1TB Storage Drive Unallocated

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
gncsmith
Posts: 3
Joined: 07 Mar 2016, 20:10

1TB Storage Drive Unallocated

#1 Post by gncsmith »

Hello,

Thanks for the assistance in advance.

My 1TB storage drive (videos, photos, etc.) is now listed as "unallocated". I was running CentOS 7 on a 240GB SSD, but then deleted the partition to install Windows Server 2012 R2. Once I rebooted, I recieved the Grub Rescue error (Error: Unknown Filesystem: Grub Rescue). I've since installed an extra 64gb SSD to use as my primary OS drive, and then use the 240GB just for VMs space. At the moment though, I still cannot access my storage drive.

Anyone have any suggestions on how to retrieve the files?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: 1TB Storage Drive Unallocated

#2 Post by cgrenier »

Run TestDisk, ANalyse, Quick Search and Deeper Search if your partition isn't listed.
Please post the testdisk.log file content

gncsmith
Posts: 3
Joined: 07 Mar 2016, 20:10

Re: 1TB Storage Drive Unallocated

#3 Post by gncsmith »

Ok, I hope this is ok since it's not letting me upload the .log file nor can I copy and paste since it 576k characters.

http://imgur.com/L3dPQKX

http://imgur.com/3wO4us0

http://imgur.com/I3bQh72

Album:
http://imgur.com/a/wuCxH

gncsmith
Posts: 3
Joined: 07 Mar 2016, 20:10

Re: 1TB Storage Drive Unallocated

#4 Post by gncsmith »

I'll post a little of what I can.



Tue Mar 8 09:03:49 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.0.0-kali1-amd64 (#1 SMP Debian 4.0.4-1+kali2 (2015-06-03)) x86_64
Compiler: GCC 4.4
Compilation date: 2015-04-18T13:05:16
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.7
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 468862128 sectors
/dev/sda: user_max 468862128 sectors
/dev/sda: native_max 468862128 sectors
/dev/sda: dco 468862128 sectors
/dev/sdb: LBA, HPA, LBA48, DCO support
/dev/sdb: size 123091920 sectors
/dev/sdb: user_max 123091920 sectors
/dev/sdb: native_max 123091920 sectors
/dev/sdb: dco 123091920 sectors
/dev/sdc: LBA, HPA, LBA48, DCO support
/dev/sdc: size 1953525168 sectors
/dev/sdc: user_max 1953525168 sectors
/dev/sdc: native_max 1953525168 sectors
/dev/sdc: dco 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 240 GB / 223 GiB - CHS 29185 255 63, sector size=512 - SanDisk SDSSDHII240G, S/N:151974401213, FW:X31200RL
Disk /dev/sdb - 63 GB / 58 GiB - CHS 7662 255 63, sector size=512 - SanDisk SDSSDP064G, S/N:134772401275, FW:3.1.0
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-1ER162, S/N:Z4Y56D79, FW:CC45
Disk /dev/sdd - 4049 MB / 3862 MiB - CHS 1020 125 62, sector size=512 - Sony Storage Media, FW:0100

Partition table type (auto): None
Disk /dev/sdc - 1000 GB / 931 GiB - ST1000DM003-1ER162
Partition table type: None

Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=55/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
Current partition structure:
P ext4 0 0 1 121601 80 63 1953525168 [Storage]

search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=55/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB, 1000 GB / 931 GiB

Results
P ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB, 1000 GB / 931 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 1953525168 linear /dev/sdc 0" | dmsetup create test0

interface_write()
P ext4 0 0 1 121601 80 63 1953525168 [Storage]

Write isn't available because the partition table type "None" has been selected.

search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63

recover_EXT2: s_block_group_nr=0/7452, s_mnt_count=55/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB, 1000 GB / 931 GiB
NTFS at 0/32/33
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=367001600, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS 0 32 33 44 190 18 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
NTFS at 3/8/22
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=24944640, part_size=367001600, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 3/8/22
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS 3 8 22 47 166 7 716800
NTFS, blocksize=4096, 367 MB / 350 MiB

block_group_nr 1

recover_EXT2: part_offset problem

block_group_nr 1

recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=1/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB
FAT12 at 24/214/55
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 24/214/55
FAT12 24 214 55 25 5 36 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 25/205/41
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
NTFS 25 107 42 25 205 41 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 25/205/41
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
NTFS 25 205 41 26 48 40 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 44/190/18
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS 0 32 33 44 190 18 716800
NTFS found using backup sector, blocksize=4096, 367 MB / 350 MiB
NTFS at 44/190/18
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS 44 190 18 89 93 3 716800
NTFS, blocksize=4096, 367 MB / 350 MiB

block_group_nr 3

recover_EXT2: part_offset problem

block_group_nr 3

recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 5

recover_EXT2: part_offset problem

block_group_nr 5

recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=5/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 7

recover_EXT2: part_offset problem

block_group_nr 7

recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=7/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 9

recover_EXT2: part_offset problem

block_group_nr 9

recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=9/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 25

recover_EXT2: part_offset problem

block_group_nr 25

recover_EXT2: "e2fsck -b 819200 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=25/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 27

recover_EXT2: part_offset problem

block_group_nr 27

recover_EXT2: "e2fsck -b 884736 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=27/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB
FAT12 at 549/53/45
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 549/53/45
FAT12 549 53 45 549 99 26 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 549/99/27
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 549/99/27
FAT12 549 99 27 549 145 8 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB

block_group_nr 49

recover_EXT2: part_offset problem

block_group_nr 49

recover_EXT2: "e2fsck -b 1605632 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=49/7452, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244190646
recover_EXT2: part_size 1953525168
ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB
Search for partition aborted

Results
P ext4 0 0 1 121601 80 63 1953525168 [Storage]
ext4 blocksize=4096 Large_file Sparse_SB, 1000 GB / 931 GiB
P NTFS 0 32 33 44 190 18 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
P NTFS 3 8 22 47 166 7 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
P FAT12 24 214 55 25 5 36 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
P NTFS 25 107 42 25 205 41 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
P NTFS 25 205 41 26 48 40 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
P NTFS 44 190 18 89 93 3 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
P FAT12 549 53 45 549 99 26 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB
P FAT12 549 99 27 549 145 8 2880 [EFISECTOR]
FAT12, blocksize=512, 1474 KB / 1440 KiB

Locked