This partition could not be recovered, size does etc

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

This partition could not be recovered, size does etc

#1 Post by Cozzyb »

Hi,

ran teskdisk on my external HDD that is two x 500gb drives in raid 1, in a Buffalo Drivestation DUO.
It was working fine until I had it plugged in when running linux and then the drive went to raw then unallocated in disk manager.

I ran teskdisk and got the error message from the title but it has found the partition which is NTFS.

so any help?

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#2 Post by Cozzyb »

any help with this?

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#3 Post by Cozzyb »

EASEUS Datarecovery found a bunch of RAW files and I can confirm these are the files I am looking for sadly, due to them all losing there name, and the limited tools of EASEUS (only shows certain formats such as jpg etc) I still need help, but thankfully I know the files are there.

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#4 Post by Cozzyb »

Added a picture of what shows up when I run it as GPT search rather then Intel, gives more results but some look strange.

All of them in deeper analysis search say - Filesystem seems corrupt cannot show files etc.

Any suggestions what to try?
Attachments
Terminal_001.jpeg
Terminal_001.jpeg (58.5 KiB) Viewed 4025 times

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#5 Post by Cozzyb »

This happened at the end, really do need some advice on this.
Attachments
Terminal_002.jpeg
Terminal_002.jpeg (68.78 KiB) Viewed 4020 times

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: This partition could not be recovered, size does etc

#6 Post by Fiona »

Would it be possible to repeat your diagnose in windows
If you didn't have an GPT-partition then there is no necessity to diagnose your disk using GPT.
I ran teskdisk and got the error message from the title but it has found the partition which is NTFS.
Would need more infos about your NTFS-partition.
Did you check it and press p to list your data?
Could you repeat your diagnose as far as possible and copy and paste the content of your testdisk.log in your post?
You'll find the testdisk.log in your testdisk foilder and you can open it using wordpad.

Fiona

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#7 Post by Cozzyb »

Fiona wrote:Would it be possible to repeat your diagnose in windows
If you didn't have an GPT-partition then there is no necessity to diagnose your disk using GPT.
I ran teskdisk and got the error message from the title but it has found the partition which is NTFS.
Would need more infos about your NTFS-partition.
Did you check it and press p to list your data?
Could you repeat your diagnose as far as possible and copy and paste the content of your testdisk.log in your post?
You'll find the testdisk.log in your testdisk foilder and you can open it using wordpad.

Fiona
hi, the reason I did GPT is I presumed this was needed to show Ex FAT partitions, when the hard drive went unallocated then raw it was at the time an EXfat partition i.e. this is what I am seeking to replace.

As for doing the process in windows, I currently can't as my windows drive just suffered a error and failed so having to send it back, however I can scan the same and create logs the same in the linux tool, if you told me where the log was I could upload it.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: This partition could not be recovered, size does etc

#8 Post by Fiona »

hi, the reason I did GPT is I presumed this was needed to show Ex FAT partitions, when the hard drive went unallocated then raw it was at the time an EXfat partition i.e. this is what I am seeking to replace.
ExFAT-partitions can be a kind of confusing.
It's an NTFS-Partition (partition type is NTFS and code 07) but the boot sector is exFAT.
Example from an exFAT-partition and TestDisk / Quick Search as result;
Results
* HPFS - NTFS 0 32 33 60801 15 14 976766976 <--partition
exFAT, 500 GB / 465 GiB <--boot sector
So you should look for an NTFS partition with an exFAT-boot sector.
TestDisk displays boot sector infos at the bottom of the display.
Your partition must be checked.
In case, could you repeat your diagnose?

Would it be possible to repeat your diagnose using windows?
You'll find the log in testdisk folder.
A Live CD is read only.
So it's not possible to create a log.
If you run testdisk from an usb drive, you'll find it in your folder also.
Would be ok, to open the log and copy paste the content.

Fiona

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#9 Post by Cozzyb »

I am running the actual linux program not live cd, so should be able to create a log, doing a Intel run now, will put the log up once done.

Cozzyb
Posts: 25
Joined: 31 May 2012, 00:38

Re: This partition could not be recovered, size does etc

#10 Post by Cozzyb »

Thu Jun 7 21:44:30 2012
Command line: TestDisk

TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.0.0-20-generic (#34-Ubuntu SMP Tue May 1 17:24:39 UTC 2012)
Compiler: GCC 4.5 - Oct 17 2010 19:13:58
ext2fs lib: 1.41.14, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 78165360 sectors
/dev/sda: user_max 78165360 sectors
/dev/sda: native_max 78165360 sectors
/dev/sda: dco 78165360 sectors
/dev/sdb: LBA, HPA, LBA48, DCO support
/dev/sdb: size 976773168 sectors
/dev/sdb: user_max 976773168 sectors
/dev/sdb: native_max 976773168 sectors
/dev/sdb: dco 976773168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 40 GB / 37 GiB - CHS 4865 255 63, sector size=512 - ATA INTEL SSDSA2M040
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ATA Hitachi HDP72505

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - ATA Hitachi HDP72505
Partition table type: Intel

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
FAT32 at 0/32/33
Info: size boot_sector 976668672, partition 976668672
FAT1 : 32-238367
FAT2 : 238368-476703
start_rootdir : 476704 root cluster : 2
Data : 476704-976668671
sectors : 976668672
cluster_size : 32
no_of_cluster : 30505999 (2 - 30506000)
fat_length 238336 calculated 238329
Current partition structure:
1 P FAT32 0 32 33 60794 239 53 976668672 [Linux Stora]
No partition is bootable
Computes LBA from CHS for Disk /dev/sdb - 500 GB / 465 GiB - CHS 60802 255 63
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60802 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, 500 GB / 465 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, 500 GB / 465 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60802 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, 500 GB / 465 GiB
FAT32 at 0/32/33
FAT1 : 32-238367
FAT2 : 238368-476703
start_rootdir : 476704 root cluster : 2
Data : 476704-976668671
sectors : 976668672
cluster_size : 32
no_of_cluster : 30505999 (2 - 30506000)
fat_length 238336 calculated 238329

FAT32 at 0/32/33
FAT32 LBA 0 32 33 60794 239 53 976668672 [Linux Stora]
FAT32, 500 GB / 465 GiB
FAT32 at 0/32/39
FAT1 : 32-238367
FAT2 : 238368-476703
start_rootdir : 476704 root cluster : 2
Data : 476704-976668671
sectors : 976668672
cluster_size : 32
no_of_cluster : 30505999 (2 - 30506000)
fat_length 238336 calculated 238329
set_FAT_info: name from BS used

FAT32 at 0/32/39
FAT32 LBA 0 32 33 60794 239 53 976668672 [Linux Stora]
FAT found using backup sector!, 500 GB / 465 GiB
NTFS at 60800/254/63
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS found using backup sector!, 500 GB / 465 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, 500 GB / 465 GiB
FAT32 LBA 0 32 33 60794 239 53 976668672 [Linux Stora]
FAT32, 500 GB / 465 GiB

interface_write()

No partition found or selected for recovery

Locked