Page 1 of 1
Formatted HFS recovey
Posted: 08 Jul 2012, 10:31
by BParrot
Hi.
Please help me with my problem.
I've just formatted HFS disc with Time Machine(OS x) backups. I formated it in HFS again.
So, i tried testdisk. it found 2 existing partitions.
EFI (40 - 409639)
HFS (409640-1953262983)
After deep scaning(NOT full - only first 40cyl) it found 2 more partitions(Screenshot)
I write new map. I set 2 found partitions to primary.
BUT! After writing new map I get error, while trying mount this drive.
Can you help me, please?
P.s. I start new deep scaning.
P.p.s. I can't press P to view list of files. There is no such option.
Thanks a lot!
Re: Formatted HFS recovey
Posted: 08 Jul 2012, 15:21
by BParrot
Here is my log(I do this scan after rewriting partition map)
Code: Select all
Sun Jul 8 13:15:18 2012
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=16039018496
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=4040748544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=16039018496
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=4040748544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41940670464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=16039017472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=666251264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=85888341504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=4040747520
file_pread(4,1,buffer,312592769(19457/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,31326749(1949/254/63)) lseek err Invalid argument
file_pread(6,1,buffer,7903979(491/254/63)) lseek err Invalid argument
file_pread(7,1,buffer,1953536129(121601/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST9160314AS, FW:0002SDM1
Disk /dev/sdb - 16 GB / 14 GiB - CHS 1949 255 63, sector size=512 - Corsair VoyagerGT, FW:1100
Disk /dev/sdc - 4040 MB / 3853 MiB - CHS 491 255 63, sector size=512 - Corsair Voyager Mini, FW:0.00
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EARS-00Y5B1, FW:80.0
Drive E: - 666 MB / 635 MiB - CHS 158 64 32, sector size=2048 - DTSOFT BDROM, FW:1.05
Partition table type (auto): EFI GPT
Disk /dev/sdd - 1000 GB / 931 GiB - WDC WD10 EARS-00Y5B1
Partition table type: EFI GPT
New options :
Dump : No
Cylinder boundary : Yes
Allow partial last cylinder : No
Expert mode : No
Analyse Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 46 409645 409600
2 P Mac HFS 469351 1953322694 1952853344
search_part()
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT32 at 0/0/41
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 255 (HD)
sect/track 32 (FAT) != 63 (HD)
FAT32 at 0/0/41
EFI System 40 409639 409600 [EFI]
FAT32, 209 MB / 200 MiB
HFS+ magic value at 25/127/15
part_size 1952853344
Mac HFS 409640 1953262983 1952853344
HFS+, 999 GB / 931 GiB
Search for partition aborted
Results
P EFI System 40 409639 409600 [EFI]
FAT32, 209 MB / 200 MiB
P Mac HFS 409640 1953262983 1952853344
HFS+, 999 GB / 931 GiB
interface_write()
1 P EFI System 40 409639 409600 [EFI]
2 P Mac HFS 409640 1953262983 1952853344
Re: Formatted HFS recovey
Posted: 08 Jul 2012, 15:30
by Fiona
The problem is, HFS+ doesn't list any files.
Formatting is overriding your previous file system.
TestDisk will find only an empty partition.
In your case it's advisable to use dataracovery software.
You can have a try to use PhotoRec.
Info;
http://www.cgsecurity.org/wiki/PhotoRec
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step
It's advisable to go into File Opt and deselct all files.
Check only needed files.
It saves a lot of time to sort files after recovery.
If you need file names and directories you should use commercial software.
Fiona
Re: Formatted HFS recovey
Posted: 08 Jul 2012, 15:38
by BParrot
Thank you anyway. )