Dear all,
while switching hard disks I accidentally reset the partition type on my data drive to a wrong one and lost access to my files. I am not an expert on file systems so I am unsure about how to further proceed with Testdisk even after reading through a lot of comments and articles.
The drive is a 1TB (and almost fully written) with a lot of folders and small files - from photos to mp3. I've run the first stages of test drive.
I found the deleted partition but am reluctant to rewrite it to a logical one since I got an error "the hard disdks seems to small. Check the harddisk size... The following partitions can't be recovered".
Any advice, whether setting from D to L and write is a good idea in the context?
Thank you so much!
Christian
Mon Dec 6 01:10:05 2021
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, September 2021
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499135623168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=125025255424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=875177181184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=0
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=2000363192320
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 840 EVO 500GB, S/N:S1DHNSAF444336N, FW:EXT0BB6Q
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000LM024 HN-M101MBB, S/N:S2R8J9HBC28539, FW:2AR10001
Disk \\.\PhysicalDrive3 - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD Elements 25A2, S/N:WXS1EB59NFML, FW:1014
Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - ST1000LM024 HN-M101MBB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
test_FAT()
1 * FAT16 >32M 0 4 5 15200 35 3 244189952
sector_size 512
cluster_size 8
reserved 0
fats 0
dir_entries 0
sectors 0
media F8
fat_length 0
secs_track 63
heads 240
hidden 256
total_sect 0
check_part_i386 failed for partition type 06
test_FAT()
2 P FAT16 >32M 15200 51 20 121601 25 24 1709330432
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 * FAT16 >32M 0 4 5 15200 35 3 244189952
1 * FAT16 >32M 0 4 5 15200 35 3 244189952
Invalid FAT boot sector
2 P FAT16 >32M 15200 51 20 121601 25 24 1709330432
2 P FAT16 >32M 15200 51 20 121601 25 24 1709330432
Partition Table contains two or more Primary DOS FAT partitions
search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/4/5
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 244190208
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 4 5 15200 39 7 244190208
NTFS, blocksize=4096, 125 GB / 116 GiB
BAD_RS LBA=1908242784 1552540
check_part_i386 failed for partition type 04
FAT16 <32M 118782 158 1 254602 34 4 2181940492
This partition ends after the disk limits. (start=1908242784, size=2181940492, end=4090183275, disk end=1953525168)
BAD_RS LBA=2643882435 4132988
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 164574 17 55 340879 30 1 2832340591
This partition ends after the disk limits. (start=2643882435, size=2832340591, end=5476223025, disk end=1953525168)
NTFS at 121601/57/56
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 1953325049
sectors_per_cluster 8
mft_lcn 86993
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 93 25 121601 57 56 1953325049
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121601/57/56
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 1953325049
sectors_per_cluster 8
mft_lcn 86993
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS: Can't read MFT
HPFS - NTFS 121601 57 56 243190 22 24 1953325049
NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=1953523711, size=1953325049, end=3906848759, disk end=1953525168)
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2803 GB / 2611 GiB)
The following partitions can't be recovered:
FAT16 <32M 118782 158 1 254602 34 4 2181940492
HPFS - NTFS 121601 57 56 243190 22 24 1953325049
NTFS, blocksize=4096, 1000 GB / 931 GiB
FAT16 <32M 164574 17 55 340879 30 1 2832340591
Results
HPFS - NTFS 0 4 5 15200 39 7 244190208
NTFS, blocksize=4096, 125 GB / 116 GiB
HPFS - NTFS 12 93 25 121601 57 56 1953325049
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
add_ext_part_i386: max
add_ext_part_i386: min
interface_write()
1 E extended LBA 12 0 1 121601 57 56 1953330932
5 L HPFS - NTFS 12 93 25 121601 57 56 1953325049
Partitions that can't be recovered Topic is solved
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
- Posts: 2729
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Partitions that can't be recovered
I don't know what "test drive" should mean. If you mean "Testdisk" instead, please correct your posting to avoid confusing people reading in thsi forum. Thank you!christianb wrote: ↑06 Dec 2021, 10:48 Dear all,
while switching hard disks I accidentally reset the partition type on my data drive to a wrong one and lost access to my files. I am not an expert on file systems so I am unsure about how to further proceed with Testdisk even after reading through a lot of comments and articles.
The drive is a 1TB (and almost fully written) with a lot of folders and small files - from photos to mp3. I've run the first stages of test drive.
Use the "p"-key ("list files") to see if Testdisk shows valid content. You know best how many partitions you had and what their size was. That should determine your choice.
I found the deleted partition but am reluctant to rewrite it to a logical one since I got an error "the hard disdks seems to small. Check the harddisk size... The following partitions can't be recovered".
Any advice, whether setting from D to L and write is a good idea in the context?
Why don't you use the German forum, by the way?
-
- Posts: 2
- Joined: 06 Dec 2021, 10:36
Re: Partitions that can't be recovered
Thanks. With trying P on different partitions and then resetting them from D to L worked! Donation underway!