Please help me recover my files!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
atticus
Posts: 3
Joined: 10 Apr 2018, 20:23

Please help me recover my files!

#1 Post by atticus »

I really need some help recovering my files in one of my partitioned drive. The drive which was used to store my files became RAW and the other drive letter sequence was skipped. I’m lost on how to recover those data and I will try to describe what happened to the best of my ability.
Drive C: (a SSD where my Windows 10 is installed is working fine)
Drive D: (a 1TB HDD which I have splitted into 3 equal drives turned from NTFS to RAW)
Drive F: (part of the 1TB HDD partitioned NTFS drive, originally named Drive E: now became F: and is working fine)
Drive G: (part of the 1TB HDD partitioned NTFS drive, originally named Drive F: now became G: and is working fine)
So what happened was previously my windows kept crashing and it couldn’t repair itself and I made various attempts to reformat and install both Windows 7 and 10 but eventually, changing my SSD fixed the issue. After all that happened, I discovered the Drive D: which is my HDD became RAW but the files in other 2 partitions are still intact. I suspect windows did something to that drive during the repair and recovery on the windows installed on my SSD. So now the drive D: which stores my photos and songs is now inaccessible.

Now, I’ve tried using TestDisk and saw a drive name “Windows RE(store)” but I’m not sure what is that. But I did both quick and deeper search, P: list files and did not show any of my existing files either. Before the quick search, I could see a duplication of Drive D: but after the quick and deeper search, the drive D: was not shown at all.
Tried Rebuild BS but didn’t work (Boot sector Status Bad/ Backup boot sector Status: Bad/ Sectors are identical).
Couldn’t Undelete (Can’t open filesystem. Filesystem seems damaged).

Tried using PhotoRec and none of my files were found in there as well.
I've transferred away all files in other drives of the HDD just in case something happens in the process, I just need the files that seems to be lost in the affected drive now. Please help, thank you!
step1-before quick search.JPG
step1-before quick search.JPG (65.77 KiB) Viewed 2210 times
step2.1-after quick search before deeper search.JPG
step2.1-after quick search before deeper search.JPG (62.7 KiB) Viewed 2210 times
Step3-after deeper search.JPG
Step3-after deeper search.JPG (62.57 KiB) Viewed 2210 times

Code: Select all


Wed Apr 11 02:41:57 2018
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, March 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
Failed to startup volume: Invalid argument.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511463915520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=332929171456
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=333401030656
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=333399982080
Hard disk list
Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - TS512GSSD370, S/N:C125170586, FW:N1114H
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-9YN162, S/N:Z1D12JTV, FW:CC4C

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - ST1000DM003-9YN162
Partition table type: Intel
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
check_part_i386 2 type 27: no test
NTFS at 40533/210/62
NTFS at 81067/134/28
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
 2 P Windows RE(store)    40476 117 26 40533 210 61     921600
 3 P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
 4 P HPFS - NTFS          81067 134 28 121601  25 24  651171840
     NTFS, blocksize=4096, 333 GB / 310 GiB
Not an exFAT boot sector.

 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
filesystem size           1
sectors_per_cluster       0
mft_lcn                   0
mftmirr_lcn               0
clusters_per_mft_record   0
clusters_per_index_record 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
filesystem size           1
sectors_per_cluster       0
mft_lcn                   0
mftmirr_lcn               0
clusters_per_mft_record   0
clusters_per_index_record 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
filesystem size           1
sectors_per_cluster       0
mft_lcn                   0
mftmirr_lcn               0
clusters_per_mft_record   0
clusters_per_index_record 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.

 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
Can't open filesystem. Filesystem seems damaged.

 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
Can't open filesystem. Filesystem seems damaged.

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
check_part_i386 2 type 27: no test
NTFS at 40533/210/62
NTFS at 81067/134/28
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
 2 P Windows RE(store)    40476 117 26 40533 210 61     921600
 3 P HPFS - NTFS          40533 210 62 81067 134 27  651173888
 4 P HPFS - NTFS          81067 134 28 121601  25 24  651171840
No partition is bootable

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 40476/117/26
filesystem size           921600
sectors_per_cluster       8
mft_lcn                   38400
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
NTFS at 40533/210/62
filesystem size           651173888
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
NTFS at 81067/134/28
filesystem size           651171840
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          81067 134 28 121601  25 24  651171840
     NTFS, blocksize=4096, 333 GB / 310 GiB
file_pread(5,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,6,buffer,1953525762(121601/90/28)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525768(121601/90/34)) lseek err Invalid argument
file_pread(5,3,buffer,1953525776(121601/90/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525839(121601/91/42)) lseek err Invalid argument
file_pread(5,11,buffer,1953525886(121601/92/26)) lseek err Invalid argument
file_pread(5,2,buffer,1953527808(121601/122/58)) lseek err Invalid argument

