Hi there, need some help...
Scenario: partition 1 - ext4 - linux mint (30gb)
partition 2 - ntfs - files and documents (80gb)
By mistake I installed Mint over Mint and this action has destroyed my 2 partitions and only left one partition with 110gb (corrupted, I canceled the installation, btw I'm in live mode now)
These are the results of the deecp scan:
Linux 0 32 33 14464 95 31 232368128
Warning: Incorrect number of heads/cylinder 160 (NTFS) != 255 (HD)
HPFS - NTFS 0 32 33 12 223 19 204800
Warning: Incorrect number of heads/cylinder 84 (NTFS) != 255 (HD)
HPFS - NTFS 12 223 20 3824 53 5 61229056
Linux 1593 199 15 5174 192 10 57528320
Linux 1596 149 26 5177 142 21 57528320
Linux Swap 3581 57 61 3824 52 52 3903472
Warning: Incorrect number of heads/cylinder 84 (NTFS) != 255 (HD)
HPFS - NTFS 44 190 19 3824 53 5 60717056
Is there anything I can do?
thx in advance
Recover NTFS partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Re: Recover NTFS partition
Did you write data to your disk and did you overwrite data?
I'd need more infos.
Especially how your disk is displayed.
Would it be possible to repeat your diagnose and copy and paste the whole content of your testdisk.log?
Fiona
I'd need more infos.
Especially how your disk is displayed.
Would it be possible to repeat your diagnose and copy and paste the whole content of your testdisk.log?
Fiona
Re: Recover NTFS partition
It started to copy new files in what I thought was the partition 0 (linux partition, 30gb), but the installer destroyed partitions and made a new partition (the whole hdd, 110gb)
this is the drive :
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
this is the log:
Mon May 20 15:13:20 2013
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, MinGW 3.11
Compilation date: May 8 2013 08:18:08
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=60022480896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000204886016
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=2000398839808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=59652440064
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202241024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105740288
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=31349276672
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2000387837952
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
Hard disk list
Disk \\.\PhysicalDrive0 - 60 GB / 55 GiB - CHS 7753 240 63, sector size=512
Disk \\.\PhysicalDrive1 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive6 - 2000 GB / 1863 GiB - CHS 30400 255 63, sector size=4096
Drive C: - 59 GB / 55 GiB - CHS 7705 240 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512
Drive E: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive F: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive G: - 31 GB / 29 GiB - CHS 3811 255 63, sector size=512
Drive H: - 2000 GB / 1863 GiB - CHS 30399 255 63, sector size=4096
Partition table type (auto): Intel
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 12/223/20
heads/cylinder 84 (NTFS) != 255 (HD)
Current partition structure:
1 E extended LBA 12 223 1 3824 254 63 61241796
No partition is bootable
Warning: number of heads/cylinder mismatches 84 (NTFS) != 255 (HD)
5 L HPFS - NTFS 12 223 20 3824 53 5 61229056
search_part()
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63
recover_EXT2: s_block_group_nr=0/886, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 29046016
recover_EXT2: part_size 232368128
Linux 0 32 33 14464 95 31 232368128
ext4 blocksize=4096 Large file Sparse superblock, 118 GB / 110 GiB
Linux Swap 14464 95 32 14593 65 48 2070512
SWAP2 version 1, pagesize=4096, 1060 MB / 1010 MiB
Results
* Linux 0 32 33 14464 95 31 232368128
ext4 blocksize=4096 Large file Sparse superblock, 118 GB / 110 GiB
P Linux Swap 14464 95 32 14593 66 1 2070528
SWAP2 version 1, pagesize=4096, 1060 MB / 1011 MiB
interface_write()
1 * Linux 0 32 33 14464 95 31 232368128
2 P Linux Swap 14464 95 32 14593 66 1 2070528
search_part()
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63
recover_EXT2: s_block_group_nr=0/886, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 29046016
recover_EXT2: part_size 232368128
Linux 0 32 33 14464 95 31 232368128
ext4 blocksize=4096 Large file Sparse superblock, 118 GB / 110 GiB
NTFS at 0/32/33
heads/cylinder 160 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800
NTFS, blocksize=4096, 104 MB / 100 MiB
heads/cylinder 84 (NTFS) != 255 (HD)
NTFS at 12/223/19
heads/cylinder 160 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800
NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 61229056
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 3824 53 5 61229056
NTFS, blocksize=4096, 31 GB / 29 GiB
recover_EXT2: s_block_group_nr=0/219, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8176
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7191040
recover_EXT2: part_size 57528320
Linux 1593 199 15 5174 192 10 57528320
ext4 blocksize=4096 Large file Sparse superblock Recover, 29 GB / 27 GiB
recover_EXT2: s_block_group_nr=0/219, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8176
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7191040
recover_EXT2: part_size 57528320
Linux 1596 149 26 5177 142 21 57528320
ext4 blocksize=4096 Large file Sparse superblock Recover, 29 GB / 27 GiB
Linux Swap 3581 57 61 3824 52 52 3903472
SWAP2 version 1, pagesize=4096, 1998 MB / 1905 MiB
NTFS at 3824/53/5
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 61229056
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 3824 53 5 61229056
NTFS found using backup sector, blocksize=4096, 31 GB / 29 GiB
NTFS at 13828/60/57
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 12288000
sectors_per_cluster 8
mft_lcn 262144
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13828 60 57 14593 33 32 12288000 [Nuevo vol]
NTFS, blocksize=4096, 6291 MB / 6000 MiB
NTFS at 14057/82/42
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 8607744
sectors_per_cluster 8
mft_lcn 262144
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 14057 82 42 14593 33 32 8607744 [Nuevo vol]
NTFS, blocksize=4096, 4407 MB / 4203 MiB
recover_EXT2: s_block_group_nr=0/24, s_mnt_count=2/30, s_blocks_per_group=32768, s_inodes_per_group=8176
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 817152
recover_EXT2: part_size 6537216
Linux 14242 109 12 14649 89 32 6537216
ext4 blocksize=4096 Large file Sparse superblock Recover, 3347 MB / 3192 MiB
This partition ends after the disk limits. (start=228804608, size=6537216, end=235341823, disk end=234441648)
Linux Swap 14464 95 32 14593 65 48 2070512
SWAP2 version 1, pagesize=4096, 1060 MB / 1010 MiB
Linux Swap 14464 128 1 14593 65 48 2068464
SWAP2 version
thank you very much for your support.
