Recovered a "diskpart clean" partition. Can i still use it now ?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
thomaz
Posts: 2
Joined: 07 Sep 2016, 19:05

Recovered a "diskpart clean" partition. Can i still use it now ?

#1 Post by thomaz »

i accidentially did a "diskpart clean" on my main machine (intel raid 1) instead of doing it in the vnc window. :(
after i restored it with test disk all seems fine.

can i continue normal work with the partition or should i make a backup and then restore the filesystem from scratch?

there are also errors shown in the testdisk log:

Code: Select all

Wed Sep  7 14:37:50 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000395698176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000395698176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=35311845376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=214745219072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=13925089280
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63, sector size=512
Drive C: - 35 GB / 32 GiB - CHS 4293 255 63, sector size=512
Drive D: - 214 GB / 199 GiB - CHS 26107 255 63, sector size=512
Drive W: - 13 GB / 12 GiB - CHS 13280 64 32, sector size=512

Partition table type default to Intel
Disk /dev/sdb - 2000 GB / 1863 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63
BAD_RS LBA=1544316556 4408265
file_pread(5,3,buffer,1544316556(363478/155/18)) lseek err Invalid argument
file_pread(5,1,buffer,1544316556(363478/155/18)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
     FAT12                363478 155 18 427622  11  8 1030464279
This partition ends after the disk limits. (start=5839283852, size=1030464279, end=6869748130, disk end=3907022848)
NTFS at 243199/254/63
filesystem size           3907007937
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               244187996
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   1  1 243199 254 63 3907007937
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 243199/254/63
filesystem size           3907007937
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               244187996
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(5,1024,buffer,3913302527(243591/208/9)) lseek err Invalid argument
file_pread(5,1,buffer,3913302527(243591/208/9)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          243199 254 63 486399 253 62 3907007937
     NTFS, blocksize=4096, 2000 GB / 1863 GiB
This partition ends after the disk limits. (start=3907007999, size=3907007937, end=7814015935, disk end=3907022848)
file_pread(5,2,buffer,3907022848(243200/235/44)) ReadFile Unzulässige Funktion.

file_pread(5,1,buffer,3907022848(243200/235/44)) ReadFile Unzulässige Funktion.

file_pread(5,14,buffer,3907022849(243200/235/45)) lseek err Invalid argument
file_pread(5,1,buffer,3907022849(243200/235/45)) lseek err Invalid argument
file_pread(5,8,buffer,3907022855(243200/235/51)) lseek err Invalid argument
file_pread(5,3,buffer,3907022863(243200/235/59)) lseek err Invalid argument
file_pread(5,3,buffer,3907022910(243200/236/43)) lseek err Invalid argument
file_pread(5,8,buffer,3907022926(243200/236/59)) lseek err Invalid argument
file_pread(5,11,buffer,3907022973(243200/237/43)) lseek err Invalid argument
file_pread(5,2,buffer,3907024895(243201/13/12)) lseek err Invalid argument
file_pread(5,14,buffer,3907022850(243200/235/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907022866(243200/235/62)) lseek err Invalid argument
file_pread(5,1,buffer,3907022913(243200/236/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907022934(243200/237/4)) lseek err Invalid argument
file_pread(5,1,buffer,3907022984(243200/237/54)) lseek err Invalid argument
file_pread(5,1,buffer,3907024897(243201/13/14)) lseek err Invalid argument
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 4000 GB / 3726 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          243199 254 63 486399 253 62 3907007937
     NTFS, blocksize=4096, 2000 GB / 1863 GiB
     FAT12                363478 155 18 427622  11  8 1030464279
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2

Results
   * HPFS - NTFS              0   1  1 243199 254 63 3907007937
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB

interface_write()
 1 * HPFS - NTFS              0   1  1 243199 254 63 3907007937
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

ntfs_boot_sector
 1 * HPFS - NTFS              0   1  1 243199 254 63 3907007937
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/1/1
filesystem size           1 3907007937
sectors_per_cluster       0 8
mft_lcn                   0 786432
mftmirr_lcn               0 244187996
clusters_per_mft_record   0 -10
clusters_per_index_record 0 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
copy backup boot sector over boot sector

ntfs_boot_sector
 1 * HPFS - NTFS              0   1  1 243199 254 63 3907007937
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/1/1
NTFS at 0/1/1
filesystem size           3907007937
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               244187996
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
You will have to reboot for the change to take effect.

TestDisk exited normally.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovered a "diskpart clean" partition. Can i still use it now ?

#2 Post by cgrenier »

It looks ok, you have fixed the partition table and the NTFS boot sector using TestDisk.
It's always a good idea to backup your data but you should be able to continue to use your computer normally.

chriskross
Posts: 4
Joined: 07 Sep 2016, 11:13

Re: Recovered a "diskpart clean" partition. Can i still use it now ?

#3 Post by chriskross »

deleted

thomaz
Posts: 2
Joined: 07 Sep 2016, 19:05

Re: Recovered a "diskpart clean" partition. Can i still use it now ?

#4 Post by thomaz »

yeah. i'll build the filesystem from scratch.
i had problems with the "recycler" on the recovered partition.
but hey all seems saved. so thanks a huge lot for this tool.

first i tried easeus free but it found ... 0 and my heart stopped beating.
"del diskpart.exe" on my main box now. :)

btw. what exactly do the errors mean. for example "This partition ends after the disk limits."
it is an intel raid 1.

Edit: Theese are the problems i recognized after recovering.
1. The Recycler for the Drive is missing in the Global Recycler options.
2. I can access and open the files in "System Volume Information"
Attachments
nodrivee.jpg
nodrivee.jpg (107.04 KiB) Viewed 2676 times

Locked