Recovering Partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
runninghamster
Posts: 1
Joined: 27 Jan 2022, 13:11

Recovering Partition

#1 Post by runninghamster »

Hi,
I have a drive that was accidentally turned into a dynamic disk whilst trying to extend the main partition on the drive. This caused Windows to recognise the drive as unreadable and my data lost.
I have tried TestDisk and I can see the main partition of the drive, however I encounter an error exclaiming that the partition is unrecoverable. I am attaching the TestDisk log below, any help would be appreciated.
I did also try another tool, GetDataBack which seems to find the partition & and I am able to view my files. Recovering the partition itself using TestDisk would be preferable to manually copying the files over using that program.

Thank you very much.
TestDisk: 7.2 WIP
Drive: ST1000DM003-1ER162
Partition: HPFS - NTFS 44 190 19 121645 118 9 1953515520

Code: Select all


Thu Jan 27 23:08:10 2022
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, September 2021
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=240065183744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=239941451776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000202043392
Hard disk list
Disk \\.\PhysicalDrive0 - 240 GB / 223 GiB - CHS 29186 255 63, sector size=512 - WDC WDS240G2G0A-00JH30, S/N:192293800120, FW:UF450000
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-1ER162, S/N:Z4Y0MTRE, FW:CC43
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MQ01ABD100, S/N:573FTN0BT, FW:AX0P3D

Partition table type defaults to Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - ST1000DM003-1ER162
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:
No partition is bootable

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           716800
sectors_per_cluster       8
mft_lcn                   29866
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    44 190 18     716800 [System Reserved]
     NTFS, blocksize=4096, 367 MB / 350 MiB
NTFS at 44/190/19
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             44 190 19 121645 118  9 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=718848, size=1953515520, end=1954234367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
     HPFS - NTFS             44 190 19 121645 118  9 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
   * HPFS - NTFS              0  32 33    44 190 18     716800 [System Reserved]
     NTFS, blocksize=4096, 367 MB / 350 MiB

interface_write()
 
No partition found or selected for recovery

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           716800
sectors_per_cluster       8
mft_lcn                   29866
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    44 190 18     716800 [System Reserved]
     NTFS, blocksize=4096, 367 MB / 350 MiB
NTFS at 44/190/18
filesystem size           716800
sectors_per_cluster       8
mft_lcn                   29866
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    44 190 18     716800 [System Reserved]
     NTFS found using backup sector, blocksize=4096, 367 MB / 350 MiB
NTFS at 44/190/19
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             44 190 19 121645 118  9 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=718848, size=1953515520, end=1954234367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
     HPFS - NTFS             44 190 19 121645 118  9 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
   * HPFS - NTFS              0  32 33    44 190 18     716800 [System Reserved]
     NTFS, blocksize=4096, 367 MB / 350 MiB

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

recuperation
Posts: 2729
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Recovering Partition

#2 Post by recuperation »

https://www.hdat2.com/files/disk_probe.pdf

might help. Use at your own risk. Every disk editor that is able to manipulate the drive should be able to do the job.

Haven't tried that recipe before.
You can test the procedure with a second drive whose content had been backed up.

Locked