Found my deleted partition, do I use A for Add? Or go in and copy all?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Found my deleted partition, do I use A for Add? Or go in and copy all?

#1 Post by zargon33 »

Hello all,

I mistakenly deleted a partition on the wrong hard drive when attempting to install Windows. I found TestDisk online and read through some tutorials and have run through to the point where I am able to find my deleted partition, and can list the files that are inside and everything looks to be in there (whew).

I'm not 100% sure what option I should choose at this point though, and looking for a little guidance.

Here's the screen I'm at:

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63
Partition Start End Size in sectors
>D HPFS - NTFS 0 32 33 364801 66 1 5860530176
D HPFS - NTFS 0 32 40 364801 66 1 5860530169

Structure: Ok. Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
*=Primary bootable P=Primary L=Logical E=Extended D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
Enter: to continue
NTFS, blocksize=4096, 3000 GB / 2794 GiB


The first one selected contains my data, the second one is returning 'Can't open filesystem'. So at this screen, my options are to add partition, load backup, change type, or list files. Do I add a partition? Or do I change type?


When I press 'P' to list files, I'm seeing everything that should be in there:

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
HPFS - NTFS 0 32 33 364801 66 1 5860530176
Directory /

>dr-xr-xr-x 0 0 0 3-Jan-2017 06:55 .
dr-xr-xr-x 0 0 0 3-Jan-2017 06:55 ..
dr-xr-xr-x 0 0 0 2-Jan-2017 11:42 $RECYCLE.BIN
dr-xr-xr-x 0 0 0 7-Aug-2014 15:08 This Folder
dr-xr-xr-x 0 0 0 16-Jul-2014 00:05 That Folder
dr-xr-xr-x 0 0 0 6-Dec-2016 15:22 The other folder
dr-xr-xr-x 0 0 0 27-Aug-2010 23:21 etc

Next
Use Right to change directory, h to hide Alternate Data Stream
q to quit, : to select the current file, a to select all files
C to copy the selected files, c to copy the current file

Here it looks like I can press 'a' to select all files, then C to copy the selected. I'm not sure if I should just copy things here? Where would I 'paste' them, another drive? Or should I be able to modify this drive to make it accessible again like it was?

Any help is super appreciated, and thanks!

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#2 Post by cgrenier »

Use the arrow keys to set this partition as P(rimary). On next screen, choose Write, confirm, Quit

zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#3 Post by zargon33 »

cgrenier wrote:Use the arrow keys to set this partition as P(rimary). On next screen, choose Write, confirm, Quit
Thank you cgreiner! Just to clarify, do I need to first press 'T' to change type, and then 'P' for primary? It looks like if I press P it will just list the files. Sorry if this is something that seems obvious, just hoping I don't make a mistake. Thanks.

zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#4 Post by zargon33 »

cgrenier wrote:Use the arrow keys to set this partition as P(rimary). On next screen, choose Write, confirm, Quit
Oh I need to pay more attention, "Use the arrow keys to set the partition as P(rimary)". So that would mean the left right keys I am gathering. I am not in front of the system yet but will update later when I'm able to try this out. Thanks.

zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#5 Post by zargon33 »

I used the left/right arrow key to change it to P(rimary), hit enter and chose Write, then confirmed and quit. It prompted me I would have to reboot for the changes, which I did.

I am seeing the drive in 'My computer' as drive G: in the list, but it's not accessible. Looking in disk management, I'm seeing a second partition on drive G: there that states 'Unallocated'
unallocated.PNG
unallocated.PNG (75.67 KiB) Viewed 15978 times
Looking at TestDisk, I'm seeing the new drive letter and partition that was created, as well as another entry for the drive that is likely the other unallocated part:
1.PNG
1.PNG (45.72 KiB) Viewed 15978 times
If I arrow down to drive G and select it in TestDisk I am seeing it defaults to 'None':
2.PNG
2.PNG (45.31 KiB) Viewed 15978 times
Given this scenario above, I am wondering what is recommended from here? I appreciate any help, thanks.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#6 Post by cgrenier »

Using latest TestDisk 7.1-WIP, choose /dev/sdc and EFI GPT, not PC Intel, before recovering your partition.

zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#7 Post by zargon33 »

cgrenier wrote:Using latest TestDisk 7.1-WIP, choose /dev/sdc and EFI GPT, not PC Intel, before recovering your partition.
I used the newest 7.1 WIP download, and here is what I am seeing:


TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>

TestDisk is free software, and
comes with ABSOLUTELY NO WARRANTY.

