Restored partition but i still don't see it among drives?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
ThatEagle
Posts: 4
Joined: 24 Jan 2018, 06:24

Restored partition but i still don't see it among drives?

#1 Post by ThatEagle »

Is there an additional step to give a drive letter or something?

Background:

- Lost partition to a "diskpart clean"
- Testdisk found the 3 lost partitions on the 1tb drive, i restored the biggest one
- after restarting, i still don't see the restored drive... what am i missing?

Thanks

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Restored partition but i still don't see it among drives?

#2 Post by cgrenier »

What is showing Windows Disk Manager ?
Can you share the testdisk.log file ?

ThatEagle
Posts: 4
Joined: 24 Jan 2018, 06:24

Re: Restored partition but i still don't see it among drives?

#3 Post by ThatEagle »

In disk manager it shows as "unallocated". (Disk 2, 931gb unallocated space.)

Here's the copy paste of the complete log :


Mon Jan 22 18:05:38 2018
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, January 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=479083884544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=999835041792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=4083875840
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - Crucial_CT256MX100SSD1, S/N:14380D4CF87D, FW:MU01
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZEX-00WN4A0, S/N:WD-WCC6Y4CLDLN2, FW:01.01A01
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZEX-00BN5A0, S/N:WD-WCC3F2VKVL2X, FW:01.01A01
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD1002FAEX-00Z3A0, S/N:WD-WCATRC247893, FW:05.01D05
Disk /dev/sde - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - KINGSTON SUV400S37480G, S/N:50026B7778015745, FW:0C3G37R5
Drive F: - 4083 MB / 3894 MiB - CHS 973 64 32, sector size=2048 - HL-DT-ST DVD-RAM GSA-H22N, FW:1.02

Partition table type defaults to Intel
Disk /dev/sda - 256 GB / 238 GiB - Crucial_CT256MX100SSD1
Partition table type: Intel

Analyse Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
file_pread(4,2,buffer,500119551(31131/0/37)) lseek err Invalid argument
file_pread(4,1,buffer,500119551(31131/0/37)) lseek err Invalid argument
file_pread(4,2,buffer,500119552(31131/0/38)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery

search_part()
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
file_pread(4,2,buffer,500119551(31131/0/37)) lseek err Invalid argument
file_pread(4,1,buffer,500119551(31131/0/37)) lseek err Invalid argument
file_pread(4,2,buffer,500119552(31131/0/38)) lseek err Invalid argument
file_pread(4,2,buffer,500118762(31130/243/4)) lseek err Invalid argument
file_pread(4,2,buffer,500118825(31130/244/4)) lseek err Invalid argument
file_pread(4,2,buffer,500118888(31130/245/4)) lseek err Invalid argument
file_pread(4,1,buffer,500119514(31130/254/63)) lseek err Invalid argument
file_pread(4,1,buffer,500119515(31131/0/1)) lseek err Invalid argument

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Partition table type defaults to Intel
Disk /dev/sdc - 1000 GB / 931 GiB - WDC WD10EZEX-00BN5A0
Partition table type: Intel

Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 1952394672
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 121543 209 58 1952394672 [HDD-1TB-WIN10]
NTFS, blocksize=4096, 999 GB / 930 GiB
NTFS at 121543/219/21
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 919552
sectors_per_cluster 8
mft_lcn 38314
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 121543 219 21 121601 25 24 919552
NTFS, blocksize=4096, 470 MB / 449 MiB
file_pread(6,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(6,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(6,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(6,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(6,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(6,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(6,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(6,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(6,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(6,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument

Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 121543 219 20 1952395264 [HDD-1TB-WIN10]
NTFS, blocksize=4096, 999 GB / 930 GiB
P HPFS - NTFS 121543 219 21 121601 25 24 919552
NTFS, blocksize=4096, 470 MB / 449 MiB

interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
2 P HPFS - NTFS 12 223 20 121543 219 20 1952395264 [HDD-1TB-WIN10]
3 P HPFS - NTFS 121543 219 21 121601 25 24 919552
write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.

TestDisk exited normally.



Wed Jan 24 00:43:38 2018
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, January 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=479083884544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=999835041792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=4083875840
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - Crucial_CT256MX100SSD1, S/N:14380D4CF87D, FW:MU01
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZEX-00WN4A0, S/N:WD-WCC6Y4CLDLN2, FW:01.01A01
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZEX-00BN5A0, S/N:WD-WCC3F2VKVL2X, FW:01.01A01
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD1002FAEX-00Z3A0, S/N:WD-WCATRC247893, FW:05.01D05
Disk /dev/sde - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - KINGSTON SUV400S37480G, S/N:50026B7778015745, FW:0C3G37R5
Drive F: - 4083 MB / 3894 MiB - CHS 973 64 32, sector size=2048 - HL-DT-ST DVD-RAM GSA-H22N, FW:1.02

Partition table type defaults to Intel
Disk /dev/sdc - 1000 GB / 931 GiB - WDC WD10EZEX-00BN5A0
Partition table type: Intel

Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:
No partition is bootable
For info, the two disks that were erased were disk 0 (256gb SSD that i got nothing found from running testdisk on it, i guess it's lost) and a regular 1TB hard drive that's disk 2. It had 3 partitions, the main one and 2 tiny others created by the system.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Restored partition but i still don't see it among drives?

#4 Post by cgrenier »

It's better to set the second partition as *(bootable)

Code: Select all

 * HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
 P HPFS - NTFS 12 223 20 121543 219 20 1952395264 [HDD-1TB-WIN10]
 P HPFS - NTFS 121543 219 21 121601 25 24 919552
An antivirus may block testdisk from restoring the partition table, you may have to disable it and/or start windows in safe mode.

ThatEagle
Posts: 4
Joined: 24 Jan 2018, 06:24

Re: Restored partition but i still don't see it among drives?

#5 Post by ThatEagle »

I set it up as bootable and disabled my antivirus before running it and during. I have bitdefender antivirus and windows 10.

No change, i don't see the drive when i navigate to my PC, only my other 3 drives are present... what can i try? Do I need to assign a letter to the drive somehow?

ThatEagle
Posts: 4
Joined: 24 Jan 2018, 06:24

Re: Restored partition but i still don't see it among drives?

#6 Post by ThatEagle »

I found this video where the guy assigns a letter after restoring, but i don't have that option in disk manager on windows 10... the guy in video has windows 8.1

https://www.youtube.com/watch?v=O_kvJF87Drc

Any alternatives of how to do that last step?

Thanks!

Locked