wiped out extended and logical partitions after trying to recover NTFS partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
- Posts: 11
- Joined: 20 Jan 2020, 00:26
wiped out extended and logical partitions after trying to recover NTFS partition
Hello,
I seem to be making things worse with testdisk so I am asking for help!
I used gparted in Ubuntu (this distro is located on my 7th/8th partitions) intending on deleting and creating new partitions on my external backup drive. In a moment of total distraction I wiped out the first 2 partitions on my main HDD on my laptop which had Windows 7 and its boot partition.
I downloaded Testdisk and analysed the disk. It seemed to have found the correct NTFS partitions which I marked as primary and bootable primary, but I once again distractedly did not bother to analyse the other partitions which included my Ubuntus and other ext 4 partitions. I believe that they thus remained 'deleted' by default.
To make matters worse, when I tried to write the recovered NTFS partitions, testdisk warned that there was a mismatch with the beginning and end of the partitions and I chose to 'copy to the partition' what had just been recovered.
Now when I reboot I am left with grub rescue mode and when I use a live ubuntu CD I see that all that I have left are the Windows/ NTFS partitions!
I am trying to use Testdisk once again and I am totally confused with how to proceed.
I found all my partitions in the right order, not overlapping, except that the extended partition is missing (which should be the third partition). I need to find it in order to change most of my recovered partitions to Logical without getting an error message. I tried analysing the first few partitions. Doing a deeper search for my first linux partition, Testdisk gave the option of writing it as the 4th (starting and ending as the 4th partition) along with a suggested extended partition that covers the whole HDD, but that is NOT correct!
Will a deeper search left running for a longer time of my first partition (that I created in error) reveal the correct structure with the extended partition? Where should I be looking?
I seem to be making things worse with testdisk so I am asking for help!
I used gparted in Ubuntu (this distro is located on my 7th/8th partitions) intending on deleting and creating new partitions on my external backup drive. In a moment of total distraction I wiped out the first 2 partitions on my main HDD on my laptop which had Windows 7 and its boot partition.
I downloaded Testdisk and analysed the disk. It seemed to have found the correct NTFS partitions which I marked as primary and bootable primary, but I once again distractedly did not bother to analyse the other partitions which included my Ubuntus and other ext 4 partitions. I believe that they thus remained 'deleted' by default.
To make matters worse, when I tried to write the recovered NTFS partitions, testdisk warned that there was a mismatch with the beginning and end of the partitions and I chose to 'copy to the partition' what had just been recovered.
Now when I reboot I am left with grub rescue mode and when I use a live ubuntu CD I see that all that I have left are the Windows/ NTFS partitions!
I am trying to use Testdisk once again and I am totally confused with how to proceed.
I found all my partitions in the right order, not overlapping, except that the extended partition is missing (which should be the third partition). I need to find it in order to change most of my recovered partitions to Logical without getting an error message. I tried analysing the first few partitions. Doing a deeper search for my first linux partition, Testdisk gave the option of writing it as the 4th (starting and ending as the 4th partition) along with a suggested extended partition that covers the whole HDD, but that is NOT correct!
Will a deeper search left running for a longer time of my first partition (that I created in error) reveal the correct structure with the extended partition? Where should I be looking?
- cgrenier
- Site Admin
- Posts: 5432
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: wiped out extended and logical partitions after trying to recover NTFS partition
If some partitions aren't listed after Quick Search, use Deeper Search.
All the partitions you want to recover need to be marked as P(rimary, *(bootable) or L(ogical).
You can use the arrow keys to switch the partition from D(eleted).
Can you post the testdisk.log file content and tell which partitions you want to recover ?
All the partitions you want to recover need to be marked as P(rimary, *(bootable) or L(ogical).
You can use the arrow keys to switch the partition from D(eleted).
Can you post the testdisk.log file content and tell which partitions you want to recover ?
-
- Posts: 11
- Joined: 20 Jan 2020, 00:26
Re: wiped out extended and logical partitions after trying to recover NTFS partition
Hello again,
I have been called away and had to set the laptop aside all this time! I hope there is a way back for my harddrive!
I have made a couple of log files so far and I am still doing a deeper search on yet another deleted partition.
I would like to recover 6 ext4 partitions but deeper search of almost every partition (marked deleted) doesn't reveal the extended partition that I had originally created. I am pretty sure I had made it the 3rd partition and it covered most of the hard drive except the windows and swap partition. Without it I will not be able to recover my logical 6 partitions!
