Page 1 of 1

problems in figuring out what to do next

Posted: 04 Feb 2017, 18:55
by erwinweber
Hello!

I have two hard drives. One is booting windows, the other booted Linux. The one that has Linux is a 1TB hard drive with data that i do not wish to lose. Today i wanted to replace Linux with Hackintosh. After booting hackintosh installation, i entered disk utility to delete every linux partition from the 1tb drive, but when i pressed the erase button (into mac os journaled fs) on a partition, it gave some kind of posix error (i didn't noted the error text), so i just booted back to windows to see what was with that. When i entered the file explorer, i saw that the partitions from that disk were missing. In disk management, the disk was there and online, but not any of the partitions i had, not even unallocated space, just grey. I stumbled upon testdisk and analysed that drive, but i don't know what options do i have next. I don't care about the linux partitions, but the other have very important data that i do not wish to lose. Here is the log file. Many thanks in advance! (sorry if somehow i posted this topic twice)

1 * HPFS - NTFS 0 32 33 63741 45 48 1024000000 (this partition can be accesed from testdisk)
2 P Linux 63741 78 18 67979 49 38 68081664
3 P Linux Swap 67979 49 39 70410 135 61 39059456
4 E extended LBA 70410 135 62 121601 57 56 822378496
5 L Linux 70410 168 31 70477 117 40 1073152
6 L Linux 70477 150 10 82862 186 12 198967296
7 L HPFS - NTFS 82862 251 14 96104 10 34 212717568 (this one can't be accesed)
8 is missing
Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=0 16450559
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 E extended 0 0 1 121600 247 55 1953519616

Bad relative sector.
No partition is bootable

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 1024000000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 63741 45 48 1024000000
NTFS, blocksize=4096, 524 GB / 488 GiB

recover_EXT2: s_block_group_nr=0/259, s_mnt_count=52/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 8510009
recover_EXT2: part_size 68080072
Linux 63741 78 18 67979 24 21 68080072
ext4 blocksize=4096 Large_file Sparse_SB, 34 GB / 32 GiB
Linux Swap 67979 49 39 70410 135 45 39059440
SWAP2 version 1, pagesize=4096, 19 GB / 18 GiB

recover_EXT2: s_block_group_nr=0/4, s_mnt_count=53/4294967295, s_blocks_per_group=32768, s_inodes_per_group=6704
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 134033
recover_EXT2: part_size 1072264
Linux 70410 168 31 70477 103 34 1072264
ext4 blocksize=4096 Large_file Sparse_SB, 548 MB / 523 MiB

recover_EXT2: s_block_group_nr=0/759, s_mnt_count=49/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8208
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 24870912
recover_EXT2: part_size 198967296
Linux 70477 150 10 82862 186 12 198967296
ext4 blocksize=4096 Large_file Sparse_SB, 101 GB / 94 GiB
NTFS at 82862/251/14
filesystem size 212717568
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 82862 251 14 96104 10 34 212717568
NTFS, blocksize=4096, 108 GB / 101 GiB
BAD_RS LBA=363249918 10956372
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 289960 155 50 292053 85 41 33619627
This partition ends after the disk limits. (start=4658217214, size=33619627, end=4691836840, disk end=1953525168)
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2402 GB / 2237 GiB)
The following partition can't be recovered:
FAT12 289960 155 50 292053 85 41 33619627

Results
* HPFS - NTFS 0 32 33 63741 45 48 1024000000
NTFS, blocksize=4096, 524 GB / 488 GiB
P Linux 63741 78 18 67979 49 38 68081664
ext4 blocksize=4096 Large_file Sparse_SB, 34 GB / 32 GiB
P Linux Swap 67979 49 39 70410 135 61 39059456
SWAP2 version 1, pagesize=4096, 19 GB / 18 GiB
L Linux 70410 168 31 70477 117 40 1073152
ext4 blocksize=4096 Large_file Sparse_SB, 549 MB / 524 MiB
L Linux 70477 150 10 82862 186 12 198967296
ext4 blocksize=4096 Large_file Sparse_SB, 101 GB / 94 GiB
L HPFS - NTFS 82862 251 14 96104 10 34 212717568
NTFS, blocksize=4096, 108 GB / 101 GiB
add_ext_part_i386: max
add_ext_part_i386: max

interface_write()
1 * HPFS - NTFS 0 32 33 63741 45 48 1024000000
2 P Linux 63741 78 18 67979 49 38 68081664
3 P Linux Swap 67979 49 39 70410 135 61 39059456
4 E extended LBA 70410 135 62 121601 57 56 822378496
5 L Linux 70410 168 31 70477 117 40 1073152
6 L Linux 70477 150 10 82862 186 12 198967296
7 L HPFS - NTFS 82862 251 14 96104 10 34 212717568

Re: problems in figuring out what to do next

Posted: 05 Feb 2017, 12:22
by cgrenier
If some partitions are not listed after Quick Search, try Deeper Search.
You will have to use the arrow keys to select wich partitions to recover, set them to P(rimary), *(bootable) or L(ogical) instead of D(eleted).
Once all partitions are listed, on next screen, choose Write, confirm, Quit
Read https://www.cgsecurity.org/testdisk.pdf for details

Re: problems in figuring out what to do next

Posted: 07 Feb 2017, 21:32
by erwinweber
After deeper search i get an error that 2 partitions can't be recovered. I attached the print screen below. In the mean time, i succesfully backed-up all that i need. But with these errors, if i press 'write', will it affect the data in the hard-drive? Thank you very much in advance!!