Please help!!!!! Recovery of Linux partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Jrock
Posts: 5
Joined: 23 Apr 2015, 09:47

Please help!!!!! Recovery of Linux partition

#1 Post by Jrock »

I REALLLY need help recovering a Linux partition. I do have a logfile. I had a Linux partition and a Windows partition. Linux is what I need to recover. At first attempt, I ran testdisk analyse. When it returned with one result-Linux- I selected this and wrote table, without pressing P to list files. This was my first time using testdisk and I was excited when testdisk returned a result showing Linux. Thinking everything is fine, I rebooted and attempted to boot Linux. Nothing showed up. I opened gparted to look at the partitions. I now have one ext4 partition, and two unallocated partitions. From top to bottom, in this order: unallocated, ext4 Linux, unallocated. Before I ran testdisk and had working partitions: Linux, Windows 7.
I ran testdisk again, and did deeper search. Results returned with six D Linux and one hpfs-ntfs Windows. Linux's results are listed first, and Windows last. After pressing P for Windows, the root folder shows. Again, Linux is what I need.

Here the info from logfile. I really thank you for your help!!!!!


Thu Apr 23 03:39:50 2015
Command line: TestDisk

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.2.0-51-generic (#77-Ubuntu SMP Wed Jul 24 20:18:19 UTC 2013) x86_64
Compiler: GCC 4.6
Compilation date: 2012-02-05T07:15:52
ext2fs lib: 1.42, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8004 MB / 7633 MiB - CHS 1020 247 62, sector size=512 - SanDisk Cruzer Blade, FW:1.26

Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel

Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
Backup partition structure
partition_save
Computes LBA from CHS for Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
1 * Linux 60590 214 41 182191 77 30 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB

Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery

search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60590 214 41 182191 77 30 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60591 57 11 182191 174 63 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60591 89 43 182191 207 32 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60593 197 21 182194 60 10 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60599 195 13 182200 58 2 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60600 232 49 182201 95 38 1953511424
EXT4 Large file Sparse superblock Recover, 1000 GB / 931 GiB
NTFS at 121600/182/55
filesystem size 1953509376
sectors_per_cluster 8
mft_lcn 786432

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Please help!!!!! Recovery of Linux partition

#2 Post by Fiona »

Didn't find the result of Deeper Search.
Did you interrupt your scan running Deeper Search?

Fiona

Jrock
Posts: 5
Joined: 23 Apr 2015, 09:47

Re: Please help!!!!! Recovery of Linux partition

#3 Post by Jrock »

Hello hello. I only ran deeper search. I interrupted analysis within a few seconds, and ran deeper search which took five hours. Sent private message. Thank you!!!!

Jrock
Posts: 5
Joined: 23 Apr 2015, 09:47

Re: Please help!!!!! Recovery of Linux partition

#4 Post by Jrock »

Hello hello.Here is the testdisk logfile from new test. I could only use testdisk 6.14 in knoppix. I couldn't get testdisk 7.0 to work. After I extracted folder, I sudo testdisk-7.0 /testdisk_static, and get this message in terminal,"command not found. How do I install testdisk. 7.0?
I regarding the logfile, I don't know what to do next to recover Linux partition. Thanks for your help.



Thu Apr 23 21:26:52 2015
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.9.6 (#25 SMP PREEMPT Sat Jun 15 15:27:01 CEST 2013) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8019 MB / 7648 MiB - CHS 1022 247 62, sector size=512 - PNY USB 2.0 FD, FW:8192

Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel

Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424

search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery

Jrock
Posts: 5
Joined: 23 Apr 2015, 09:47

Re: Please help!!!!! Recovery of Linux partition

#5 Post by Jrock »

Hello hello. I ran a third test with full analyse, then deeper search. The first testlog I posted was only with deeper search.There are some details I think I should mention. The very first time I ran testdisk, I used analyse. It returned with one Linux partion. I did not check to see if there were any files. I usedthe "write" option. The second time I ran testdisk, I selected the only Linux partition listed using analyse. I pressed P to list files and it shows, "file not found, filesystem may be damaged". So, it looks like I wrote a partition that had no files in it or was damaged. When I open gparted, it shows three partitions: unallocated-464.31Gib, /dev/sda1-931.51 flags=boot, unallocated-467.36GiB. I don't know how to find the Linux partition that contains the filesystem. I don't know how to reverse what I did. New logfile posted below. Thanks for your help.



Fri Apr 24 03:05:49 2015
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.9.6 (#25 SMP PREEMPT Sat Jun 15 15:27:01 CEST 2013) i686
Compiler: GCC 4.7
Compilation date: 2012-12-16T16:55:56
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.4, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EZRX-00D8PB0, S/N:WD-WCC4M1624260, FW:80.00A80
Disk /dev/sdb - 8019 MB / 7648 MiB - CHS 1022 247 62, sector size=512 - PNY USB 2.0 FD, FW:8192
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EZEX-00BN5A0, FW:0041

Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EZRX-00D8PB0
Partition table type: Intel

Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 60590 214 41 182191 77 30 1953511424

search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244188928
recover_EXT2: part_size 1953511424
Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB

Results
* Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB


dir_partition inode=2
* Linux 60590 214 41 182191 77 30 1953511424
ext4 blocksize=4096 Large file Sparse superblock Recover, 1000 GB / 931 GiB
ext2fs_dir_iterate failed with error 1.
Directory /

interface_write()
1 * Linux 60590 214 41 182191 77 30 1953511424

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Please help!!!!! Recovery of Linux partition

#6 Post by Fiona »

What OS do you currently use?
Also have given you an answer through PN.
Using your topic here is appreciated.

Fiona

Jrock
Posts: 5
Joined: 23 Apr 2015, 09:47

Re: Please help!!!!! Recovery of Linux partition

#7 Post by Jrock »

Hello hello. I sent PM. I will post here too. I was using Linux and Windows 7 before I had this problem. I was using Linux most of the time. As stated in PM, testdisk forum that .png and .jpeg files are invalid when trying to post a screenshot of gparted showing my disks. What file extensions should I use to post screenshot picture?

Locked