accidentally deleted partition

How to use TestDisk to recover lost partition
Post Reply
Message
Author
woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

accidentally deleted partition

#1 Post by woodeasy » 24 Jul 2015, 08:30

See reply for update please.

1.PNG
1.PNG (17.88 KiB) Viewed 894 times
Dear experts,

I believe my question is not that difficult but I do not have much knowledge regarding this. I tried reading the step by step guide but still no help. Long story short, I accidentally deleted the partition during windows 7 install process. I did not format it after I realized I deleted in error. This is a Seagate 3tb drive that I stored all misc. files. I have another 480SSD drive that is for the operating system. I am currently using windows 7. I installed testdisk 7.0 and ran it immediately.
1.PNG
1.PNG (17.88 KiB) Viewed 894 times
1.PNG is the first screen. I then selected [Intel]->[Analyse]. 2.PNG showed up and I have no idea what's going on.
2.PNG
2.PNG (53.61 KiB) Viewed 894 times
But I continue to click [Quick Search] to arrive at 3.png
3.PNG
3.PNG (45.85 KiB) Viewed 894 times
The search isn't completed but when I hit stop it will give me
one line highlight in green, (3 attachment max so I cannot attach any more pic)

>* HPFS - NTFS 16 113 34 267365 202 37 4294967296
I used the right key to change the * to L because I think L is for storage without the operating system.

The next screen has 2 lines (partition?)

1 E extended LBA 16 81 2 267365 202 37 4294969344
5 L HPFS - NTFS 16 113 34 267365 202 37 4294967296

I chose [Write] and quit the program and reset the comp but nothing happen. Did I miss anything? Any help will be appreciated. Thanks.
Last edited by woodeasy on 24 Jul 2015, 23:52, edited 1 time in total.

Sponsored links

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#2 Post by woodeasy » 24 Jul 2015, 15:46

when the quick search is completed, took hours to finish. I have the following:
quick search complete.PNG
quick search complete.PNG (47.61 KiB) Viewed 888 times
and then I have
6 - 2 partition.PNG
6 - 2 partition.PNG (55.71 KiB) Viewed 888 times
and
6 - 2 partitionb.PNG
6 - 2 partitionb.PNG (55.48 KiB) Viewed 888 times
the default is to delete both partition? cuz it has a d beside it. However, wouldn't I end up with nothing if both is deleted? if I put L for both it will say bad . Any help is appreciated.

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#3 Post by woodeasy » 24 Jul 2015, 23:57

good thing there isnt any reply yet. The update is I went into [advance] - >[boot] - [rebuild bs] and it fixed part of the drive and I can browse the drive.
The bad thing is the recovered drive is only 2tb, but my original was 3tb. I realized all the recent edited files are 0kb (no size) while one or two folder missing.

Before I fixed the boot sector, the computer showed the drive with 2tb already (and it asked for format but I didnt), how can I fix the problem? It looks like the computer only recongize 2tb as the maxmium size and just chop off the 1tb as there is no space. Please help. Thanks.

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#4 Post by woodeasy » 25 Jul 2015, 02:39

How about if I select the drive instead of the disk as follow:
8.PNG
8.PNG (56.8 KiB) Viewed 858 times
and for partition table type, the default is [None], so I didnt choose [Intel]

[Advanced]-> [Boot]
9.PNG
9.PNG (46.36 KiB) Viewed 858 times
The below shows the sectors are not identical
10.PNG
10.PNG (59.83 KiB) Viewed 858 times
Should I choose [Org. BS] at this point? Thanks.

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#5 Post by woodeasy » 25 Jul 2015, 09:07

now under storage in windows:
Disk 1 is the drive in question.

storage.PNG
storage.PNG (14.99 KiB) Viewed 846 times
The 746.39gb looks like didn't get append or recognize together with the 2tb. And there was only one partition before, not two.
Can anyone please help?

