Broken partition table

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
bosko99
Posts: 2
Joined: 18 Feb 2017, 00:02

Broken partition table

#1 Post by bosko99 »

Hi there, at first excuse me for my own stupidity.
Now I will start with my story.

I have 30 or something GB hard drive with Windows XP on it. Windows were broken, one pc would just restart while trying to load them, other would report that some files were missing and wouldn't even try.
With other Windows loaded on other pc, I tried just to open drive, but it wouldn't let me. Windows would ask me to format drive.
Then I tried with installation CD and Windows Recovery. I don't know why, but I've run command fixboot. It convertet drive to FAT16. Then I've run fixmbr. Now whole partition is broken and drive is RAW again.

I've managed to find some photos with PhotoRec, but that is just a mess now in folder.
I would like to know if there is any way to turn that drive back to NTFS, to repair it's partition table.
So I could open drive on other pc and just take my sorted folders etc.

I've run TestDisk also, but I don't understand all those numbers. Here is my log

Code: Select all


Fri Feb 17 23:55:58 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP2
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=80026361856
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=33820286976
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=80026361856
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=33820286976
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=32210164224
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=47805295104
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=33820286976
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512
Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63, sector size=512
Drive C: - 32 GB / 29 GiB - CHS 3915 255 63, sector size=512
Drive D: - 47 GB / 44 GiB - CHS 5811 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 33 GB / 31 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63
Geometry from i386 MBR: head=116 sector=50
BAD_RS LBA=1869771365 1028988
check_part_i386 1 type 69: no test
BAD_RS LBA=1701519481 5616738
check_part_i386 2 type 73: no test
BAD_RS LBA=2573 5616738
check_part_i386 3 type 74: no test
Current partition structure:
 1 * Novell               123662  30 36 134818 202  1  168689522

Bad relative sector.
 2 * Sys=73               112534  85 47 236203 183 57 1869881465

Bad relative sector.
 3 * Sys=74                   0  40 54     0  40 53          0

Bad relative sector.
Only one partition must be bootable
Space conflict between the following two partitions
 2 * Sys=73               112534  85 47 236203 183 57 1869881465
 1 * Novell               123662  30 36 134818 202  1  168689522

search_part()
Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63
BAD_RS LBA=3501428053 10362703
file_pread(5,1,buffer,3501428053(231575/223/5)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          231575 223  5 233804 221 57   33702407
This partition ends after the disk limits. (start=3501428053, size=33702407, end=3535130459, disk end=66055248)
BAD_RS LBA=2545758208 1995886
file_pread(5,1,buffer,2545758208(168370/60/29)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          168370  60 29 357372 157  5 2857716328
This partition ends after the disk limits. (start=2545758208, size=2857716328, end=5403474535, disk end=66055248)
file_pread(5,2,buffer,66056192(4368/190/63)) lseek err Invalid argument
file_pread(5,1,buffer,66056192(4368/190/63)) lseek err Invalid argument
file_pread(5,1,buffer,66056191(4368/190/62)) lseek err Invalid argument
file_pread(5,14,buffer,66056193(4368/191/1)) lseek err Invalid argument
file_pread(5,3,buffer,66056207(4368/191/15)) lseek err Invalid argument
file_pread(5,3,buffer,66056254(4368/191/62)) lseek err Invalid argument
file_pread(5,8,buffer,66056270(4368/192/15)) lseek err Invalid argument
file_pread(5,11,buffer,66056317(4368/192/62)) lseek err Invalid argument
file_pread(5,2,buffer,66058239(4368/223/31)) lseek err Invalid argument
Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (33 GB / 31 GiB) seems too small! (< 2766 GB / 2576 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          168370  60 29 357372 157  5 2857716328
     HPFS - NTFS          231575 223  5 233804 221 57   33702407

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63
BAD_RS LBA=3501428053 10362703
file_pread(5,1,buffer,3501428053(231575/223/5)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          231575 223  5 233804 221 57   33702407
This partition ends after the disk limits. (start=3501428053, size=33702407, end=3535130459, disk end=66055248)
BAD_RS LBA=2545758208 1995886
file_pread(5,1,buffer,2545758208(168370/60/29)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          168370  60 29 357372 157  5 2857716328
This partition ends after the disk limits. (start=2545758208, size=2857716328, end=5403474535, disk end=66055248)
file_pread(5,2,buffer,66056192(4368/190/63)) lseek err Invalid argument
file_pread(5,1,buffer,66056192(4368/190/63)) lseek err Invalid argument
file_pread(5,1,buffer,66056191(4368/190/62)) lseek err Invalid argument
file_pread(5,14,buffer,66056193(4368/191/1)) lseek err Invalid argument
file_pread(5,3,buffer,66056207(4368/191/15)) lseek err Invalid argument
file_pread(5,3,buffer,66056254(4368/191/62)) lseek err Invalid argument
file_pread(5,8,buffer,66056270(4368/192/15)) lseek err Invalid argument
file_pread(5,11,buffer,66056317(4368/192/62)) lseek err Invalid argument
file_pread(5,2,buffer,66058239(4368/223/31)) lseek err Invalid argument
Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (33 GB / 31 GiB) seems too small! (< 2766 GB / 2576 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          168370  60 29 357372 157  5 2857716328
     HPFS - NTFS          231575 223  5 233804 221 57   33702407

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 33 GB / 31 GiB - CHS 4368 240 63
Geometry from i386 MBR: head=116 sector=50
BAD_RS LBA=1869771365 1028988
check_part_i386 1 type 69: no test
BAD_RS LBA=1701519481 5616738
check_part_i386 2 type 73: no test
BAD_RS LBA=2573 5616738
check_part_i386 3 type 74: no test
Current partition structure:
 1 * Novell               123662  30 36 134818 202  1  168689522

Bad relative sector.
 2 * Sys=73               112534  85 47 236203 183 57 1869881465

Bad relative sector.
 3 * Sys=74                   0  40 54     0  40 53          0

Bad relative sector.
Only one partition must be bootable
Space conflict between the following two partitions
 2 * Sys=73               112534  85 47 236203 183 57 1869881465
 1 * Novell               123662  30 36 134818 202  1  168689522
I did first quick search and then deeper search. Results were the same.
I don't know how program finds partition with over 2500 GB. Maybe it counts some non existing sectors or something. That part is not so clear to me

Code: Select all

The following partitions can't be recovered:
     HPFS - NTFS          168370  60 29 357372 157  5 2857716328
     [b]HPFS - NTFS          231575 223  5 233804 221 57   33702407[/b]
Bolded partition looks like it could be the right one. But when I select it I have just option "Continue". Under it says 17 GB, don't know what's that about.
After continue there is nothing. Only options to add partition, load backup and continue again. Continue again brings me to info with "No partition found or selected for recovery" and offers me deeper search again.

I can upload step by step photos if needed.
Top
User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: Broken partition table

#2 Post by cgrenier »

Run TestDisk, go in the Geometry menu, try 16 heads, Analyse, Quick Search and Deeper Search if necessary.
If your partition isn't found, try 255 heads.
Top
bosko99
Posts: 2
Joined: 18 Feb 2017, 00:02

Re: Broken partition table

#3 Post by bosko99 »

Sorry for late reply, was really busy.
Both your suggestions have same results as in problem explained before.
Top
Locked

Return to “Partition Recovery”