this is the drive :
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
this is the log:
Mon May 20 15:13:20 2013
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, MinGW 3.11
Compilation date: May 8 2013 08:18:08
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=60022480896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000204886016
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=2000398839808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=59652440064
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202241024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105740288
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=31349276672
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2000387837952
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
Hard disk list
Disk \\.\PhysicalDrive0 - 60 GB / 55 GiB - CHS 7753 240 63, sector size=512
Disk \\.\PhysicalDrive1 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive6 - 2000 GB / 1863 GiB - CHS 30400 255 63, sector size=4096
Drive C: - 59 GB / 55 GiB - CHS 7705 240 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512
Drive E: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive F: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive G: - 31 GB / 29 GiB - CHS 3811 255 63, sector size=512
Drive H: - 2000 GB / 1863 GiB - CHS 30399 255 63, sector size=4096
Partition table type (auto): Intel
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 12/223/20
heads/cylinder 84 (NTFS) != 255 (HD)
Current partition structure:
1 E extended LBA 12 223 1 3824 254 63 61241796
No partition is bootable
Warning: number of heads/cylinder mismatches 84 (NTFS) != 255 (HD)
5 L HPFS - NTFS 12 223 20 3824 53 5 61229056
search_part()
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63
recover_EXT2: s_block_group_nr=0/886, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 29046016
recover_EXT2: part_size 232368128
Linux 0 32 33 14464 95 31 232368128
ext4 blocksize=4096 Large file Sparse superblock, 118 GB / 110 GiB
Linux Swap 14464 95 32 14593 65 48 2070512
SWAP2 version 1, pagesize=4096, 1060 MB / 1010 MiB
Results
* Linux 0 32 33 14464 95 31 232368128
ext4 blocksize=4096 Large file Sparse superblock, 118 GB / 110 GiB
P Linux Swap 14464 95 32 14593 66 1 2070528
SWAP2 version 1, pagesize=4096, 1060 MB / 1011 MiB
interface_write()
1 * Linux 0 32 33 14464 95 31 232368128
2 P Linux Swap 14464 95 32 14593 66 1 2070528
search_part()
Disk \\.\PhysicalDrive3 - 120 GB / 111 GiB - CHS 14593 255 63
recover_EXT2: s_block_group_nr=0/886, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 29046016
recover_EXT2: part_size 232368128
Linux 0 32 33 14464 95 31 232368128
ext4 blocksize=4096 Large file Sparse superblock, 118 GB / 110 GiB
NTFS at 0/32/33
heads/cylinder 160 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800
NTFS, blocksize=4096, 104 MB / 100 MiB
heads/cylinder 84 (NTFS) != 255 (HD)
NTFS at 12/223/19
heads/cylinder 160 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800
NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 61229056
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 3824 53 5 61229056
NTFS, blocksize=4096, 31 GB / 29 GiB
recover_EXT2: s_block_group_nr=0/219, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8176
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7191040
recover_EXT2: part_size 57528320
Linux 1593 199 15 5174 192 10 57528320
ext4 blocksize=4096 Large file Sparse superblock Recover, 29 GB / 27 GiB
recover_EXT2: s_block_group_nr=0/219, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8176
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7191040
recover_EXT2: part_size 57528320
Linux 1596 149 26 5177 142 21 57528320
ext4 blocksize=4096 Large file Sparse superblock Recover, 29 GB / 27 GiB
Linux Swap 3581 57 61 3824 52 52 3903472
SWAP2 version 1, pagesize=4096, 1998 MB / 1905 MiB
NTFS at 3824/53/5
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 61229056
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 3824 53 5 61229056
NTFS found using backup sector, blocksize=4096, 31 GB / 29 GiB
NTFS at 13828/60/57
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 12288000
sectors_per_cluster 8
mft_lcn 262144
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13828 60 57 14593 33 32 12288000 [Nuevo vol]
NTFS, blocksize=4096, 6291 MB / 6000 MiB
NTFS at 14057/82/42
heads/cylinder 84 (NTFS) != 255 (HD)
filesystem size 8607744
sectors_per_cluster 8
mft_lcn 262144
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 14057 82 42 14593 33 32 8607744 [Nuevo vol]
NTFS, blocksize=4096, 4407 MB / 4203 MiB
recover_EXT2: s_block_group_nr=0/24, s_mnt_count=2/30, s_blocks_per_group=32768, s_inodes_per_group=8176
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 817152
recover_EXT2: part_size 6537216
Linux 14242 109 12 14649 89 32 6537216
ext4 blocksize=4096 Large file Sparse superblock Recover, 3347 MB / 3192 MiB
This partition ends after the disk limits. (start=228804608, size=6537216, end=235341823, disk end=234441648)
Linux Swap 14464 95 32 14593 65 48 2070512
SWAP2 version 1, pagesize=4096, 1060 MB / 1010 MiB
Linux Swap 14464 128 1 14593 65 48 2068464
SWAP2 version
thank you very much for your support.