totally lost... please help

How to use TestDisk to recover lost partition
Message
Author
Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

totally lost... please help

#1 Post by Rjedi » 14 Nov 2016, 21:24

hi all,
i should tell you first the background i guess.

A few weeks ago i did a BIOS update on my Asus Z 170 D Motherboard from version 1702 to 2202. After that and a reboot my RAID 0 ( which was also my boot drive ) was displayed as failed. One of the two Samsung 950 Pro NVMe M.2 SSDs ( 256 GB each ) was displayed as Non-Member disk. So i did a a lot of research and found a really good guide on this site: http://blog.quindorian.org/2013/07/repa ... rted.html/ A how to repair guide for a similar problem ( similar because in this case the RAID 0 was not the Boot Volume )
But after talking to Quindor ( the nice guy which created that Blog and the How to ) i was confident that this guide would also work in my case. In theory.
First i bought a new HDD to install Windows and Testdisk on it. Then i followed the steps and re created the RAID 0 in the UEFI of my Motherboard and booted to my Windows on the HDD to use Testdisk. But here there was a difference between the Guide from Quindor and what was displayed on testdisk at my screen.
After that i guess i did some stupid things in testdisk and now i`m totally afraid that i have lost and destroyed my Partitions so, if somebody could maybe advice me what to do i would highly appreciate it.

here are some screenshots.

http://imgur.com/a/aLA5V

Its the PhysicalDrive1 and/ or Drive D: with 512 GB ( 511 GB) / 476 GiB

If you have Questions on what exactly i did in Testdisk, please don`t hesitate to ask. But i guess anybody who knows how Testdisk works will quickly recognize what happen and how to solve it.

Regards
20161114_202354.jpg
20161114_202354.jpg (245.32 KiB) Viewed 822 times

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 3562
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: totally lost... please help

#2 Post by cgrenier » 15 Nov 2016, 07:36

If I understand correctly, your problem is that the D: partition is listed as RAW by Windows.
Use latest TestDisk 7.1-WIP, PhysicalDrive1, Advanced, select the partition corresponding to D:, Boot, RebuildBS, List.
If you see your files, choose Write, confirm, Quit and restart your computer.
If you have problems, please copy/paste the testdisk.log file content.

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#3 Post by Rjedi » 15 Nov 2016, 11:47

this post was deleted, modified version is the next post.
Last edited by Rjedi on 17 Nov 2016, 18:04, edited 1 time in total.

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#4 Post by Rjedi » 17 Nov 2016, 18:01

cgrenier wrote:If I understand correctly, your problem is that the D: partition is listed as RAW by Windows.
Use latest TestDisk 7.1-WIP, PhysicalDrive1, Advanced, select the partition corresponding to D:, Boot, RebuildBS, List.
If you see your files, choose Write, confirm, Quit and restart your computer.
If you have problems, please copy/paste the testdisk.log file content.

thank you Mr Grenier for your help.

I did what you recommended. But while Testdisk was working ( RebuildBS ) Testdisk closed it self without any message. So i was not able to click list. Any other suggestion?



Thu Nov 17 16:14:36 2016
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin32 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=512116129792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=512116129792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000861597696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=511521587200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=471859200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\V:)=998942703616
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD2003FZEX-00Z4SA0, S/N:WD-WCC1P2XRH3HD, FW:01.01A01
Disk /dev/sdb - 512 GB / 476 GiB - CHS 62261 255 63, sector size=512 - Intel Raid 0 Volume, S/N:Volume1, FW:1.0.

Partition table type (auto): EFI GPT
Disk /dev/sdb - 512 GB / 476 GiB - Intel Raid 0 Volume
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
FAT32 at 57/126/6
Info: size boot_sector 204800, partition 204800
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
set_FAT_info: name from BS used
NTFS at 72/39/32
1 P HPFS - NTFS 0 32 33 57 126 5 921600 [Wiederherstellung]
NTFS, blocksize=4096, 471 MB / 450 MiB
2 P FAT32 57 126 6 70 61 55 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
3 * HPFS - NTFS 72 39 32 62261 28 39 999065600
NTFS, blocksize=4096, 511 GB / 476 GiB

ntfs_boot_sector
3 * HPFS - NTFS 72 39 32 62261 28 39 999065600
NTFS, blocksize=4096, 511 GB / 476 GiB
NTFS at 72/39/32
NTFS at 72/39/32
filesystem size 999065600
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
0 [main] testdisk_win 1744 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

Thank you very much for your advice, i really appreciate your helpfulness.
Have you seen the pictures on Imgur?
I guess i should tell you what i did to get to this point in.
I will try to describe and reconstruct it.

First i tried the Steps in Quindors guide ( the first mistake was using TestDisk 7.0 win 64 bit as i read it not correctly... "use only if lacking Wow64" )
After that i clicked, PyhsicalDrive1, Intel, Analyse, Quick Search, and then it showed me not one partition like in Quindors case but instead three partitions.
like this:
1 * HPFS NTFS 0 32 33 Size in Sector was little
2 P FAT 32 57 126 6 Size in Sector was also very small
3 P HPFS - NTFS 72 39 32 Size in Sector was really Hughe so i guessed this is my RAID 0 Partition and the other two something from Windows ( 100 MB & 450 MB big )

