Wrote the partition table thinking I'd fix it...

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
tomtailford
Posts: 19
Joined: 12 Nov 2015, 21:08

Wrote the partition table thinking I'd fix it...

#1 Post by tomtailford »

UH OH...

I have a GRAID disk (EXFAT striped raid) which was showing up as RAW in windows and asked for a format. On the Mac the device showed, but the single partition didn't - and first aid didn't do anything.

Ran Testdisk and after analysing I could see the partition and all the files

I wrote the partition structure to disk and now I can't access the files (I thought this would fix it, but should have read the manual!)

Now I can't see the files as it says "support for this filesystem hasn't been implemented"

Also, it's saying the filesystem is Mac HFS, but pretty sure I set it up as EXFAT.

Hopefully I've not managed to destroy all my data :(
Top
User avatar
cgrenier
Site Admin
Posts: 5437
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: Wrote the partition table thinking I'd fix it...

#2 Post by cgrenier »

If you have the testdisk.log file where TestDisk recorded what you have done, please post it.
If TestDisk has managed to find your exfat partition once, it will find it again.
Top
tomtailford
Posts: 19
Joined: 12 Nov 2015, 21:08

Re: Wrote the partition table thinking I'd fix it...

#3 Post by tomtailford »

Thanks again for your help!

I was using a mac at the time and there doesn't appear to be a testdisk.log file in the folder where I ran the application from. Any suggestions?

Thanks,

Tom
Top
whitmell
Posts: 5
Joined: 05 Nov 2015, 05:40

Re: Wrote the partition table thinking I'd fix it...

#4 Post by whitmell »

If you get this resolved, please post here as I have done the same thing and haven't yet found a solution. If I fix mine I will post my solution here.
Top
User avatar
cgrenier
Site Admin
Posts: 5437
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: Wrote the partition table thinking I'd fix it...

#5 Post by cgrenier »

Go in testdisk directory, sort the file by date/time, the log file is probably the most recent.
Top
tomtailford
Posts: 19
Joined: 12 Nov 2015, 21:08

Re: Wrote the partition table thinking I'd fix it...

#6 Post by tomtailford »

Code: Select all


Thu Nov 12 19:59:43 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Darwin, kernel 14.3.0 (Darwin Kernel Version 14.3.0: Mon Mar 23 11:59:05 PDT 2015; root:xnu-2782.2
Compiler: GCC 4.0
Compilation date: 2015-04-18T13:01:34
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.4
Hard disk list
Disk /dev/disk0 - 251 GB / 233 GiB - 490234752 sectors (RO), sector size=512
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors, sector size=512
Disk /dev/rdisk0 - 251 GB / 233 GiB - 490234752 sectors (RO), sector size=512
Disk /dev/rdisk1 - 8001 GB / 7451 GiB - 15627911168 sectors, sector size=512

Partition table type (auto): EFI GPT
Disk /dev/disk1 - 8001 GB / 7451 GiB
Partition table type: EFI GPT

Analyse Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=15627911167 (expected 15627911167)
hdr_lba_start=34
hdr_lba_end=15627911134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                    40     409639     409600
 2 P Mac HFS                   409640 15627648983 15627239344

s
search_part()
Disk /dev/rdisk1 - 8001 GB / 7451 GiB - 15627911168 sectors
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 40/0/1
     EFI System                    40     409639     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB

HFS+ magic value at 409640/0/1

HFS+ magic value at 409640/0/1
part_size 2742337456
     Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB

Results
   P EFI System                    40     409639     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB
   P Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB

   P Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
Support for this filesystem hasn't been implemented.
gpt_change_part_type
Change partition type:
   P Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
     40     409639     409600
 2 P Unknown                   411648 2743007231 2742595584
Invalid partition structure.

