Unallocated 3TB GPT drive

Message

#11 Post by **Fiona** » 07 Jun 2012, 20:24

Sry for late.
This week I'm still on vacation.
Next week I'm available just as normal.

What I'm saying is that I don't understand what you mean by recovering the MSReserved partition to get the start from my previous MSData, How do I do that because I'm given no option for this. Sorry, I'm just really frustrated by this...I really do appreciate the help so far.

To scan your disk lasts ages.
TestDisk didn't find something.
That's why I've got an idea, to create another unformatted partition and have a boot sector diagnose to have a try to get access to your data or recover your partition.
MS Reserved partition is important, because if it wouldn't be available, your first partition would start at the beginning of the disk.
So it woudn't exactly fit like before anymore.
The strange thing is, it's only available in TestDisk but your disk management console is absolutely empty and displayed as unallocated.
Your Screen from your unallocated disk size;
http://i49.tinypic.com/308fvcy.png
And here your screen from TestDisk;
http://i48.tinypic.com/34y199u.png
Here you can see your MS Reserved partition.
Some Infos;
http://msdn.microsoft.com/en-us/library ... 63525.aspx

To speed up recovery would be, do you have any idea about that MS Reserved partition?
Did you have it before also?
It's only required to get the same start of your MS Data partition like before.

Hopefully that you understand it now?

Fiona

adilibe · #12 Post by **adilibe** » 08 Jun 2012, 00:23

I hope that I'm starting to understand better now.
I went back into the Windows Disk Management and created an unformatted GPT partition (H:) for my hard drive so now it looks like this with 3TB RAW

When I load up Testdisk now I see 3 versions the HDD on the first screen.

/dev/sde/
\\.\PhysicalDrive4
Drive H:

I wasn't sure which on to choose so I continued with \\.\PhysicalDrive4

Next I selected EFI GPT > Advanced > MS Data > Type > NTFS > List...but it says "Can't open filesystem. Filesystem seems damanged." So next I select Boot and see this next screenshot which worries me because it says both the backup and regular boot sectors are Bad.

Now I go back to the Analyse screen and I see this.

Quick search didn't find anything and its currently doing a deep search again so that is where I'm at right now. Tell me if that is the correct path to take or if something looks wrong or I should have chosen another option. Thanks so much.

#13 Post by **Fiona** » 08 Jun 2012, 06:42

Often, if you create an unformatted partition it has no boot sector.
Only if you format a partition you'll create a boot sector.
But you shouldn't format your disk, because it would override your previous file system.
In TestDisk;
Just run Rebuild BS.
http://i46.tinypic.com/1jawer.png
Afterwards you should see a menu list.
Please check, are your files are listed or an error message.

adilibe · #14 Post by **adilibe** » 11 Jun 2012, 12:36

So I just ran the Rebuild BS and I think it failed because it still says both boot sectors are bad

Here's the log file, is there other chance this could possibly be recovered???

Code: Select all

Fri Jun  8 13:41:21 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-21T08:46:51
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=300069052416
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=300069052416
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=256053870592
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000397795328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500107805184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=300068864512
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=3000457232384
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - OCZ-VERT EX4, S/N:CO-Z978EA1839003ZX3H, FW:1.4R
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Hitachi HDS723020BLA, S/N:NM21043FR3LHD0, FW:MN6O
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Hitachi HDT725050VLA, S/N:FV4D104RV1GBCZ, FW:V56O
Disk /dev/sdd - 300 GB / 279 GiB - CHS 36481 255 63, sector size=512 - WDC WD30 00HLFS-01G6U, S/N:W -DXW0E7CC92013, FW:04.0
Disk /dev/sde - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate GoFlex Desk, S/N:NA0LSNV2, FW:0D19
Disk \\.\PhysicalDrive4 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate GoFlex Desk, S/N:NA0LSNV2, FW:0D19
Drive H: - 3000 GB / 2794 GiB - CHS 45598 255 63, sector size=4096 - Seagate GoFlex Desk, S/N:NA0LSNV2, FW:0D19

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive4 - 3000 GB / 2794 GiB - Seagate GoFlex Desk
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=732566644 (expected 732566644)
hdr_lba_start=6
hdr_lba_end=732566639
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                    6      32773      32768 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                    33024  732566527  732533504 [Basic data partition]
 1 P MS Reserved                    6      32773      32768 [Microsoft reserved partition]
 2 P MS Data                    33024  732566527  732533504 [Basic data partition]
gpt_change_part_type
Change partition type:
 2 P MS Data                    33024  732566527  732533504 [Basic data partition]
Change partition type:
 2 P NTFS                       33024  732566527  732533504 [Basic data partition]

ntfs_boot_sector
 2 P MS Data                    33024  732566527  732533504 [Basic data partition]
filesystem size           1
sectors_per_cluster       0
mft_lcn                   0
mftmirr_lcn               0
clusters_per_mft_record   0
clusters_per_index_record 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 753471, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         2
ntfs_find_mft: mft_record_size     4096

mft at 366249038, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         2
ntfs_find_mft: mft_record_size     4096

Failed to rebuild NTFS boot sector.

ntfs_boot_sector
 2 P MS Data                    33024  732566527  732533504 [Basic data partition]
filesystem size           1
sectors_per_cluster       0
mft_lcn                   0
mftmirr_lcn               0
clusters_per_mft_record   0
clusters_per_index_record 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Bicgatepc02 · #15 Post by **Bicgatepc02** » 24 Jan 2013, 06:34

Thank you, Fiona, for the reply. I should have mentioned that I already disabled MSE. There are no Norton products on this computer and no other antivirus running. My firewall is still active, that's it. I'm a little perplexed as to the 'write error' if it's a permissions issue. I'm currently running as Administrator in 'safe mode with Internet' on an older XP Home system and the drive in question is hooked up as a slave.

__________________________________________________________
Thl Phone THL W1+ ThL W3+

cgsecurity.org

Unallocated 3TB GPT drive

Re: Unallocated 3TB GPT drive

Re: Unallocated 3TB GPT drive

Re: Unallocated 3TB GPT drive

Re: Unallocated 3TB GPT drive

Re: Unallocated 3TB GPT drive