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: accidentally deleted partition

#6 Post by Fiona » 26 Jul 2015, 18:27

Should I choose [Org. BS] at this point? Thanks.
No, a bad backup of the boot sector often indicates some problems with the file system too.
Also I'm not sure did you run a boot sector diagnose on your right partition.
In your current partition table the partition ends at cylinder 267365.
It's exactly the Intel MBR limit at 2.2 TB.
You can watch it here, at the bottom of your display:
http://forum.cgsecurity.org/phpBB3/down ... hp?id=3239
That's why I don't recommend to modify your file system running OrgBS.
Intel MBR supports only disks and partition up to 2.2 TB.
The second partition on this testdisk display uses almost the whole space till the end of your disk.
http://forum.cgsecurity.org/phpBB3/down ... hp?id=3239
Did you select this partition and did you press p to have a try to list your files?
The size of the first partition is much smaller, maybe around 2 TB and overlaps your second partition.
That's why it would only be possible to recover 1 partition.
How many partitions did you have on your disk?
Can you copy and paste the content of your testdisk.log into your next post?
You'll find it within your testdisk folder.

Fiona

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#7 Post by woodeasy » 26 Jul 2015, 18:37

Thanks Here it is, I dont know if I have override it.



Sun Jul 26 01:27:22 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=479996149760
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2199023255040
Hard disk list
Disk /dev/sdb - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Drive C: - 479 GB / 447 GiB - CHS 58356 255 63, sector size=512
Drive F: - 2199 GB / 2047 GiB - CHS 267349 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdc - 3000 GB / 2794 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 16/113/34
1 E extended LBA 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
NTFS, blocksize=4096, 2199 GB / 2047 GiB

ntfs_boot_sector
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
NTFS, blocksize=4096, 2199 GB / 2047 GiB
NTFS at 16/113/34
NTFS at 16/113/34
filesystem size 4294967295
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Partition table type (auto): Intel
Disk /dev/sdc - 3000 GB / 2794 GiB
Partition table type: Intel

TestDisk exited normally.




I now figured the type is MBR and not GPT so it didn't get recongize together? There is only one partition. Before I accidentally deleted the partition, it was D:\ and it has 3000gb. Is there a way to just convert to GPT and let computer automatically recongize it?

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: accidentally deleted partition

#8 Post by Fiona » 26 Jul 2015, 18:52

Your log file is unfortunately overridden and only contains info using the menu Advanced.
Converting a disk to GPT requires that you have to delete all current partitions.
I suppose that they're wrong anyway.
But on a GPT disks, testdisk scans each sector and it's very time consuming.
I'd suggest to run another Deeper Search finding your partition mentionned above in my last post and have another try to list your files.
Would be much faster.
At least, it would give you an opportunity to copy your files.
If it wouldn't be successful, disk can be converted to GPT and you can run another diagnose on GPT.
Info will follow.

Fiona

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#9 Post by woodeasy » 28 Jul 2015, 07:21

Hi Fiona,

The following is the log,



Mon Jul 27 07:24:33 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=479996149760
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2199023255040
Hard disk list
Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Drive C: - 479 GB / 447 GiB - CHS 58356 255 63, sector size=512
Drive F: - 2199 GB / 2047 GiB - CHS 267349 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 3000 GB / 2794 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 16/113/34
Current partition structure:
1 E extended LBA 16 81 2 267365 170 4 4294967295
No partition is bootable
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Space conflict between the following two partitions
1 E extended LBA 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295

search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 16/113/34
filesystem size 4294967295
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 267365 202 36 4294967295
NTFS, blocksize=4096, 2199 GB / 2047 GiB
file_pread(5,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,14,buffer,1565566977(364801/98/35)) lseek err Invalid argument
file_pread(5,3,buffer,1565566991(364801/98/49)) lseek err Invalid argument
file_pread(5,3,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,8,buffer,1565567054(364801/99/49)) lseek err Invalid argument
file_pread(5,11,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,2,buffer,1565569023(364801/131/2)) lseek err Invalid argument
Search for partition aborted

