cgsecurity.org

Sir,
1. I have 2 tb WD hard disk,
2. I had three partition including C—windows.i.e 4 partition
3. Earlier it became dynamic disc and the drives were not visible on my computer
4. But 4 partition was visible in Manage section of the computer and other third party recovery software.
5. And while converting dynamic to basic using third party software the partition got deleted and Partitions were not visible any where. The partition did not appear in windows my computer. I could see a single drive which cant be open.
6. My hard disk has become RAW showing in manage section.
7. I ran SMART it shows all correct
8. Then run test disk to recover partition

TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020
hristophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
Disk /dev/sdb – 2000 GB / 1863 GiB - CHS 243201 255 63
Partition Start End Size in sectors
D HPFS - NITS O 32 33 44 190 18 716800
D HPFS - NTFS O 32 33 243201 45 44 3907024896
D HPFS - NTFS 50992 214 39 113459 18 31 1003520000 [New Volume]
D FAT16 <32M 105610 135 54 191475 139 6 1379421430
0 HPFS -NTFS 113459 18 32 175925 77 24 1003520000
D HPFS – NTFS 175925 77 25 243201 13 12 1080784896 [Local Disk]

Structure: Ok. Use Up/Down Arrow keys to select partition. Use Left/Right Arrow keys to CHANGE partition characteristics: *=Primary bootable P=Primary L=Logical E=Extended D=Deleted Keys A: add partition, L: load backup, 1: change type, P: list files, Enter: to continue NTFS blocksize=4096 513 GB / 478 GiB

9. While writing partition ..I selected only my three partition.
D HPFS - NTFS 50992 214 39 113459 18 31 1003520000 [New Volume]
0 HPFS NTFS 113459 18 32 175925 77 24 1003520000
D HPFS – NTFS 175925 77 25 243201 13 12 1080784896 [Local Disk]
10. As you did not mention that I have to select the four partition including FAT
D FAT16 <32M 105610 135 54 191475 139 6 1379421430

11. I did not select partitions which we saw after the quick search i.e FAT and execute write .
12. After restart the partition did not appear in my computer it is still RAW
13. Now SMART test successful.
14. I again run test disk
15. Now ---bottom of this screen it says that Hint: EFI GPT was detected. Earlier intel was there
TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020 Christophe GRENIER <grenier@cgsecurity.org> https://www.cgsecurity.org
Disk /dev/sdb - 2000 GB / 1863 GiB - WDC WD20EZRX-00DC0130
Please select the partition table type, press Enter when done.
Intel Intel/PC partition
EFI GPT partition map (Mac i386, some x86_64...)
[Humax ] Humax partition table
[Mac ] Apple partition map (legacy)
[None ] Non partitioned media
[Sun ] Sun Solaris partition
[XBox ] XBox partition
[Return ] Return to disk selection
Hint: EFI GPT partition table type has been detected. Note: Do NOT select 'None' for media with only a single partition. Its very rare for a disk to be 'Non-partitioned'.

16. I select EFI GPT instead of INTEL and the result is
TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020 Christophe GRENIER <grenier@cgsecurity.org> https://www.cgsecurity.org
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Current partition structure:
Partition Start End Size in sectors
Bad GPT partition, invalid header checksum.
Trying alternate GPT
check_FAT: can't read FAT boot sector
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Data 32768 3907026943 3906994176 [Basic data partition]
2 P MS Data 32768 3907026943 3906994176 [Basic data partition]

P=Primary D= Deleted
Quick Search [Backup]
Try to locate Partition
=======================================

17. when quick serch the result is

TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020 Christophe GRENIER <grenier@cgsecurity.org> https://www.cgsecurity.org
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Current partition structure:
Partition Start End Size in sectors

1 P EFI GPT 0 0 2 267349 89 4 4294967295

Bad sector count. No partition is bootable

*=Primary bootable P=Primary L=Logical E=Extended D=Deleted [ Backup ]
Try to locate partition


18. I also ran in Intel Intel/PC partition but failed to find the FAT section or my required partition which I wrote and showing any partition like again in quick scan.
How I get my partition again.Kindly help me to find the partition ..if you have any video or detail article or any software to recover my partition then send it to me. If any other detail required.
Any suggestion what can I do now to recover my partition ?

Thanks

debanath wrote: 04 Dec 2020, 14:31 Sir,
1. I have 2 tb WD hard disk,
2. I had three partition including C—windows.i.e 4 partition
3. Earlier it became dynamic disc and the drives were not visible on my computer
4. But 4 partition was visible in Manage section of the computer and other third party recovery software.
5. And while converting dynamic to basic using third party software the partition got deleted and Partitions were not visible any where. The partition did not appear in windows my computer. I could see a single drive which cant be open.
6. My hard disk has become RAW showing in manage section.
7. I ran SMART it shows all correct
8. Then run test disk to recover partition

TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020
hristophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
Disk /dev/sdb – 2000 GB / 1863 GiB - CHS 243201 255 63
Partition Start End Size in sectors
D HPFS - NITS O 32 33 44 190 18 716800
D HPFS - NTFS O 32 33 243201 45 44 3907024896
D HPFS - NTFS 50992 214 39 113459 18 31 1003520000 [New Volume]
D FAT16 <32M 105610 135 54 191475 139 6 1379421430
0 HPFS -NTFS 113459 18 32 175925 77 24 1003520000
D HPFS – NTFS 175925 77 25 243201 13 12 1080784896 [Local Disk]

Structure: Ok. Use Up/Down Arrow keys to select partition. Use Left/Right Arrow keys to CHANGE partition characteristics: *=Primary bootable P=Primary L=Logical E=Extended D=Deleted Keys A: add partition, L: load backup, 1: change type, P: list files, Enter: to continue NTFS blocksize=4096 513 GB / 478 GiB

Here is where you check out the readibility of each partition using the "P"-key. If you fail or a missing partitions you should run a deep search and repeat examining the partitions with the "p"-key.

9. While writing partition ..I selected only my three partition.
D HPFS - NTFS 50992 214 39 113459 18 31 1003520000 [New Volume]
0 HPFS NTFS 113459 18 32 175925 77 24 1003520000
D HPFS – NTFS 175925 77 25 243201 13 12 1080784896 [Local Disk]
10. As you did not mention that I have to select the four partition including FAT

As this is your first posting, to whom are you refering to when speaking about "did not mention"?

Sir,
kindly refer third link the detailed procedure .
https://html5.litten.com/updated-how-to ... ecame-raw/ by James Litten
Refer para….
Press
Q
to go back a screen and then press enter to get to this screen.
Select WRITE and press enter in order to write our new partition table to the drive.
DO NOT WRITE A NEW PARTITION TABLE IF YOU DID NOT SEE YOUR FILES/FOLDERS That means the proper partition table was not found and you will have to try a different technique to recover your data.
Where it is not mentined that I have to select all the drive as per last partition
I selected three partition except C drive, Now the hard disk not showing the drives …and search
Shows

===============================
TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020 Christophe GRENIER <grenier@cgsecurity.org> https://www.cgsecurity.org
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Current partition structure:
Partition Start End Size in sectors

1 P EFI GPT 0 0 2 267349 89 4 4294967295

Bad sector count. No partition is bootable

*=Primary bootable P=Primary L=Logical E=Extended D=Deleted [ Backup ]
Try to locate partition
=======================================after search ====
And TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020 Christophe GRENIER <grenier@cgsecurity.org> https://www.cgsecurity.org
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Current partition structure:
Partition Start End Size in sectors
Bad GPT partition, invalid header checksum.
Trying alternate GPT
check_FAT: can't read FAT boot sector
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
1 P MS Reserved 34 32767 32734 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Data 32768 3907026943 3906994176 [Basic data partition]
2 P MS Data 32768 3907026943 3906994176 [Basic data partition]

P=Primary D= Deleted
Quick Search [Backup]
Try to locate Partition
=======================
p---function doesnt shows any of my data nor any partition

Now

Please tell how will I get these partition again
****************************************************************
Disk /dev/sdb – 2000 GB / 1863 GiB - CHS 243201 255 63
Partition Start End Size in sectors
D HPFS - NITS O 32 33 44 190 18 716800
D HPFS - NTFS O 32 33 243201 45 44 3907024896
D HPFS - NTFS 50992 214 39 113459 18 31 1003520000 [New Volume]
D FAT16 <32M 105610 135 54 191475 139 6 1379421430
0 HPFS -NTFS 113459 18 32 175925 77 24 1003520000
D HPFS – NTFS 175925 77 25 243201 13 12 1080784896 [Local Disk]
**********************************************************

Which required ..
Thanks
deba

You have to use the "p"-key to determine if the partitions found have readible content.
Otherwise continue with deep search and check the content of the partitions.

Set the status of the partitions that contain readible content from "D" to "P" when being in "EFI" or "GPT" mode.
"Selecting" is not enough.
Then let Testdisk write the partition table.
Disconnect, reconnect the drive or reboot if that works.

now ...after deep search


TestDisk 7.2-NIP, Data Recovery Utility, Novembre 2020 hristophe GRENIER
<grenieltgsecority.org> https://www.cgsecority.org
.isk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Read error at 0/31/55 (lba=2007)
MS Data 2048 3907026943 3907024896
STOP

...
it is coming ...many times i ran

I recovered my data using photorec
but all are scramble.I know the data is there but
Is there any chance to see my older partition ....

You have broken sectors. Search this forum for smartmontools how to get a quick hard drive diagnostic.
Use ddrescue to duplicate the drive.

Use copy/paste or screenshots instead of keying in the output of Testdisk:

debanath wrote: 12 Dec 2020, 15:43 TestDisk 7.2-NIP, Data Recovery Utility, Novembre 2020 hristophe GRENIER
<grenieltgsecority.org> https://www.cgsecority.org
.isk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Read error at 0/31/55 (lba=2007)
MS Data 2048 3907026943 3907024896

This is not something you want to rely on.