TestDisk - Partition Recovery Error

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
chiahung1989
Posts: 1
Joined: 25 Aug 2019, 22:00

TestDisk - Partition Recovery Error

#1 Post by chiahung1989 »

Hi all..

I am trying to recover the partition I have deleted accidentally however I am getting the "The following partition can't be recovered" error message..

Attaching the log file for reference.. Appreciate if anyone can provide some guidance to me..

Code: Select all

Mon Aug 26 03:03:52 2019
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=161061273600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=318364450816
filewin32_getfilesize(\\.\H:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\H:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\H:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA DT01ACA100, S/N:55C7AN4NS, FW:MS2OA7C0
Disk /dev/sdb - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - KINGSTON SA400S37480G, S/N:50026B7282410808, FW:SBFKB1C2

Partition table type (auto): EFI GPT
Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
Partition table type: Intel

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
 1 P EFI GPT                  0   0  2 267349  89  4 4294967295

Bad sector count.
No partition is bootable

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1021952
sectors_per_cluster       8
mft_lcn                   42581
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    63 188 61    1021952 [Recovery]
     NTFS, blocksize=4096, 523 MB / 499 MiB
FAT32 at 63/188/62
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
set_FAT_info: name from BS used

FAT32 at 63/188/62
FAT: cluster=2(0x2), pos=1032192
     FAT32                   63 188 62    76 124 48     204800 [EFI System Partition] [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 78/134/57
filesystem size           251658240
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             78 134 57 15743 135  8  251658240
     NTFS, blocksize=4096, 128 GB / 120 GiB
NTFS at 15743/135/9
filesystem size           1952258048
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          15743 135  9 137265 248  7 1952258048 [Local Disk]
     NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=252919808, size=1952258048, end=2205177855, disk end=1953525168)
NTFS at 121601/57/56
filesystem size           1952262144
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             78 134 57 121601  57 56 1952262144
     NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
NTFS at 121601/57/56
filesystem size           1952262144
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1959815173(121992/217/23)) lseek err Invalid argument
file_pread(4,1,buffer,1959815173(121992/217/23)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          121601  57 56 243123 235 55 1952262144
     NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=1953523711, size=1952262144, end=3905785854, disk end=1953525168)
file_pread(4,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,2,buffer,1953525767(121601/90/33)) lseek err Invalid argument
file_pread(4,1,buffer,1953525767(121601/90/33)) lseek err Invalid argument
file_pread(4,2,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(4,2,buffer,1953525830(121601/91/33)) lseek err Invalid argument
file_pread(4,1,buffer,1953525830(121601/91/33)) lseek err Invalid argument
file_pread(4,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(4,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(4,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(4,8,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,8,buffer,1953525768(121601/90/34)) lseek err Invalid argument
file_pread(4,3,buffer,1953525776(121601/90/42)) lseek err Invalid argument
file_pread(4,3,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(4,8,buffer,1953525839(121601/91/42)) lseek err Invalid argument
file_pread(4,11,buffer,1953525886(121601/92/26)) lseek err Invalid argument
file_pread(4,2,buffer,1953527808(121601/122/58)) lseek err Invalid argument
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1999 GB / 1862 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          15743 135  9 137265 248  7 1952258048 [Local Disk]
     NTFS, blocksize=4096, 999 GB / 930 GiB
     HPFS - NTFS          121601  57 56 243123 235 55 1952262144
     NTFS, blocksize=4096, 999 GB / 930 GiB

Results
   * HPFS - NTFS              0  32 33    63 188 61    1021952 [Recovery]
     NTFS, blocksize=4096, 523 MB / 499 MiB
   P FAT32                   63 188 62    76 124 48     204800 [EFI System Partition] [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
     HPFS - NTFS             78 134 57 15743 135  8  251658240
     NTFS, blocksize=4096, 128 GB / 120 GiB
     HPFS - NTFS             78 134 57 121601  57 56 1952262144
     NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB


dir_partition inode=5
     HPFS - NTFS             78 134 57 15743 135  8  251658240
     NTFS, blocksize=4096, 128 GB / 120 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 .
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 ..
      36 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 System Volume Information

interface_write()
 1 * HPFS - NTFS              0  32 33    63 188 61    1021952 [Recovery]
 2 P FAT32                   63 188 62    76 124 48     204800 [EFI System Partition] [NO NAME]


dir_partition inode=5
     HPFS - NTFS             78 134 57 121601  57 56 1952262144
     NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 .
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 ..
      36 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 System Volume Information


dir_partition inode=5
     HPFS - NTFS             78 134 57 15743 135  8  251658240
     NTFS, blocksize=4096, 128 GB / 120 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 .
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 ..
      36 dr-xr-xr-x     0      0         0 26-Aug-2019 02:40 System Volume Information


dir_partition inode=0
   P FAT32                   63 188 62    76 124 48     204800 [EFI System Partition] [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
FAT: cluster=2(0x2), pos=1032192
Directory /
       3 drwxr-xr-x     0      0         0 12-Jul-2018 15:43 EFI


dir_partition inode=5
   * HPFS - NTFS              0  32 33    63 188 61    1021952 [Recovery]
     NTFS, blocksize=4096, 523 MB / 499 MiB
Directory /
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 00:48 .
       5 dr-xr-xr-x     0      0         0 26-Aug-2019 00:48 ..
      38 dr-xr-xr-x     0      0         0 19-Feb-2019 22:55 Recovery
      36 dr-xr-xr-x     0      0         0 12-Jul-2018 15:50 System Volume Information

interface_write()
 1 * HPFS - NTFS              0  32 33    63 188 61    1021952 [Recovery]
 2 P FAT32                   63 188 62    76 124 48     204800 [EFI System Partition] [NO NAME]

interface_write()
 1 * HPFS - NTFS              0  32 33    63 188 61    1021952 [Recovery]
 2 P FAT32                   63 188 62    76 124 48     204800 [EFI System Partition] [NO NAME]

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: TestDisk - Partition Recovery Error

#2 Post by cgrenier »

Use "EFI GPT" as the partition table type, not PC Intel.

Locked