Results
* HPFS - NTFS 16 113 34 267365 202 37 4294967296
NTFS, blocksize=4096, 2199 GB / 2048 GiB

interface_write()
1 * HPFS - NTFS 16 113 34 267365 202 37 4294967296

search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 16/113/34
filesystem size 4294967295
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 267365 202 36 4294967295
NTFS, blocksize=4096, 2199 GB / 2047 GiB
BAD_RS LBA=860511358 6744153
file_pread(5,3,buffer,860511358(588263/13/37)) lseek err Invalid argument
file_pread(5,1,buffer,860511358(588263/13/37)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 588263 13 37 846118 208 58 4142452882
This partition ends after the disk limits. (start=9450445950, size=4142452882, end=13592898831, disk end=5860533168)
NTFS at 364801/66/1
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
file_pread(5,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(5,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(5,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(5,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(5,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,14,buffer,1565566977(364801/98/35)) lseek err Invalid argument
file_pread(5,3,buffer,1565566991(364801/98/49)) lseek err Invalid argument
file_pread(5,3,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,8,buffer,1565567054(364801/99/49)) lseek err Invalid argument
file_pread(5,11,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,2,buffer,1565569023(364801/131/2)) lseek err Invalid argument
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 6959 GB / 6481 GiB)
The following partition can't be recovered:
FAT12 588263 13 37 846118 208 58 4142452882

Results
HPFS - NTFS 16 113 34 267365 202 37 4294967296
NTFS, blocksize=4096, 2199 GB / 2048 GiB
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
interface_load
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 23 21:28:39 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 23 21:32:51 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 23 23:49:48 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Sat Jul 25 00:16:51 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295


dir_partition inode=5
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Directory /


interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.





I tried to dig up the partition, both of them contained the same information. Even if I try to back them up, the file is corrupted, and none of them can be open. This is like a biscuit broken into two pieces. It cannot be read. Can you please teach me how to convert to GPT? Thanks.

woodeasy
Posts: 8
Joined: 24 Jul 2015, 08:11

Re: accidentally deleted partition

#10 Post by woodeasy » 01 Aug 2015, 00:18

I did not get any reply regarding how to convert to GPT from MBR so I basically deleted the partition and used another program to convert the disk to GPT and ran Test Disk. Here is the log file:



Thu Jul 30 21:17:40 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=479996149760
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
Hard disk list
Disk /dev/sda - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Drive C: - 479 GB / 447 GiB - CHS 58356 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 3000 GB / 2794 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 16/113/34
filesystem size 4294967295
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 267365 202 36 4294967295
NTFS, blocksize=4096, 2199 GB / 2047 GiB
BAD_RS LBA=860511358 6744153
file_pread(5,3,buffer,860511358(588263/13/37)) lseek err Invalid argument
file_pread(5,1,buffer,860511358(588263/13/37)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 588263 13 37 846118 208 58 4142452882
This partition ends after the disk limits. (start=9450445950, size=4142452882, end=13592898831, disk end=5860533168)
file_pread(5,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(5,14,buffer,1565566977(364801/98/35)) lseek err Invalid argument
file_pread(5,3,buffer,1565566991(364801/98/49)) lseek err Invalid argument
file_pread(5,3,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,8,buffer,1565567054(364801/99/49)) lseek err Invalid argument
file_pread(5,11,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,2,buffer,1565569023(364801/131/2)) lseek err Invalid argument
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 6959 GB / 6481 GiB)
The following partition can't be recovered:
FAT12 588263 13 37 846118 208 58 4142452882

Results
* HPFS - NTFS 16 113 34 267365 202 37 4294967296
NTFS, blocksize=4096, 2199 GB / 2048 GiB

interface_write()
1 * HPFS - NTFS 16 113 34 267365 202 37 4294967296

search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 16/113/34
filesystem size 4294967295
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 267365 202 36 4294967295
NTFS, blocksize=4096, 2199 GB / 2047 GiB
BAD_RS LBA=860511358 6744153
file_pread(5,3,buffer,860511358(588263/13/37)) lseek err Invalid argument
file_pread(5,1,buffer,860511358(588263/13/37)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 588263 13 37 846118 208 58 4142452882
This partition ends after the disk limits. (start=9450445950, size=4142452882, end=13592898831, disk end=5860533168)
NTFS at 364801/66/1
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
file_pread(5,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(5,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(5,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(5,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(5,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(5,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(5,14,buffer,1565566977(364801/98/35)) lseek err Invalid argument
file_pread(5,3,buffer,1565566991(364801/98/49)) lseek err Invalid argument
file_pread(5,3,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(5,8,buffer,1565567054(364801/99/49)) lseek err Invalid argument
file_pread(5,11,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(5,2,buffer,1565569023(364801/131/2)) lseek err Invalid argument
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 6959 GB / 6481 GiB)
The following partition can't be recovered:
FAT12 588263 13 37 846118 208 58 4142452882