Results
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
   P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
   P HPFS - NTFS          81067 134 28 121601  25 24  651171840
     NTFS, blocksize=4096, 333 GB / 310 GiB


dir_partition inode=5
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 Recovery
      40 dr-xr-xr-x     0      0         0 10-Sep-2015 01:23 System Volume Information


dir_partition inode=5
   P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      40 dr-xr-xr-x     0      0         0  5-Apr-2018 22:17 $RECYCLE.BIN
      36 dr-xr-xr-x     0      0         0 12-Sep-2017 14:06 System Volume Information

interface_write()
 1 * HPFS - NTFS          40476 117 26 40533 210 61     921600
 2 P HPFS - NTFS          40533 210 62 81067 134 27  651173888
 3 P HPFS - NTFS          81067 134 28 121601  25 24  651171840

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 40476/117/26
filesystem size           921600
sectors_per_cluster       8
mft_lcn                   38400
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
NTFS at 40533/210/61
filesystem size           921600
sectors_per_cluster       8
mft_lcn                   38400
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
NTFS at 40533/210/62
filesystem size           651173888
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
NTFS at 81067/134/27
filesystem size           651173888
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS found using backup sector, blocksize=4096, 333 GB / 310 GiB
NTFS at 81067/134/28
filesystem size           651171840
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          81067 134 28 121601  25 24  651171840
     NTFS, blocksize=4096, 333 GB / 310 GiB
NTFS at 121601/25/24
filesystem size           651171840
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          81067 134 28 121601  25 24  651171840
     NTFS found using backup sector, blocksize=4096, 333 GB / 310 GiB
file_pread(5,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument

Results
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
   P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
   P HPFS - NTFS          81067 134 28 121601  25 24  651171840
     NTFS, blocksize=4096, 333 GB / 310 GiB


dir_partition inode=5
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 Recovery
      40 dr-xr-xr-x     0      0         0 10-Sep-2015 01:23 System Volume Information

dir_partition inode=35
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /Recovery
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      42 dr-xr-xr-x     0      0         0 10-Sep-2015 10:37 Logs
      36 dr-xr-xr-x     0      0         0 10-Sep-2015 01:34 WindowsRE

dir_partition inode=36
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /Recovery/WindowsRE
      36 dr-xr-xr-x     0      0         0 10-Sep-2015 01:34 .
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 ..
      39 -r--r--r--     0      0      1046 10-Sep-2015 01:34 ReAgent.xml
      37 -r--r--r--     0      0 317455959 10-Sep-2015 09:19 Winre.wim
      38 -r--r--r--     0      0   3170304 10-Jul-2015 18:59 boot.sdi
Directory /Recovery
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      42 dr-xr-xr-x     0      0         0 10-Sep-2015 10:37 Logs
      36 dr-xr-xr-x     0      0         0 10-Sep-2015 01:34 WindowsRE

dir_partition inode=36
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /Recovery/WindowsRE
      36 dr-xr-xr-x     0      0         0 10-Sep-2015 01:34 .
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 ..
      39 -r--r--r--     0      0      1046 10-Sep-2015 01:34 ReAgent.xml
      37 -r--r--r--     0      0 317455959 10-Sep-2015 09:19 Winre.wim
      38 -r--r--r--     0      0   3170304 10-Jul-2015 18:59 boot.sdi
Directory /Recovery
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      42 dr-xr-xr-x     0      0         0 10-Sep-2015 10:37 Logs
      36 dr-xr-xr-x     0      0         0 10-Sep-2015 01:34 WindowsRE

dir_partition inode=42
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /Recovery/Logs
      42 dr-xr-xr-x     0      0         0 10-Sep-2015 10:37 .
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 ..
      45 -r--r--r--     0      0        72 10-Sep-2015 10:36 BootUX (1).sqml
      46 -r--r--r--     0      0        72 10-Sep-2015 10:36 BootUX (2).sqml
      43 -r--r--r--     0      0      1291 10-Sep-2015 10:35 Reload.xml
Directory /Recovery
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      42 dr-xr-xr-x     0      0         0 10-Sep-2015 10:37 Logs
      36 dr-xr-xr-x     0      0         0 10-Sep-2015 01:34 WindowsRE
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 Recovery
      40 dr-xr-xr-x     0      0         0 10-Sep-2015 01:23 System Volume Information

dir_partition inode=40
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /System Volume Information
      40 dr-xr-xr-x     0      0         0 10-Sep-2015 01:23 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      22 dr-xr-xr-x     0      0         0 21-Mar-2018 00:56 Chkdsk
      41 -r--r--r--     0      0     20480 10-Sep-2015 01:23 tracking.log
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 Recovery
      40 dr-xr-xr-x     0      0         0 10-Sep-2015 01:23 System Volume Information


dir_partition inode=5
   P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      40 dr-xr-xr-x     0      0         0  5-Apr-2018 22:17 $RECYCLE.BIN
      36 dr-xr-xr-x     0      0         0 12-Sep-2017 14:06 System Volume Information

dir_partition inode=36
   P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
Directory /System Volume Information
      36 dr-xr-xr-x     0      0         0 12-Sep-2017 14:06 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      17 dr-xr-xr-x     0      0         0 21-Mar-2018 00:56 Chkdsk
      39 -r--r--r--     0      0        76 12-Sep-2017 14:06 IndexerVolumeGuid
      37 -r--r--r--     0      0        12 12-Sep-2017 14:06 WPSettings.dat
      38 -r--r--r--     0      0     20480 19-Mar-2018 14:53 tracking.log
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      40 dr-xr-xr-x     0      0         0  5-Apr-2018 22:17 $RECYCLE.BIN
      36 dr-xr-xr-x     0      0         0 12-Sep-2017 14:06 System Volume Information

