SSD Diskpart Clean

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Paul77
Posts: 1
Joined: 01 Mar 2019, 17:31

SSD Diskpart Clean

#1 Post by Paul77 »

Accidentally ran Diskpart Clean on data SSD drive. I followed the instructions in the PDF but have not been successful. Also, I believe the drive was bitlocked :x

Tried the default (intel) quick and deep scan.
The tried scanning with type none and selecting NTFS
Now trying to scan EFI which is super slow.

Here's the log file.

Code: Select all

Fri Mar  1 10:49:14 2019
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, December 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=7601479745536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1024209543168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=7601479745536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1024209543168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=255465619456
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=7601460871168
Hard disk list
Disk /dev/sda - 7601 GB / 7079 GiB - CHS 924160 255 63, sector size=512 - Intel Raid 1 Volume, S/N:Volume0, FW:1.0.
Disk /dev/sdb - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - NVMe SSDPEKKF256G8 NV, S/N:BTHH83530TNU256B, FW:D05N
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63, sector size=512 - NVMe KXG50ZNV1T02 NVM, S/N:78ES10GXT8KQ, FW:4105

Partition table type defaults to Intel
Disk /dev/sdc - 1024 GB / 953 GiB - NVMe KXG50ZNV1T02 NVM
Partition table type: Intel

Analyse Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
BAD_RS LBA=3999945660 7255034
file_pread(6,3,buffer,3999945660(248985/25/61)) lseek err Invalid argument
file_pread(6,1,buffer,3999945660(248985/25/61)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           248985  25 61 429990 147 20 2907852971
This partition ends after the disk limits. (start=3999945660, size=2907852971, end=6907798630, disk end=2000409264)
file_pread(6,2,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(6,1,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(6,2,buffer,2000410624(124519/204/38)) lseek err Invalid argument
file_pread(6,14,buffer,2000410626(124519/204/40)) lseek err Invalid argument
file_pread(6,3,buffer,2000410640(124519/204/54)) lseek err Invalid argument
file_pread(6,3,buffer,2000410687(124519/205/38)) lseek err Invalid argument
file_pread(6,8,buffer,2000410703(124519/205/54)) lseek err Invalid argument
file_pread(6,11,buffer,2000410750(124519/206/38)) lseek err Invalid argument
file_pread(6,2,buffer,2000412672(124519/237/7)) lseek err Invalid argument
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1024 GB / 953 GiB) seems too small! (< 3536 GB / 3293 GiB)
The following partition can't be recovered:
     FAT16 >32M           248985  25 61 429990 147 20 2907852971

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
BAD_RS LBA=3999945660 7255034
file_pread(6,3,buffer,3999945660(248985/25/61)) lseek err Invalid argument
file_pread(6,1,buffer,3999945660(248985/25/61)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           248985  25 61 429990 147 20 2907852971
This partition ends after the disk limits. (start=3999945660, size=2907852971, end=6907798630, disk end=2000409264)
file_pread(6,2,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(6,1,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(6,2,buffer,2000410624(124519/204/38)) lseek err Invalid argument
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1024 GB / 953 GiB) seems too small! (< 3536 GB / 3293 GiB)
The following partition can't be recovered:
     FAT16 >32M           248985  25 61 429990 147 20 2907852971

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
file_pread(6,2,buffer,2000410623(124519/204/37)) lseek err Invalid argument
file_pread(6,1,buffer,2000410623(124519/204/37)) lseek err Invalid argument
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
Failed to startup volume: Invalid argument.
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Partition table type defaults to Intel
Disk /dev/sdc - 1024 GB / 953 GiB - NVMe KXG50ZNV1T02 NVM
Partition table type: None

Interface Advanced
   P Unknown                  0   0  1 124519 182 63 2000409264
Change partition type:
   P NTFS                     0   0  1 124519 182 63 2000409264

   P NTFS                     0   0  1 124519 182 63 2000409264
Can't open filesystem. Filesystem seems damaged.

Analyse Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Current partition structure:
   P Unknown                  0   0  1 124519 182 63 2000409264

search_part()
Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
Partition table type defaults to Intel
Disk /dev/sdc - 1024 GB / 953 GiB - NVMe KXG50ZNV1T02 NVM
Partition table type: EFI GPT

Interface Advanced
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
New options :
 Dump : No
 Align partition: Yes
 Expert mode : Yes

Analyse Disk /dev/sdc - 1024 GB / 953 GiB - CHS 124519 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Top
User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: SSD Diskpart Clean

#2 Post by cgrenier »

As the disk was blitlocked, when using TestDisk, Analyse, QUick Search, Stop, manually add a partition ('a' key) starting at sector 2048.
Set the type to MS DATA / NTFS. On next screen, choose Write, confirm, Quit.
If you are lucky, you will be able to unlock your bitlocked drive and access your data.
Top
Locked

Return to “Partition Recovery”