cgsecurity.org

I am trying to help someone who accidentally deleted files from her laptop. I have used another file recovery program (Data Rescue PC3) to recover some but when I showed her what was there, she said there were files missing so I pulled the disk from her PC and looked using TestDisk which is telling there is a problem with the directory structure. TestDisk is recovering some files but a lot are still missing.

Can anyone help me understand the following and suggest what I can do ? I have cloned the disk using Clonezilla and get same results on the clone as the original

Firing up Test Disk and selecting drive F: for analysis, it comes up as "None " partition table detected, switching to Intel and scanning I get the following message


TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive7)=8054112256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=303859499008
filewin32_getfilesize(\\.\D:) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=209715200000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=770453798912
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=8054079488
Hard disk list
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive7 - 8054 MB / 7681 MiB - CHS 979 255 63, sector size=512
Drive C: - 303 GB / 282 GiB - CHS 36942 255 63, sector size=512
Drive E: - 209 GB / 195 GiB - CHS 25496 255 63, sector size=512
Drive F: - 770 GB / 717 GiB - CHS 93669 255 63, sector size=512
Drive L: - 8054 MB / 7680 MiB - CHS 979 255 63, sector size=512

Analyse Drive F: - 770 GB / 717 GiB - CHS 93669 255 63
Geometry from i386 MBR: head=115 sector=48
BAD_RS LBA=1970237472 1340745
check_part_i386 1 type 75: no test
BAD_RS LBA=1929382413 5679179
check_part_i386 2 type 72: no test
Current partition structure:
1 * PC/IX 122641 155 43 228584 218 4 1701978226

Bad relative sector.
2 * Sys=72 120098 127 43 241707 199 29 1953653108

Bad relative sector.
Only one partition must be bootable
Space conflict between the following two partitions
2 * Sys=72 120098 127 43 241707 199 29 1953653108
1 * PC/IX 122641 155 43 228584 218 4 1701978226

All help appreciated

Thanks

Steve

It's useless to search for partitions inside a partition.
If you select F:, partition type None is correct.
If you select the PhysicalDrive, it's probably PC Intel or EFI GPT.

Read https://www.cgsecurity.org/testdisk.pdf chapters "Recovering deleted files using TestDisk" and "Recovering deleted files using PhotoRec".

Trying to follow the instructions in section 7.6 but I am not seeing "Boot" or "RebuildBS" options under Advance for either "Intel" or "EFI GPT" when I select the disk concerned

Thanks

Steve