Check HD size, Part cant be recovered

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
schneidaren
Posts: 3
Joined: 25 Oct 2012, 05:27

Check HD size, Part cant be recovered

#1 Post by schneidaren »

Hi!

I installed Linux on the ext harddrive. In in the Ubuntu installation wizard they asked for what file system I should install linux on. I played around and pressed the "-" sign when I had my ext hard drive selected. That made the file system change to "nothing" (or similar word). My guess is that the partition was removed?!

Then I created a new partition at the end of the disk and installed linux.

Now the original partition is gone. How do I recover the old partition? In particular the files on that partition?

I used TestDisk and searched the harddrive and found the new Linux partition, but no trace of the old one.
Then I did a deep search and found some stuff but they cant be recovered.
See pic: http://screencast.com/t/KQ6Cw9CJ

Thanks! // Thomas

Log-file:
Thu Oct 25 09:22:56 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, September 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-10-21T19:37:35
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=249225543680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2048
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - ST925041 0AS, S/N:V5CG53HZ, FW:D005
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - SAMSUNG HD103UJ, S/N:1SP3DJSW476562, FW:1AA0
Drive D: - 2048 B - CHS 1 64 32, sector size=2048 - TSSTcorp DVD+-RW TS-U633J, S/N:7R12G6BU275006, FW:D600

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - SAMSUNG HD103UJ
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
Current partition structure:
1 * Linux 120993 100 4 121601 57 56 9764864

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63

recover_EXT2: s_block_group_nr=0/37, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8032
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 1220608
recover_EXT2: part_size 9764864
Linux 120993 100 4 121601 57 56 9764864
ext4 blocksize=4096 Large file Sparse superblock Recover, 4999 MB / 4768 MiB
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,2,buffer,1953525767(121601/90/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953525767(121601/90/33)) lseek err Invalid argument
file_pread(5,2,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(5,2,buffer,1953525830(121601/91/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953525830(121601/91/33)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525768(121601/90/34)) lseek err Invalid argument
file_pread(5,3,buffer,1953525776(121601/90/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525839(121601/91/42)) lseek err Invalid argument
file_pread(5,11,buffer,1953525886(121601/92/26)) lseek err Invalid argument
file_pread(5,2,buffer,1953527808(121601/122/58)) lseek err Invalid argument

Results
* Linux 120993 100 4 121601 57 56 9764864
ext4 blocksize=4096 Large file Sparse superblock Recover, 4999 MB / 4768 MiB

interface_write()
1 * Linux 120993 100 4 121601 57 56 9764864
Top
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Check HD size, Part cant be recovered

#2 Post by Fiona »

Your log file only provides info from Quick Search.
Are you sure that you were running "Deeper Search".
Your screenshot displays not recoverable partitions which ends after disk limit.
It's only a message and no result.
At this screen, if you press enter, you'll get to the results.

Did you create another partition and installed linux on your external disk, where you lost your partition, containing your valueable data?
Please let me know your file system from your removed partition.
Did your lost partition use the whole space of your disk?

Fiona
Top
schneidaren
Posts: 3
Joined: 25 Oct 2012, 05:27

Re: Check HD size, Part cant be recovered

#3 Post by schneidaren »

Are you sure that you were running "Deeper Search"
Yes, the screenshot is after the deep search.
At this screen, if you press enter, you'll get to the results.
The results only showed the new 5GB partition.
Did you create another partition and installed linux on your external disk
Yes. I installed Linux on the new 5GB partition.
where you lost your partition, containing your valueable data?
The valuable data was stored on the pre-existing partition.
Please let me know your file system from your removed partition.
I do not know. It was formatted in Ubuntu (I think). It was readable and writable from Windows (hoping this will give you a clue of what filesystem it probably is).
Did your lost partition use the whole space of your disk?
Yes

Im considering running photorec, should I do that?

Thanks for you help!
Top
Locked

Return to “Partition Recovery”