Two Partition got combined to form Single RAW

How to use TestDisk to recover lost partition
Message
Author
sooz
Posts: 7
Joined: 17 Oct 2015, 06:36

Two Partition got combined to form Single RAW

#1 Post by sooz » 17 Oct 2015, 07:42

Hey i just want to begin with saying thanks for creating this software.It is god saviour

I Plugged my old SATA 3.5 internal harddisk to my laptop using enclosure.
It had 3 partition exactly. (a) 74GB (b) 202GB (c) 170 GB
But in my computer it shows 1st partition which i can access and the 2nd & 3rd got combined to form a RAW

I ran testdisk ,step by step procedure
1.Create log file
2.Selected Drive M: - 421GB/392GB Proceed
3.[Intel
4.Analyse


here it shows
im
TestDisk 7.0 Data Recovery...........
Chris Gernier<.........>
.
.

Drive M: - 421 GB / 392 GiB - CHS 51240 255 63, sector size=512

Partition table type default to None
Drive M: - 421 GB / 392 GiB
Partition table type: Intel

Analyse Drive M: - 421 GB / 392 GiB - CHS 51240 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55


Next did a Quick Search

result is
The Harddisk <421GB/392GB> seems too small! <<2431GB/2264BiB.
Check the harddisk size: HD jumpers settings, BIOS detection...

The following partition can't be recovered:
Partition Start End Size in sectors
> HPFS - NTFS 44058 94 27 140588 188 20 1550760366
FAT12 291887 25 21 295632 78 4 60166748

it doesnt matter if i select HPFS -NTFS or FAT12 it shows

>* HPFS - NTFS 2549 196 16 27408 133 53 399355904

press P to list files.

Here comes the problem

It shows only my 3rd Partition 170GB. i recovered some files thank you.
2nd partiton of 202GB doesnt appear.
did a deep scan same result


i used a software M3 RAW Drive Recovery trial .it shows the partiiton . attachment is provided.
please help
sorry for long post
Attachments
3.PNG
3.PNG (58.29 KiB) Viewed 649 times
2.PNG
2.PNG (67.51 KiB) Viewed 649 times
1.PNG
1.PNG (55.95 KiB) Viewed 649 times

Sponsored links

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Two Partition got combined to form Single RAW

#2 Post by Fiona » 17 Oct 2015, 08:52

Drive is like a single partition and has no partition table.
Can you run another diagnose selecting your disk instead of a drive?
So you would run your diagnose on your disk, containig your MBR/GPT.
TestDisk 7.1WIP 32bit is recommended.
Your disk would look like:
Disk / dev / sd* !
Can you repeat your diagnose selecting Disk?
It provides the best results.
Please copy and paste the content of your testdisk.log into your next post.
You'll find it within your testdisk folder and you can open it using wordpad.

Fiona

sooz
Posts: 7
Joined: 17 Oct 2015, 06:36

Re: Two Partition got combined to form Single RAW

#3 Post by sooz » 17 Oct 2015, 11:02

Thanks for the reply.
Did like u said . got similar result. only one RAW partition is accessible.


here is the log



Sat Oct 17 14:56:44 2015
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, September 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, Cygwin 2002.0
Compilation date: 2015-10-11T15:23:01
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107861504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107861504
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive4
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=48318382080
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=32211206144
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=204472320000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=215101734912
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
filewin32_getfilesize(\\.\H:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\H:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1016320
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=78536245248
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=0
Warning: can't get size for \\.\L:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=421464662016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=0
Warning: can't get size for \\.\N:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\O:)=0
Warning: can't get size for \\.\O:
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST950032 5AS, S/N:2SRWP3X9, FW:0011
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Generic External, S/N:MSEE235V3Z1SHW, FW:1.14

Partition table type (auto): Intel
Disk /dev/sdc - 500 GB / 465 GiB - Generic External
Partition table type: Intel

Analyse Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 0/32/33
NTFS at 12/223/20
heads/cylinder 33 (NTFS) != 255 (HD)
sect/track 32 (NTFS) != 63 (HD)
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 0 32 32 1985
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
Warning: number of heads/cylinder mismatches 33 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 32 (NTFS) != 63 (HD)
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Two Partition got combined to form Single RAW