dir_partition inode=40
   P HPFS - NTFS          40533 210 62 81067 134 27  651173888
     NTFS, blocksize=4096, 333 GB / 310 GiB
Directory /$RECYCLE.BIN
      40 dr-xr-xr-x     0      0         0  5-Apr-2018 22:17 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      50 dr-xr-xr-x     0      0         0 21-Mar-2018 01:02 S-1-5-21-1388632519-232009736-294872102-1000
      52 dr-xr-xr-x     0      0         0 21-Mar-2018 19:47 S-1-5-21-1741441490-2243736757-2204860816-1000
    9316 dr-xr-xr-x     0      0         0 19-Mar-2018 14:23 S-1-5-21-175692314-3683730667-2795427495-1001
     188 dr-xr-xr-x     0      0         0 20-Mar-2018 21:52 S-1-5-21-1933518554-3125982141-564751207-1002
    9303 dr-xr-xr-x     0      0         0 19-Mar-2018 02:06 S-1-5-21-2609697323-4072952857-3873103425-1001
      41 dr-xr-xr-x     0      0         0 18-Mar-2018 11:37 S-1-5-21-3340675482-592862775-1660323111-1001
      43 dr-xr-xr-x     0      0         0  8-Feb-2018 01:05 S-1-5-21-3340675482-592862775-1660323111-1004
      46 dr-xr-xr-x     0      0         0  5-Apr-2018 22:17 S-1-5-21-3484536354-464481164-1039466010-1001
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      40 dr-xr-xr-x     0      0         0  5-Apr-2018 22:17 $RECYCLE.BIN
      36 dr-xr-xr-x     0      0         0 12-Sep-2017 14:06 System Volume Information


dir_partition inode=5
   * HPFS - NTFS          40476 117 26 40533 210 61     921600
     NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 .
       5 dr-xr-xr-x     0      0         0 21-Mar-2018 06:39 ..
      35 dr-xr-xr-x     0      0         0 10-Sep-2015 10:35 Recovery
      40 dr-xr-xr-x     0      0         0 10-Sep-2015 01:23 System Volume Information

interface_write()
 1 * HPFS - NTFS          40476 117 26 40533 210 61     921600
 2 P HPFS - NTFS          40533 210 62 81067 134 27  651173888
 3 P HPFS - NTFS          81067 134 28 121601  25 24  651171840
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
check_part_i386 2 type 27: no test
NTFS at 40533/210/62
NTFS at 81067/134/28
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
 1 P HPFS - NTFS              0  32 33 40476 117 25  650252288
 2 P Windows RE(store)    40476 117 26 40533 210 61     921600
 3 P HPFS - NTFS          40533 210 62 81067 134 27  651173888
 4 P HPFS - NTFS          81067 134 28 121601  25 24  651171840
No partition is bootable

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Please help me recover my files!

#2 Post by cgrenier »

Run TestDisk, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write, confirm, Quit.

I don't understand why PhotoRec hasn't found your pictures, can you enable the expert mode in Options, start a recovery and force the blocksize to 512 bytes.
If nothing is recovered, it may be because TRIM is enable on your SSD ( https://en.wikipedia.org/wiki/Trim_(computing) ), in this case, nothing can be done

atticus
Posts: 3
Joined: 10 Apr 2018, 20:23

Re: Please help me recover my files!

#3 Post by atticus »

cgrenier wrote: 11 Apr 2018, 06:26 Run TestDisk, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write, confirm, Quit.

I don't understand why PhotoRec hasn't found your pictures, can you enable the expert mode in Options, start a recovery and force the blocksize to 512 bytes.
If nothing is recovered, it may be because TRIM is enable on your SSD ( https://en.wikipedia.org/wiki/Trim_(computing) ), in this case, nothing can be done
Thanks for the reply cgrenier!
I've tried to Rebuild BS but it doesn't seem to do anything. It just show the same following:
Boot sector Status: Bad
Backup boot sector Status: Bad
Sectors are identical

I started a recovery in expert mode, forcing the blocksize to 512 bytes and it still does not show any files.
I've just checked that TRIM is indeed enabled on my SSD, but the affected drive is on my HDD. Do you mean TRIM applies to HDD as well?
Would it mean there is nothing I can do anymore and my files are lost forever, even if I send my HDD to a professional data recovery company?

atticus
Posts: 3
Joined: 10 Apr 2018, 20:23

Re: Please help me recover my files!

#4 Post by atticus »

Does anyone have any answer? I really need to know if I can still have any hope to recover my files..

I've just checked that TRIM is indeed enabled on my SSD, but the affected drive is on my HDD. Do you mean TRIM applies to HDD as well?
Would it mean there is nothing I can do anymore and my files are lost forever, even if I send my HDD to a professional data recovery company?

Locked