Lost Partition - FAT32 32k used for Wii (updated)

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
JhonAB
Posts: 5
Joined: 31 Dec 2016, 13:08

Lost Partition - FAT32 32k used for Wii (updated)

#1 Post by JhonAB »

Hello, my first time using this amazing software here, thanks to all people who made this great tool.

I have lost my partition of a 1TB hard disk 2,5'' Western Digital Elements where I got 2 of them:
1-Fat32 32k for nintendo Wii. (The rest of the space of the disk, 980GB-45,6GB? maybe around 934.4GB) letter G.
2-NTFS for other purposes (in the end I never used it) 45,6GB letter L.

I run testdisk recognized its table type as "none". After analyse and quick search I only got a lot of WBFS partitions and a first one as NTFS and any of them let me see fyles (I was expecting only one partition).

I don´t know how to proceed, could someone please help me, anything would be of a lot of help ^^

This is my Log file:
Fri Dec 30 15:17:00 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500106780160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=500000882688
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500096991744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=950219571200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=49981423616
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 500 GB / 465 GiB - CHS 60788 255 63, sector size=512
Drive D: - 500 GB / 465 GiB - CHS 60799 255 63, sector size=512
Drive G: - 950 GB / 884 GiB - CHS 115524 255 63, sector size=512
Drive L: - 49 GB / 46 GiB - CHS 6076 255 63, sector size=512

Partition table type (auto): None
Drive G: - 950 GB / 884 GiB
Partition table type: None

Analyse Drive G: - 950 GB / 884 GiB - CHS 115524 255 63
NTFS at 115524/72/4
filesystem size 1855897600
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Current partition structure:
Invalid NTFS boot
P NTFS 0 0 1 115524 72 4 1855897600

