cgsecurity.org

TestDisk & PhotoRec forum
https://forum.cgsecurity.org/phpBB3/

no partition found after deep search.

https://forum.cgsecurity.org/phpBB3/viewtopic.php?t=5170

Page 1 of 1

no partition found after deep search.

Posted: 03 Jul 2015, 08:25
by appius
hi,
I'm trying to fix a 300 IDE disk that turned to raw.
unfortunately, the partition can't be found even after a deep search.
what should I do to restore it?
thanks in advance for your help.

Partition table type default to Intel
Disk /dev/sda - 300 GB / 279 GiB
Partition table type: Intel

Interface Advanced
New options :
Dump : No
Align partition: Yes
Expert mode : Yes

Analyse Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
file_pread(4,2,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041343(36479/98/35)) lseek err Invalid argument
file_pread(4,14,buffer,586041345(36479/98/37)) lseek err Invalid argument
file_pread(4,3,buffer,586041359(36479/98/51)) lseek err Invalid argument
file_pread(4,3,buffer,586041406(36479/99/35)) lseek err Invalid argument
file_pread(4,8,buffer,586041422(36479/99/51)) lseek err Invalid argument
file_pread(4,11,buffer,586041469(36479/100/35)) lseek err Invalid argument
file_pread(4,2,buffer,586043391(36479/131/4)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery

Re: no partition found after deep search.

Posted: 03 Jul 2015, 08:41
by Fiona
Currently you have no partition in your partition table.
In case, you should run "Deeper Search" also, to have a try to find your partition by its backup of the boot sector.
If a partition would be found, you can select it and press p to have a try to list your files.
Please copy and paste the content of your testdisk.log again.

Fiona

Re: no partition found after deep search.

Posted: 03 Jul 2015, 08:46
by appius
thanks Fiona for you quick answer!
but as I said, this the deeper search results already.

Re: no partition found after deep search.

Posted: 03 Jul 2015, 09:05
by Fiona
I'm not sure that Deeper Search was running but Quick Search instead.
Analyse Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55
That's your current situation (partition table) and no partition available or empty.
search_part()
Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
file_pread(4,2,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041343(36479/98/35)) lseek err Invalid argument
file_pread(4,14,buffer,586041345(36479/98/37)) lseek err Invalid argument
file_pread(4,3,buffer,586041359(36479/98/51)) lseek err Invalid argument
file_pread(4,3,buffer,586041406(36479/99/35)) lseek err Invalid argument
file_pread(4,8,buffer,586041422(36479/99/51)) lseek err Invalid argument
file_pread(4,11,buffer,586041469(36479/100/35)) lseek err Invalid argument
file_pread(4,2,buffer,586043391(36479/131/4)) lseek err Invalid argument

Results
It's your result of Quick Search, which follows after Analyse (your current partition structure).The result has been that NO partition was found!
interface_write()

No partition found or selected for recovery

interface_write()
The write interface displays 2 opportunities.
Write and Deeper Search.
Are you sure that you were running Deeper Search?
Deeper Search can find more partitions by the backup of the boot sector and recover them.
If you were running Deeper Search, there would be another/second Search displayed and I don't find it?

Fiona

Re: no partition found after deep search.

Posted: 03 Jul 2015, 12:49
by appius
I've just redone the two searches, Fonia. nothing found.
after the deeper one, i don't have any more option than quit.
here the log:
Partition table type default to Intel
Disk /dev/sda - 300 GB / 279 GiB
Partition table type: Intel

Analyse Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
file_pread(4,1,buffer,586041343(36479/98/35)) lseek err Invalid argument
file_pread(4,1,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,14,buffer,586041345(36479/98/37)) lseek err Invalid argument
file_pread(4,3,buffer,586041359(36479/98/51)) lseek err Invalid argument
file_pread(4,3,buffer,586041406(36479/99/35)) lseek err Invalid argument
file_pread(4,8,buffer,586041422(36479/99/51)) lseek err Invalid argument
file_pread(4,11,buffer,586041469(36479/100/35)) lseek err Invalid argument
file_pread(4,2,buffer,586043391(36479/131/4)) lseek err Invalid argument
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
file_pread(4,2,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041343(36479/98/35)) lseek err Invalid argument
file_pread(4,14,buffer,586041345(36479/98/37)) lseek err Invalid argument
file_pread(4,3,buffer,586041359(36479/98/51)) lseek err Invalid argument
file_pread(4,3,buffer,586041406(36479/99/35)) lseek err Invalid argument
file_pread(4,8,buffer,586041422(36479/99/51)) lseek err Invalid argument
file_pread(4,11,buffer,586041469(36479/100/35)) lseek err Invalid argument
file_pread(4,2,buffer,586043391(36479/131/4)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery

search_part()
Disk /dev/sda - 300 GB / 279 GiB - CHS 36479 255 63
file_pread(4,2,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041344(36479/98/36)) lseek err Invalid argument
file_pread(4,1,buffer,586041343(36479/98/35)) lseek err Invalid argument
file_pread(4,14,buffer,586041345(36479/98/37)) lseek err Invalid argument
file_pread(4,3,buffer,586041359(36479/98/51)) lseek err Invalid argument
file_pread(4,3,buffer,586041406(36479/99/35)) lseek err Invalid argument
file_pread(4,8,buffer,586041422(36479/99/51)) lseek err Invalid argument
file_pread(4,11,buffer,586041469(36479/100/35)) lseek err Invalid argument
file_pread(4,2,buffer,586043391(36479/131/4)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
SIGHUP detected! TestDisk has been killed.

Re: no partition found after deep search.

Posted: 04 Jul 2015, 17:13
by appius
do you see anything weird?

Re: no partition found after deep search.

Posted: 06 Jul 2015, 08:55
by appius
what do those lseek err Invalid argument stand for?

Re: no partition found after deep search.

Posted: 06 Jul 2015, 17:41
by Fiona
file_pread(4,1,buffer,586041343(36479/98/35)) lseek err Invalid argument
As far as I've seen (already a long time ago) pread and pwrite had something to do with cygwin (unix for windows).
Despite that, partitions should be found and be recoverable.
Unfortunately testdisk didn't find any partition by the backup of the boot sector.
You can try to recover files using photorec instead.
http://www.cgsecurity.org/wiki/PhotoRec
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step
You can use PhotoRec / FileOpt and press s to deselect all filetypes and just activate those where you'd like to recover.
So PhotoRec will not recover unnecessary files.

Fiona

Re: no partition found after deep search.

Posted: 08 Jul 2015, 08:29
by appius
thanks for your answer Fiona.
I've tried photorec, but it gave me a bunch of corrupted files with stupid names. useless.
any other solution?
can't the boot sector be recreated?

Re: no partition found after deep search.

Posted: 12 Sep 2015, 11:32
by appius
up.
can't the boot sector be recreated?
All times are UTC+01:00
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited