TestDisk: Trying to recover NTFS partitions with space conflicts

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Jettlez
Posts: 3
Joined: 28 Feb 2017, 00:30

TestDisk: Trying to recover NTFS partitions with space conflicts

#1 Post by Jettlez »

First off, many thanks in advance for any assistance! This issue has been doing my head in! And hopefully this isn't a repost but after searching the forum I'm still having some trouble finding anyone with this exact same issue with a solution that works for me.

Long story short, when using a program on my Win7 PC SSD to increase the size of my System Reserved partition by merging it with 200Mb of unallocated space, it seems to have effected the main C: partition.. (yes this probably wasn't the smatest idea... but live and learn right? :? )

Basically it wouldn't boot and at first I thought just the boot files were buggered, but after Win7 repair disk failed, I checked the filestructure and found that 90% of my data was simply gone! Folders like Program Files and Users were there, but most of their data had just dissapeared..but not all of it..

So that lead me to think that perhaps my MFT had became a little messed up and hopefully my files actually were still there. Windows checkdisk couldn't find any issues when I connected the SSD via a SATA-USB adapter to my laptop so I've been trying TestDisk.

First interesting point, when selecting the partition table type, TestDisk notes "Hint: None partition table type has been detected". And sure enough, if I select "None" and "Analyse" I can see a single NTFS partition with only 10% of my files in existance. However if I select "Intel" and "Analyse" I get the following report:

Code: Select all

Current partition structure:
 1 * Sys=4F               120527  49 53 234813 237 34 1836016416

Bad relative sector.
 2 * Sys=73               119380 132 62 153270  41 37  544437093

Bad relative sector.
 3 * Sys=2B               113201  29 24 147074 114 59  544175136

Bad relative sector.
 4 * SpeedStor            177063 118 26 177066 225 63      54974

Bad relative sector.
Only one partition must be bootable
Space conflict between the following two partitions
 3 * Sys=2B               113201  29 24 147074 114 59  544175136
 2 * Sys=73               119380 132 62 153270  41 37  544437093
Space conflict between the following two partitions
 2 * Sys=73               119380 132 62 153270  41 37  544437093
 1 * Sys=4F               120527  49 53 234813 237 34 1836016416
Space conflict between the following two partitions
 1 * Sys=4F               120527  49 53 234813 237 34 1836016416
 4 * SpeedStor            177063 118 26 177066 225 63      54974
Both "Quick Search" and "Deeper Search" result in "No partition found or selected for recovery"
Basically I'm a little stumped as to where to go from here, as my limited IT knowledge has ran out at this point and I'm deathly affraid of losing my data if it's still there!

Cheers,
Jett

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: TestDisk: Trying to recover NTFS partitions with space conflicts

#2 Post by cgrenier »

Do not search partitions inside a partition (ie. D:), search your partitions inside a disk (ie. PhysicalDrive1)
You can try TestDisk, Advanced, Undelete or PhotoRec on the free space of the partition.

Jettlez
Posts: 3
Joined: 28 Feb 2017, 00:30

Re: TestDisk: Trying to recover NTFS partitions with space conflicts

#3 Post by Jettlez »

Thanks, I just selected media on "Disk /dev/sdb", Undelete shows the current partition and another one(which I believe is system reserved, see below) however when I press enter on "Undelete" it shows "No deleted files found"

Code: Select all

   * HPFS - NTFS              0  32 33    37 252 23     608256
     NTFS, blocksize=4096, 311 MB / 297 MiB
   P HPFS - NTFS             37 252 24 29185  29 28  468248576
     NTFS, blocksize=4096, 239 GB / 223 GiB
Is there any way to restore the previous partition layout?

Jettlez
Posts: 3
Joined: 28 Feb 2017, 00:30

Re: TestDisk: Trying to recover NTFS partitions with space conflicts

#4 Post by Jettlez »

Just tired a Deep Search and came up with the following information:

Code: Select all

Partition		Start			End			Size in sectors
D HPFS - NTFS	0	32	33		12	223	19	204800
D HPFS - NTFS	0	32	33		37	252	23	608256
D HPFS - NTFS	12	223	19		25	159	5	204800
D HPFS - NTFS	12	223	20		29160	0	24	468248576
D HPFS - NTFS	12	223	20		29185	29	28	468652032
D HPFS - NTFS	37	252	24		29185	29	28	468248576
D HPFS - NTFS	29160	1	2		29184	254	63	401561
When navigating through those partitions I can see my original files! :D Thanks for the 'Device' not 'Drive D:' tip
How would I go about restoring these partitions over the existing ones without causing further issues?

Locked