The following partition can't be recovered

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
tirafesi
Posts: 3
Joined: 22 Oct 2019, 11:08

The following partition can't be recovered

#1 Post by tirafesi »

I deleted a disk partition by mistake. How do I fix this?

Here's what I did, using the disk management tool in windows 10:
  • Disk had 2 partitions, A (~250Gb) and B (~650Gb).
  • I deleted partition A.
  • In order to use this new unallocated space, I right-clicked on partition B and chose expand volume.
  • The disk became dynamic (this had never happened to me before when handling partitions, so no idea why it happened here), having the same 2 partitions as before, but they now behaved as one.
  • This is not what I wanted, so I right-clicked on partition A and chose *delete volume* once again.
  • To my surprise, both partitions got deleted, and now the entire size of the disk shows as unallocated space.
Is there a way to recover partition B?

I tried using TestDisk, but it says The following partition can't be recovered about partition B, and only lets me recover partition A. Here is the log file from it.

Please help!
Top
User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: The following partition can't be recovered

#2 Post by cgrenier »

After Quick Search, try Deeper Search.
Use the arrow keys to switch the partition B from D(eleted) to P(rimary).
On the next screen, if the partitions A and B are correctly listed, choose Write, confirm, Quit and restart your computer.
Top
tirafesi
Posts: 3
Joined: 22 Oct 2019, 11:08

Re: The following partition can't be recovered

#3 Post by tirafesi »

cgrenier wrote: ↑22 Oct 2019, 20:21 After Quick Search, try Deeper Search.
Use the arrow keys to switch the partition B from D(eleted) to P(rimary).
On the next screen, if the partitions A and B are correctly listed, choose Write, confirm, Quit and restart your computer.
Hey, sorry about the delay responding.

I did what you told me, but now partition B shows up thrice. What should I do?

The only partition I'm interested in restoring is [Outros], but since it shows 3 of the same name I don't know which one to choose.

Here is the log:

Code: Select all

Sat Oct 26 11:07:33 2019
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 7.4, Cygwin32 3000.3
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=424998977536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000200994816
Hard disk list
Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - TOSHIBA-TR200, S/N:291B620UK3QS, FW:SBFA12.6
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA DT01ACA100, S/N:259KG0BNS, FW:MS2OA750
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZRX-00D8PB0, S/N:WD-WCC4M2996861, FW:80.00A80

Partition table type defaults to Intel
Disk /dev/sdb - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1024000
sectors_per_cluster       8
mft_lcn                   42666
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    63 221 30    1024000 [Sistema Reservado]
     NTFS, blocksize=4096, 524 MB / 500 MiB
NTFS at 63/221/31
filesystem size           509269683
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             63 221 31 31764 112 15  509269683
     NTFS, blocksize=4096, 260 GB / 242 GiB
NTFS at 31764/117/34
filesystem size           1701888
sectors_per_cluster       8
mft_lcn                   70912
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31764 117 34 31870 101 39    1701888
     NTFS, blocksize=4096, 871 MB / 831 MiB
NTFS at 31870/134/9
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31870 134  9 153471  61 62 1953515520 [Outros]
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=512000000, size=1953515520, end=2465515519, disk end=1953525168)
file_pread(5,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1262 GB / 1175 GiB)
The following partition can't be recovered:
     HPFS - NTFS          31870 134  9 153471  61 62 1953515520 [Outros]
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
   * HPFS - NTFS              0  32 33    63 221 30    1024000 [Sistema Reservado]
     NTFS, blocksize=4096, 524 MB / 500 MiB
   P HPFS - NTFS             63 221 31 31764 117 33  509270016
     NTFS, blocksize=4096, 260 GB / 242 GiB
   P HPFS - NTFS          31764 117 34 31870 101 39    1701888
     NTFS, blocksize=4096, 871 MB / 831 MiB

interface_write()
 1 * HPFS - NTFS              0  32 33    63 221 30    1024000 [Sistema Reservado]
 2 P HPFS - NTFS             63 221 31 31764 117 33  509270016
 3 P HPFS - NTFS          31764 117 34 31870 101 39    1701888

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1024000
sectors_per_cluster       8
mft_lcn                   42666
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    63 221 30    1024000 [Sistema Reservado]
     NTFS, blocksize=4096, 524 MB / 500 MiB
NTFS at 12/223/19
filesystem size           204800
sectors_per_cluster       8
mft_lcn                   8533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size           511793152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 31870 134  8  511793152
     NTFS, blocksize=4096, 262 GB / 244 GiB
NTFS at 63/221/30
filesystem size           1024000
sectors_per_cluster       8
mft_lcn                   42666
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    63 221 30    1024000 [Sistema Reservado]
     NTFS found using backup sector, blocksize=4096, 524 MB / 500 MiB
NTFS at 63/221/31
filesystem size           509269683
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             63 221 31 31764 112 15  509269683
     NTFS, blocksize=4096, 260 GB / 242 GiB

