The partition can't be recovered

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
testingdisks
Posts: 3
Joined: 30 Jan 2022, 02:17

The partition can't be recovered

#1 Post by testingdisks »

Hello folks. Great piece of technology--thanks.

I believe I have the same problem described in this thread: viewtopic.php?t=9575

I have a 1TB drive with 1 NTFS partition B (931GiB) "expanded" to fill disk via Windows Disk Management, resulted in disk becoming "dynamic" and creating second NTFS partition A (approximately 99MiB or 99MB, according to my recollection).

I deleted volume of partition A, and it took partition B with it. This was my mistake.

I am attempting to recover partition B, 931 GiB, containing my data, testdisk identifies the partition but says:
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
I don't understand the answer given in the linked thread above:
After Quick Search, try Deeper Search.
Use the arrow keys to switch the partition B from D(eleted) to P(rimary).
On the next screen, if the partitions A and B are correctly listed, choose Write, confirm, Quit and restart your computer.
I've used the same partition naming scheme used by author in linked thread. Partition "B" is the one testdisk is saying unrecoverable, and as a result I can not use the arrow keys to switch partition B from D(eleted) to P(rimary) because it does not appear in the list of partitions I can operate on. Only A does.

Code: Select all

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>                                                                             
https://www.cgsecurity.org                                                                                                                                                                                                                      

Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63                                                                        
       Partition               Start        End    Size in sectors                                                        
       
>* HPFS - NTFS              0  32 33    12 223 19     204800                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    


Structure: Ok.  Use Up/Down Arrow keys to select partition.                                                             
Use Left/Right Arrow keys to CHANGE partition characteristics:                                                          
*=Primary bootable  P=Primary  L=Logical  E=Extended  D=Deleted                                                         
Keys A: add partition, L: load backup, T: change type, P: list files,                                                        
       Enter: to continue                                                                                                 
NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
Thanks in advance for any assistance.

Intel

Code: Select all



Sat Jan 29 19:18:27 2022
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499452703744
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-9YN162, S/N:S1D1LLK9, FW:CC4D
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 850 EVO 500GB, S/N:S2RANX0H723011Y, FW:EMT02B6Q
Disk /dev/sdc - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - INTEL SSDSC2BW120A4, S/N:PHDA431400HL1207GN, FW:DC32

Partition table type defaults to Intel
Disk /dev/sda - 1000 GB / 931 GiB - ST1000DM003-9YN162
Partition table type: Intel

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 12/223/20
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 121613 118 41 1953513472 [Media]
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=206848, size=1953513472, end=1953720319, disk end=1953525168)
file_pread(4,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
     HPFS - NTFS             12 223 20 121613 118 41 1953513472 [Media]
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 12/190/50
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=104857088, part_size=1000198897664, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/19
filesystem size           204800
sectors_per_cluster       8
mft_lcn                   8533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 121613 118 41 1953513472 [Media]
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=206848, size=1953513472, end=1953720319, disk end=1953525168)
file_pread(4,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
     HPFS - NTFS             12 223 20 121613 118 41 1953513472 [Media]
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
   * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB

interface_write()
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
EFI GPT

Code: Select all



Sat Jan 29 20:07:16 2022
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499452703744
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-9YN162, S/N:S1D1LLK9, FW:CC4D
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 850 EVO 500GB, S/N:S2RANX0H723011Y, FW:EMT02B6Q
Disk /dev/sdc - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - INTEL SSDSC2BW120A4, S/N:PHDA431400HL1207GN, FW:DC32

Partition table type defaults to Intel
Disk /dev/sda - 1000 GB / 931 GiB - ST1000DM003-9YN162
Partition table type: EFI GPT

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 12/190/50
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=104857088, part_size=1000198897664, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/190/50
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   204799 1953718270 1953513472
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=204799, size=1953513472, end=1953718270, disk end=1953525168)
NTFS at 12/223/19
filesystem size           204800
sectors_per_cluster       8
mft_lcn                   8533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048     206847     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/19
filesystem size           204800
sectors_per_cluster       8
mft_lcn                   8533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   206847     411646     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
file_pread(4,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
     MS Data                   204799 1953718270 1953513472
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
     MS Data                     2048     206847     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
     MS Data                   206847     411646     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

     MS Data                     2048     206847     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
Can't open filesystem. Filesystem seems damaged.

     MS Data                   206847     411646     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 12/190/50
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=104857088, part_size=1000198897664, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/190/50
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   204799 1953718270 1953513472
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=204799, size=1953513472, end=1953718270, disk end=1953525168)
NTFS at 12/223/19
filesystem size           204800
sectors_per_cluster       8
mft_lcn                   8533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048     206847     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/19
filesystem size           204800
sectors_per_cluster       8
mft_lcn                   8533
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   206847     411646     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=105906176, part_size=1000198897664, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/20
filesystem size           1953513472
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   206848 1953720319 1953513472 [Media]
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=206848, size=1953513472, end=1953720319, disk end=1953525168)
file_pread(4,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partitions can't be recovered:
     MS Data                   204799 1953718270 1953513472
     NTFS, blocksize=4096, 1000 GB / 931 GiB
     MS Data                   206848 1953720319 1953513472 [Media]
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
     MS Data                     2048     206847     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
     MS Data                   206847     411646     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

     MS Data                     2048     206847     204800
     NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
Can't open filesystem. Filesystem seems damaged.

     MS Data                   206847     411646     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 
No partition found or selected for recovery
simulate write!

TestDisk exited normally.
Last edited by testingdisks on 11 Feb 2022, 20:38, edited 4 times in total.
Top
recuperation
Posts: 3042
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: The partition can't be recovered

#2 Post by recuperation »

Please correct your posting by removing/replacing gamer speak: "IIRC". Thank you.
Top
testingdisks
Posts: 3
Joined: 30 Jan 2022, 02:17

Re: The partition can't be recovered

#3 Post by testingdisks »

recuperation wrote: 30 Jan 2022, 13:10 Please correct your posting by removing/replacing gamer speak: "IIRC". Thank you.
My apologies. The post has been corrected.
Top
recuperation
Posts: 3042
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: The partition can't be recovered

#4 Post by recuperation »

Did you run "deeper search"?
Top
testingdisks
Posts: 3
Joined: 30 Jan 2022, 02:17

Re: The partition can't be recovered

#5 Post by testingdisks »

recuperation wrote: 02 Feb 2022, 11:09 Did you run "deeper search"?
Yes. Running deeper search exposes the smaller 99 MB "NTFS partition" that I believe is the part the original NTFS partition was expanded into when it became a dynamic disk.
Top
recuperation
Posts: 3042
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: The partition can't be recovered

#6 Post by recuperation »

The difference between you and the incident linked is that your first partition has probably been a Microsoft reserved partition before the merge operation.
The other case is dealing with two partitions of the same type.
Top
Locked

Return to “Partition Recovery”