To recap- from one log file:
Movies and shows is actually the partition that I had originally created in error after I had deleted the 2 windows partitions (also in error). I then recovered the Windows partitions with testdisk and applied ''copy to disk'' which changed the whole partitions structure, I believe:
I have to figure out how to attach the log file, it shows invalid file type...but I am not sure how to recover the extended partition!
I have been called away and had to set the laptop aside all this time! I hope there is a way back for my harddrive!
I have made a couple of log files so far and I am still doing a deeper search on yet another deleted partition.
I would like to recover 6 ext4 partitions but deeper search of almost every partition (marked deleted) doesn't reveal the extended partition that I had originally created. I am pretty sure I had made it the 3rd partition and it covered most of the hard drive except the windows and swap partition. Without it I will not be able to recover my logical 6 partitions!
To recap- from one log file:
Code: Select all
Results
Linux 0 32 33 10917 14 41 175380480 [Movies and Shows]
ext4 blocksize=4096 Large_file Sparse_SB, 89 GB / 83 GiB
Linux 10917 47 11 14375 2 27 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
Linux 14375 2 28 22941 43 14 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB, 70 GB / 65 GiB
Linux 22941 75 47 30816 63 31 126511104 [Multimedia]
ext4 blocksize=4096 Large_file Sparse_SB, 64 GB / 60 GiB
Linux 30816 96 1 33941 153 4 50206720
ext4 blocksize=4096 Large_file Sparse_SB, 25 GB / 23 GiB
Linux 33941 153 5 42390 154 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB, 69 GB / 64 GiB
Linux 42390 186 37 60278 97 43 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB, 147 GB / 137 GiB
Linux Swap 60278 130 13 60801 80 15 8398848
SWAP2 version 1, pagesize=4096, 4300 MB / 4101 MiB
Movies and shows is actually the partition that I had originally created in error after I had deleted the 2 windows partitions (also in error). I then recovered the Windows partitions with testdisk and applied ''copy to disk'' which changed the whole partitions structure, I believe:
Code: Select all
Partition table type (auto): Intel
Disk /dev/sda - 500 GB / 465 GiB - HGST HTS725050A7E630
Partition table type: Intel
Analyse Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 191/89/27
Info: size boot_sector 172306425, partition 172306432
Current partition structure:
1 * HPFS - NTFS 0 32 33 191 89 26 3072000
2 P HPFS - NTFS 191 89 27 10916 237 9 172306432
-
- Posts: 11
- Joined: 20 Jan 2020, 00:26
Re: wiped out extended and logical partitions after trying to recover NTFS partition
Here is the result of deeper search of first few partitions (deleted)
I just tried out changing back my partitions to logical without getting an error again, still have not been able to recover all of them, not sure what im doing wrong. At least I found out that the extended partition option shows up after I press continue and its looking more promising...
Code: Select all
Linux 42390 186 37 60278 97 43 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 147 GB / 137 GiB
BAD_RS LBA=3467322276 13102435
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 215830 211 34 279340 27 62 1020276587
This partition ends after the disk limits. (start=3467322276, size=1020276587, end=4487598862, disk end=976773168)
Linux Swap 60278 130 13 60801 79 62 8398832
SWAP2 version 1, pagesize=4096, 4300 MB / 4100 MiB
NTFS at 191/89/26
filesystem size 3072000
sectors_per_cluster 8
mft_lcn 128000
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS at 191/89/27
filesystem size 172306425
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 2297 GB / 2139 GiB)
The following partitions can't be recovered:
Linux 51285 40 20 69172 206 26 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 147 GB / 137 GiB
Linux 51286 12 55 69173 178 61 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 147 GB / 137 GiB
Linux 51286 175 26 69174 86 32 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 147 GB / 137 GiB
FAT12 215830 211 34 279340 27 62 1020276587
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
Results
HPFS - NTFS 0 32 33 191 89 26 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
Linux 0 32 33 10917 14 41 175380480 [Movies and Shows]
ext4 blocksize=4096 Large_file Sparse_SB, 89 GB / 83 GiB
HPFS - NTFS 191 89 26 382 146 19 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
HPFS - NTFS 191 89 27 10916 237 9 172306432
NTFS, blocksize=4096, 88 GB / 82 GiB
HPFS - NTFS 191 89 34 10916 237 9 172306425
NTFS found using backup sector, blocksize=4096, 88 GB / 82 GiB
Linux 10917 47 11 14375 2 27 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
Linux 12505 91 3 15963 46 19 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12511 56 26 15969 11 42 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12511 186 28 15969 141 44 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12515 44 10 15972 254 26 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 14375 2 28 22941 43 14 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB, 70 GB / 65 GiB
Linux 18573 226 22 27140 12 8 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 18575 8 58 27141 49 44 137615360
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 18575 138 60 27141 179 46 137615360
