I have 2TB Toshiba 3.0 HDD. (1863 GiB) I use it on MAc and Windows (with special soft to read/write HFS+ on Win)in HFS+ format to storage data. I deleted and rewrited the partition table accidently with DiskMaker 6 in Macosx 10.9.5 (app to build a bootable drive from OS X) I recovered data with other software (DiskDrill) but I want to recover not data but the partition with the data.
New patition table
>P EFI System 40 409639 409600 [EFI System Partition] [EFI]
P Mac HFS 409640 3906766983 3906357344 (1862.70GiB)
Old partition table. I need to recover
It had FOUR partitions. GPT table with
1) EFI 200 MB
2) HFS+ 1844 GB (with data) !!!!!!!! i need to recover it
3) HFS+ 10 GB (not important)
4) HFS+ 10 GB (not important)
I am using Test disk 7.2 and after 20 days scanning this is the result:
Steps:
Step 1: I select >Disk /dev/rdisk1 - 2000 GB / 1863 GiB
Code: Select all
TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
TestDisk is free software, and
comes with ABSOLUTELY NO WARRANTY.
Select a media (use Arrow keys, then press Enter):
Disk /dev/disk0 - 320 GB / 298 GiB (RO)
Disk /dev/disk1 - 2000 GB / 1863 GiB
Disk /dev/rdisk0 - 320 GB / 298 GiB (RO)
>Disk /dev/rdisk1 - 2000 GB / 1863 GiB
>[Proceed ] [ Quit ]
Note: Disk capacity must be correctly detected for a successful recovery.
If a disk listed above has an incorrect size, check HD jumper settings and BIOS
detection, and install the latest OS patches and disk drivers.
Code: Select all
[EFI GPT] EFI GPT partition map (Mac i386, some x86_64...)
Code: Select all
TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
Disk /dev/rdisk1 - 2000 GB / 1863 GiB - 3907029164 sectors
Current partition structure:
Partition Start End Size in sectors
1 P EFI System 40 409639 409600 [EFI System Partition]
2 P Mac HFS 409640 3906766983 3906357344 [F40ACFF5-8EF4-40F1-9E30-AED3B053FE1]
]]]]]]1]E1]]1]E1]
Code: Select all
TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
Disk /dev/rdisk1 - 2000 GB / 1863 GiB - 3907029164 sectors
Partition Start End Size in sectors
>P EFI System 40 409639 409600 [EFI System Partition] [EFI]
P Mac HFS 409640 3906766983 3906357344
>P EFI System 40 409639 409600 [EFI System Partition] [EFI]
P Mac HFS 409640 3906766983 3906357344
Step 4: Deep search
And eureka, the entry I want to recover appears:
MS Data 3867961343 7735920638 3867959296 (1844.39 GiB) !!!!!!!!!!!!!!!!!!!!
Code: Select all
TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
Disk /dev/rdisk1 - 2000 GB / 1863 GiB - 3907029164 sectors
The harddisk (2000 GB / 1863 GiB) seems too small! (< 27 TB / 24 TiB)
Check the harddisk size: HD jumper settings, BIOS detection...
The following partitions can't be recovered:
Partition Start End Size in sectors
Linux Swap 135573589 50820287812 50684714224
Linux Swap 149321341 34545772140 34396450800
Linux Swap 155207957 37655431428 37500223472
Linux Swap 172895965 34569346764 34396450800
Linux Swap 175850245 31435446820 31259596576
Linux Swap 190587637 35894870964 35704283328
Linux Swap 2477126901 53161841124 50684714224
Linux Swap 2632993125 37029443924 34396450800
Linux Swap 2652489949 33912086524 31259596576
> MS Data 3867961343 7735920638 3867959296 >>>>>> I want to recover this partition!!!!!!!!!
Mac HFS 3906766980 7813124323 3906357344
[ Continue ]
NTFS, blocksize=4096, 1980 GB / 1844 GiB
And I found it!!!
>D MS Data 2048 3867961343 3867959296 [T2_B]
with the correct name: [T2_B]
with the correct size: 1844 GiB
I can see the documents choosing "P" key
Code: Select all
TestDisk 7.2-WIP, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
Disk /dev/rdisk1 - 2000 GB / 1863 GiB - 3907029164 sectors
Partition Start End Size in sectors
D EFI System 40 409639 409600 [EFI System Partition] [EFI]
D EFI System 46 409645 409600 [EFI System Partition] [EFI]
>D MS Data 2048 3867961343 3867959296 [T2_B]
D Mac HFS 409640 3906766983 3906357344
D Mac HFS 528920 3906886263 3906357344
D Mac HFS 528992 3906886335 3906357344
D Mac HFS 529096 3906886439 3906357344
D Mac HFS 529128 3906886471 3906357344
D Mac HFS 529168 3906886511 3906357344
D Mac HFS 529248 3906886591 3906357344
D Mac HFS 529376 3906886719 3906357344
D Mac HFS 529456 3906886799 3906357344
D Mac HFS 529536 3906886879 3906357344
D Mac HFS 529648 3906886991 3906357344
D Mac HFS 529704 3906887047 3906357344
D Mac HFS 529768 3906887111 3906357344
D Mac HFS 529832 3906887175 3906357344
D Mac HFS 529888 3906887231 3906357344
D Mac HFS 530000 3906887343 3906357344
D Mac HFS 530112 3906887455 3906357344
D Mac HFS 530216 3906887559 3906357344
D Mac HFS 530256 3906887599 3906357344
D Mac HFS 530368 3906887711 3906357344
D Mac HFS 530432 3906887775 3906357344
D Mac HFS 530528 3906887871 3906357344
D Mac HFS 530592 3906887935 3906357344
D Mac HFS 530680 3906888023 3906357344
D Mac HFS 530736 3906888079 3906357344
D Mac HFS 530824 3906888167 3906357344
Structure: Ok. Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
P=Primary D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
Enter: to continue
NTFS found using backup sector, blocksize=4096, 1980 GB / 1844 GiB
Remenber that I had 4 partitions. EFI (200Mb) , HFHS+ (1844 Gib), HFHS+ (10Gib), HFHS+ (10 Gib).
I want to recover all the partition 3, with data inside (1844 GiB)
It was hfs+ format but I found MS Data format 1844 GiB)
So...What I have to do?!!!!!
a) Use Left/Right Arrow keys to CHANGE partition characteristics: P=Primary D=Deleted. Enter: to continue???
b) Keys A: add partition, L: load backup, T: change type, Enter: to continue ???
c) Use gpt in command line??? https://apple.stackexchange.com/questio ... t-writable
d) Use pdisk in command line??? https://apple.stackexchange.com/questio ... t-writable
e) other solution....
f) If I write the partition table could I find again the partitions?
g) Coul I proceed whith "Write" in the next step only for the partition with 1844 GiB or should I recover all of them?
Thank you in advance. Please. Help me.