entire HDD unallocated recovery_HELP!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
ubuntu4use
Posts: 3
Joined: 25 Feb 2016, 11:47

entire HDD unallocated recovery_HELP!

#1 Post by ubuntu4use »

Hi everyone
I'm a new user of Ubuntu and during the installation of Ubuntu I get an error while it was formatting hard-disk and I powered off my laptop by pressing and hold the power button.
Unfortunately now my laptop can not identify my HDD and in Ubuntu live it shows entire of my HDD as unallocated.
Now I want recover my hard disk
In the link below I've uploaded lots of screenshots.
Please take a look at the testdisk forum.zip file.


https://drive.google.com/folderview?id= ... =drive_web


There is a folder 4oldpartitions.
That's my partitions before being unallocated and I want recover those partitions.
I just need NTFS ones and linux partitions are not import.
As you can see there is three logical NTFS partitions under an extended partition that I REALLY want to recover them.

In the other folders you can see testdisk results for my current HDD situation.
But there is some problems for example testdisk doesn't identify that extended partition as extended.
And it shows that it's unable to recover one of my NTFS drives...
How can I recover all of my NTFS partitions?
Ext4 and swap and other Linux partitions are not important.
That 75 GB NTFS partition should be bootable i.e marked as * cause there's my windows 7 64 bit on it and it was working like a charm before booting into Ubuntu live!

Another problem is Ubuntu shows, as you can see in 4oldpartitions folder, that some of my NTFS partitions had overlap! But my laptop was working for more than 1 year with Windows without problem and overlap error!

Please help me recover my partitions. Please...


User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: entire HDD unallocated recovery_HELP!

#2 Post by cgrenier »

Please use TestDisk 7.1-WIP, not 6.14. You can download it from http://www.cgsecurity.org/wiki/TestDisk_Download
If the partition still overlaps, copy and paste the testdisk.log file content to this forum.

ubuntu4use
Posts: 3
Joined: 25 Feb 2016, 11:47

Re: entire HDD unallocated recovery_HELP!

#3 Post by ubuntu4use »

Hi
I again get the same results with testdisk 7.1 WIP
here is the screenshots and LOG file :

https://drive.google.com/open?id=0B3DIq ... Fk2VEh1akU

my problem is I want to recover that 562GiB Extended Drive which include these partitions:
NTFS 187.7GiB
NTFS 187.5GiB
NTFS 187.5GiB

but in the testdisk weather in quicksearch or deep search i just could see files of that 75GB NTFS drive, which is for windows 7 and infact i have not any really important file in this partition.
My important Data is in that three 187GB NTFS drives.

again testdisk said that it can not recover one of this 187GB NTFS drives because it exceeds limits of my hard disk!

But I saw an option for manually creating partition table by pressing key A...
can I do this and manually recover this partition table?
what values I should insert and how? based on the screenshots of my oldpartition here

https://drive.google.com/open?id=0B3DIq ... I4RnNWeUVN

anyway thanks for your help but all in all, what should I do to recover that three 187GB NTFS partitions?

ubuntu4use
Posts: 3
Joined: 25 Feb 2016, 11:47

Re: entire HDD unallocated recovery_HELP!

#4 Post by ubuntu4use »

Here is testdisk log :


Fri Feb 26 14:56:59 2016
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, February 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.2.0-16-generic (#19-Ubuntu SMP Thu Oct 8 15:35:06 UTC 2015) x86_64
Compiler: GCC 4.4
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.7
/dev/sda: LBA, LBA48, DCO support
/dev/sda: size 1465149168 sectors
/dev/sda: user_max 1465149168 sectors
/dev/sda: dco 1465149168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - HGST HTS541075A9E680, S/N:JD12001W0WZTEA, FW:JA2OA590
Disk /dev/sdb - 4009 MB / 3824 MiB - CHS 1018 124 62, sector size=512 - Sony Storage Media, FW:0100
Disk /dev/sdc - 8046 MB / 7674 MiB - CHS 1022 248 62, sector size=512 - hp v175w, FW:1100

Partition table type defaults to Intel
Disk /dev/sda - 750 GB / 698 GiB - HGST HTS541075A9E680
Partition table type: Intel

