windows spanned multiple disks NOT raid

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
akira6968
Posts: 2
Joined: 26 May 2013, 14:36

windows spanned multiple disks NOT raid

#1 Post by akira6968 »

Any chance I can recover this?

It's 3 HDD's, each 2TB, in a spanned configuration....
The file system is perfectly intact, and I can copy from the disks, but it's about 3-4TB of info and I don't have that much available space to move stuff onto :(

It's writing the partition OK, but when trying to write the "backup boot sector" it says error, can't write. I was able to save the most important stuff, so you guys are AWESOME! THANK YOU SO MUCH FOR THIS!

*update* Some of the files I thought I recovered (the most important ones, of course) turned out to be empty 0kb files. Dang.

When I run testdisk on the other disks, it lists only a FAT16 >32M partition, whatever that means. There's no file listing on those.
Here's the log file, I think (from the one that listed a NTFS partition). Thank you for taking a look :)

Code: Select all

Fri May 24 21:02:22 2013
Command line: TestDisk

TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows Server 2008 R2 (7600)
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=80026361856
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=80026361856
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=79918268416
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
file_pread(4,1,buffer,3907040129(243201/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,3907040129(243201/254/63)) lseek err Invalid argument
file_pread(6,1,buffer,156312449(9729/254/63)) lseek err Invalid argument
file_pread(7,1,buffer,3907040129(243201/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EARS-00MVWB0, S/N:2020202057202d444d575a413041343837303434, FW:51.0AB51
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM001-9YN164, S/N:202020202020202020202020315a31454d4c3348, FW:CC4B
Disk /dev/sdc - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - ST3802110A, S/N:2020202020202020202020204c3539535651424a, FW:3.AAJ
Disk /dev/sdd - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DL003-9VT166, S/N:2020202020202020202020205936314450353856, FW:CC3C

Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EARS-00MVWB0
Partition table type: Intel

Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
 1 P W2K Dynamic/SFS          0   1  1 243201  48 31 3907027057
No partition is bootable
Ask the user for vista mode
Computes LBA from CHS for Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
NTFS at 60646/205/40
filesystem size           2207782912
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          60646 205 40 198074 238 52 2207782912 [New Volume]
     NTFS, 1130 GB / 1052 GiB
BAD_RS LBA=4064526178 5159999
file_pread(4,3,buffer,4064526178(253005/13/35)) lseek err Invalid argument
file_pread(4,1,buffer,4064526178(253005/13/35)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           253005  13 35 320920  27 17 1091055340
This partition ends after the disk limits. (start=4064526178, size=1091055340, end=860614221, disk end=3907040130)
file_pread(4,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,7,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(4,8,buffer,3907031048(243201/110/54)) lseek err Invalid argument
file_pread(4,3,buffer,3907031056(243201/110/62)) lseek err Invalid argument
file_pread(4,3,buffer,3907031103(243201/111/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907031119(243201/111/62)) lseek err Invalid argument
file_pread(4,11,buffer,3907031166(243201/112/46)) lseek err Invalid argument
file_pread(4,2,buffer,3907033088(243201/143/15)) lseek err Invalid argument
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 2639 GB / 2458 GiB)
The following partition can't be recovered:
     FAT16 >32M           253005  13 35 320920  27 17 1091055340

Results
   * HPFS - NTFS          60646 205 40 198074 238 52 2207782912 [New Volume]
     NTFS, 1130 GB / 1052 GiB

interface_write()
 1 P HPFS - NTFS          60646 205 40 198074 238 52 2207782912 [New Volume]
Don't write, no confirmation

Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
 1 P W2K Dynamic/SFS          0   1  1 243201  48 31 3907027057
No partition is bootable

Locked