Please help, 10 years of files lost family,business and personal

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
mrpwnpwn
Posts: 4
Joined: 22 Oct 2016, 15:15

Please help, 10 years of files lost family,business and personal

#1 Post by mrpwnpwn »

Hello,

I have been trying to get back my partition that was lost. I did photo rec all files and it took approximately 60hrs, then I did test-disk and this is what the log says. Im trying to recover physicaldrive 2


After scan this is what testdisk had on screen

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk \\.\PhysicalDrive2 - 2000 GB / 1862 GiB - CHS 243197 255 63

The harddisk (2000 GB / 1862 GiB) seems too small! (< 4000 GB / 3725 GiB)
Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:
Partition Start End Size in sectors
> MS Data 3292559359 4631638014 1339078656
MS Data 3630479359 5307478014 1676998656
MS Data 3661199168 7322398273 3661199106
MS Data 3906959168 7813918273 3906959106
MS Data 3906959359 7813711870 3906752512
MS Data 3906961407 7813920766 3906959360





[ Continue ]
NTFS, blocksize=4096, 685 GB / 638 GiB
Attachments
testdisk.zip
test disk log
(8.9 KiB) Downloaded 241 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Please help, 10 years of files lost family,business and personal

#2 Post by cgrenier »

Run TestDisk, Disk \\.\PhysicalDrive2, EFI GPT, Advanced, select the partition, if necessary, force the type to MS Data and NTFS, Boot, BackupBS, confirm, List.
If you can see your files, choose Analyse, Quick Search, if this 2TB NTFS partition is not listed, choose Deeper Search.
Set the 2TB NTFS partition to P(rimary), on next screen, choose Write, confirm, Quit
Restart your computer.
Send the new log file if you have problems.

mrpwnpwn
Posts: 4
Joined: 22 Oct 2016, 15:15

Re: Please help, 10 years of files lost family,business and personal

#3 Post by mrpwnpwn »

Thank you very much for the guidance. I have some hope now to recover my stuff. Unfortunate it did not work. I have attached log.
I will try deeper search on the 2tb. is it normal to take 50+hrs?
Attachments
testdisk (2).zip
(2.27 KiB) Downloaded 228 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Please help, 10 years of files lost family,business and personal

#4 Post by cgrenier »

Code: Select all

copy backup boot sector over boot sector
file_win32_pwrite(100,1,buffer,2048(0/32/33)) write err
Write error: Can't overwrite NTFS boot sector
Looks like something prevent testdisk to modify the boot sector.
Can you start Windows in safe mode and try again to rewrite the boot sector with your antivirus disabled ?

mrpwnpwn
Posts: 4
Joined: 22 Oct 2016, 15:15

Re: Please help, 10 years of files lost family,business and personal

#5 Post by mrpwnpwn »

I really appreciate all the help so thank you for that. Scan ran all night in safe mode anti virus off. Like i said before I did a photorec to get as much stuff out as I could. I got 2500+ dir file with 1000's of unamed and useless 1kb file from old web searches?. I also tried a different software to scan with but did not write nothing to disk it shows most of my folder with files in it expect my business and production stuff. So I feel that there is still hope to recover 99% hopefully. Maybe steps i did to format the harddrive will help solve the mystery. I was trying to allocate free space to make room for new partition so I could clone my other HD. The whole drive became unallocated so I gave it a drive letter and name but files where gone.In the process I mistakenly deleted all my files DOH!.. Golden rule ALWAYS BACK UP IMPORTANT HARD DRIVE! :(
Attachments
testdisk (3).zip
(3.07 KiB) Downloaded 218 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Please help, 10 years of files lost family,business and personal

#6 Post by cgrenier »

If the the boot sector can not be rewritten because of bad sectors, you can try to clone the disk to a new empty one using ddrescue after booting from a Linux LiveUSB (see the pdf).
Once it's done, remove the original disk and use TestDisk, Advanced, Boot, BackupBS, confirm, RepairMFT, confirm, Quit
If it doesn't work, you will have to sort the files recovered using PhotoRec.

mrpwnpwn
Posts: 4
Joined: 22 Oct 2016, 15:15

Re: Please help, 10 years of files lost family,business and personal

#7 Post by mrpwnpwn »

Thank you for your correspondence, Keep up the good work!

Locked