problems in figuring out what to do next

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
erwinweber
Posts: 2
Joined: 04 Feb 2017, 18:09

problems in figuring out what to do next

#1 Post by erwinweber »

Hello!

I have two hard drives. One is booting windows, the other booted Linux. The one that has Linux is a 1TB hard drive with data that i do not wish to lose. Today i wanted to replace Linux with Hackintosh. After booting hackintosh installation, i entered disk utility to delete every linux partition from the 1tb drive, but when i pressed the erase button (into mac os journaled fs) on a partition, it gave some kind of posix error (i didn't noted the error text), so i just booted back to windows to see what was with that. When i entered the file explorer, i saw that the partitions from that disk were missing. In disk management, the disk was there and online, but not any of the partitions i had, not even unallocated space, just grey. I stumbled upon testdisk and analysed that drive, but i don't know what options do i have next. I don't care about the linux partitions, but the other have very important data that i do not wish to lose. Here is the log file. Many thanks in advance! (sorry if somehow i posted this topic twice)

1 * HPFS - NTFS 0 32 33 63741 45 48 1024000000 (this partition can be accesed from testdisk)
2 P Linux 63741 78 18 67979 49 38 68081664
3 P Linux Swap 67979 49 39 70410 135 61 39059456
4 E extended LBA 70410 135 62 121601 57 56 822378496
5 L Linux 70410 168 31 70477 117 40 1073152
6 L Linux 70477 150 10 82862 186 12 198967296
7 L HPFS - NTFS 82862 251 14 96104 10 34 212717568 (this one can't be accesed)
8 is missing
Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=0 16450559
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 E extended 0 0 1 121600 247 55 1953519616

Bad relative sector.
No partition is bootable

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 1024000000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 63741 45 48 1024000000
NTFS, blocksize=4096, 524 GB / 488 GiB

recover_EXT2: s_block_group_nr=0/259, s_mnt_count=52/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8510009
recover_EXT2: part_size 68080072
Linux 63741 78 18 67979 24 21 68080072
ext4 blocksize=4096 Large_file Sparse_SB, 34 GB / 32 GiB
Linux Swap 67979 49 39 70410 135 45 39059440
SWAP2 version 1, pagesize=4096, 19 GB / 18 GiB

recover_EXT2: s_block_group_nr=0/4, s_mnt_count=53/4294967295, s_blocks_per_group=32768, s_inodes_per_group=6704
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 134033
recover_EXT2: part_size 1072264
Linux 70410 168 31 70477 103 34 1072264
ext4 blocksize=4096 Large_file Sparse_SB, 548 MB / 523 MiB

recover_EXT2: s_block_group_nr=0/759, s_mnt_count=49/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8208
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 24870912
recover_EXT2: part_size 198967296
Linux 70477 150 10 82862 186 12 198967296
ext4 blocksize=4096 Large_file Sparse_SB, 101 GB / 94 GiB
NTFS at 82862/251/14
filesystem size 212717568
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 82862 251 14 96104 10 34 212717568
NTFS, blocksize=4096, 108 GB / 101 GiB
BAD_RS LBA=363249918 10956372
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 289960 155 50 292053 85 41 33619627
This partition ends after the disk limits. (start=4658217214, size=33619627, end=4691836840, disk end=1953525168)
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2402 GB / 2237 GiB)
The following partition can't be recovered:
FAT12 289960 155 50 292053 85 41 33619627

Results
* HPFS - NTFS 0 32 33 63741 45 48 1024000000
NTFS, blocksize=4096, 524 GB / 488 GiB
P Linux 63741 78 18 67979 49 38 68081664
ext4 blocksize=4096 Large_file Sparse_SB, 34 GB / 32 GiB
P Linux Swap 67979 49 39 70410 135 61 39059456
SWAP2 version 1, pagesize=4096, 19 GB / 18 GiB
L Linux 70410 168 31 70477 117 40 1073152
ext4 blocksize=4096 Large_file Sparse_SB, 549 MB / 524 MiB
L Linux 70477 150 10 82862 186 12 198967296
ext4 blocksize=4096 Large_file Sparse_SB, 101 GB / 94 GiB
L HPFS - NTFS 82862 251 14 96104 10 34 212717568
NTFS, blocksize=4096, 108 GB / 101 GiB
add_ext_part_i386: max
add_ext_part_i386: max

interface_write()
1 * HPFS - NTFS 0 32 33 63741 45 48 1024000000
2 P Linux 63741 78 18 67979 49 38 68081664
3 P Linux Swap 67979 49 39 70410 135 61 39059456
4 E extended LBA 70410 135 62 121601 57 56 822378496
5 L Linux 70410 168 31 70477 117 40 1073152
6 L Linux 70477 150 10 82862 186 12 198967296
7 L HPFS - NTFS 82862 251 14 96104 10 34 212717568

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: problems in figuring out what to do next

#2 Post by cgrenier »

If some partitions are not listed after Quick Search, try Deeper Search.
You will have to use the arrow keys to select wich partitions to recover, set them to P(rimary), *(bootable) or L(ogical) instead of D(eleted).
Once all partitions are listed, on next screen, choose Write, confirm, Quit
Read https://www.cgsecurity.org/testdisk.pdf for details

erwinweber
Posts: 2
Joined: 04 Feb 2017, 18:09

Re: problems in figuring out what to do next

#3 Post by erwinweber »

After deeper search i get an error that 2 partitions can't be recovered. I attached the print screen below. In the mean time, i succesfully backed-up all that i need. But with these errors, if i press 'write', will it affect the data in the hard-drive? Thank you very much in advance!!
Attachments
thesepartitions.JPG
thesepartitions.JPG (41.92 KiB) Viewed 1697 times

Locked