What Should I do , I have Strukture : bad status .. !!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
khabib
Posts: 2
Joined: 05 Jan 2018, 20:16

What Should I do , I have Strukture : bad status .. !!

#1 Post by khabib »

----------------------------------------------------------------------------------------------------------------------------------------------------
Oke this is my recovery partitions result ---- !!
----------------------------------------------------------------------------------------------------------------------------------------------------
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Partition Start End Size in sectors
D FAT32 0 32 33 127 155 28 2048000 [ACER_LINUX]
D Linux 129 198 6 31427 134 3 502798336
D Linux Swap 31427 134 4 31932 220 32 8118272
D HPFS - NTFS 31932 220 33 31998 2 4 1046528
>D HPFS - NTFS 31998 67 6 76998 173 39 722931712 -----------> I want to recover this
D HPFS - NTFS 76998 173 40 121601 25 24 716537856 ------------> and this one

Structure: Ok. Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable P=Primary L=Logical E=Extended D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
Enter: to continue
NTFS, blocksize=4096, 370 GB / 344 GiB
----------------------------------------------------------------------------------------------------------------------------------------------------
so when i set from D to L i got Structure : bad .. so what should i do .. ??
----------------------------------------------------------------------------------------------------------------------------------------------------
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Partition Start End Size in sectors
D FAT32 0 32 33 127 155 28 2048000 [ACER_LINUX]
D Linux 129 198 6 31427 134 3 502798336
D Linux Swap 31427 134 4 31932 220 32 8118272
D HPFS - NTFS 31932 220 33 31998 2 4 1046528
L HPFS - NTFS 31998 67 6 76998 173 39 722931712
>L HPFS - NTFS 76998 173 40 121601 25 24 716537856

Structure: Bad. Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable P=Primary L=Logical E=Extended D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
Enter: to continue
NTFS, blocksize=4096, 366 GB / 341 GiB
----------------------------------------------------------------------------------------------------------------------------------------------------
I read the instruction like this ..
"Using the left/right arrow keys, change the status of the selected partition from D(eleted) to L(ogical). This way you will be able to recover this partition"
but if i chose P for both ( partitions that i want to recover ) the structure status is : ok
should be i use P .. Please give me solutions i really need my data back !! thanks
----------------------------------------------------------------------------------------------------------------------------------------------------

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: What Should I do , I have Strukture : bad status .. !!

#2 Post by cgrenier »

Unfortunately you didn't provide the testdisk.log file. We don't know how your partition table is currently.
The correct partition table type may be EFI GPT and not PC Intel.

khabib
Posts: 2
Joined: 05 Jan 2018, 20:16

Re: What Should I do , I have Strukture : bad status .. !!

#3 Post by khabib »

cgrenier wrote: 06 Jan 2018, 09:55 Unfortunately you didn't provide the testdisk.log file. We don't know how your partition table is currently.
The correct partition table type may be EFI GPT and not PC Intel.

Code: Select all


Sat Jan  6 09:10:22 2018
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.9.0-kali3-amd64 (#1 SMP Debian 4.9.18-1kali1 (2017-04-04)) x86_64
Compiler: GCC 6.2
ext2fs lib: 1.43.4, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size       1953525168 sectors
/dev/sda: user_max   1953525168 sectors
/dev/sda: native_max 1953525168 sectors
/dev/sda: dco        1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MQ01ABD100, S/N:Y6GRCBW2T, FW:AX1P5J
Disk /dev/sdb - 7775 MB / 7415 MiB - CHS 1020 240 62, sector size=512 - ADATA USB Flash Drive, FW:0.00

Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA MQ01ABD100
Partition table type: Intel

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=1 0
check_part_i386 1 type EE: no test
Current partition structure:
 1 P EFI GPT                  0   0  2 121601  80 63 1953525167

Bad relative sector.
No partition is bootable

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 4206-6198
FAT2 : 6199-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-2047999
sectors : 2048000
cluster_size : 8
no_of_cluster : 254976 (2 - 254977)
fat_length 1993 calculated 1993

FAT32 at 0/32/33
     FAT32                    0  32 33   127 155 28    2048000 [ACER_LINUX]
     FAT32, blocksize=4096, 1048 MB / 1000 MiB

recover_EXT2: s_block_group_nr=0/1918, s_mnt_count=4/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 62849792
recover_EXT2: part_size 502798336
     Linux                  129 198  6 31427 134  3  502798336
     ext4 blocksize=4096 Large_file Sparse_SB, 257 GB / 239 GiB
     Linux Swap           31427 134  4 31932 220 16    8118256
     SWAP2 version 1, pagesize=4096, 4156 MB / 3963 MiB
NTFS at 31932/220/33
filesystem size           1046528
sectors_per_cluster       8
mft_lcn                   43605
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31932 220 33 31998   2  4    1046528
     NTFS, blocksize=4096, 535 MB / 511 MiB
NTFS at 31998/67/6
filesystem size           722931712
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31998  67  6 76998 173 39  722931712
     NTFS, blocksize=4096, 370 GB / 344 GiB
NTFS at 76998/173/40
filesystem size           716537856
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          76998 173 40 121601  25 24  716537856
     NTFS, blocksize=4096, 366 GB / 341 GiB

Results
     FAT32                    0  32 33   127 155 28    2048000 [ACER_LINUX]
     FAT32, blocksize=4096, 1048 MB / 1000 MiB
     Linux                  129 198  6 31427 134  3  502798336
     ext4 blocksize=4096 Large_file Sparse_SB, 257 GB / 239 GiB
     Linux Swap           31427 134  4 31932 220 32    8118272
     SWAP2 version 1, pagesize=4096, 4156 MB / 3964 MiB
     HPFS - NTFS          31932 220 33 31998   2  4    1046528
     NTFS, blocksize=4096, 535 MB / 511 MiB
     HPFS - NTFS          31998  67  6 76998 173 39  722931712
     NTFS, blocksize=4096, 370 GB / 344 GiB
     HPFS - NTFS          76998 173 40 121601  25 24  716537856
     NTFS, blocksize=4096, 366 GB / 341 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 2048000 linear /dev/sda 2048" | dmsetup create test0
echo "0 502798336 linear /dev/sda 2084864" | dmsetup create test1
echo "0 8118272 linear /dev/sda 504883200" | dmsetup create test2
echo "0 1046528 linear /dev/sda 513001472" | dmsetup create test3
echo "0 722931712 linear /dev/sda 514052096" | dmsetup create test4
echo "0 716537856 linear /dev/sda 1236983808" | dmsetup create test5
SIGHUP detected! TestDisk has been killed.
so this is my log .my device is ACER E5-475G . the accident is my windows 10 is error then i trying to recoverdata using Gparted on Kalilinux live but i got wrong execution to create new table .. and BOOM 3 partition table has delete ... please suggest me to get my data back.. actualy i see all of my data on there .. but i really carefully to get partition back n not make mistake again .. please help me thanks

Locked