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 22941 75 47 30816 63 31 126511104 [Multimedia]
ext4 blocksize=4096 Large_file Sparse_SB, 64 GB / 60 GiB
Linux 30816 96 1 33941 153 4 50206720
ext4 blocksize=4096 Large_file Sparse_SB, 25 GB / 23 GiB
Linux 32140 70 59 35265 127 62 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32141 238 34 35267 40 37 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32145 161 17 35270 218 20 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32147 171 25 35272 228 28 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32148 176 29 35273 233 32 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32152 229 14 35278 31 17 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32154 141 52 35279 198 55 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 33941 153 5 42390 154 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB, 69 GB / 64 GiB
Linux 38136 199 16 46585 200 15 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38139 181 59 46588 182 58 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38142 2 5 46591 3 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38143 169 43 46592 170 42 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38150 10 5 46599 11 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38151 80 10 46600 81 9 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 42390 186 37 60278 97 43 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB, 147 GB / 137 GiB
* Linux Swap 60278 130 13 60801 80 15 8398848
SWAP2 version 1, pagesize=4096, 4300 MB / 4101 MiB
-
- Posts: 2735
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: wiped out extended and logical partitions after trying to recover NTFS partition
You have to use the "p"-key to look inside to verify that Testdisk can read its contents.
Parts of your logfile are missing and until know I can only guess that your recovery is about a drive that is 500GB big.
Parts of your logfile are missing and until know I can only guess that your recovery is about a drive that is 500GB big.
-
- Posts: 11
- Joined: 20 Jan 2020, 00:26
Re: wiped out extended and logical partitions after trying to recover NTFS partition
thanks for your reply!
I have done so (checked for the files inside the partition) in an previous deeper search but I had not done a complete check of all the required partitions. So that will be my next step later.
Does it matter which deleted partition(s), I use for the deeper search? That part still confuses me, and I had tried pretty much all of them and the results seem the same...
So far I have managed to recuperate most of the partitions but not all of them ( would show an error if changing from D to L).
Here are 2 logs; I had tried more partitions for the deeper search in the original log, but did not attempt to change their status. The other log shows my first attempt to recuperate the logical and extended partition(s).
https://drive.google.com/file/d/1LlzEIq ... sp=sharing
https://drive.google.com/file/d/1edLs7v ... sp=sharing
I have done so (checked for the files inside the partition) in an previous deeper search but I had not done a complete check of all the required partitions. So that will be my next step later.
Does it matter which deleted partition(s), I use for the deeper search? That part still confuses me, and I had tried pretty much all of them and the results seem the same...
So far I have managed to recuperate most of the partitions but not all of them ( would show an error if changing from D to L).
Here are 2 logs; I had tried more partitions for the deeper search in the original log, but did not attempt to change their status. The other log shows my first attempt to recuperate the logical and extended partition(s).
https://drive.google.com/file/d/1LlzEIq ... sp=sharing
https://drive.google.com/file/d/1edLs7v ... sp=sharing
-
- Posts: 2735
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: wiped out extended and logical partitions after trying to recover NTFS partition
No, deep search takes place on drive level and would maybe find partitions located at uncommon locations.slipstream3 wrote: ↑27 Feb 2020, 23:15 Does it matter which deleted partition(s), I use for the deeper search? That part still confuses me, and I had tried pretty much all of them and the results seem the same...
As far as I know, you do not have to search for an extended partition. An extended partition is an organisational component of Intel/MBR style partitions which is taking care of by Testdisk.my first attempt to recuperate the logical and extended partition(s).
Your job is to check the partitions found for valid content.
-
- Posts: 11
- Joined: 20 Jan 2020, 00:26
Re: wiped out extended and logical partitions after trying to recover NTFS partition
Hello again!
I went through the deeper search again and went through all the results and found the valid partitions (with all my missing files), but I hit a wall again. I could not change the partitions from deleted to either L or P past 4 of them even excluding the NTFS partition. It kept warning of structure error and at the next page it failed with the same error. Is it normal for not all the partitions to begin exactly at the next sector where the last one ended? Somehow I may have corrupted the disk partition structure when I deleted the windows partitions in gparted?
