Partitions that can't be recovered Topic is solved

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
christianb
Posts: 2
Joined: 06 Dec 2021, 10:36

Partitions that can't be recovered

#1 Post by christianb »

Dear all,
while switching hard disks I accidentally reset the partition type on my data drive to a wrong one and lost access to my files. I am not an expert on file systems so I am unsure about how to further proceed with Testdisk even after reading through a lot of comments and articles.
The drive is a 1TB (and almost fully written) with a lot of folders and small files - from photos to mp3. I've run the first stages of test drive.
I found the deleted partition but am reluctant to rewrite it to a logical one since I got an error "the hard disdks seems to small. Check the harddisk size... The following partitions can't be recovered".
Any advice, whether setting from D to L and write is a good idea in the context?
Thank you so much!
Christian

Mon Dec 6 01:10:05 2021
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, September 2021
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Unzulässige Funktion.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Unzulässige Funktion.

Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499135623168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=125025255424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=875177181184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=0
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=2000363192320
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 840 EVO 500GB, S/N:S1DHNSAF444336N, FW:EXT0BB6Q
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000LM024 HN-M101MBB, S/N:S2R8J9HBC28539, FW:2AR10001
Disk \\.\PhysicalDrive3 - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD Elements 25A2, S/N:WXS1EB59NFML, FW:1014

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - ST1000LM024 HN-M101MBB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63


test_FAT()
1 * FAT16 >32M 0 4 5 15200 35 3 244189952
sector_size 512
cluster_size 8
reserved 0
fats 0
dir_entries 0
sectors 0
media F8
fat_length 0
secs_track 63
heads 240
hidden 256
total_sect 0
check_part_i386 failed for partition type 06


test_FAT()
2 P FAT16 >32M 15200 51 20 121601 25 24 1709330432
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 * FAT16 >32M 0 4 5 15200 35 3 244189952
1 * FAT16 >32M 0 4 5 15200 35 3 244189952
Invalid FAT boot sector
2 P FAT16 >32M 15200 51 20 121601 25 24 1709330432
2 P FAT16 >32M 15200 51 20 121601 25 24 1709330432
Partition Table contains two or more Primary DOS FAT partitions

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/4/5
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 244190208
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 4 5 15200 39 7 244190208
NTFS, blocksize=4096, 125 GB / 116 GiB
BAD_RS LBA=1908242784 1552540
check_part_i386 failed for partition type 04
FAT16 <32M 118782 158 1 254602 34 4 2181940492
This partition ends after the disk limits. (start=1908242784, size=2181940492, end=4090183275, disk end=1953525168)
BAD_RS LBA=2643882435 4132988
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 164574 17 55 340879 30 1 2832340591
This partition ends after the disk limits. (start=2643882435, size=2832340591, end=5476223025, disk end=1953525168)
NTFS at 121601/57/56
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 1953325049
sectors_per_cluster 8
mft_lcn 86993
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 93 25 121601 57 56 1953325049
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121601/57/56
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size 1953325049
sectors_per_cluster 8
mft_lcn 86993
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS: Can't read MFT
HPFS - NTFS 121601 57 56 243190 22 24 1953325049
NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=1953523711, size=1953325049, end=3906848759, disk end=1953525168)
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2803 GB / 2611 GiB)
The following partitions can't be recovered:
FAT16 <32M 118782 158 1 254602 34 4 2181940492
HPFS - NTFS 121601 57 56 243190 22 24 1953325049
NTFS, blocksize=4096, 1000 GB / 931 GiB
FAT16 <32M 164574 17 55 340879 30 1 2832340591

Results
HPFS - NTFS 0 4 5 15200 39 7 244190208
NTFS, blocksize=4096, 125 GB / 116 GiB
HPFS - NTFS 12 93 25 121601 57 56 1953325049
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
1 E extended LBA 12 0 1 121601 57 56 1953330932
5 L HPFS - NTFS 12 93 25 121601 57 56 1953325049

recuperation
Posts: 2719
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Partitions that can't be recovered

#2 Post by recuperation »

christianb wrote: 06 Dec 2021, 10:48 Dear all,
while switching hard disks I accidentally reset the partition type on my data drive to a wrong one and lost access to my files. I am not an expert on file systems so I am unsure about how to further proceed with Testdisk even after reading through a lot of comments and articles.
The drive is a 1TB (and almost fully written) with a lot of folders and small files - from photos to mp3. I've run the first stages of test drive.
I don't know what "test drive" should mean. If you mean "Testdisk" instead, please correct your posting to avoid confusing people reading in thsi forum. Thank you!


I found the deleted partition but am reluctant to rewrite it to a logical one since I got an error "the hard disdks seems to small. Check the harddisk size... The following partitions can't be recovered".
Any advice, whether setting from D to L and write is a good idea in the context?
Use the "p"-key ("list files") to see if Testdisk shows valid content. You know best how many partitions you had and what their size was. That should determine your choice.

Why don't you use the German forum, by the way?

christianb
Posts: 2
Joined: 06 Dec 2021, 10:36

Re: Partitions that can't be recovered

#3 Post by christianb »

Thanks. With trying P on different partitions and then resetting them from D to L worked! Donation underway!

Locked