Partitions overlapped

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
whitetiger
Posts: 6
Joined: 30 Sep 2014, 11:09

Partitions overlapped

#1 Post by whitetiger »

I've a external USB HD large 500GB.
In this HD there was only one partition large the entire disk.

While I was creating the Windows recovery disk, for my mistake I have chosen the external drive instead of the DVD player.
So Windows has created a partition of 32GB over the original partition.
The new partition contains only 244 MB, the old partition was almost full.

I need some advices to recovery the files in old partitions because now I able to search files lost only in the new partition.
I don't understand what I have to do with testdisk to achieve this result.

Thanks in advance

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Partitions overlapped

#2 Post by Fiona »

I assume that your previous partition and a part of your data and file system are overridden.
Probably a partition recovery will not work anymore, because your file system might be damaged.
If you'd like to test it, you can run Deeper Search and if your previous partition is found, you can check your partition and press p, to have a try to list your files.
If your file system appears as damaged:
In case datarecovery-software like PhotoRec could help.
PhotoRec doesn't keep file names and directories.
But in your case it might be possible that some directories and file names are already overwritten.
Please let me know what kind of file types like jpg etc.. you'd like to recover?

Fiona

whitetiger
Posts: 6
Joined: 30 Sep 2014, 11:09

Re: Partitions overlapped

#3 Post by whitetiger »

I've not use the HD after the first corruption, so now there are 244MB of files create from Microsoft.

If the directories were not damaged I hope to be able to read the contents.
In this HDI saved some files to the service.
I can recover many of these files somewhere else, but I absolutely have to retrieve other files from this HD.
They are zip files, 7z, txt, iso, exe, ini, pdf, etc..

I don't understand what I have to do now.

From this morning into a PC I'm running TestDisk with the option Analyze None partition.
Now I see:

Analyse cylender 8266/60000 13%
FAT32 0 32 33 4177 117 36 67108864 [RIPRISTINO]
Bad root_cluster
check_FAT: Unusual media descriptor musmatches <0xf0!=0xf8>
Warning: numer of head/cylinder mismatches 2 <FAT> !=255 <HD>
Warning: number od Sector per track mismatches 18 <FAT> != 63 >HD>
FAT12 6881 3 37 6881 49 18 2880 [NO NAME]
WBFS 7133 23 45 7133 23 44 0
btrfs 7635 95 1 1275298278 45 30 19202112135823394 [ATIONPYptg@^C^A, AbX:y l^O^Gkup^E]

whitetiger
Posts: 6
Joined: 30 Sep 2014, 11:09

Re: Partitions overlapped

#4 Post by whitetiger »

After 24 hours TestDisk is at 47%
This is what that I see in the screen.
Do you think that there are good possibilities to recover the folders?

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Analyse cylinder 29173/60800: 47%2

FAT32 0 32 33 4177 117 36 67108864 [RIPRISTINO
Bad root_cluster
check_FAT: Unusual media descriptor (0xf0!=0xf8)
Warning: number of heads/cylinder mismatches 2 (FAT) != 255 (HD)
Warning: number of sectors per track mismatches 18 (FAT) != 63 (HD)
FAT12 6881 3 37 6881 49 18 2880 [NO NAME]
WBFS 7133 23 45 7133 23 44 0
btrfs 7635 95 1 1275298278 45 30 19202112135823394
ptg@^C^A. AbX;y l^O~Gkup~E]
NTFS 9044 124 15 9064 123 10 321233
NTFS 9064 123 10 9084 122 5 321233
NTFS 18035 210 17 18074 17 40 614400
NTFS 18074 17 40 18112 79 63 614400
VMFS 25202 10 49 1500809170 198 16 29279537529199491
Stop

whitetiger
Posts: 6
Joined: 30 Sep 2014, 11:09

Re: Partitions overlapped

#5 Post by whitetiger »

The program window has disappeared.
He was active and now it's gone.
I have to start over from the beginning after more than 36 hours.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Partitions overlapped

#6 Post by Fiona »

Please repeat your diagnose running Deeper Search ands using partition table type Intel.
Partition table type None means that each sector will be scanned and takes longer.
Partition table type Intel scans cylinder.
The size of a cylinder is about 8 MB in comparison to a 512 Byte sector.
Until yet, I see no necessity to use partition table type None.
Scanning of a 500 GB disk should take approximately 1 hour.
The result of Deeper Search would be important.
If your partition is listed, please have a try to list your files.
If you receive a message that your file system is damaged, means that a little part of your file system is already overridden.
In this case you need datarecovery software.
If you run Deeper Search, there will be no necessity to run a full quick search scan.
You can stop it and go immediately to Deeper Search.
Please let me know, if it'd be still so slow.

Fiona

Locked