Add partition on deleted partition

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
karma
Posts: 1
Joined: 26 May 2020, 18:50

Add partition on deleted partition

#1 Post by karma »

Hello,

Thank you for providing Testdisk and Photorec.

After a chkdsk at Windows boot, my NTFS partition was automatically formatted by Windows (thus, NTFS formatted as NTFS), and I'd like to recover it.
It was the largest partition of the whole disk, still exists with the same name, but now contains only Windows dummy files.

As a too-late-backup, I was able to retrieve the files with Photorec, but I would like to recover the folder structure as well.

A Deeper Search on Testdisk (Ubuntu) shows:

Code: Select all

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
     Partition               Start        End    Size in sectors
 * HPFS - NTFS              0  32 33    12 223 19     204800
 P HPFS - NTFS             12 223 20 16817 209 32  269971456
 D HPFS - NTFS          16817 209 33 22039 124 37   83886080
 D Linux                16817 242  2 21517 114 37   75497472
 D Linux                19185  41 57 23884 169 29   75497472
 D Linux                19186  79 30 23885 207  2   75497472
 D Linux                19186 111 62 23885 239 34   75497472
 D Linux                19187  19 33 23886 147  5   75497472
 D Linux                19190  67 14 23889 194 49   75497472
 D Linux                19195 222 36 23895  95  8   75497472
 D Linux                19197 135 11 23897   7 46   75497472
 D Linux Swap           21517 147  7 22038 249 35    8376320
 D HPFS - NTFS          22039 157  7 243201  78 13 3552962560
>D HPFS - NTFS          22039 157 22 243201  78 13 3552962545

Structure: Ok.  Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable  P=Primary  L=Logical  E=Extended  D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
     Enter: to continue
NTFS found using backup sector, blocksize=4096, 1819 GB / 1694 GiB
The last 2 partitions seem the same.
On the first, "list files" shows the files after format.
On the last (which is selected in the above Testdisk screen) "list files" reports "Can't open filesystem. Filesystem seems damaged.".

The last partition is not shown in Quick search, and is not available in the Advanced menu (for Rebuild BS).

So, I thought:
- assuming the last partition is the filesystem before format, how do I recover it ?
- could I fix the filesystem by adjusting the CHS/geometry of the last partiton? if so, how?
- can I do Rebuild BS to the last partition? if so, how?

Regards,
Peter

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Add partition on deleted partition

#2 Post by cgrenier »

Reading your description of the problem, I don't think the partition table has been altered, so a partition recovery will not work.
Your partition was corrupted and chkdsk "fixed" it by removing all files.
Try TestDisk, Advanced, select your NTFS partition, Undelete. If you are lucky, your lost files will be listed and you will be able to copy them.
If it doesn't work, you will have to sort the files recovered by PhotoRec.

Locked