First time using TestDisk

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
jmacintosh
Posts: 1
Joined: 24 Dec 2017, 19:12

First time using TestDisk

#1 Post by jmacintosh »

I have a Seagate 1TB internal HDD that I use as a storage drive. In the Computer Management app in WIndows 7, it gives onyl the overall size of the drive (931.51 GB) and it is labelled as Unallocated. I do have some important data I would like to save on the disk. It has not had anything else written on the disk since the partition issue occurred. the first test log came up as follows...

The only action I have taken so far was an attempt to put/repair boot sector on the drive because according to Testdisk documentation, it would appear the MBR and Boot Sector need to be repaired/replaced.

More than anything, I would just like to confirm the order of what I am supposed to do to repair the boot sector and mbr. It would appear the software will handle the rest.

thank you for your time!

***** LOG BEGINS *****

Sun Dec 24 13:00:48 2017
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, November 2017
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 5.4, Cygwin32 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdg)=253134635008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=640135028736
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=253134635008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=640132383744
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=0
Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=0
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=253130506240
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-1ER162, S/N:202020202020202020202020345a305944503956, FW:CC43
Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63, sector size=512 - WDC WD6400AAKS-00A7B0, S/N:2020202057202d444d5753413059313931363830, FW:01.03B01
Disk /dev/sdg - 253 GB / 235 GiB - CHS 30775 255 63, sector size=512 - Corsair Voyager SliderX1, S/N:0B7F04817020, FW:000A

Partition table type (auto): Intel
Disk /dev/sdb - 640 GB / 596 GiB - WDC WD6400AAKS-00A7B0
Partition table type: Intel

Analyse Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 77824 254 63 1250258562 [OS Drive]

search_part()
Disk /dev/sdb - 640 GB / 596 GiB - CHS 77825 255 63
NTFS at 0/1/1
filesystem size 1250258562
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 77824 254 63 1250258562 [OS Drive]
NTFS, blocksize=4096, 640 GB / 596 GiB
file_pread(5,2,buffer,1250265087(77825/102/37)) lseek err Invalid argument
file_pread(5,1,buffer,1250265087(77825/102/37)) lseek err Invalid argument
file_pread(5,2,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(5,8,buffer,1250263743(77825/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,1250263743(77825/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,1250263871(77825/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,1250263999(77825/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,1250264127(77825/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,1250264255(77825/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,1250264383(77825/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,1250264511(77825/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,1250264639(77825/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,1250264767(77825/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,1250264895(77825/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,1250265023(77825/101/36)) lseek err Invalid argument
file_pread(5,2,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(5,14,buffer,1250265090(77825/102/40)) lseek err Invalid argument
file_pread(5,3,buffer,1250265104(77825/102/54)) lseek err Invalid argument
file_pread(5,3,buffer,1250265151(77825/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,1250265167(77825/103/54)) lseek err Invalid argument
file_pread(5,11,buffer,1250265214(77825/104/38)) lseek err Invalid argument
file_pread(5,2,buffer,1250267136(77825/135/7)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 77824 254 63 1250258562 [OS Drive]
NTFS, blocksize=4096, 640 GB / 596 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 77824 254 63 1250258562 [OS Drive]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - ST1000DM003-1ER162
Partition table type: Intel

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
set_FAT_info: name from BS used

FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
FAT32 0 32 33 12 223 19 204800 [EFI System Partition] [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 29/49/21
filesystem size 1953054720
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 29 49 21 121601 57 56 1953054720
NTFS, blocksize=4096, 999 GB / 931 GiB
file_pread(4,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,2,buffer,1953525767(121601/90/33)) lseek err Invalid argument
file_pread(4,1,buffer,1953525767(121601/90/33)) lseek err Invalid argument
file_pread(4,2,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(4,2,buffer,1953525830(121601/91/33)) lseek err Invalid argument
file_pread(4,1,buffer,1953525830(121601/91/33)) lseek err Invalid argument
file_pread(4,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(4,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(4,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(4,8,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,8,buffer,1953525768(121601/90/34)) lseek err Invalid argument
file_pread(4,3,buffer,1953525776(121601/90/42)) lseek err Invalid argument
file_pread(4,3,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(4,8,buffer,1953525839(121601/91/42)) lseek err Invalid argument
file_pread(4,11,buffer,1953525886(121601/92/26)) lseek err Invalid argument
file_pread(4,2,buffer,1953527808(121601/122/58)) lseek err Invalid argument

Results
* FAT32 0 32 33 12 223 19 204800 [EFI System Partition] [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
P HPFS - NTFS 29 49 21 121601 57 56 1953054720
NTFS, blocksize=4096, 999 GB / 931 GiB

interface_write()
1 * FAT32 0 32 33 12 223 19 204800 [EFI System Partition] [NO NAME]
2 P HPFS - NTFS 29 49 21 121601 57 56 1953054720

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: First time using TestDisk

#2 Post by cgrenier »

Select /dev/hda, choose EFI GPT instead of Intel. If you see all your partitions, choose Write, confirm, Quit and restart your computer.

Locked