After Quick search i choose number 3 and "Write". After that i quited and restarted with first disconnecting the HDD an the windows on it.
It does not boot and give and error ( some Bluescreen wich told me to insert the (Windows CD/USB ) what i did. But it was not able to repair the two SSDs.
But the Windows USB did something because as i went back to the UEFI i saw two Windows boot Drives one was (intel Volume1) what should be my RAID 0 and one just named Windows Boot Drive ( 488000 MB ). After that i connected again the HDD rebooted in Windows and started again Testdisk.
This time ( and now i get much more stupid :roll: ) i run Testdisk with PyhsicalDrive1, and instead of choosing Intel i saw ( what i did not recognized first i guess ) the Hint from TestDisk "EFI GPT partition table type has been detected." So i thought ( with forgetting that i have some Linux and Mac VMWARE Virtual Maschines for testing on the RAID 0 ) i should try this one. So I choose EFI GPT, Analyse, Quick Search and then choose Write on all three ( :oops: :| ) partitions.
After i reboot and disconnecting again the HDD nothing worked. No Bluescreen just a blackscreen from windows in which it said something with the Boot drive is not okay.
So i reconnected and rebooted and run Testdisk 7.0 again but this time choose to PhysicalDrive1, Intel ( i recognized one of my failure ), Analyse, Quick Search and write on all three again. ( i know that there a lot of facepalms from you know). Well, Same procedure again shut down, disconneted the HDD reboot and again a bluescreen from windows with some instructions. Nothing worked.
So i shut down again, conneted the HDD to reboot windows and did a little research as i saw now the PhysicalDrive1 and D: ( and D: in in RAW )
so i tried to use this guide http://us.informatiweb.net/troubleshoot ... ition.html
and switched
1 * HPFS NTFS 0 32 33 Size in Sector in Sector little ( i don't remember the correct Size )
2 P Fat 32 57 126 6 Size was little
3 P HPFS NTFS 72 39 32 Size in Sector big

to
1 P HPFS NTFS 032 33
2 P FAT 32
3 * HPFS NTFS Size in Sector big

and then again Quick search and choose write.

And then i recognized i'm lost and searched for this forum to find some help.



I have downloaded Testdisk 7.1 now ( the right version for windows ) and took the steps that you recommended.
Any other recommendation Mr Grenier?

Regards

User avatar
cgrenier
Site Admin
Posts: 3562
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: totally lost... please help

#5 Post by cgrenier » 17 Nov 2016, 19:19

You can try
- run cmd, right click run as administrator) and next chkdsk /f d:
- try testdisk, advanced, list from a Linux LiveUSB (see https://www.cgsecurity.org/testdisk.pdf for details)
- if nothing works, use photorec on this partition, choose [Whole] instead of [Free]

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#6 Post by Rjedi » 17 Nov 2016, 20:11

cgrenier wrote:You can try
- run cmd, right click run as administrator) and next chkdsk /f d:
- try testdisk, advanced, list from a Linux LiveUSB (see https://www.cgsecurity.org/testdisk.pdf for details)
- if nothing works, use photorec on this partition, choose [Whole] instead of [Free]
I am forever in your debt for helping me through this tough time, thanks so much for taking the time to help with my problem.

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#7 Post by Rjedi » 27 Nov 2016, 21:35

cgrenier wrote:You can try
- run cmd, right click run as administrator) and next chkdsk /f d:
- try testdisk, advanced, list from a Linux LiveUSB (see https://www.cgsecurity.org/testdisk.pdf for details)
- if nothing works, use photorec on this partition, choose [Whole] instead of [Free]
Hello Mr. Grenier,

i tried to run cmd and chkdsk /f d:
but i had no success.

Then i tried a Linux LIveUSB (Fedora) as you recommended but the problem is testdisk and the fedora live usb can not recognize the raid. I guess, without the intel raid driver its not possible. Do you know how i can install the Intel Rapid Storage driver on the Fedora LiveUSB?

Also i have taken some screenshots from which maybe you can see what the real problem is with the raid.
When i am analyzing with Testdisk 7.1 the raid, the partitions are listed double. Also in my UEFI BIOS there are two RAID SSD listed, but i have just one. As you can see in the UEFI screenshot there is a "Windows Boot Manager Intel Volume1" (my raid) and a "Windows Boot Manager 488392MB" which is obviously also my two SSDs in raid.
Do you know how to solve this? Is there any solution for this?
20161119_173348.jpg
20161119_173348.jpg (112.3 KiB) Viewed 693 times
20161119_173544.jpg
20161119_173544.jpg (113.84 KiB) Viewed 693 times
20161119_192940.jpg
20161119_192940.jpg (103.4 KiB) Viewed 693 times
Regards

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#8 Post by Rjedi » 27 Nov 2016, 21:40

Here are some more screenshots.
Maybe it is useful for you to see.
20161119_173637.jpg
20161119_173637.jpg (109.48 KiB) Viewed 691 times
20161119_173638.jpg
20161119_173638.jpg (126.88 KiB) Viewed 691 times
20161119_173458.jpg
20161119_173458.jpg (99.21 KiB) Viewed 691 times

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#9 Post by Rjedi » 27 Nov 2016, 21:43

and more screenshots.
20161119_173640.jpg
20161119_173640.jpg (124.85 KiB) Viewed 689 times
20161119_192928.jpg
20161119_192928.jpg (122.04 KiB) Viewed 689 times
20161119_173810.jpg
20161119_173810.jpg (119.39 KiB) Viewed 689 times

Rjedi
Posts: 9
Joined: 14 Nov 2016, 18:51

Re: totally lost... please help

#10 Post by Rjedi » 27 Nov 2016, 21:46

and the last one. Sorry, if some of them are twice.
20161119_192936.jpg
20161119_192936.jpg (110.25 KiB) Viewed 688 times

Post Reply

Who is online

Users browsing this forum: No registered users and 0 guests