Analyse Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63

recover_btrfs: part_size 32720896
Linux 0 32 33 2036 231 51 32720896
btrfs blocksize=4096 Backup superblock, 16 GB / 15 GiB
NTFS at 2036/231/52
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2036 231 52 2081 134 37 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
NTFS at 2081/134/38
filesystem size 146739200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2081 134 38 11215 158 15 146739200
NTFS, blocksize=4096, 75 GB / 69 GiB
NTFS at 11215/158/16
filesystem size 1180109309
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 11215 158 16 84674 7 2 1180109309
NTFS, blocksize=4096, 604 GB / 562 GiB
NTFS at 84674/8/3
filesystem size 393215873
sectors_per_cluster 8
mft_lcn 3
mftmirr_lcn 16383994
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 84674 8 3 109150 149 52 393215873
NTFS, blocksize=4096, 201 GB / 187 GiB
This partition ends after the disk limits. (start=1360288316, size=393215873, end=1753504188, disk end=1465149168)
Linux Swap 84674 31 30 85743 242 51 17186800
SWAP2 version 1, pagesize=4096, 8799 MB / 8391 MiB

recover_EXT2: s_block_group_nr=0/334, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 10957312
recover_EXT2: part_size 87658496
Linux 85744 183 8 91201 52 51 87658496
ext4 blocksize=4096 Large_file Sparse_SB, 44 GB / 41 GiB
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (750 GB / 698 GiB) seems too small! (< 897 GB / 836 GiB)
The following partition can't be recovered:
HPFS - NTFS 84674 8 3 109150 149 52 393215873
NTFS, blocksize=4096, 201 GB / 187 GiB

Results
Linux 0 32 33 2036 231 51 32720896
btrfs blocksize=4096 Backup superblock, 16 GB / 15 GiB
HPFS - NTFS 2036 231 52 2081 134 37 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
HPFS - NTFS 2081 134 38 11215 158 15 146739200
NTFS, blocksize=4096, 75 GB / 69 GiB
HPFS - NTFS 11215 158 16 84674 31 29 1180110848
NTFS, blocksize=4096, 604 GB / 562 GiB
Linux Swap 84674 31 30 85743 243 4 17186816
SWAP2 version 1, pagesize=4096, 8799 MB / 8392 MiB
Linux 85744 183 8 91201 52 51 87658496
ext4 blocksize=4096 Large_file Sparse_SB, 44 GB / 41 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 32720896 linear /dev/sda 2048" | dmsetup create test0
echo "0 716800 linear /dev/sda 32722944" | dmsetup create test1
echo "0 146739200 linear /dev/sda 33439744" | dmsetup create test2
echo "0 1180110848 linear /dev/sda 180178944" | dmsetup create test3
echo "0 17186816 linear /dev/sda 1360289792" | dmsetup create test4
echo "0 87658496 linear /dev/sda 1377488896" | dmsetup create test5
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_ucstoutf8: iconv_open failed


dir_partition inode=5
HPFS - NTFS 2081 134 38 11215 158 15 146739200
NTFS, blocksize=4096, 75 GB / 69 GiB
Directory /
5 dr-xr-xr-x 0 0 0 22-Feb-2016 12:08 .
5 dr-xr-xr-x 0 0 0 22-Feb-2016 12:08 ..
182 dr-xr-xr-x 0 0 0 25-Jan-2015 13:00 $Recycle.Bin
47549 dr-xr-xr-x 0 0 0 23-May-2015 07:00 .Xilinx
70093 dr-xr-xr-x ntfs_mst_post_read_fixup_warn: magic: 0x80aaa114 size: 1024 usa_ofs: 56066 usa_count: 21480: Invalid argument
Record 15 has no FILE magic (0x80aaa114)
Inode is corrupt (0): Input/output error
Failed to load runlist for $MFT/$DATA.
highest_vcn = 0x3, last_vcn - 1 = 0x59abf
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x80aaa114 size: 1024 usa_ofs: 56066 usa_count: 21480: Invalid argument
Record 15 has no FILE magic (0x80aaa114)
Inode is corrupt (0): Input/output error
Failed to load runlist for $MFT/$DATA.
highest_vcn = 0x3, last_vcn - 1 = 0x59abf
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x80aaa114 size: 1024 usa_ofs: 56066 usa_count: 21480: Invalid argument
Record 15 has no FILE magic (0x80aaa114)
Inode is corrupt (0): Input/output error
Failed to load runlist for $MFT/$DATA.
highest_vcn = 0x3, last_vcn - 1 = 0x59abf
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x80aaa114 size: 1024 usa_ofs: 56066 usa_count: 21480: Invalid argument
Record 15 has no FILE magic (0x80aaa114)
Inode is corrupt (0): Input/output error
Failed to load runlist for $MFT/$DATA.
highest_vcn = 0x3, last_vcn - 1 = 0x59abf
Failed to load $MFT: Input/output error
0 0 0 30-Apr-2015 19:29 AdwCleaner
102222 dr-xr-xr-x 0 0 0 25-Apr-2015 12:58 HW4
38166 dr-xr-xr-x 0 0 0 9-Sep-2014 14:51 Intel
105604 dr-xr-xr-x 0 0 0 2-Dec-2015 09:13 MP_tmp
156325 dr-xr-xr-x 0 0 0 21-Dec-2015 08:27 OPNET_license
219791 dr-xr-xr-x 0 0 0 15-Oct-2015 08:28 PS System
183 dr-xr-xr-x 0 0 0 14-Jul-2009 03:20 PerfLogs
185 dr-xr-xr-x 0 0 0 19-Feb-2016 20:57 Program Files
399 dr-xr-xr-x 0 0 0 17-Feb-2016 10:05 Program Files (x86)
515 dr-xr-xr-x 0 0 0 8-Jan-2016 18:59 ProgramData
2073 dr-xr-xr-x 0 0 0 9-Sep-2014 06:14 Recovery
62965 dr-xr-xr-x 0 0 0 20-Feb-2016 11:35 System Volume Information
612 dr-xr-xr-x 0 0 0 30-Jan-2015 09:25 Users
776 dr-xr-xr-x 0 0 0 22-Feb-2016 17:04 Windows
149885 dr-xr-xr-x 0 0 0 7-Mar-2015 07:42 flexlm
85653 dr-xr-xr-x 0 0 0 7-Mar-2015 11:36 max2work
95213 dr-xr-xr-x 0 0 0 20-Feb-2016 11:41 production
76058 -r--r--r-- 0 0 298 29-Sep-2014 19:13 HPCamDrv.log
66465 -r--r--r-- 0 0 91 22-Feb-2016 16:11 HaxLogs.txt
100156 -r--r--r-- 0 0 517 16-Feb-2016 18:00 NSI_DriverInstall.log
776 -r--r--r-- 0 0 192 22-Feb-2016 17:04 Windows:nlsPreferences
73506 -r--r--r-- 0 0 193 4-Jul-2015 08:54 WirelessDiagLog.csv
84966 -r--r--r-- 0 0 86 2-Nov-2014 19:18 arsetup.log
62959 -r--r--r-- 0 0 3126448128 22-Feb-2016 16:10 hiberfil.sys
81420 -r--r--r-- 0 0 0 17-Dec-2014 06:34 m23apdfj.tmp.X
147628 -r--r--r-- 0 0 4168601600 22-Feb-2016 16:10 pagefile.sys
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

