Page 1 of 1

Accidental Partition delete

Posted: 04 Aug 2017, 07:12
by butella
Hello,

I have a diskproblem and i hope you guys can help me.

With a new windows installation i thought it was a good idea to delete all those "unused" partitions. Wanted a clean install.

Did not see my (second) 2TB drive, so i figured i could safely delete al the partitions.

After reinstalling windows 10 my drive is vissible with unalocated space under diskmanagement.

I ran testdisk and it says the filesystem is damaged. Because i am new to this i tried an easeus recovery and sees my files but when restored files cant be opened

below is the logfile, i didn't keep a lseek errors, but there is a lot of them. The log below show the first and last lines.

Wed Aug 2 20:58:19 2017
Command line: Te
TestDisk 7.1-WIP, Data Recovery Utility, July 2017
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256062259200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256062259200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=255466668032
filewin32_getfilesize(\\.\D:) GetFileSize err Onjuiste functie.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Onjuiste functie.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000364240896
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31131 255 63, sector size=512 - Intel Raid 0 Volume, S/N:RAID0IMSVolume, FW:1.0.
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Samsung SSD 850 EVO 2TB, S/N:S2RMNX0H501493X, FW:EMT02B6Q
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Passport 0748, S/N:WX61EB2R5719, FW:1019

Partition table type (auto): EFI GPT
Disk /dev/sdb - 2000 GB / 1863 GiB - Samsung SSD 850 EVO 2TB
Partition table type: EFI GPT

Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=3907029167 (expected 3907029167)
hdr_lba_start=34
hdr_lba_end=3907029134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P Unknown 264192 3907028991 3906764800 [Opslaggroep]

search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
NTFS at 130/203/10
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size 485850875
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record 1
clusters_per_index_record 1
NTFS part_offset=1075838976, part_size=1990045184000, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 130/203/10
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size 485850875
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record 1
clusters_per_index_record 1