recover_EXT2: s_block_group_nr=0/199, s_mnt_count=175/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 6553088
recover_EXT2: part_size 52424704
Filesystem created: Sun Mar  3 19:14:10 2019
Last mount time:    Wed Oct  2 15:19:20 2019
     Linux                29443 230 36 32707  48 45   52424704
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 26 GB / 24 GiB

recover_EXT2: s_block_group_nr=0/199, s_mnt_count=175/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 6553088
recover_EXT2: part_size 52424704
Filesystem created: Sun Mar  3 19:14:10 2019
Last mount time:    Wed Oct  2 15:19:20 2019
     Linux                29450 135 62 32713 209  8   52424704
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 26 GB / 24 GiB

recover_EXT2: s_block_group_nr=0/199, s_mnt_count=175/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 6553088
recover_EXT2: part_size 52424704
Filesystem created: Sun Mar  3 19:14:10 2019
Last mount time:    Wed Oct  2 15:19:20 2019
     Linux                29451 238 36 32715  56 45   52424704
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 26 GB / 24 GiB
NTFS at 31764/117/34
filesystem size           1701888
sectors_per_cluster       8
mft_lcn                   70912
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31764 117 34 31870 101 39    1701888
     NTFS, blocksize=4096, 871 MB / 831 MiB
NTFS at 31870/101/39
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=262142950912, part_size=1000199946240, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 31870/134/8
filesystem size           510973952
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             63 221 31 31870 134  8  510973952
     NTFS found using backup sector, blocksize=4096, 261 GB / 243 GiB
NTFS at 31870/134/9
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31870 134  9 153471  61 62 1953515520 [Outros]
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=512000000, size=1953515520, end=2465515519, disk end=1953525168)
NTFS at 115073/226/33
filesystem size           1336662016
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31870 134  9 115073 226 33 1336662016 [Outros]
     NTFS found using backup sector, blocksize=4096, 684 GB / 637 GiB
NTFS at 116379/77/50
filesystem size           1357633536
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31870 134  9 116379  77 50 1357633536 [Outros]
     NTFS found using backup sector, blocksize=4096, 695 GB / 647 GiB
NTFS at 121600/247/55
filesystem size           1441519616
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          31870 134  9 121600 247 55 1441519616 [Outros]
     NTFS found using backup sector, blocksize=4096, 738 GB / 687 GiB
file_pread(5,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
NTFS at 63/221/30
filesystem size           1024000
sectors_per_cluster       8
mft_lcn                   42666
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 31870/134/8
filesystem size           510973952
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 31870/134/8
filesystem size           510973952
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 31870/134/8
filesystem size           510973952
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1262 GB / 1175 GiB)
The following partition can't be recovered:
     HPFS - NTFS          31870 134  9 153471  61 62 1953515520 [Outros]
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
     HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
     HPFS - NTFS              0  32 33    63 221 30    1024000 [Sistema Reservado]
     NTFS, blocksize=4096, 524 MB / 500 MiB
     HPFS - NTFS             12 223 20 31870 134  8  511793152
     NTFS, blocksize=4096, 262 GB / 244 GiB
     HPFS - NTFS             63 221 30   127 155 27    1024000
     NTFS, blocksize=4096, 524 MB / 500 MiB
     HPFS - NTFS             63 221 31 31764 117 33  509270016
     NTFS, blocksize=4096, 260 GB / 242 GiB
     HPFS - NTFS             63 221 31 31870 134  8  510973952
     NTFS found using backup sector, blocksize=4096, 261 GB / 243 GiB
     Linux                29443 230 36 32707  48 45   52424704
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 26 GB / 24 GiB
     Linux                29450 135 62 32713 209  8   52424704
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 26 GB / 24 GiB
     Linux                29451 238 36 32715  56 45   52424704
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 26 GB / 24 GiB
     HPFS - NTFS          31764 117 34 31870 101 39    1701888
     NTFS, blocksize=4096, 871 MB / 831 MiB
     HPFS - NTFS          31870 134  8 63677  46 48  510973952
     NTFS, blocksize=4096, 261 GB / 243 GiB
     HPFS - NTFS          31870 134  9 115073 226 33 1336662016 [Outros]
     NTFS found using backup sector, blocksize=4096, 684 GB / 637 GiB
     HPFS - NTFS          31870 134  9 116379  77 50 1357633536 [Outros]
     NTFS found using backup sector, blocksize=4096, 695 GB / 647 GiB
     HPFS - NTFS          31870 134  9 121600 247 55 1441519616 [Outros]
     NTFS found using backup sector, blocksize=4096, 738 GB / 687 GiB

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Top
recuperation
Posts: 2729
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: The following partition can't be recovered

#4 Post by recuperation »

Use the "p" key to examine the content of each partition.
Decide which partition seems to be the right one!

https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
Top
tirafesi
Posts: 3
Joined: 22 Oct 2019, 11:08

Re: The following partition can't be recovered

#5 Post by tirafesi »

recuperation wrote: ↑26 Oct 2019, 15:11 Use the "p" key to examine the content of each partition.
Decide which partition seems to be the right one!

https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
Thank you! Was able to restore the partition and all the data seems to be ok :D
Top
Locked

Return to “Partition Recovery”