search_part()
Drive G: - 950 GB / 884 GiB - CHS 115524 255 63

WBFS 28 54 57 191 35 2 2617344
WBFS, 1340 MB / 1278 MiB

WBFS 191 36 4 375 122 33 2961408
WBFS, 1516 MB / 1446 MiB

WBFS 375 123 35 442 72 44 1073152
WBFS, 549 MB / 524 MiB

WBFS 442 73 46 596 138 20 2478080
WBFS, 1268 MB / 1210 MiB

WBFS 596 139 22 690 160 12 1511424
WBFS, 773 MB / 738 MiB

WBFS 690 161 14 1093 56 17 6467584
WBFS, 3311 MB / 3158 MiB

WBFS 1093 57 19 1647 196 51 8908800
WBFS, 4561 MB / 4350 MiB

WBFS 1647 197 53 1987 33 60 5451776
WBFS, 2791 MB / 2662 MiB

WBFS 1987 34 62 2347 102 25 5787648
WBFS, 2963 MB / 2826 MiB

WBFS 2347 103 27 2498 217 53 2433024
WBFS, 1245 MB / 1188 MiB

WBFS 2498 218 55 2657 48 45 2543616
WBFS, 1302 MB / 1242 MiB

WBFS 2657 49 47 3124 8 50 7499776
WBFS, 3839 MB / 3662 MiB

WBFS 3124 9 52 3259 108 15 2174976
WBFS, 1113 MB / 1062 MiB

WBFS 3259 109 17 3441 120 37 2924544
WBFS, 1497 MB / 1428 MiB

WBFS 3441 121 39 3684 181 47 3907584
WBFS, 2000 MB / 1908 MiB

WBFS 3684 182 49 3877 249 50 3104768
WBFS, 1589 MB / 1516 MiB

WBFS 3877 250 52 4037 85 46 2560000
WBFS, 1310 MB / 1250 MiB

WBFS 4037 86 48 4158 179 19 1949696
WBFS, 998 MB / 952 MiB

WBFS 4158 180 21 4322 230 34 2637824
WBFS, 1350 MB / 1288 MiB

WBFS 4322 231 36 4824 237 51 8065024
WBFS, 4129 MB / 3938 MiB

WBFS 4824 238 53 5136 63 13 5001216
WBFS, 2560 MB / 2442 MiB

WBFS 5136 64 15 5497 6 43 5795840
WBFS, 2967 MB / 2830 MiB

WBFS 5497 7 45 5529 104 45 520192
WBFS, 266 MB / 254 MiB

WBFS 5529 105 47 5960 207 37 6930432
WBFS, 3548 MB / 3384 MiB

WBFS 5960 208 39 6003 36 15 679936
WBFS, 348 MB / 332 MiB

WBFS 6003 37 17 6184 43 33 2908160
WBFS, 1488 MB / 1420 MiB

WBFS 6184 44 35 6680 150 28 7974912
WBFS, 4083 MB / 3894 MiB

WBFS 6680 151 30 7176 62 20 7962624
WBFS, 4076 MB / 3888 MiB

WBFS 7176 63 22 7734 223 7 8974336
WBFS, 4594 MB / 4382 MiB

WBFS 7734 224 9 8088 1 7 5672960
WBFS, 2904 MB / 2770 MiB

WBFS 8088 2 9 8393 181 10 4911104
WBFS, 2514 MB / 2398 MiB

___________________________ I deleted a lot more partitions like these ones (too much characters per message sorry)

WBFS 62349 191 17 62848 52 18 8007680
WBFS, 4099 MB / 3910 MiB
Buffer can't store more than 200 lines.

WBFS 107775 39 4 2719318006 143 52 9220504510529536
WBFS, 4720898 TB / 4293632 TiB
This partition ends after the disk limits. (start=1731407835, size=9220504510529536, end=9220506241937370, disk end=1855897600)

HFS magic value at 113662/217/43
part_size 8421378
HFS 113662 217 43 114187 15 21 8421378
HFS blocksize=16777216, 4311 MB / 4112 MiB

WBFS 114758 48 31 2609711756 102 14 11012708463804416
WBFS, 5638506 TB / 5128192 TiB
This partition ends after the disk limits. (start=1843590324, size=11012708463804416, end=11012710307394739, disk end=1855897600)

LVM magic value at 114917/76/26
file_win32_pread(108,11,buffer,1855897595(115524/71/63)) read err: read after end of file
file_win32_pread(108,8,buffer,1855897594(115524/71/62)) read err: read after end of file
file_win32_pread(108,8,buffer,1855897598(115524/72/3)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897587(115524/71/55)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897588(115524/71/56)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897589(115524/71/57)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897590(115524/71/58)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897591(115524/71/59)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897592(115524/71/60)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897594(115524/71/62)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897596(115524/72/1)) read err: read after end of file
file_win32_pread(108,14,buffer,1855897598(115524/72/3)) read err: read after end of file
NTFS at 115524/72/4
filesystem size 1855897600
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS 0 0 1 115524 72 4 1855897600
NTFS found using backup sector, blocksize=4096, 950 GB / 884 GiB
Drive G: - 950 GB / 884 GiB - CHS 115524 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (950 GB / 884 GiB) seems too small! (< 5638507 TB / 5128192 TiB)
The following partitions can't be recovered:
WBFS 107775 39 4 2719318006 143 52 9220504510529536
WBFS, 4720898 TB / 4293632 TiB
WBFS 114758 48 31 2609711756 102 14 11012708463804416
WBFS, 5638506 TB / 5128192 TiB

Results
P NTFS 0 0 1 115524 72 4 1855897600
NTFS found using backup sector, blocksize=4096, 950 GB / 884 GiB
P WBFS 28 54 57 191 35 2 2617344
WBFS, 1340 MB / 1278 MiB
P WBFS 191 36 4 375 122 33 2961408
WBFS, 1516 MB / 1446 MiB
P WBFS 375 123 35 442 72 44 1073152
_____________________ And a lot more partitions like these ones, the same, too much charecters if I paste them all).
WBFS, 4007 MB / 3822 MiB
P WBFS 97675 144 36 97799 122 17 1990656
WBFS, 1019 MB / 972 MiB
P WBFS 97799 123 19 98284 173 31 7794688
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
WBFS, 3990 MB / 3806 MiB
P WBFS 98284 174 33 98721 176 45 7020544
WBFS, 3594 MB / 3428 MiB
P WBFS 105410 176 13 105454 138 58 704512
WBFS, 360 MB / 344 MiB
P WBFS 107072 95 62 107432 33 23 5779456
WBFS, 2959 MB / 2822 MiB
P WBFS 107541 22 32 107775 37 4 3760128
WBFS, 1925 MB / 1836 MiB
P HFS 113662 217 43 114187 15 21 8421378
HFS blocksize=16777216, 4311 MB / 4112 MiB

P WBFS 28 54 57 191 35 2 2617344
WBFS, 1340 MB / 1278 MiB
Support for this filesystem hasn't been implemented.

