What does this mean, and what should I do?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
barryjo
Posts: 10
Joined: 11 Dec 2014, 19:58

What does this mean, and what should I do?

#1 Post by barryjo »

I have a 2TB disk that used to be visible. Now it is not. I think my data is there.
When I started after ANALYZE I got the following ...
D Linux and numbers followed
D Linux Raid and numbers followed

Then I fiddled with Testdisk and now I get, after selecting ANALYZE.....
(I think I tried to change the partition format hoping it would help)

Invalid NTSF or EXPAT boot
1 * HPSF - NTSF 0 0 2 243152 20360 3906249728
1 * HPSF - NTSF 0 0 2 243152 20360 3906249728

Can this be fixed?
What should I do now?
Thanks
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: What does this mean, and what should I do?

#2 Post by Fiona »

Your message means either your bootsector is damaged or your partition table doesn't fit?
Please run Analyse, Quick Search and if no partition is found, Deeper Search also.
You'll find a testdisk.log within your testdisk folder.
Please open it using a wordprocessor like wordpad and copy and paste the content of your testdisk.log into your next post.
barryjo
Posts: 10
Joined: 11 Dec 2014, 19:58

Re: What does this mean, and what should I do?

#3 Post by barryjo »

I did as requested, and here is the log.
At the end of ANALYZE the screen showed the following but this is not in the log file.


D Linux 0 0 2 243152 203 60 3906249728
D Linux Raid 0 0 2 243152 208 1 3906249984


Thu Dec 11 13:26:16 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-11-13T18:59:50
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=757499060224
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=742694846464
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
Hard disk list
Disk /dev/sda - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512 - SAMSUNG HD154UI, FW:1AG0
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - KWI TECH EZD-2536U3-USB-3, FW:CC32

Partition table type (auto): Intel
Disk /dev/sdb - 2000 GB / 1863 GiB - KWI TECH EZD-2536U3-USB-3
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
1 * HPFS - NTFS 0 0 2 243152 203 60 3906249728

ntfs_boot_sector
1 * HPFS - NTFS 0 0 2 243152 203 60 3906249728
filesystem size 18284465345357575337 1
sectors_per_cluster 26 0
mft_lcn 0 0
mftmirr_lcn 0 0
clusters_per_mft_record 0 0
clusters_per_index_record 0 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
barryjo
Posts: 10
Joined: 11 Dec 2014, 19:58

Re: What does this mean, and what should I do?

#4 Post by barryjo »

I am still hoping that someone would give me some advice here. I hesitate to go making changes by myself for fear I will accidentally erase my data.
Locked