cgsecurity.org

Hi

I know, dumb mistake. Have been trying to figure this out on my own but am stuck. When i run testdisk, all hard drived detected are showing identical information. The affected drive is a 1 TB and the file system was changed to FAT32 when i made the tool. Will Testdisk still work? I tried to run it but it is incredibly slow and i am wondering if the file system change is causing that. Really at my wits end as some important data was on the drive. Thought i had backed the drive up but cannot find it. Any help/suggestions would be appreciated.

Thank you!

O5CARMAN wrote: 28 Jun 2022, 14:56 Hi

I know, dumb mistake. Have been trying to figure this out on my own but am stuck. When i run testdisk, all hard drived detected are showing identical information. The affected drive is a 1 TB and the file system was changed to FAT32 when i made the tool. Will Testdisk still work? I tried to run it but it is incredibly slow and i am wondering if the file system change is causing that. Really at my wits end as some important data was on the drive. Thought i had backed the drive up but cannot find it. Any help/suggestions would be appreciated.

Thank you!

No documentation, no answer.
Plain and simple!

Laziness in documentation is spreading like Covid - I better not touch my keyboard.

viewtopic.php?p=34916#p34916

Gotcha. Thank you for the reply and the info. First time using one of these forums so not sure what all is necessary. Will get the required info together and try again.

Hello

I have been running Testdisk for about 12 hours now. I understand it is a long process but I do not know what the messages mean. I have attached a screen shot of the current readout. Please let me know what other information i can provide to help try to recover my data.


EDIT: Apologies if i am not posting correctly or providing enough information. This is my first time using online forums and am trying to figure the rules and standards out. Thank you for your patience as I appreciate the knowledge and experience of other people. Is this running correctly or are more actions required to give the best chance at data recovery?

Thanks you.

Hello

I am not familiar with Testdisk, am stressing a little and would really appreciate any guidance. I resized the progress window and now my view of the current progress is limited. Could someone please advise if this is still OK or if I need to start over. I can scroll up to the original status information but it snaps back to the view shown here. And if I am still doing something wrong with respect to posting, could someone please advise me on how to improve that.

Thank you.

recuperation, thank you so much for taking the time to list the important information when going to forums for help. I really appreciate it. I will provide all I can....

1. OS
Microsoft Windows 10 Home
Ver. 10.0.19044 Build 19044

2.
Testdisk 7.2

3.
The drive is used as a backup, Connected to USB. (made wrong selection when making Windows Media Creation tool)
Since the incident, nothing new has been written to it. Automatic backups, etc, were stopped.

4.
Have not learned Linux

5.
Drive is data only

6.
HDD

7.
1T

8.
Toshiba

9.
593400-D USB 2.0 external HDD

10.
came in a housing

11.
currently running testdisk so not sure if i can do this right now.

12.
Not sure. It would be whatever the standard is as I did not make any changes. There is no OS on this drive, just data, saved through windows, with the folders made through file explorer
EDIT: Testdisk detected GPT

13.
I did not partition this drive.

14.
It is visible and shows the files for the Windows Media Creation Tool. As well, capacity reads as 31.9 GB, 4.3 GB used and 27.6 GB free. File system is now FAT32

15.
All that is showing is the Media Creation Tool files.

14.
I needed to make a media creation tool to try to repair my laptop. I usually use cds but my current computer does not have an optical drive. I found a USB stick but when i went to write the files i was careless and selected my USB external HDD by mistake. I did not realize my mistake until i removed the stick and tried to use it. Then i started sweating. Checked the HDD and the Media Creation Tool files where there. Looked online. EasyUS was suggested but it didn't seem to show any recoverable files. I was in a real panic so that could be a mistake I made (wrong drive selected...as it turns out, all 3 HDDs on this system are 1T and two are Toshiba so it is possible.) I did some more searching and found out about Testdisk and decided to give it a go. It has been running for about 24 hrs but i am not used to seeing results in DOS so not sure if it is working properly or if i need to do some preparation on the drive and start again. I can provide logs from Testdisk if that can be done while the program is running,

15.
No signs of failure

Thank you for your time and helping me understand what information is needed for someone to help out in these situations. I really appreciate it!
I have included a screenshot of the current status.
If you have time could you point me in the direction of some resources on how to get a proper backup system/routine going? What way do you feel is best?

EDIT: As well, is there a resource that you (recuperation) would recommend to start to get into Linux?

Thanks again! disk info

To examine your 1 TB drive completely you need roughly 8 hours minimum over a USB 2.0 connection assuming 35 MB/sec.
Keep in mind there are 2 runs, the quick search and the deep search.

When in doubt over the health status of your disk consider publishing a smartmontools report:

viewtopic.php?f=5&t=10910

The best way to learn Linux is to use it and I use it only for recovery purposes.
You find hundreds of videos and written tutorials. Use what you like.

You can start with a live linux on a USB stick.
Install Linux on an old computer with no important data.
Shells like LXDE and XFCE are less ressource-hungry than KDE p.e.
Start playing with the command line.
Use the autocomplete feature of the command line when entering commands.
Learn how to install software on linux and installing from the command line.

Important special disk commands and software:

smartmontools (command smartctl)
lsblk
hdparm
testdisk (including Photorec)
dd
ddrescue
f3 (fight flash fraud)

Hello recuperation

EDIT: Stand by. I continued and it has listed a bunch of deleted files. I am trying to figure what to do next. Will read the step by step guide....just being over cautious about hitting enter...

EDIT 2: No recovered data yet. So so i do a deeper search or do i have to correct something (disk size mismatch) before moving forward?

EDIT 3: went ahead and tried to change the P to D and it wouldn't allow...now back to square 1. Do I run it again and continue to deeper or do i have to do something with the FAT32 file structure? Thanks!!

EDIT 4: I have been looking for solutions. Do i have to "unmount" the partitions before using Testdisk? And where would i find the info on that?

Thank you for your time and the information on linux. I am going to look into that for sure. A friend of mine has been using it since the 90's and swears by it. ( i am aware that not all mainstream software is supported but really hating Microsoft)

I did a run through (about 36 hours) with Testdisk. I have included the image of the result. Could this be because the Windows Media Creation tool formatted to FAT32 and the initial file structure was NTFS? I know there are instructions
to check HD jumper settings, BIOS detection... but not sure what to do next. I have also included tho only log file i could find. Not sure what to do nest and do not want to risk doing something wrong. Some of the data is irreplaceable so I am being extra cautious.

Thank you for any guidance you can give. I have read that some people (who probably know more than I do on this topic) were successful at recovering a large portion of the data lost when they did the same thing as I did with the media creation tool. I am still hopeful.

36h instead of 8h translates roughly into a transfer speed of 8 MByte/sec which appears to be to slow.
Your disk might be dammaged. For a quick check publish your smartmontools logfile:
viewtopic.php?f=5&t=10910

The location of the partition found starts roughly at the end of your disk and points to a sector location behind the last physically existing sector.
The data found is wrong.

Testdisk won't succeed when trying to run the p-key ("list files") on the next or one of the next screens.
The next step after running smartmontools and maybe ddrescue would be to run Photorec or any other recovery software.