Analyse Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=15627911167 (expected 15627911167)
hdr_lba_start=34
hdr_lba_end=15627911134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P EFI System                    40     409639     409600
 2 P Mac HFS                   409640 15627648983 15627239344

search_part()
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 40/0/1
     EFI System                    40     409639     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB

HFS+ magic value at 409640/0/1

HFS+ magic value at 409640/0/1
part_size 2742337456
     Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB

Results
   P EFI System                    40     409639     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB
   P Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
interface_load
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors Thu Nov 12 19:31:44 2015
 1 P Unknown                       40     409639     409600
 2 P Unknown                   411648 2743007231 2742595584
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors Thu Nov 12 19:47:46 2015
 1 P Unknown                       40     409639     409600
 2 P Unknow
search_part()
Disk /dev/disk1 - 8001 GB / 7451 GiB - 15627911168 sectors
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 40/0/1
     EFI System                    40     409639     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB
FAT32 at 46/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
set_FAT_info: name from BS used

FAT32 at 46/0/1
     EFI System                    46     409645     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB
NTFS at 264192/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size           2048000
sectors_per_cluster       8
mft_lcn                   85333
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=135266304, part_size=1048576000, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 264192/0/1
heads/cylinder 255 (NTFS) != 1 (HD)
sect/track 63 (NTFS) != 1 (HD)
filesystem size           2048000
sectors_per_cluster       8
mft_lcn                   85333
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   264192    2312191    2048000
     NTFS, blocksize=4096, 1048 MB / 1000 MiB

HFS+ magic value at 409640/0/1

HFS+ magic value at 409640/0/1
part_size 2742337456
     Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB

HFS+ magic value at 409642/0/1
     MS Data                   411648 15627909119 15627497472
     exFAT, blocksize=262144, 8001 GB / 7451 GiB
     MS Data                   411660 15627909131 15627497472
     exFAT, blocksize=262144, 8001 GB / 7451 GiB
     MS Data                   411660 15627909131 15627497472
     exFAT, blocksize=262144, 8001 GB / 7451 GiB
Search for partition aborted

Results
     EFI System                    40     409639     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB
     EFI System                    46     409645     409600 [EFI]
     FAT32, blocksize=512, 209 MB / 200 MiB
     MS Data                   264192    2312191    2048000
     NTFS, blocksize=4096, 1048 MB / 1000 MiB
     Mac HFS                   409640 15627648983 15627239344
     HFS+ blocksize=8192 + Backup, 8001 GB / 7451 GiB
     MS Data                   411648 15627909119 15627497472
     exFAT, blocksize=262144, 8001 GB / 7451 GiB
     MS Data                   411660 15627909131 15627497472
     exFAT, blocksize=262144, 8001 GB / 7451 GiB
Top
tomtailford
Posts: 19
Joined: 12 Nov 2015, 21:08

Re: Wrote the partition table thinking I'd fix it...

#7 Post by tomtailford »

Does this log help at all?

Just wondering if I have any chance of recovering my files?

Test disk did show me my files before I screwed it up somehow!

Thanks,

Tom
Top
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Wrote the partition table thinking I'd fix it...

#8 Post by Fiona »

I'm not as much an Apple tech savvy.
But as far as I know, TestDisk can't list files of a HFS+-partition.
Currently you have a an HFS+-partition in your partition table.
Current partition structure:
1 P EFI System 40 409639 409600
2 P Mac HFS 409640 15627648983 15627239344

Did you already search for your EXFAT-Partition again?

Fiona
Top
tomtailford
Posts: 19
Joined: 12 Nov 2015, 21:08

Re: Wrote the partition table thinking I'd fix it...

#9 Post by tomtailford »

Testdisk sees disk, I choose EFI GPT partition table type, Analyse, Quick Search:
Quick search result
Quick search result
image1.PNG (49.67 KiB) Viewed 4206 times


Now conducting a deeper search... I have a feeling it didn't let me do this before?
Top
tomtailford
Posts: 19
Joined: 12 Nov 2015, 21:08

Re: Wrote the partition table thinking I'd fix it...

#10 Post by tomtailford »

Fingers crossed it will find something...
image2.PNG
image2.PNG (64.04 KiB) Viewed 4205 times
Top
Locked

Return to “Partition Recovery”