3TB drive lost Topic is solved

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
strongdc
Posts: 11
Joined: 07 Jun 2012, 13:03

Re: 3TB drive lost

#11 Post by strongdc »

Hmmm.. deep search takes a lot of time :(
and i ll need to arrange for hdd to store nearly 1.6tb of data :|

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: 3TB drive lost

#12 Post by Fiona »

TestDisk writes a GPT-Table.
There is no problem.
Would it be possible to upload a screen from your disk management console?
Please check that little quadrat at the left and open the context menu.
It's important, because testdisk doesn't actualize it as often.
So there might be a possibility that it's decribed as basic disk, but if you right click that quadrat, it might be possible there is a description like convert it to MBR.
It means, your disk is listed as Basic but it's a GPT-Disk.
It's a bit confusing and windows related.
TestDisk found a MS Data partition.
Would it be possible to check it and press p to list your data?
It was on your second post before you diagnosed somthing with 4096 Byte sector size.
I made a copy here;

Code: Select all

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
     Partition               Start        End    Size in sectors
>D MS Data                   264192 5860532223 5860268032
 D Mac HFS                 73178241 1445874014 1372695774 [M-I yM-)~PB*~AM-6M-9^FM-;I ^WJAhݧ&]
 D Mac HFS                115956725  179088887   63132163
 D Mac HFS                118007085  181139247   63132163
 D Mac HFS                165157438  179386434   14228997
 D Mac HFS                167192102  181421098   14228997
 D Mac HFS                172665454  179616340    6950887
 D Mac HFS                173616473  178671453    5054981
 D Mac HFS                174700086  181650972    6950887
 D Mac HFS                177920089  182975069    5054981
 D Mac HFS                178671450  183726430    5054981
Structure: Ok.  Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
                P=Primary  D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
     Enter: to continue
NTFS found using backup sector!, 3000 GB / 2794 GiB
Please let me know.
If this partition is found, you can stop the scan pressing enter.
It's gonna speed up diagnose!
Please let me know, did you see your data or an error message?

Fiona

strongdc
Posts: 11
Joined: 07 Jun 2012, 13:03

Re: 3TB drive lost

#13 Post by strongdc »

cant do that since dont have my desktop here. i have plugged it into my dad's pc but it has XP which doesnt recognise 3tb drives. currently running ubuntu 11.04 from a 4gb usb.
As for your ques - i think i did convert it to GPT disk. I was using it with Win 7 Ultimate 64bit.
the problem was i couldn't enter the value 5860532223 for end sector. any soln for that?
as the screen u have included, the 1st partition i had viewed the files and they were the correct ones.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: 3TB drive lost

#14 Post by Fiona »

the problem was i couldn't enter the value 5860532223 for end sector. any soln for that?
I have no idea why you'd like to enter this value?
If you've seen your infos from your display and this partition should be recoverable.
Looks like that TestDisk found some remnants or it's gonna recognize some HFS-Partitions where overlap but this is not the problem.
as the screen u have included, the 1st partition i had viewed the files and they were the correct ones.
Looks fine! :)
But might be advisable to check it again to go for sure (you should list your data from that partition agin).
Normally you only need to check that first partition and use your left or right arrow key on your keyboard to set it to P for primary, then press enter, check Write and press enter and y to confirm.
Your partition should be recovered.
But currently you have no GPT-support.
That's why you have to wait until you'll get it.
Otherwise it's not possible to write a valid signatur to your GUID partition table.
That's why you should be careful.
Don't do anything if you're not 100 % sure.
But if TestDisk lists your data you can have a try to copy some folders for testing purposes and make some spot tests.
If you list your data, at the bottom of the display you'll find all the commands.
Standard path would be your testdisk folder.
If you wanna change it, easily check that 2 dots and press enter.
To enter a folder, easily check it and use your right arrow key.

Fiona

strongdc
Posts: 11
Joined: 07 Jun 2012, 13:03

Re: 3TB drive lost

#15 Post by strongdc »

Thanks!! Got it done.. i had not pressed the left/right key to make the partition primary. Wrote it to the drive. Then it asked me whether i should copy from back up or rebuild the boot sector. I copied it. Got my drive back :)

but then i put it into a usb enclosure to connect it to my laptop, and again Win7 showed it as raw :evil: I launched testdisk and the surprising part it showed sector size as 4096!! I booted in Ubuntu and there it worked properly. But the sector size was still 4096. Finally since i have a lot of data, thought would move the req data to my 1tb drive so plgged them both in to a desktop and ran ubuntu.. And again the 3tb was unallocated :evil: sector size = 512!! can somebody explain what the hell is happening!?!?!?

PS- ran testdisk n wrote the partition again.. now coping files from my 3tb drive to 1tb.

strongdc
Posts: 11
Joined: 07 Jun 2012, 13:03

Re: 3TB drive lost

#16 Post by strongdc »

Also, with the drive in USB connected to my laptop running Win7, i ran testdisk. It found my partition, wrote it to the drive but even after restarting disk manager still showed it as raw.

PS- i wasn't able to copy files after listing them using testdisk 6.14 but could copy with 6.13. Concerned ppl pls take a look at that.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: 3TB drive lost

#17 Post by Fiona »

It's probably sector size recognition of Windows.
TestDisk menu Geometry let you change your sector size to 4096.
Bit it's a dangerous thing as described if you mark it.
You must 100 % sure.
Normally if you have formatted you disk using windows, testdisk gets this info from windows.
Before you go to change anything, it's a good solution to backup your data first.

strongdc
Posts: 11
Joined: 07 Jun 2012, 13:03

Re: 3TB drive lost

#18 Post by strongdc »

Yeah i guess so. Such narrow mindedness on microsoft's part!!
Anyways, thanks for all the help. Got my 3TB drive back with all its data intact :)

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: 3TB drive lost

#19 Post by Fiona »

Thanks for your feedback! :)
I'll set your topic as solved.

Fiona

Locked