130/203/10
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size 485850875
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record 1
clusters_per_index_record 1
MS Data 2101248 3888908247 3886807000
NTFS, blocksize=4096, 1990 GB / 1853 GiB
file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,1,buffer,3907029170(243201/81/3)) lseek err Invalid argument
file_pread(5,1,buffer,3907029171(243201/81/4)) lseek err Invalid argument
file_pread(5,1,buffer,3907029172(243201/81/5)) lseek err Invalid argument
file_pread(5,1,buffer,3907029173(243201/81/6)) lseek err Invalid argument
file_pread(5,1,buffer,3907029174(243201/81/7)) lseek err Invalid argument
file_pread(5,1,buffer,3907029175(243201/81/8)) lseek err Invalid argument
file_pread(5,1,buffer,3907029176(243201/81/9)) lseek err Invalid argument
file_pread(5,1,buffer,3907029177(243201/81/10)) lseek err Invalid argument
file_pread(5,1,buffer,3907029178(243201/81/11)) lseek err Invalid argument
file_pread(5,1,buffer,3907029179(243201/81/12)) lseek err Invalid argument
file_pread(5,1,buffer,3907029180(243201/81/13)) lseek err Invalid argument
file_pread(5,1,buffer,3907029181(243201/81/14)) lseek err Invalid argument
file_pread(5,1,buffer,3907029182(243201/81/15)) lseek err I
MS Data 2101248 3888908247 3886807000
NTFS, blocksize=4096, 1990 GB / 1853 GiBfile_pread(5,1,buffer,3907029280(243201/82/50)) lseek err Invalid argument
file_pread(5,1,buffer,3907031193(243201/113/10)) lseek err Invalid argument
file_pread(5,1,buffer,3907029210(243201/81/43)) lseek err Invalid argument
file_pread(5,8,buffer,3907029224(243201/81/57)) lseek err Invalid argument
file_pread(5,11,buffer,3907029271(243201/82/41)) lseek err Invalid argument
file_pread(5,1,buffer,3907031194(243201/113/11)) lseek err Invalid argument
file_pread(5,1,buffer,3907029211(243201/81/44)) lseek err Invalid argument
file_pread(5,1,buffer,3907029232(243201/82/2)) lseek err Invalid argument
file_pread(5,1,buffer,3907029282(243201/82/52)) lseek err Invalid argument
file_pread(5,1,buffer,3907031195(243201/113/12)) lseek err Invalid argument
file_pread(5,1,buffer,3907029212(243201/81/45)) lseek err Invalid argument
file_pread(5,1,buffer,3907029233(243201/82/3)) lseek err Invalid argument
file_pread(5,1,buffer,3907029283(243201/82/53)) lseek err Invalid argument
file_pread(5,1,buffer,3907031196(243201/113/13)) lseek err Invalid argument
file_pread(5,1,buffer,3907029213(243201/81/46)) lseek err Invalid argument
file_pread(5,8,buffer,3907029227(243201/81/60)) lseek err Invalid argument
file_pread(5,11,buffer,3907029274(243201/82/44)) lseek err Invalid argument
file_pread(5,1,buffer,3907031197(243201/113/14)) lseek err Invalid argument
file_pread(5,1,buffer,3907029214(243201/81/47)) lseek err Invalid argument
file_pread(5,1,buffer,3907029235(243201/82/5)) lseek err Invalid argument
file_pread(5,1,buffer,3907029285(243201/82/55)) lseek err Invalid argument
file_pread(5,1,buffer,3907031198(243201/113/15)) lseek err Invalid argument
file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029215(243201/81/48)) lseek err Invalid argumentbuffer,3907029239(243201/82/9)) lseek err Invalid argument
file_pread(5,1,buffer,3907029289(243201/82/59)) lseek err Invalid argument
file_pread(5,1,buffer,3907031202(243201/113/19)) lseek err Invalid argument
file_pread(5,14,buffer,3907029156(243201/80/52)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,3,buffer,3907029170(243201/81/3)) lseek err Invalid argument
file_pread(5,3,buffer,3907029217(243201/81/50)) lseek err Invalid argument
file_pread(5,8,buffer,3907029233(243201/82/3)) lseek err Invalid argument
file_pread(5,11,buffer,3907029280(243201/82/50)) lseek err Invalid argument
file_pread(5,2,buffer,3907031202(243201/113/19)) lseek err Invalid argument
file_pread(5,14,buffer,3907029157(243201/80/53)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,2,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,3,buffer,3907029171(243201/81/4)) lseek err Invalid argument
file_pread(5,3,buffer,3907029218(243201/81/51)) lseek err Invalid argument
file_pread(5,8,buffer,3907029234(243201/82/4)) lseek err Invalid argument
file_pread(5,11,buffer,3907029281(243201/82/51)) lseek err Invalid argument
file_pread(5,2,buffer,3907031203(243201/113/20)) lseek err Invalid argument
file_pread(5,14,buffer,3907029158(243201/80/54)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,3,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,3,buffer,3907029172(243201/81/5)) lseek err Invalid argument
file_pread(5,3,buffer,3907029219(243201/81/52)) lseek err Invalid argument
file_pread(5,8,buffer,3907029235(243201/82/5)) lseek err Invalid argument
file_pread(5,11,buffer,3907029282(243201/82/52)) lseek err Invalid argument
file_pread(5,2,buffer,3907031204(243201/113/21)) lseek err Invalid argument
file_pread(5,14,buffer,3907029159(243201/80/55)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,4,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,3,buffer,3907029173(243201/81/6)) lseek err Invalid argument
file_pread(5,3,buffer,3907029220(243201/81/53)) lseek err Invalid argument
file_pread(5,8,buffer,3907029236(243201/82/6)) lseek err Invalid argument
file_pread(5,11,buffer,3907029283(243201/82/53)) lseek err Invalid argument
file_pread(5,2,buffer,3907031205(243201/113/22)) lseek err Invalid argument
file_pread(5,14,buffer,3907029160(243201/80/56)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,5,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,3,buffer,3907029174(243201/81/7)) lseek err Invalid argument
file_pread(5,3,buffer,3907029221(243201/81/54)) lseek err Invalid argument
file_pread(5,8,buffer,3907029237(243201/82/7)) lseek err Invalid argument
file_pread(5,11,buffer,3907029284(243201/82/54)) lseek err Invalid argument
file_pread(5,2,buffer,3907031206(243201/113/23)) lseek err Invalid argument
file_pread(5,1,buffer,3907029177(243201/81/10)) lseek err Invalid argument
file_pread(5,1,buffer,3907029224(243201/81/57)) lseek err Invalid argument
file_pread(5,1,buffer,3907029245(243201/82/15)) lseek err Invalid argument
file_pread(5,1,buffer,3907029295(243201/83/2)) lseek err Invalid argument
file_pread(5,1,buffer,3907031208(243201/113/25)) lseek err Invalid argument
file_pread(5,14,buffer,3907029162(243201/80/58)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,7,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,3,buffer,3907029176(243201/81/9)) lseek err Invalid argument
file_pread(5,3,buffer,3907029223(243201/81/56)) lseek err Invalid argument
file_pread(5,8,buffer,3907029239(243201/82/9)) lseek err Invalid argument
file_pread(5,11,buffer,3907029286(243201/82/56)) lseek err Invalid argument
file_pread(5,1,buffer,3907031209(243201/113/26)) lseek err Invalid argument
file_pread(5,1,buffer,3907029179(243201/81/12)) lseek err Invalid argument
file_pread(5,1,buffer,3907029226(243201/81/59)) lseek err Invalid argument
file_pread(5,1,buffer,3907029247(243201/82/17)) lseek err Invalid argument
file_pread(5,1,buffer,3907029297(243201/83/4)) lseek err Invalid argument
file_pread(5,1,buffer,3907029236(243201/82/6)) lseek err Invalid argument
file_pread(5,1,buffer,3907029286(243201/82/56)) lseek err Invalid argument
file_pread(5,1,buffer,3907031199(243201/113/16)) lseek err Invalid argument
file_pread(5,1,buffer,3907029169(243201/81/2)) lseek err Invalid argument
file_pread(5,1,buffer,3907029216(243201/81/49)) lseek err Invalid argument
file_pread(5,8,buffer,3907029230(243201/81/63)) lseek err Invalid argument
file_pread(5,11,buffer,3907029277(243201/82/47)) lseek err Invalid argument
file_pread(5,1,buffer,3907031200(243201/113/17)) lseek err Invalid argument
file_pread(5,1,buffer,3907029170(243201/81/3)) lseek err Invalid argument
file_pread(5,1,buffer,3907029217(243201/81/50)) lseek err Invalid argument
file_pread(5,1,buffer,3907029238(243201/82/8)) lseek err Invalid argument
file_pread(5,1,buffer,3907029288(243201/82/58)) lseek err Invalid argument
file_pread(5,1,buffer,3907031201(243201/113/18)) lseek err Invalid argument
file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029171(243201/81/4)) lseek err Invalid argument
file_pread(5,1,buffer,3907029218(243201/81/51)) lseek err Invalid argument
file_pread(5,1,
file_pread(5,1,buffer,3907031210(243201/113/27)) lseek err Invalid argument
file_pread(5,14,buffer,3907029164(243201/80/60)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,8,buffer,3907029170(243201/81/3)) lseek err Invalid argument

