Formatted HFS recovey

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
BParrot
Posts: 3
Joined: 08 Jul 2012, 10:19

Formatted HFS recovey

#1 Post by BParrot »

Hi.
Please help me with my problem.

I've just formatted HFS disc with Time Machine(OS x) backups. I formated it in HFS again.

So, i tried testdisk. it found 2 existing partitions.
EFI (40 - 409639)
HFS (409640-1953262983)

After deep scaning(NOT full - only first 40cyl) it found 2 more partitions(Screenshot)

I write new map. I set 2 found partitions to primary.

BUT! After writing new map I get error, while trying mount this drive.

Can you help me, please?

P.s. I start new deep scaning.
P.p.s. I can't press P to view list of files. There is no such option.

Thanks a lot!
Attachments
Безымянный.JPG
Безымянный.JPG (57.32 KiB) Viewed 3534 times

BParrot
Posts: 3
Joined: 08 Jul 2012, 10:19

Re: Formatted HFS recovey

#2 Post by BParrot »

Here is my log(I do this scan after rewriting partition map)

Code: Select all


Sun Jul  8 13:15:18 2012
Command line: TestDisk

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=16039018496
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=4040748544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=16039018496
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=4040748544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41940670464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=16039017472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=666251264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=85888341504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=4040747520
file_pread(4,1,buffer,312592769(19457/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,31326749(1949/254/63)) lseek err Invalid argument
file_pread(6,1,buffer,7903979(491/254/63)) lseek err Invalid argument
file_pread(7,1,buffer,1953536129(121601/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST9160314AS, FW:0002SDM1
Disk /dev/sdb - 16 GB / 14 GiB - CHS 1949 255 63, sector size=512 - Corsair VoyagerGT, FW:1100
Disk /dev/sdc - 4040 MB / 3853 MiB - CHS 491 255 63, sector size=512 - Corsair Voyager Mini, FW:0.00
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EARS-00Y5B1, FW:80.0
Drive E: - 666 MB / 635 MiB - CHS 158 64 32, sector size=2048 - DTSOFT BDROM, FW:1.05

Partition table type (auto): EFI GPT
Disk /dev/sdd - 1000 GB / 931 GiB - WDC WD10 EARS-00Y5B1
Partition table type: EFI GPT
New options :
 Dump : No
 Cylinder boundary : Yes
 Allow partial last cylinder : No
 Expert mode : No

Analyse Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                    46     409645     409600
 2 P Mac HFS                   469351 1953322694 1952853344

search_part()
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT32 at 0/0/41
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 255 (HD)
sect/track 32 (FAT) != 63 (HD)

FAT32 at 0/0/41
     EFI System                    40     409639     409600 [EFI]
     FAT32, 209 MB / 200 MiB

HFS+ magic value at 25/127/15
part_size 1952853344
     Mac HFS                   409640 1953262983 1952853344
     HFS+, 999 GB / 931 GiB
Search for partition aborted

Results
   P EFI System                    40     409639     409600 [EFI]
     FAT32, 209 MB / 200 MiB
   P Mac HFS                   409640 1953262983 1952853344
     HFS+, 999 GB / 931 GiB

interface_write()
 1 P EFI System                    40     409639     409600 [EFI]
 2 P Mac HFS                   409640 1953262983 1952853344

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Formatted HFS recovey

#3 Post by Fiona »

The problem is, HFS+ doesn't list any files.
Formatting is overriding your previous file system.
TestDisk will find only an empty partition.
In your case it's advisable to use dataracovery software.
You can have a try to use PhotoRec.
Info;
http://www.cgsecurity.org/wiki/PhotoRec
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step
It's advisable to go into File Opt and deselct all files.
Check only needed files.
It saves a lot of time to sort files after recovery.
If you need file names and directories you should use commercial software.

Fiona

BParrot
Posts: 3
Joined: 08 Jul 2012, 10:19

Re: Formatted HFS recovey

#4 Post by BParrot »

Thank you anyway. )

Locked