#4 Post by Fiona » 17 Oct 2015, 11:38

RAW indicates a problem with your boot sector or file system.
But before I go, to run a boot sector diagnose on any partition, it's always advisable to check your partition table to see, that I run a diagnose on your right partition.
If your partition doesn't fit like start and size, you wouldn't get any reliable result.
I suggested to select disk instead of a drive, but now you used PhysicalDrive.
Might be almost ok, but often indicates that user are running testdisk 64bit on windows?
In some cases, Disk is not available.
On TestDisk download section, there is a note, testdisk 64bit should only be used on genuine 64bit machines (for example like Itanium) as some features are missing.
Genuine 64bit machines have no 32bit emulation like WoW64.
But you're running Windows 7.
That's why I recommend to use TestDisk 7.1WIP 32bit.
Probably, your disk would be listed there as Disk / dev /sd* ?
Despite that, testdisk delivered different results in comparison to drive.
You can watch it here:
Analyse under Drive:
Analyse Drive M: - 421 GB / 392 GiB - CHS 51240 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55
There is no partition listed.
Partition sector means, that your partition is not valid or available.

Running diagnose on PhysicalDrive:
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 0 32 32 1985
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
Warning: number of heads/cylinder mismatches 33 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 32 (NTFS) != 63 (HD)
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
Here you can see, that partitions are available.
The last partition appears twice.
Reason is, there is a message that NTFS or EXFAT boot is not valid and testdisk is listing your affected partition too.
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168

4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
It means either boot sector or file system.
So it might be possible that this is the culprit?

Next step would be to run a boot sector diagnose.
In case, use testdisk 7.1WIP 32bit and select Disk / dev ... !
Don't confirm at Analyse but Advanced.
Select your affected partition and confirm at Boot.
Please upload a snapshot or copy and paste the content of your log again.
Don't run any RepairMFT.
It's only intended in conjunction with chkdsk.
If the menu "List´is available, please have a try to list your files.
Info will follow.

Fiona

sooz
Posts: 7
Joined: 17 Oct 2015, 06:36

Re: Two Partition got combined to form Single RAW

#5 Post by sooz » 17 Oct 2015, 12:02

hey i am using 32bit .
here is my result






Sat Oct 17 16:31:37 2015
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, September 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, Cygwin 2002.0
Compilation date: 2015-10-11T15:23:01
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107861504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107861504
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=48318382080
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=32211206144
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=204472320000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=215101734912
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1016320
filewin32_getfilesize(\\.\I:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\I:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=78536245248
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=0
Warning: can't get size for \\.\L:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=421464662016
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST950032 5AS, S/N:2SRWP3X9, FW:0011
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Generic External, S/N:MSEE235V3Z1SHW, FW:1.14

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - Generic External
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 0/32/33
NTFS at 12/223/20
heads/cylinder 33 (NTFS) != 255 (HD)
sect/track 32 (NTFS) != 63 (HD)
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
NTFS, blocksize=4096, 104 MB / 100 MiB
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
NTFS, blocksize=4096, 78 GB / 73 GiB
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168

ntfs_boot_sector
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
filesystem size 4944423188294718101 1
sectors_per_cluster 154 0
mft_lcn 127794666 0
mftmirr_lcn 1946432275 0
clusters_per_mft_record 86 0
clusters_per_index_record -24 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Failed to startup volume: Invalid argument.
Not an exFAT boot sector.

4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
Can't open filesystem. Filesystem seems damaged.

TestDisk exited normally.
Attachments
6.PNG
Boot
6.PNG (47.26 KiB) Viewed 635 times
5.PNG
partitions
5.PNG (49.18 KiB) Viewed 635 times
4.PNG
Disk/dev/sdb
4.PNG (48.95 KiB) Viewed 635 times

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Two Partition got combined to form Single RAW

#6 Post by Fiona » 17 Oct 2015, 12:16

I'm on your snapshot here:
http://forum.cgsecurity.org/phpBB3/down ... hp?id=3492
Your boot sector and its backup are bad.
Can you run RebuildBS?
If it takes too long, please let me know.
Can be possible that your partition is not the right one?
In some cases, partition start and size got changed and caused such behavior.
In case, you should run Quick and Deeper Search to have a try to find the right one.
But at the moment run RebuildBS first.
TestDisk tries to rebuild a boot sector searching your MFT and its mirror.
If it would be succesful, TestDisk would display the result of an extrapolated boot sector and the menu List could appear.
You can select it, and have a try to list your files.
If it doesn't work for you, you should run Quick and Deeper Search to have a try to find the right partition.
Info will follow.