file_pread(5,1,buffer,3907031212(243201/113/29)) lseek err Invalid argument
file_pread(5,14,buffer,3907029166(243201/80/62)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.

file_pread(5,1,buffer,3907029179(243201/81/12)) lseek err Invalid argument

file_pread(5,1,buffer,3907031215(243201/113/32)) lseek err Invalid argument
file_pread(5,1,buffer,3907029168(243201/81/1)) ReadFile Onjuiste functie.


file_pread(5,1,buffer,3907031217(243201/113/34)) lseek err Invalid argument

Results
P MS Data 2101248 3888908247 3886807000
NTFS, blocksize=4096, 1990 GB / 1853 GiB

P MS Data 2101248 3888908247 3886807000
NTFS, blocksize=4096, 1990 GB / 1853 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
1 P MS Data 2101248 3888908247 3886807000
simulate write!
SIGHUP detected! TestDisk has been killed.

Re: Accidental Partition delete

Posted: 05 Aug 2017, 08:23
by cgrenier
You can choose to recover the listed NTFS partition, go in Advanced, Boot, RebuildBS, List. Choose Write and confirm if you can see your files.

If it doesn't work, use PhotoRec instead.

Re: Accidental Partition delete

Posted: 05 Aug 2017, 20:49
by butella
I do not have to options you describe.

Under advanced in the main menu, i can only create an image.

After scanning i'm also not getting these options. Expert mode is set to yes.