Results
HPFS - NTFS 16 113 34 267365 202 37 4294967296
NTFS, blocksize=4096, 2199 GB / 2048 GiB
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
interface_load
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 23 21:28:39 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 23 21:32:51 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 23 23:49:48 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Sat Jul 25 00:16:51 2015
1 D No partition 16 81 2 267365 170 4 4294967295
5 L HPFS - NTFS 16 113 34 267365 202 36 4294967295
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63 Thu Jul 30 21:17:13 2015
1 P EFI GPT 0 0 2 267349 89 4 4294967295


dir_partition inode=5
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 30-Jul-2015 08:24 .
5 dr-xr-xr-x 0 0 0 30-Jul-2015 08:24 ..
162053 dr-xr-xr-x 0 0 0 7-Sep-2013 05:07 $AVG
36 dr-xr-xr-x 0 0 0 24-Jul-2015 15:24 $RECYCLE.BIN
167056 dr-xr-xr-x 0 0 0 6-Oct-2013 14:25 AliceSoft
20682 dr-xr-xr-x 0 0 0 16-Dec-2012 21:34 Backup 2012 Oct laptop
138026 dr-xr-xr-x 0 0 0 7-Jul-2015 22:20 Bino3d
83036 dr-xr-xr-x 0 0 0 7-Jul-2015 21:15 Config.Msi
121367 dr-xr-xr-x 0 0 0 20-Aug-2013 23:21 Corsair GT backup
128608 dr-xr-xr-x 0 0 0 15-May-2015 17:37 Corsair backup temp may 15 2015
129184 dr-xr-xr-x 0 0 0 6-Jul-2014 11:14 Diablo III
35 dr-xr-xr-x 0 0 0 23-Jul-2015 16:12 Downloads
137012 dr-xr-xr-x 0 0 0 23-Jul-2015 15:02 Dropbox
19632 dr-xr-xr-x 0 0 0 29-Dec-2012 16:23 Eric
2079 dr-xr-xr-x 0 0 0 3-Apr-2015 07:56 Eric Laptop Backup
156627 dr-xr-xr-x 0 0 0 19-Jul-2015 10:52 Eric Samsung alpha backup Jul 19
124755 dr-xr-xr-x 0 0 0 7-Dec-2014 11:46 Eushully
44628 dr-xr-xr-x 0 0 0 20-Jul-2015 00:35 HTC One X Eric backup 2014 Nov 11
167280 dr-xr-xr-x 0 0 0 31-Oct-2013 00:10 ITAZURAS
120787 dr-xr-xr-x 0 0 0 7-Sep-2013 04:00 KuaiwanGames
41506 dr-xr-xr-x 0 0 0 29-Dec-2012 16:28 Magix
19668 dr-xr-xr-x 0 0 0 5-Aug-2013 00:04 Media
44622 dr-xr-xr-x 0 0 0 19-Jul-2015 23:54 Microsoft Office ProPlus 2013 VL x64 EN
185278 dr-xr-xr-x 0 0 0 2-Sep-2014 22:53 NCSOFT