Fiona

sooz
Posts: 7
Joined: 17 Oct 2015, 06:36

Re: Two Partition got combined to form Single RAW

#7 Post by sooz » 17 Oct 2015, 12:24

doing RebuildBS. taking long time

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Two Partition got combined to form Single RAW

#8 Post by Fiona » 17 Oct 2015, 12:37

Might be possible that it takes about 20 minutes, in some cases it can take a little bit longer.
When you're sure, that it takes too long you can run Analyse and Quick Search.
If your affected partition would be found, you have to select it and press p to have a try to list your files.
Did your partition list your files or did you get a message that your file system is damaged?
In case that no partition would be found after Quick Search, you can press enter, select Deeper Search and press enter again to start Deeper Search running.
Deeper Search looks additional for a backup of a boot sector and can find more partitions.
After Deeper Search, have a look for a partition that matches to your lost one, select it and press p to have a try to list your files.
Please copy and paste the content of your testdisk.log.

Fiona

sooz
Posts: 7
Joined: 17 Oct 2015, 06:36

Re: Two Partition got combined to form Single RAW

#9 Post by sooz » 17 Oct 2015, 13:19

hi thanks again for replying fast. RebuildBS takes long time
I did Quick Search and deep search .Result is attached.

Look there was 2 partition one 200GB other 170 GB. now its combined to 370 RAW
I can List the files of 2nd partition 170GB and also recover all the files but cant do that of 200GB partition.
I am using other software (don't know weather i can name them in forum) .There it shows both the partition separately.those are trial version. cant recover anything(i post screenshot if u want)

Most of my important files are there in 200GB partition. Here is the log result





Sat Oct 17 17:13:25 2015
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, September 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, Cygwin 2002.0
Compilation date: 2015-10-11T15:23:01
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107861504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107861504
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=48318382080
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=32211206144
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=204472320000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=215101734912
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1016320
filewin32_getfilesize(\\.\I:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\I:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=78536245248
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=0
Warning: can't get size for \\.\L:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=421464662016
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST950032 5AS, S/N:2SRWP3X9, FW:0011
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Generic External, S/N:MSEE235V3Z1SHW, FW:1.14

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - Generic External
Partition table type: Intel

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 0/32/33
NTFS at 12/223/20
heads/cylinder 33 (NTFS) != 255 (HD)
sect/track 32 (NTFS) != 63 (HD)
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 0 32 32 1985
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
Warning: number of heads/cylinder mismatches 33 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 32 (NTFS) != 63 (HD)
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 33 (NTFS) != 255 (HD)
sect/track 32 (NTFS) != 63 (HD)
filesystem size 153391104
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 9561 7 46 153391104
NTFS, blocksize=4096, 78 GB / 73 GiB
NTFS at 12110/203/62
filesystem size 399355904
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12110 203 62 36969 141 36 399355904
NTFS, blocksize=4096, 204 GB / 190 GiB
BAD_RS LBA=547796906 868526
file_pread(5,3,buffer,547796906(301448/33/4)) lseek err Invalid argument
file_pread(5,1,buffer,547796906(301448/33/4)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 301448 33 4 305193 85 50 60166748
This partition ends after the disk limits. (start=4842764202, size=60166748, end=4902930949, disk end=976773167)
BAD_RS LBA=861395670 9139340
check_part_i386 failed for partition type 07
HPFS - NTFS 53619 102 10 150149 196 3 1550760366
This partition ends after the disk limits. (start=861395670, size=1550760366, end=2412156035, disk end=976773167)
file_pread(5,3,buffer,976773182(60801/81/15)) lseek err Invalid argument
file_pread(5,1,buffer,976773182(60801/81/15)) lseek err Invalid argument
file_pread(5,8,buffer,976773198(60801/81/31)) lseek err Invalid argument
file_pread(5,11,buffer,976773245(60801/82/15)) lseek err Invalid argument
file_pread(5,2,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773206(60801/81/39)) lseek err Invalid argument
file_pread(5,1,buffer,976773256(60801/82/26)) lseek err Invalid argument
file_pread(5,1,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(5,14,buffer,976775170(60801/112/50)) lseek err Invalid argument
file_pread(5,3,buffer,976775184(60801/113/1)) lseek err Invalid argument
file_pread(5,3,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775247(60801/114/1)) lseek err Invalid argument
file_pread(5,11,buffer,976775294(60801/114/48)) lseek err Invalid argument
file_pread(5,2,buffer,976777216(60801/145/17)) lseek err Invalid argument
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 2510 GB / 2337 GiB)
The following partitions can't be recovered:
HPFS - NTFS 53619 102 10 150149 196 3 1550760366
FAT12 301448 33 4 305193 85 50 60166748