At this point I am ready to scrap Windows all together, (which I have little use for) and just reinstall ubuntu in its stead. But first I would recover the 2 home and 2 data partitions with test disk since it wont go past 4 partitions (aside from the swap partition).
Here is a part of the log highlighting what I wanted to recover and was valid partitions, excluding the NTFS partition which didn't make a difference wether kept deleted or changed to primary:
Results
HPFS - NTFS 0 32 33 191 89 26 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
Linux 0 32 33 10917 14 41 175380480 [Movies and Shows]
ext4 blocksize=4096 Large_file Sparse_SB, 89 GB / 83 GiB
HPFS - NTFS 191 89 26 382 146 19 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
HPFS - NTFS 191 89 27 10916 237 9 172306432
NTFS, blocksize=4096, 88 GB / 82 GiB
HPFS - NTFS 191 89 34 10916 237 9 172306425
NTFS found using backup sector, blocksize=4096, 88 GB / 82 GiB
Linux 10917 47 11 14375 2 27 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
Linux 12505 91 3 15963 46 19 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12511 56 26 15969 11 42 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12511 186 28 15969 141 44 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12515 44 10 15972 254 26 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 14375 2 28 22941 43 14 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB, 70 GB / 65 GiB
Linux 18573 226 22 27140 12 8 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 18575 8 58 27141 49 44 137615360
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 18575 138 60 27141 179 46 137615360
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 22941 75 47 30816 63 31 126511104 [Multimedia]
ext4 blocksize=4096 Large_file Sparse_SB, 64 GB / 60 GiB
Linux 30816 96 1 33941 153 4 50206720
ext4 blocksize=4096 Large_file Sparse_SB, 25 GB / 23 GiB
Linux 32140 70 59 35265 127 62 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32141 238 34 35267 40 37 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32145 161 17 35270 218 20 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32147 171 25 35272 228 28 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32148 176 29 35273 233 32 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32152 229 14 35278 31 17 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32154 141 52 35279 198 55 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 33941 153 5 42390 154 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB, 69 GB / 64 GiB
Linux 38136 199 16 46585 200 15 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38139 181 59 46588 182 58 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38142 2 5 46591 3 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38143 169 43 46592 170 42 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38150 10 5 46599 11 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38151 80 10 46600 81 9 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 42390 186 37 60278 97 43 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB, 147 GB / 137 GiB
* Linux Swap 60278 130 13 60801 80 15 8398848
SWAP2 version 1, pagesize=4096, 4300 MB / 4101 MiB
I can resend the full log again but it seems to not have included the failed attempt to change the partitions state, if that might help at this point...
I went through the deeper search again and went through all the results and found the valid partitions (with all my missing files), but I hit a wall again. I could not change the partitions from deleted to either L or P past 4 of them even excluding the NTFS partition. It kept warning of structure error and at the next page it failed with the same error. Is it normal for not all the partitions to begin exactly at the next sector where the last one ended? Somehow I may have corrupted the disk partition structure when I deleted the windows partitions in gparted?
At this point I am ready to scrap Windows all together, (which I have little use for) and just reinstall ubuntu in its stead. But first I would recover the 2 home and 2 data partitions with test disk since it wont go past 4 partitions (aside from the swap partition).