P NTFS 0 0 1 115524 72 4 1855897600
NTFS found using backup sector, blocksize=4096, 950 GB / 884 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
Buffer can't store more than 200 lines.
P NTFS 0 0 1 115524 72 4 1855897600
P WBFS 28 54 57 191 35 2 2617344
P WBFS 191 36 4 375 122 33 2961408
P WBFS 375 123 35 442 72 44 1073152
P WBFS 442 73 46 596 138 20 2478080
P WBFS 596 139 22 690 160 12 1511424
P WBFS 690 161 14 1093 56 17 6467584
P WBFS 1093 57 19 1647 196 51 8908800
P WBFS 1647 197 53 1987 33 60 5451776
P WBFS 1987 34 62 2347 102 25 5787648

Top
User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: Lost Partition - FAT32 32k used for Wii (updated)

#2 Post by cgrenier »

It's useless to search partitions inside a partition (G:).
Select "Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512"
Top
JhonAB
Posts: 5
Joined: 31 Dec 2016, 13:08

Re: Lost Partition - FAT32 32k used for Wii (updated)

#3 Post by JhonAB »

cgrenier wrote:It's useless to search partitions inside a partition (G:).
Select "Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512"
Thanks a lot cgrenier! I can not express how relieved I feel. There is still chances for this partition with my works on scene.

I followed your advise and and saw the partition FAT32 (with two possibilities?):

Code: Select all

 1 * FAT32 LBA                0  32 33 115524 104 36 1855897600
 1 * FAT32 LBA                0  32 33 115524 104 36 1855897600
But after going to Analyse I could only see the NTFS, according to the warming should I change the the heads per cylinder to 16?

Code: Select all

Warning: the current number of heads per cylinder is 255 but the correct value may be 16.

Results
   * HPFS - NTFS              0   1  1 121601 254 63 1953536067
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Here is the full LOG:

Mon Jan 02 13:41:36 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500106780160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=500000882688
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500096991744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=950219571200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=49981423616
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 500 GB / 465 GiB - CHS 60788 255 63, sector size=512
Drive D: - 500 GB / 465 GiB - CHS 60799 255 63, sector size=512
Drive G: - 950 GB / 884 GiB - CHS 115524 255 63, sector size=512
Drive L: - 49 GB / 46 GiB - CHS 6076 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63


test_FAT()
1 * FAT32 LBA 0 32 33 115524 104 36 1855897600
sector_size 28392
cluster_size 15
reserved 25236
fats 170
dir_entries 7509
sectors 45410
media CA
fat_length 10953
secs_track 59714
heads 9539
hidden 304760336
total_sect 157426240
check_part_i386 failed for partition type 0C
NTFS at 115524/104/37
Current partition structure:
Invalid FAT boot sector
1 * FAT32 LBA 0 32 33 115524 104 36 1855897600
1 * FAT32 LBA 0 32 33 115524 104 36 1855897600
2 P HPFS - NTFS 115524 104 37 121600 247 55 97619968

search_part()
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/1/1
filesystem size 1953525105
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 121601 80 63 1953525105
NTFS, blocksize=4096, 1000 GB / 931 GiB
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 16.

Results
* HPFS - NTFS 0 1 1 121601 254 63 1953536067
NTFS, blocksize=4096, 1000 GB / 931 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 121601 254 63 1953536067
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.[/spoiler]
Top
JhonAB
Posts: 5
Joined: 31 Dec 2016, 13:08

Re: Lost Partition - FAT32 32k used for Wii (updated)

#4 Post by JhonAB »

Up

Someone could suggest me next step?

Change cylinder size or go for analyze ?
Top
JhonAB
Posts: 5
Joined: 31 Dec 2016, 13:08

Re: Lost Partition - FAT32 32k used for Wii (updated)

#5 Post by JhonAB »

JhonAB wrote:Up

Someone could suggest me next step?

Change cylinder size or go for analyze ?

Up.

Really looking for advise, Im feared to touch someting I sould not. :(
Top
Locked

Return to “Partition Recovery”