messed up RAID0 after BIOS update, Disk seems too small, individual files recoverable Topic is solved

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Malaki84
Posts: 4
Joined: 18 Aug 2018, 16:19

messed up RAID0 after BIOS update, Disk seems too small, individual files recoverable

#1 Post by Malaki84 »

The attachment Testdisk.JPG is no longer available
Testdisk.JPG
Testdisk.JPG (46.38 KiB) Viewed 1786 times
Hi,

forgot to switch from AHCI back to RAID mode in BIOS after flashing, RAID got lost, has been deleted and rebuilt, but partition is gone now and I cannot manage to recover it.
Disk geometry seems to be odd, but I dunno how to tweak it so it might work again. Need help
Unfortunately I also wrote a wrong partition so there seem to be two now, where "Main" is the right one. Files from Main are readable and almost uncorrupted.
Any idea anyone?


Sat Aug 18 17:23:28 2018
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, June 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=8001569161216
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=8001569161216
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=128744161280
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=3268147200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=104857600
filewin32_getfilesize(\\.\O:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\O:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\O:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\X:)=1000202241024
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZRZ-00Z5HB0, S/N:WD-WMC4M0F5FF3C, FW:80.0
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - SAMSUNG HD103SJ, S/N:S246J90Z928086, FW:1AJ1
Disk /dev/sdc - 8001 GB / 7452 GiB - CHS 972802 255 63, sector size=512 - Intel Raid 0 Volume, S/N:Main, FW:1.0.
Disk /dev/sdd - 250 GB / 232 GiB - CHS 238475 64 32, sector size=512 - NVMe Samsung SSD 970, S/N:0025_3856_81B1_403D., FW:1B2Q
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - TOSHIBA MD04ACA400, S/N:AASF484KF54Y, FW:FP2A
Drive D: - 3268 MB / 3116 MiB - CHS 779 64 32, sector size=2048 - DiscSoft Virtual, FW:1.0

Partition table type defaults to EFI GPT
Disk /dev/sdc - 8001 GB / 7452 GiB - Intel Raid 0 Volume
Partition table type: Intel

Analyse Disk /dev/sdc - 8001 GB / 7452 GiB - CHS 972802 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sdc - 8001 GB / 7452 GiB - CHS 972802 255 63
NTFS at 16/113/34
filesystem size 15627798528
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 972801 232 39 15627798528 [New Volume]
NTFS, blocksize=4096, 8001 GB / 7451 GiB
file_pread(6,2,buffer,15628064768(972802/10/9)) ReadFile The drive cannot find the sector requested.

file_pread(6,1,buffer,15628064768(972802/10/9)) ReadFile The drive cannot find the sector requested.

file_pread(6,2,buffer,15628064792(972802/10/33)) lseek err Invalid argument
file_pread(6,1,buffer,15628064792(972802/10/33)) lseek err Invalid argument
file_pread(6,2,buffer,15628064831(972802/11/9)) lseek err Invalid argument
file_pread(6,1,buffer,15628064831(972802/11/9)) lseek err Invalid argument
file_pread(6,2,buffer,15628064855(972802/11/33)) lseek err Invalid argument
file_pread(6,1,buffer,15628064855(972802/11/33)) lseek err Invalid argument
file_pread(6,2,buffer,15628066177(972802/32/32)) lseek err Invalid argument
file_pread(6,1,buffer,15628066177(972802/32/32)) lseek err Invalid argument
file_pread(6,2,buffer,15628066178(972802/32/33)) lseek err Invalid argument
file_pread(6,2,buffer,15628066241(972802/33/33)) lseek err Invalid argument
file_pread(6,1,buffer,15628066241(972802/33/33)) lseek err Invalid argument
file_pread(6,2,buffer,15628066304(972802/34/33)) lseek err Invalid argument
file_pread(6,1,buffer,15628066304(972802/34/33)) lseek err Invalid argument
file_pread(6,8,buffer,15628064768(972802/10/9)) ReadFile The drive cannot find the sector requested.

file_pread(6,1,buffer,15628064768(972802/10/9)) ReadFile The drive cannot find the sector requested.

file_pread(6,1,buffer,15628064769(972802/10/10)) lseek err Invalid argument
file_pread(6,14,buffer,15628064770(972802/10/11)) lseek err Invalid argument
file_pread(6,3,buffer,15628064784(972802/10/25)) lseek err Invalid argument
file_pread(6,3,buffer,15628064831(972802/11/9)) lseek err Invalid argument
file_pread(6,8,buffer,15628064847(972802/11/25)) lseek err Invalid argument
file_pread(6,11,buffer,15628064894(972802/12/9)) lseek err Invalid argument
file_pread(6,2,buffer,15628066816(972802/42/41)) lseek err Invalid argument

Results
* HPFS - NTFS 16 113 34 972801 232 39 15627798528 [New Volume]
NTFS, blocksize=4096, 8001 GB / 7451 GiB

interface_write()
1 * HPFS - NTFS 16 113 34 972801 232 39 15627798528 [New Volume]

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: messed up RAID0 after BIOS update, Disk seems too small, individual files recoverable

#2 Post by cgrenier »

Can you try PhotoRec on this Raid0 ? Does it recover valid files or only small files or file fragments ?

Malaki84
Posts: 4
Joined: 18 Aug 2018, 16:19

Re: messed up RAID0 after BIOS update, Disk seems too small, individual files recoverable

#3 Post by Malaki84 »

just tried, yes it does recover small (1kb) files without corruption

Malaki84
Posts: 4
Joined: 18 Aug 2018, 16:19

Re: messed up RAID0 after BIOS update, Disk seems too small, individual files recoverable

#4 Post by Malaki84 »

somehow the other screenshot always gets deleted from the frist post :?

Malaki84
Posts: 4
Joined: 18 Aug 2018, 16:19

Re: messed up RAID0 after BIOS update, Disk seems too small, individual files recoverable

#5 Post by Malaki84 »

..possible to restore the RAID as it was?

Locked