120493 dr-xr-xr-x 0 0 0 30-Dec-2012 10:38 Spybot - Search & Destroy 2
121432 dr-xr-xr-x 0 0 0 6-Jul-2014 11:13 StarCraft II
194989 dr-xr-xr-x 0 0 0 7-Dec-2014 11:34 Steam
2076 dr-xr-xr-x 0 0 0 29-Oct-2012 23:13 System Volume Information
121574 dr-xr-xr-x 0 0 0 26-Feb-2015 00:27 TDDOWNLOAD
124881 dr-xr-xr-x 0 0 0 26-Feb-2015 00:29 TEATIME
164675 dr-xr-xr-x 0 0 0 12-Jul-2015 21:48 Warcraft III
164574 dr-xr-xr-x 0 0 0 18-Jul-2014 07:24 Warcraft3TF
45554 dr-xr-xr-x 0 0 0 29-Dec-2012 23:11 Western Digital Backup
49 dr-xr-xr-x 0 0 0 29-Oct-2012 23:04 William Szeto
138370 dr-xr-xr-x 0 0 0 3-Feb-2015 21:38 Wylie HTC Feb 3 2015
123380 dr-xr-xr-x 0 0 0 4-Jun-2013 20:10 Youku Files
47 dr-xr-xr-x 0 0 0 23-Jun-2013 19:02 baidu player
170735 dr-xr-xr-x 0 0 0 24-Dec-2014 23:48 corsair usb aug 31 backup
124830 dr-xr-xr-x 0 0 0 5-Jun-2013 21:45 dad backup nov 2012
17 dr-xr-xr-x 0 0 0 24-Jul-2015 15:15 found.000
129245 dr-xr-xr-x 0 0 0 26-Apr-2015 11:05 illusion
120845 dr-xr-xr-x 0 0 0 12-Jan-2013 17:04 jpeg
162184 dr-xr-xr-x 0 0 0 29-May-2014 22:11 lexus disc
162910 dr-xr-xr-x 0 0 0 4-Jun-2014 23:27 lexus hybrid
121445 dr-xr-xr-x 0 0 0 20-Feb-2013 23:48 msdownld.tmp
164636 dr-xr-xr-x 0 0 0 18-Jul-2014 07:34 warcraft3
19874 dr-xr-xr-x 0 0 0 16-Dec-2012 21:21 wedding sheraton photo dec 1
38203 dr-xr-xr-x 0 0 0 4-Sep-2012 21:57 三國志12繁體中文版
157142 -r--r--r-- 0 0 0 4-May-2014 10:33 0673_Ranma-Chan_no_Ooeto_Surogoku_-_Keio_Yugekitai_Gaiden[J][SLPS-01546].rar
137997 -r--r--r-- 0 0 0 7-Jul-2015 21:35 353.30-desktop-win8-win7-winvista-64bit-international-whql.exe
137997 -r--r--r-- 0 0 26 7-Jul-2015 21:35 353.30-desktop-win8-win7-winvista-64bit-international-whql.exe:Zone.Identifier
162179 -r--r--r-- 0 0 5923488904 29-May-2014 20:16 464210-2280 lexus.zip
162179 -r--r--r-- 0 0 26 29-May-2014 20:16 464210-2280 lexus.zip:Zone.Identifier
191494 -r--r--r-- 0 0 0 19-Nov-2014 22:00 5156share.com.2014.HuaYangYeY.EP11.mkv
191494 -r--r--r-- 0 0 26 19-Nov-2014 22:00 5156share.com.2014.HuaYangYeY.EP11.mkv:Zone.Identifier