Here is a part of the log highlighting what I wanted to recover and was valid partitions, excluding the NTFS partition which didn't make a difference wether kept deleted or changed to primary:
Results
HPFS - NTFS 0 32 33 191 89 26 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
Linux 0 32 33 10917 14 41 175380480 [Movies and Shows]
ext4 blocksize=4096 Large_file Sparse_SB, 89 GB / 83 GiB
HPFS - NTFS 191 89 26 382 146 19 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
HPFS - NTFS 191 89 27 10916 237 9 172306432
NTFS, blocksize=4096, 88 GB / 82 GiB
HPFS - NTFS 191 89 34 10916 237 9 172306425
NTFS found using backup sector, blocksize=4096, 88 GB / 82 GiB
Linux 10917 47 11 14375 2 27 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
Linux 12505 91 3 15963 46 19 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12511 56 26 15969 11 42 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12511 186 28 15969 141 44 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 12515 44 10 15972 254 26 55549952 [KxStudio_14]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
Linux 14375 2 28 22941 43 14 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB, 70 GB / 65 GiB
Linux 18573 226 22 27140 12 8 137615360 [KxStudio_Home]
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 18575 8 58 27141 49 44 137615360
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 18575 138 60 27141 179 46 137615360
ext4 blocksize=4096 Large_file Sparse_SB Recover, 70 GB / 65 GiB
Linux 22941 75 47 30816 63 31 126511104 [Multimedia]
ext4 blocksize=4096 Large_file Sparse_SB, 64 GB / 60 GiB
Linux 30816 96 1 33941 153 4 50206720
ext4 blocksize=4096 Large_file Sparse_SB, 25 GB / 23 GiB
Linux 32140 70 59 35265 127 62 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32141 238 34 35267 40 37 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32145 161 17 35270 218 20 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32147 171 25 35272 228 28 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32148 176 29 35273 233 32 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32152 229 14 35278 31 17 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 32154 141 52 35279 198 55 50206720
ext4 blocksize=4096 Large_file Sparse_SB Recover, 25 GB / 23 GiB
Linux 33941 153 5 42390 154 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB, 69 GB / 64 GiB
Linux 38136 199 16 46585 200 15 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38139 181 59 46588 182 58 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38142 2 5 46591 3 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38143 169 43 46592 170 42 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38150 10 5 46599 11 4 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 38151 80 10 46600 81 9 135733248
ext4 blocksize=4096 Large_file Sparse_SB Recover, 69 GB / 64 GiB
Linux 42390 186 37 60278 97 43 287365120 [MultimediaII]
ext4 blocksize=4096 Large_file Sparse_SB, 147 GB / 137 GiB
* Linux Swap 60278 130 13 60801 80 15 8398848
SWAP2 version 1, pagesize=4096, 4300 MB / 4101 MiB
I can resend the full log again but it seems to not have included the failed attempt to change the partitions state, if that might help at this point...
-
- Posts: 2735
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: wiped out extended and logical partitions after trying to recover NTFS partition
The missing free space between KXStudio_14 and KXStudio_Home suggests you should use GPT instead of Intel/MBR when asked for the partition table type.
-
- Posts: 11
- Joined: 20 Jan 2020, 00:26
Re: wiped out extended and logical partitions after trying to recover NTFS partition
Hello,
I am pretty sure that the drive was originally partitioned with Intel/MBR. In the meantime I went ahead with Intel table type and recuperated my partitions with data. Is this why I am getting these errors when trying deeper search with GPT, or is GPT incorrect regardless? Keeping in mind that I only went as far as 11% as I had to stop for now.
...suggests you should use GPT instead of Intel/MBR when asked for the partition table type.
I am pretty sure that the drive was originally partitioned with Intel/MBR. In the meantime I went ahead with Intel table type and recuperated my partitions with data. Is this why I am getting these errors when trying deeper search with GPT, or is GPT incorrect regardless? Keeping in mind that I only went as far as 11% as I had to stop for now.
Code: Select all
....Analyse Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Results
MS Data 2046 175382525 175380480 [Movies and Shows]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 89 GB / 83 GiB
MS Data 2048 3074047 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
MS Data 2048 175382527 175380480 [Movies and Shows]
ext4 blocksize=4096 Large_file Sparse_SB, 89 GB / 83 GiB
MS Data 723187 729360 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 729360 735533 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 1589883 1596056 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 1596056 1602229 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 1602240 1605119 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 1605120 1607999 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 1632276 1653014 20739 [NO NAME]
FAT12, blocksize=4096, 10 MB / 10 MiB
MS Data 2073763 2079936 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 2079936 2086109 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 3074047 6146046 3072000
NTFS, blocksize=4096, 1572 MB / 1500 MiB
MS Data 3074048 175380472 172306425
NTFS, blocksize=4096, 88 GB / 82 GiB
Mac HFS 4695524 13084133 8388610 [����D#]
HFS blocksize=16777216, 4294 MB / 4096 MiB
MS Data 6352187 6358360 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 6358360 6364533 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 9027760 90947759 81920000
NTFS, blocksize=4096, 41 GB / 39 GiB
MS Data 17707651 17728389 20739 [NO NAME]
FAT12, blocksize=4096, 10 MB / 10 MiB
MS Data 31918024 31920903 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 34120776 34123655 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 37328459 37334632 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 37334632 37340805 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 37334667 37340840 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 37340840 37347013 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
Mac HFS 45026908 95358813 50331906
HFS blocksize=33554432, 25 GB / 24 GiB
MS Data 83301992 83304871 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 83326127 83332300 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 83332300 83338473 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
MS Data 83338480 83341359 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 83341360 83344239 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
MS Data 84138396 84159134 20739 [NO NAME]
FAT12, blocksize=4096, 10 MB / 10 MiB...