data be retrived ?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Double override

#2 Post by Fiona »

Partition table type None is probably not correct.
Can you repeat your diagnose using GPT?

Fiona

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Double override

#3 Post by cgrenier »

You should also use 'p' to list the files from each partition found by TestDisk. This way, you will know which partition is the good one.

matvrix
Posts: 6
Joined: 04 May 2015, 21:19

Re: Double override

#4 Post by matvrix »

http://www.tiikoni.com/tis/view/?id=af0c295 image 1

http://www.tiikoni.com/tis/view/?id=e4dc65a image2

How could we select these sector entries to see what files are in there ?

Regards,

matvrix
Posts: 6
Joined: 04 May 2015, 21:19

Re: Double override

#5 Post by matvrix »

Having installed testdisk on an Intel Mac, running a scan on rdisk
Screen Shot 2015-05-05 at 9.22.40 AM.png
Screen Shot 2015-05-05 at 9.22.40 AM.png (59.02 KiB) Viewed 2500 times
Here are the scan results
Screen Shot 2015-05-05 at 9.11.55 AM.png
Screen Shot 2015-05-05 at 9.11.55 AM.png (49.78 KiB) Viewed 2500 times
on https://join.me/902-051-711 if you would like to see this happening.. Have also uploaded the log for review.
Attachments
testdisk.log.zip
(1.6 KiB) Downloaded 248 times

matvrix
Posts: 6
Joined: 04 May 2015, 21:19

Re: Double override

#6 Post by matvrix »

Here's the latest scan results :
Screen Shot 2015-05-05 at 9.39.30 AM.png
Screen Shot 2015-05-05 at 9.39.30 AM.png (62.51 KiB) Viewed 2495 times

matvrix
Posts: 6
Joined: 04 May 2015, 21:19

Re: Double override

#7 Post by matvrix »

Having stopped this, reviewed the content the content by stepping through; using 'p'. Couldn't see anything legible.
Screen Shot 2015-05-05 at 9.51.28 AM.png
Screen Shot 2015-05-05 at 9.51.28 AM.png (63.8 KiB) Viewed 2492 times

matvrix
Posts: 6
Joined: 04 May 2015, 21:19

Re: Double override

#8 Post by matvrix »

Having to choose 'superblock' doesn't provide any listings..
Screen Shot 2015-05-05 at 11.25.25 AM.png
Screen Shot 2015-05-05 at 11.25.25 AM.png (39 KiB) Viewed 2473 times

Locked