HPFS - NTFS 11215 158 16 84674 31 29 1180110848
NTFS, blocksize=4096, 604 GB / 562 GiB
Can't open filesystem. Filesystem seems damaged.

Linux Swap 84674 31 30 85743 243 4 17186816
SWAP2 version 1, pagesize=4096, 8799 MB / 8392 MiB
Support for this filesystem hasn't been implemented.


dir_partition inode=2
Linux 85744 183 8 91201 52 51 87658496
ext4 blocksize=4096 Large_file Sparse_SB, 44 GB / 41 GiB
Directory /
2 drwx------ 999 999 4096 22-Feb-2016 20:43 .
2 drwx------ 999 999 4096 22-Feb-2016 20:43 ..
11 drwx------ 0 0 16384 22-Feb-2016 20:43 lost+found
Couldn't open reiser filesystem

Linux 0 32 33 2036 231 51 32720896
btrfs blocksize=4096 Backup superblock, 16 GB / 15 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()

No partition found or selected for recovery

search_part()
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63

recover_btrfs: part_size 32720896
Linux 0 32 33 2036 231 51 32720896
btrfs blocksize=4096 Backup superblock, 16 GB / 15 GiB
NTFS at 2036/231/52
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2036 231 52 2081 134 37 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
NTFS at 2081/134/37
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2036 231 52 2081 134 37 716800
NTFS found using backup sector, blocksize=4096, 367 MB / 350 MiB
NTFS at 2081/134/38
filesystem size 146739200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2081 134 38 11215 158 15 146739200
NTFS, blocksize=4096, 75 GB / 69 GiB

block_group_nr 25

recover_EXT2: "e2fsck -b 819200 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=25/40, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 1310720
recover_EXT2: part_size 10485760
Linux 3549 253 33 4202 179 9 10485760
ext3 blocksize=4096 Large_file Sparse_SB Backup_SB, 5368 MB / 5120 MiB

recover_EXT2: s_block_group_nr=0/40, s_mnt_count=4/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 1310720
recover_EXT2: part_size 10485760
Linux 6158 135 58 6811 61 34 10485760
ext3 blocksize=4096 Large_file Sparse_SB Recover, 5368 MB / 5120 MiB

recover_EXT2: s_block_group_nr=0/40, s_mnt_count=38/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 1310720
recover_EXT2: part_size 10485760
Linux 9204 118 3 9857 43 42 10485760
ext3 blocksize=4096 Large_file Sparse_SB Recover, 5368 MB / 5120 MiB

recover_EXT2: s_block_group_nr=0/40, s_mnt_count=18/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 1310720
recover_EXT2: part_size 10485760
Linux 9208 8 17 9860 188 56 10485760
ext3 blocksize=4096 Large_file Sparse_SB Recover, 5368 MB / 512

Locked