191495 -r--r--r-- 0 0 0 20-Nov-2014 00:03 5156share.com.2014.HuaYangYeY.EP12.mkv
191495 -r--r--r-- 0 0 26 20-Nov-2014 00:03 5156share.com.2014.HuaYangYeY.EP12.mkv:Zone.Identifier
138151 -r--r--r-- 0 0 0 24-May-2005 13:34 Berwick Saga Tear Ring Saga Series.iso
194988 -r--r--r-- 0 0 0 24-Dec-2012 10:54 CDRoot.rar
194988 -r--r--r-- 0 0 26 24-Dec-2012 10:54 CDRoot.rar:Zone.Identifier
138170 -r--r--r-- 0 0 0 1-Sep-2014 20:12 GTO2014-Ch02.mkv
126157 -r--r--r-- 0 0 0 8-Sep-2014 21:49 GTO2014-Ch03.mkv
138024 -r--r--r-- 0 0 0 23-Jan-2015 08:50 GTO2014-Ch04.rar
138024 -r--r--r-- 0 0 26 23-Jan-2015 08:50 GTO2014-Ch04.rar:Zone.Identifier
138021 -r--r--r-- 0 0 0 25-Jan-2015 18:00 GTO2014-Ch05.rar
138021 -r--r--r-- 0 0 26 25-Jan-2015 18:00 GTO2014-Ch05.rar:Zone.Identifier
138023 -r--r--r-- 0 0 0 25-Jan-2015 10:09 GTO2014-Ch06.rar
138023 -r--r--r-- 0 0 26 25-Jan-2015 10:09 GTO2014-Ch06.rar:Zone.Identifier
137996 -r--r--r-- 0 0 0 26-Jan-2015 19:26 GTO2014-Ch07.mkv
137996 -r--r--r-- 0 0 26 26-Jan-2015 19:26 GTO2014-Ch07.mkv:Zone.Identifier
138020 -r--r--r-- 0 0 0 28-Jan-2015 09:09 GTO2014-Ch08.rar
138020 -r--r--r-- 0 0 26 28-Jan-2015 09:09 GTO2014-Ch08.rar:Zone.Identifier
138018 -r--r--r-- 0 0 0 6-Mar-2015 14:26 GTO2014-Ch09.rar
138018 -r--r--r-- 0 0 26 6-Mar-2015 14:26 GTO2014-Ch09.rar:Zone.Identifier
191451 -r--r--r-- 0 0 0 18-Dec-2012 04:03 KKS_Anniversary2012.rmvb
191451 -r--r--r-- 0 0 26 18-Dec-2012 04:03 KKS_Anniversary2012.rmvb:Zone.Identifier
82794 -r--r--r-- 0 0 0 23-Feb-2015 21:53 Nero SH-S203S.bin
82931 -r--r--r-- 0 0 79 23-Feb-2015 21:53 Nero SH-S203S.cue
45553 -r--r--r-- 0 0 1430261764 29-Dec-2012 19:03 Wedding Jan 6 2013.mpg
120776 -r--r--r-- 0 0 845238276 4-Jan-2013 01:16 Wedding Jan 6 2013a.mpg
157143 -r--r--r-- 0 0 0 27-Jan-2013 00:11 en_office_professional_plus_2013_x64_dvd_1123674.iso
157143 -r--r--r-- 0 0 26 27-Jan-2013 00:11 en_office_professional_plus_2013_x64_dvd_1123674.iso:Zone.Identifier
74418 -r--r--r-- 0 0 0 23-Jul-2015 15:01 pagefile.sys


