cgsecurity.org

Hello all,

I do have a 3TB HDD on my Arch linux for some years now (maybe 2 or 3 years) which is divided in three partitions:
- PTR 1 (EXT4)
- PTR 2 (EXT4)
- PTR 3 (NTFS)

The system itself run outside of this HDD, the partition 1 (PTR 1) was corrupted somehow and I tried to recover the partition, it seems to be badblock at first but I couldn't repair it, so I've tested the TestDisk to re-find the partition.

However in the process I've made a big mistake of not take all attention on the process, by using too many tabs on terminal and accidentally found and saved the partitions however it was not exactly was it suppose to be, then it make the "PTR 2" and "PTR 3" unavailable.

It recognise it as EFI GPT however, it in real is Intel: and I proceeded anyway, so, it first removed the partitions PTR 2 and PTR 3, so I've started the testdisk again after recognize my error, and I select Intel to repair it, but it found a different partition tables.

But due to the fact that I had the partitions already mounted I still have access to it normally, but if do reboot or umount it, i'll gonna lose the access to the filesystem.
Here the output of df (of these partitions):
Result of gparted for example:

Hitting Ignore:

Hitting ignore again:


As you can see the partitions are different sizes now, and do have two "unallocated" which doesn't have before.

What TestDisk found:
The result of saving it is what gparted shows in the images above.

The situation get even odder when I use the deeper search instead of quick one, it "found" even more partitions, but in reality it should found only 3 partitions in total.

So, the important to me now is to repair the two partitions that I had working before (PTR 2 and PTR 3) -- I have access to it due the fact it still mounted on system -- that I probably gonna lose if I reboot the system.

What do you guys recommend me to do to repair it?

Thanks very much!

You can get the partition size using "cat /proc/partitions".

Usually disk bigger than 2TB are using EFI GPT.
Run TestDisk, Advanced, for each partition, try List. If you can see your files, it's probably ok.

Thanks sir,

I tested list files by EFI GPT but no success at all. under the quick search it found only PTR 1 but it is not accessible. and under deep search it found many partitions.


And by Intel I can list PTR 2 but not PTR 3.

You have mentioned the /proc/partitions, there is a way that I can manually set it?

Please provide a copy of the testdisk.log file