Results
* HPFS - NTFS 0 32 33 12 223 19 204800
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 9561 7 46 153391104
NTFS, blocksize=4096, 78 GB / 73 GiB
P HPFS - NTFS 12110 203 62 36969 141 36 399355904
NTFS, blocksize=4096, 204 GB / 190 GiB


dir_partition inode=5
P HPFS - NTFS 12 223 20 9561 7 46 153391104
NTFS, blocksize=4096, 78 GB / 73 GiB
Directory /
5 dr-xr-xr-x 0 0 0 17-Oct-2015 12:02 .
5 dr-xr-xr-x 0 0 0 17-Oct-2015 12:02 ..
38 dr-xr-xr-x 0 0 0 16-Oct-2015 14:47 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 16-Oct-2015 15:13 Friends
440 dr-xr-xr-x 0 0 0 16-Oct-2015 17:13 Marvel's Agents of S.H.I.E.L.D
36 dr-xr-xr-x 0 0 0 16-Oct-2015 14:43 System Volume Information

interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800
2 P HPFS - NTFS 12 223 20 9561 7 46 153391104
3 P HPFS - NTFS 12110 203 62 36969 141 36 399355904
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 0/32/33
NTFS at 12/223/20
heads/cylinder 33 (NTFS) != 255 (HD)
sect/track 32 (NTFS) != 63 (HD)
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 0 32 32 1985
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
Warning: number of heads/cylinder mismatches 33 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 32 (NTFS) != 63 (HD)
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
Attachments
afilelist.PNG
afilelist.PNG (49.12 KiB) Viewed 624 times
aquicksearch.PNG
aquicksearch.PNG (59.23 KiB) Viewed 624 times

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Two Partition got combined to form Single RAW

#10 Post by Fiona » 17 Oct 2015, 14:08

Didn't find any Deeper Search in your log file?
But 2 times Quick Search?
Because TestDisk / Analyse displays your current partition structure (partition table).
It only appears once.
After Quick Search you can press enter and you'll get to the testdisk display, where you can write your partition table.
Next to it, you'll see Deeper Search.
You have to select it and press enter to run it.
Can find more partitions and would be worth a try to find your partition including your files?

Watch here:
That's "Analyse", before you run Quick Search:
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 0 32 32 1985
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
Warning: number of heads/cylinder mismatches 33 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 32 (NTFS) != 63 (HD)
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
That's your result:
Results
* HPFS - NTFS 0 32 33 12 223 19 204800
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 9561 7 46 153391104
NTFS, blocksize=4096, 78 GB / 73 GiB
P HPFS - NTFS 12110 203 62 36969 141 36 399355904
NTFS, blocksize=4096, 204 GB / 190 GiB
Then you were listing your files.

But Analyse with your current partition structure appears again and shouldn't:
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 1 1 0 32 32 1985
1 P HPFS - NTFS 0 1 1 0 32 32 1985
2 * HPFS - NTFS 0 32 33 12 223 19 204800
Warning: number of heads/cylinder mismatches 33 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 32 (NTFS) != 63 (HD)
3 P HPFS - NTFS 12 223 20 9561 7 46 153391104
Invalid NTFS or EXFAT boot
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
4 P HPFS - NTFS 9561 7 47 60801 48 31 823173168
I'm not sure, did you explicit run Deeper Search?
Some user were mistaking it and were always running Quick Search.
That's why I ask for, are you sure that you were running Deeper Search?

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests