what do I do next?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
LexWD
Posts: 5
Joined: 03 Nov 2020, 17:26

what do I do next?

#1 Post by LexWD »

Hey folks,

I used TestDisk to look for old info on a 5T external Western Digital MYBook HDD which was mistakenly converted to a bootable ISO image (Dell, Windows 10) for a new laptop.

What do I do next? how do I recreate the folderr structures?


ImageScreen Shot 11-03-20 at 11.30 AM by xcvx4, on Flickr[/img]
recuperation
Posts: 3043
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: what do I do next?

#2 Post by recuperation »

Please attach your picture using the attachment tab on the bottom of this website.

Your picture shows that you selected the wrong disk and the wrong partition style.
You are refering to a "5T" hard drive - is that supposed to be 5TByte? Your picture only shows a 4TB one.

A 4TB is typically partitioned with GPT. You have chosen Intel MBR instead. Select GPT.

You can run the Testdisk Analyse function and the Deep search function to find the remains of your partition. Use the "p"-key to list files inside of what Testdisk finds.
If you find nothing you can only use Photorec (disregarding file names and folder structures) or use a commercial software hoping to do better.
LexWD
Posts: 5
Joined: 03 Nov 2020, 17:26

Re: what do I do next?

#3 Post by LexWD »

Thanks for responding.

I attached the photo.

Its a Western Digital MyBook 4 or 5 TB I dont recall. Unit doesnt say on it what size it is.

Am Im picking dev/sdb or the Physical Drive1?
Attachments
Screen Shot 11-03-20 at 06.53 PM.PNG
Screen Shot 11-03-20 at 06.53 PM.PNG (95.52 KiB) Viewed 1983 times
Screen Shot 11-03-20 at 11.30 AM.PNG
Screen Shot 11-03-20 at 11.30 AM.PNG (82.85 KiB) Viewed 1983 times
LexWD
Posts: 5
Joined: 03 Nov 2020, 17:26

Re: what do I do next?

#4 Post by LexWD »

If I chose physical Drive and then Analyze I get this:
Screen Shot 11-03-20 at 07.07 PM.PNG
Screen Shot 11-03-20 at 07.07 PM.PNG (75.97 KiB) Viewed 1981 times
If ask it to look for lost partition it takes days to analyze the cylinder.
Screen Shot 11-03-20 at 07.07 PM.PNG
Screen Shot 11-03-20 at 07.07 PM.PNG (75.97 KiB) Viewed 1981 times
Attachments
Screen Shot 11-03-20 at 07.08 PM.PNG
Screen Shot 11-03-20 at 07.08 PM.PNG (58.14 KiB) Viewed 1981 times
LexWD
Posts: 5
Joined: 03 Nov 2020, 17:26

Re: what do I do next?

#5 Post by LexWD »

If STOP it and then I do a Deep Search I get this as its searching (this will also take days)


Screen Shot 11-03-20 at 07.12 PM.PNG
Screen Shot 11-03-20 at 07.12 PM.PNG (80.26 KiB) Viewed 1980 times
LexWD
Posts: 5
Joined: 03 Nov 2020, 17:26

Re: what do I do next?

#6 Post by LexWD »

I tried PhotoRec

The Microsoft Reserved Partition must be the ISO file. The WHOLE DISK must be the remainder.
Screen Shot 11-03-20 at 07.39 PM.PNG
Screen Shot 11-03-20 at 07.39 PM.PNG (68.63 KiB) Viewed 1979 times
If I SEARCH the Whole Disk I get
Screen Shot 11-03-20 at 07.41 PM.PNG
Screen Shot 11-03-20 at 07.41 PM.PNG (62.48 KiB) Viewed 1979 times
And I get these DLL files. I dont understand what use these dll files are.
Screen Shot 11-03-20 at 07.42 PM.PNG
Screen Shot 11-03-20 at 07.42 PM.PNG (156.19 KiB) Viewed 1979 times
recuperation
Posts: 3043
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: what do I do next?

#7 Post by recuperation »

LexWD wrote: 04 Nov 2020, 00:55 Thanks for responding.

I attached the photo.

Its a Western Digital MyBook 4 or 5 TB I dont recall. Unit doesnt say on it what size it is.

Am Im picking dev/sdb or the Physical Drive1?
That should yield the same outcome but I would prefer using dev/sdvb.
You selected extX as file system type in Photorec.
As a windows user you should have selected the other selection that matches the most probable file systems on your WD drive.
The last screen shows the Testdisk archive that you unpacked yourself.
Locked