Lost the partition/mft/boot sectors
Posted: 20 Nov 2015, 23:22
Hello!
Love the software, i was able to copy some of the files of my NTFS-gone-RAW disk. But then something happened, and i lost the partitions, and i am getting read-errors.
External Seagate Backup plus 3TB disk. Turned raw after not safely removing. No weird sounds, so i'm guessing software problem. I found the disk in testdisk (tried both windows, and finally in ubuntu), did a quick search and found all my files. I was able to copy files, but after a while i got some read-error and couldn't access the disk anymore. Then i disconnected the seagate, re connected, ran testdisk again and was able to copy some more files, before the errors came back. Then i did something, and i'm not sure what, but i suspect it got converted from MBR to GPT, can this be? (i think i ran ntfsfix and tried to mount the disk manually, in ubuntu. it did not work). In any case, after this i was able to find the disk in testdisk, but with wrong size info, and "EFI GPT" was highlighted, not "Intel" as it was before. After this i have been unable to find any files, and the quick/deep search just gives "read errors". I tried running testdisk thru windows, which showed the disk wrongly at 2TB, and just gave mentioned errors in searches.
back in ubuntu i choose the disk, "efi gpt" highlighted so i press enter. quick search gave "read error at..." and no partition, so i abort early. of curiosity i chose "Add partition" and (for some reason) chose "MBR" as type. then Loaded backup, which gave me a partition but named "mbr".
I now have the disk appear to be normal in testdisk in ubuntu, correct "HPFS NTFS" and size. i choose the disk and proceed. "EFI GPT" is highlighted, but should be Intel(!?) so i chose this instead, i get "partition read error", press quick search which gives read errors, i stop. then i got to chose "load backup" (i backed up before when i had the right partition showing, and could see the files). im presented with what looks right "hpfs ntfs...", i chose to Write, but get "Write error". Then to analyse, which now shows 2 identical "ntfs" partitions, but with "invalid NTFS or EXFAT boot".
I go back, chose Intel, advanced, which shows "no partition availiable". same when i try with efi-gpt. So i chose "None", which gives me "P unknown" partition. i chose Type, and NTFS, and now it shows as "P NTFS 0 0 1 357698 35 21 732566645". I try to view List, but it freezes. after some time i am able to try Boot instead, which states "cant read boot sector/backup boot sector", both being Bad and identical. I chose Rebuild BS, but it freezes. Earlier attempts at rebuilding boot sector (thru Intel i think, not "none"), gave me a screen "searching for MFT", and it searched for hours but only came to barely 1%, so i aborted.
----------------------------
this is the situation. what might have happened since i seem to have lost the partition, and ability to view the files? is it an MFT problem? MBR/GPT problem? Can i still recover the mft or boot sector somehow, so i can find the partition and files again??
Thanks in advance!
Love the software, i was able to copy some of the files of my NTFS-gone-RAW disk. But then something happened, and i lost the partitions, and i am getting read-errors.
External Seagate Backup plus 3TB disk. Turned raw after not safely removing. No weird sounds, so i'm guessing software problem. I found the disk in testdisk (tried both windows, and finally in ubuntu), did a quick search and found all my files. I was able to copy files, but after a while i got some read-error and couldn't access the disk anymore. Then i disconnected the seagate, re connected, ran testdisk again and was able to copy some more files, before the errors came back. Then i did something, and i'm not sure what, but i suspect it got converted from MBR to GPT, can this be? (i think i ran ntfsfix and tried to mount the disk manually, in ubuntu. it did not work). In any case, after this i was able to find the disk in testdisk, but with wrong size info, and "EFI GPT" was highlighted, not "Intel" as it was before. After this i have been unable to find any files, and the quick/deep search just gives "read errors". I tried running testdisk thru windows, which showed the disk wrongly at 2TB, and just gave mentioned errors in searches.
back in ubuntu i choose the disk, "efi gpt" highlighted so i press enter. quick search gave "read error at..." and no partition, so i abort early. of curiosity i chose "Add partition" and (for some reason) chose "MBR" as type. then Loaded backup, which gave me a partition but named "mbr".
I now have the disk appear to be normal in testdisk in ubuntu, correct "HPFS NTFS" and size. i choose the disk and proceed. "EFI GPT" is highlighted, but should be Intel(!?) so i chose this instead, i get "partition read error", press quick search which gives read errors, i stop. then i got to chose "load backup" (i backed up before when i had the right partition showing, and could see the files). im presented with what looks right "hpfs ntfs...", i chose to Write, but get "Write error". Then to analyse, which now shows 2 identical "ntfs" partitions, but with "invalid NTFS or EXFAT boot".
I go back, chose Intel, advanced, which shows "no partition availiable". same when i try with efi-gpt. So i chose "None", which gives me "P unknown" partition. i chose Type, and NTFS, and now it shows as "P NTFS 0 0 1 357698 35 21 732566645". I try to view List, but it freezes. after some time i am able to try Boot instead, which states "cant read boot sector/backup boot sector", both being Bad and identical. I chose Rebuild BS, but it freezes. Earlier attempts at rebuilding boot sector (thru Intel i think, not "none"), gave me a screen "searching for MFT", and it searched for hours but only came to barely 1%, so i aborted.
----------------------------
this is the situation. what might have happened since i seem to have lost the partition, and ability to view the files? is it an MFT problem? MBR/GPT problem? Can i still recover the mft or boot sector somehow, so i can find the partition and files again??
Thanks in advance!