dir_partition inode=5
HPFS - NTFS 16 113 34 267365 202 37 4294967296
NTFS, blocksize=4096, 2199 GB / 2048 GiB
Directory /
5 dr-xr-xr-x 0 0 0 30-Jul-2015 08:24 .
5 dr-xr-xr-x 0 0 0 30-Jul-2015 08:24 ..
162053 dr-xr-xr-x 0 0 0 7-Sep-2013 05:07 $AVG
36 dr-xr-xr-x 0 0 0 24-Jul-2015 15:24 $RECYCLE.BIN
167056 dr-xr-xr-x 0 0 0 6-Oct-2013 14:25 AliceSoft
20682 dr-xr-xr-x 0 0 0 16-Dec-2012 21:34 Backup 2012 Oct laptop
138026 dr-xr-xr-x 0 0 0 7-Jul-2015 22:20 Bino3d
83036 dr-xr-xr-x 0 0 0 7-Jul-2015 21:15 Config.Msi
121367 dr-xr-xr-x 0 0 0 20-Aug-2013 23:21 Corsair GT backup
128608 dr-xr-xr-x 0 0 0 15-May-2015 17:37 Corsair backup temp may 15 2015
129184 dr-xr-xr-x 0 0 0 6-Jul-2014 11:14 Diablo III
35 dr-xr-xr-x 0 0 0 23-Jul-2015 16:12 Downloads
137012 dr-xr-xr-x 0 0 0 23-Jul-2015 15:02 Dropbox
19632 dr-xr-xr-x 0 0 0 29-Dec-2012 16:23 Eric
2079 dr-xr-xr-x 0 0 0 3-Apr-2015 07:56 Eric Laptop Backup
156627 dr-xr-xr-x 0 0 0 19-Jul-2015 10:52 Eric Samsung alpha backup Jul 19
124755 dr-xr-xr-x 0 0 0 7-Dec-2014 11:46 Eushully
44628 dr-xr-xr-x 0 0 0 20-Jul-2015 00:35 HTC One X Eric backup 2014 Nov 11
167280 dr-xr-xr-x 0 0 0 31-Oct-2013 00:10 ITAZURAS
120787 dr-xr-xr-x 0 0 0 7-Sep-2013 04:00 KuaiwanGames
41506 dr-xr-xr-x 0 0 0 29-Dec-2012 16:28 Magix
19668 dr-xr-xr-x 0 0 0 5-Aug-2013 00:04 Media
44622 dr-xr-xr-x 0 0 0 19-Jul-2015 23:54 Microsoft Office ProPlus 2013 VL x64 EN
185278 dr-xr-xr-x 0 0 0 2-Sep-2014 22:53 NCSOFT
120493 dr-xr-xr-x 0 0 0 30-Dec-2012 10:38 Spybot - Search & Destroy 2
121432 dr-xr-xr-x 0 0 0 6-Jul-2014 11:13 StarCraft II
194989 dr-xr-xr-x 0 0 0 7-Dec-2014 11:34 Steam
2076 dr-xr-xr-x 0 0 0 29-Oct-2012 23:13 System Volume Information
121574 dr-xr-xr-x 0 0 0 26-Feb-2015 00:27 TDDOWNLOAD
124881 dr-xr-xr-x 0 0 0 26-Feb-2015 00:29 TEATIME
164675 dr-xr-xr-x 0 0 0 12-Jul-2015 21:48 Warcraft III
164574 dr-xr-xr-x 0 0 0 18-Jul-2014 07:24 Warcraft3TF
45554 dr-xr-xr-x 0 0 0 29-Dec-2012 23:11 Western Digital Backup
49 dr-xr-xr-x 0 0 0 29-Oct-2012 23:04 William Szeto
138370 dr-xr-xr-x 0 0 0 3-Feb-2015 21:38 Wylie HTC Feb 3 2015
123380 dr-xr-xr-x 0 0 0 4-Jun-2013 20:10 Youku Files
47 dr-xr-xr-x 0 0 0 23-Jun-2013 19:02 baidu player
170735 dr-xr-xr-x 0 0 0 24-Dec-2014 23:48 corsair usb aug 31 backup
124830 dr-xr-xr-x 0 0 0 5-Jun-2013 21:45 dad backup nov 2012
17 dr-xr-xr-x 0 0 0 24-Jul-2015 15:15 found.000
129245 dr-xr-xr-x 0 0 0 26-Apr-2015 11:05 illusion
120845 dr-xr-xr-x 0 0 0 12-Jan-2013 17:04 jpeg
162184 dr-xr-xr-x 0 0 0 29-May-2014 22:11 lexus disc
162910 dr-xr-xr-x 0 0 0 4-Jun-2014 23:27 lexus hybrid
121445 dr-xr-xr-x 0 0 0 20-Feb-2013 23:48 msdownld.tmp
164636 dr-xr-xr-x 0 0 0 18-Jul-2014 07:34 warcraft3
19874 dr-xr-xr-x 0 0 0 16-Dec-2012 21:21 wedding sheraton photo dec 1
38203 dr-xr-xr-x 0 0 0 4-Sep-2012 21:57 三國志12繁體中文版
157142 -r--r--r-- 0 0 0 4-May-2014 10:33 0673_Ranma-Chan_no_Ooeto_Surogoku_-_Keio_Yugekitai_Gaiden[J][SLPS-01546].rar
