all partitions marked as( D) deleted

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Bobdissel
Posts: 4
Joined: 30 Mar 2016, 08:24

all partitions marked as( D) deleted

#1 Post by Bobdissel »

Hello,
Nice to have a place with help.
I really appreciate your work.
My son did something with his computer, he had several infections.
Now the following issue took place,, after a long search on the Internet I fond testdisk and used it.
The program fond after deep search 3 nfts and 1 fat 32 entries Al marked as deleted.
How can I recover the disk so it wil work properly in the laptop?
I am afraid to try because the datw is very important.

Thanks for any reaction.

Bob

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: all partitions marked as( D) deleted

#2 Post by cgrenier »

Please copy and paste the testdisk.log file

Bobdissel
Posts: 4
Joined: 30 Mar 2016, 08:24

Re: all partitions marked as( D) deleted

#3 Post by Bobdissel »

Thanks for the reply.


Tue Mar 29 19:30:32 2016
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, February 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.9, MinGW 3.11
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Onjuiste functie.


filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Onjuiste functie.


Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=945336352768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=53687091200
filewin32_getfilesize(\\.\E:) GetFileSize err Onjuiste functie.


filewin32_setfilepointer(\\.\E:) SetFilePointer err Onjuiste functie.


Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=262146097152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=114324573184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=113143581696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=10487232000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=480704987136
Hard disk list
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-1CH162, S/N:Z1D4MMXH, FW:CC47
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST3500830AS, S/N:9QG0353Z, FW:3.AAC
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ASMedia AS2115, S/N:6FB00042304102

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - ASMedia AS2115
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/32/33
filesystem size 819200
sectors_per_cluster 8
mft_lcn 34133
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 51 30 43 819200
NTFS, blocksize=4096, 419 MB / 400 MiB
FAT32 at 51/30/44
FAT1 : 7006-7598
FAT2 : 7599-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-614399
sectors : 614400
cluster_size : 8
no_of_cluster : 75776 (2 - 75777)
fat_length 593 calculated 593

FAT32 at 51/30/44
FAT: cluster=2(0x2), pos=829440
FAT32 51 30 44 89 93 4 614400 [EFI System Partition] [ESP]
FAT32, blocksize=4096, 314 MB / 300 MiB
NTFS at 105/174/6
filesystem size 938876928
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 105 174 6 58548 17 29 938876928
NTFS, blocksize=4096, 480 GB / 447 GiB
NTFS at 58548/17/30
filesystem size 36198400
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 58548 17 30 60801 80 15 36198400
NTFS, blocksize=4096, 18 GB / 17 GiB

Results
HPFS - NTFS 0 32 33 51 30 43 819200
NTFS, blocksize=4096, 419 MB / 400 MiB
FAT32 51 30 44 89 93 4 614400 [EFI System Partition] [ESP]
FAT32, blocksize=4096, 314 MB / 300 MiB
HPFS - NTFS 105 174 6 58548 17 29 938876928
NTFS, blocksize=4096, 480 GB / 447 GiB
HPFS - NTFS 58548 17 30 60801 80 15 36198400
NTFS, blocksize=4096, 18 GB / 17 GiB

interface_write()
1 P HPFS - NTFS 0 32 33 51 30 43 819200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: all partitions marked as( D) deleted

#4 Post by cgrenier »

Your actual partition table is using EFI GPT but you have forced the scan as PC/Intel.
What problem are you trying to fix ? What error do you have ?

Bobdissel
Posts: 4
Joined: 30 Mar 2016, 08:24

Re: all partitions marked as( D) deleted

#5 Post by Bobdissel »

oops i didnt know that.

The problem is , that it wont start windows on my laptop.
It says that the bootfile is missing.
The hard drive had some problems with infections and it was real slow.
Then it started to make noise and stopt working.
So i want that it will work properly again.

Bob

Bobdissel
Posts: 4
Joined: 30 Mar 2016, 08:24

Re: all partitions marked as( D) deleted

#6 Post by Bobdissel »

So what to do....?
I will scan the disk again for efi/gpt.

Locked