Select a media (use Arrow keys, then press Enter):
Disk /dev/sda - 4000 GB / 3726 GiB - ATA HGST HDN724040AL
Disk /dev/sdb - 4000 GB / 3726 GiB - ATA HGST HDN724040AL
>Disk /dev/sdc - 3000 GB / 2794 GiB - ATA ST3000DM001-9YN1
Disk /dev/sdd - 256 GB / 238 GiB - ATA M4-CT256M4SSD2
Disk /dev/sde - 4000 GB / 3726 GiB - Seagate BUP BK

>[Proceed ] [ Quit ]

On the next screen, Intel was defaulted but I selected EFI GPT as instructed:

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>

Disk /dev/sdc - 3000 GB / 2794 GiB - ATA ST3000DM001-9YN1

Please select the partition table type, press Enter when done.
[Intel ] Intel/PC partition
>[EFI GPT] EFI GPT partition map (Mac i386, some x86_64...)
[Humax ] Humax partition table
[Mac ] Apple partition map
[None ] Non partitioned media
[Sun ] Sun Solaris partition
[XBox ] XBox partition
[Return ] Return to disk selection

Hint: Intel partition table type has been detected.
Note: Do NOT select 'None' for media with only a single partition. It's very
rare for a disk to be 'Non-partitioned'.


I then chose Analyze:

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>

Disk /dev/sdc - 3000 GB / 2794 GiB - ATA ST3000DM001-9YN1
CHS 364801 255 63 - sector size=512

>[ Analyse ] Analyse current partition structure and search for lost partitions
[ Advanced ] Filesystem Utils
[ Geometry ] Change disk geometry
[ Options ] Modify options
[ Quit ] Return to disk selection

Note: Correct disk geometry is required for a successful recovery. 'Analyse'
process may give some warnings if it thinks the logical geometry is mismatched


It did not appear to find anything, so I chose the Quick Search option:

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>

Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63
Current partition structure:
Partition Start End Size in sectors

Trying alternate GPT

P=Primary D=Deleted
>[Quick Search]
Try to locate partition

After this it did appear to find something named MS DATA, but is stating the data can't be recovered. Is this what I want below? Should I press enter on continue? Wondering your thoughts:

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>

Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63

The harddisk (3000 GB / 2794 GiB) seems too small! (< 6001 GB / 5589 GiB)
Check the harddisk size: HD jumper settings, BIOS detection...

The following partition can't be recovered:
Partition Start End Size in sectors
> MS Data 5860532223 11721062391 5860530169

[ Continue ]
NTFS, blocksize=4096, 3000 GB / 2794 GiB

zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#8 Post by zargon33 »

Since the last option was Continue and didn't seem to be anything that would change or write anything I hit enter, and I'm seeing the two parts of the drive here:
6.PNG
6.PNG (24.34 KiB) Viewed 15959 times
The first entry contains my files when I press 'p' to list them, and shows the 3TB Two at the end. The second entry states 'Can't open filesystem. Filesystem seems damaged.' when I press 'p' on it.

I'm seeing they are both showing as as type 'D', although I changed the first entry to P(rimary) from the previous part of this. Wondering what I should do with these two entries.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#9 Post by cgrenier »

Set the first entry to P(rimary). On next screen, choose Write, confirm, Quit and restart your computer.

zargon33
Posts: 7
Joined: 04 Jan 2017, 03:26

Re: Found my deleted partition, do I use A for Add? Or go in and copy all?

#10 Post by zargon33 »

cgrenier wrote:Set the first entry to P(rimary). On next screen, choose Write, confirm, Quit and restart your computer.
This absolutely fixed my drive! You sir are a wizard, thank you for this software. :D I have promptly donated to your cause! I thought I made a mistake I couldn't recover from on this one, super glad I found your software.

Locked