137997 -r--r--r-- 0 0 0 7-Jul-2015 21:35 353.30-desktop-win8-win7-winvista-64bit-international-whql.exe
137997 -r--r--r-- 0 0 26 7-Jul-2015 21:35 353.30-desktop-win8-win7-winvista-64bit-international-whql.exe:Zone.Identifier
162179 -r--r--r-- 0 0 5923488904 29-May-2014 20:16 464210-2280 lexus.zip
162179 -r--r--r-- 0 0 26 29-May-2014 20:16 464210-2280 lexus.zip:Zone.Identifier
191494 -r--r--r-- 0 0 0 19-Nov-2014 22:00 5156share.com.2014.HuaYangYeY.EP11.mkv
191494 -r--r--r-- 0 0 26 19-Nov-2014 22:00 5156share.com.2014.HuaYangYeY.EP11.mkv:Zone.Identifier
191495 -r--r--r-- 0 0 0 20-Nov-2014 00:03 5156share.com.2014.HuaYangYeY.EP12.mkv
191495 -r--r--r-- 0 0 26 20-Nov-2014 00:03 5156share.com.2014.HuaYangYeY.EP12.mkv:Zone.Identifier
138151 -r--r--r-- 0 0 0 24-May-2005 13:34 Berwick Saga Tear Ring Saga Series.iso
194988 -r--r--r-- 0 0 0 24-Dec-2012 10:54 CDRoot.rar
194988 -r--r--r-- 0 0 26 24-Dec-2012 10:54 CDRoot.rar:Zone.Identifier
138170 -r--r--r-- 0 0 0 1-Sep-2014 20:12 GTO2014-Ch02.mkv
126157 -r--r--r-- 0 0 0 8-Sep-2014 21:49 GTO2014-Ch03.mkv
138024 -r--r--r-- 0 0 0 23-Jan-2015 08:50 GTO2014-Ch04.rar
138024 -r--r--r-- 0 0 26 23-Jan-2015 08:50 GTO2014-Ch04.rar:Zone.Identifier
138021 -r--r--r-- 0 0 0 25-Jan-2015 18:00 GTO2014-Ch05.rar
138021 -r--r--r-- 0 0 26 25-Jan-2015 18:00 GTO2014-Ch05.rar:Zone.Identifier
138023 -r--r--r-- 0 0 0 25-Jan-2015 10:09 GTO2014-Ch06.rar
138023 -r--r--r-- 0 0 26 25-Jan-2015 10:09 GTO2014-Ch06.rar:Zone.Identifier
137996 -r--r--r-- 0 0 0 26-Jan-2015 19:26 GTO2014-Ch07.mkv
137996 -r--r--r-- 0 0 26 26-Jan-2015 19:26 GTO2014-Ch07.mkv:Zone.Identifier
138020 -r--r--r-- 0 0 0 28-Jan-2015 09:09 GTO2014-Ch08.rar
138020 -r--r--r-- 0 0 26 28-Jan-2015 09:09 GTO2014-Ch08.rar:Zone.Identifier
138018 -r--r--r-- 0 0 0 6-Mar-2015 14:26 GTO2014-Ch09.rar
138018 -r--r--r-- 0 0 26 6-Mar-2015 14:26 GTO2014-Ch09.rar:Zone.Identifier
191451 -r--r--r-- 0 0 0 18-Dec-2012 04:03 KKS_Anniversary2012.rmvb
191451 -r--r--r-- 0 0 26 18-Dec-2012 04:03 KKS_Anniversary2012.rmvb:Zone.Identifier
82794 -r--r--r-- 0 0 0 23-Feb-2015 21:53 Nero SH-S203S.bin
82931 -r--r--r-- 0 0 79 23-Feb-2015 21:53 Nero SH-S203S.cue
45553 -r--r--r-- 0 0 1430261764 29-Dec-2012 19:03 Wedding Jan 6 2013.mpg
120776 -r--r--r-- 0 0 845238276 4-Jan-2013 01:16 Wedding Jan 6 2013a.mpg
157143 -r--r--r-- 0 0 0 27-Jan-2013 00:11 en_office_professional_plus_2013_x64_dvd_1123674.iso
157143 -r--r--r-- 0 0 26 27-Jan-2013 00:11 en_office_professional_plus_2013_x64_dvd_1123674.iso:Zone.Identifier
74418 -r--r--r-- 0 0 0 23-Jul-2015 15:01 pagefile.sys

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.


Basically the result is the same, the 2 partitions are missing the recent files that I created in 2015. Or if the name existed, the file size is 0 kb. Any other ways? Thanks.

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests