Page 1 of 1

HDD vol. gone new linux part appeard

Posted: 02 Sep 2019, 22:35
by matador007
Hello team cgsecurity,
meanwhile reading testdisk manual i thought that maybe here ill get some clue.

External HDD has been connected to sat-tv decoder. After that it has been unreadable from PC Windows. BIOS see it I can locate disk using diskpart, but volume and NTFS partitions are gone and linux appeared

Image

I can't run chkdsk and running out of options.

Re: HDD vol. gone new linux part appeard

Posted: 04 Sep 2019, 06:35
by cgrenier
Please post the result the result after Quick Search and Deeper Search if your partitions aren't found.

Re: HDD vol. gone new linux part appeard

Posted: 04 Sep 2019, 21:58
by matador007
Thats what I get from quick search, deeper search on the run...
Wed Sep 4 18:42:09 2019
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=750153367552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=250059145216
Hard disk list
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - TOSHIBA MQ01ABD075, S/N:32OIF4Q6S, FW:AX001U
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MK1059GSM, S/N:81MGF36KS, FW:GU001U
Disk /dev/sdc - 250 GB / 232 GiB - CHS 238475 64 32, sector size=512 - ADATA SH14, S/N:A220012402102230A41A, FW:0001

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - TOSHIBA MK1059GSM
Partition table type: Intel
Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - TOSHIBA MK1059GSM
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 83
check_part_i386 failed for partition type 83
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
No ext2, JFS, Reiser, cramfs or XFS marker
1 P Linux 0 1 1 15192 10 40 244060087
1 P Linux 0 1 1 15192 10 40 244060087
No ext2, JFS, Reiser, cramfs or XFS marker
2 P Linux 15192 10 41 15200 2 25 128001
2 P Linux 15192 10 41 15200 2 25 128001
No partition is bootable

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(5,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525762(121601/90/28)) lseek err Invalid argument
file_pread(5,3,buffer,1953525776(121601/90/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525839(121601/91/42)) lseek err Invalid argument
file_pread(5,11,buffer,1953525886(121601/92/26)) lseek err Invalid argument
file_pread(5,2,buffer,1953527808(121601/122/58)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery
#1567664190 Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
1 : start= 63, size=244060087, Id=83, P
2 : start=244060150, size= 128001, Id=83, P
no logs fro deeper search so far