cgsecurity.org

I had a spanned volume of 3 HD
Accidentlly I deleted volume of the second spanned EFI GPT partition during a Windows 10 installation on another drive.
I did not format it.
I installed windows on the other drive and I now see on windows Disk Management
the other 2 as foreign dynamic disks (Disk 0 and disk 1)
On cmd diskpart
Disk 0 shows as foreign 5589gb dyn gpt
Disk 1 shows as foreign 894 gb dyn gpt
Disk 2 shows as online 447 gb gpt - clean install of w10pro
Disk 3 online 894 gb —- the broken link of the spanned set, the one that shows as basic unnollocated

In test disk
After going to advanced menu off the efi gpt it doesnt read from any backup
It says no partition available
Have read a bunch on how to attempt to recover but have not adventured to do anything
I dont mind at all converting to basic disks. This would be actually nice too, been wanted to do it but did nit know it was possible.
I have handy ZAR, parition wizard 4.2 (the one that can convert to basic disk from dynamic as well) disk probe and dmdiag (extracted from a cab from xp), and of course, the king of them all testdisk 6.14.
What should I do? How should I proceed?
Its clear to me now after hours of reading that data is there and what its lost is the partition structure from deleting the volume.

I looked for lost partitions and it found nothing both in testdisl and partitionwizard. Just leaned that I had run the wrong one, the intel and the other normal button on the wizard which I assume is the same.

I found this, among them a couple of solutions, but im not sure if they are safe, and the efi gpt in testdisk will literally take forever...

https://www.z-a-recovery.com/archive/sp ... overy.aspx
https://jeffpar.github.io/kbarchive/kb/153/Q153973/
https://askubuntu.com/questions/509006/ ... table-type
https://www.itprotoday.com/windows-78/h ... windows-xp
https://www.easeus.com/resource/dynamic ... covery.htm

When i right click on windows manager disk to import the foreign disks, it does notify me that one spanned is missing. It is my understanding that it knows because all info about the 3 disks is on first one.

Again, what should I do? Should I attempt to tweak it manually? Meaning create a partition table manually? Or do the zar splution after importing the foreign and the run zar again? Or How should I do that on On testdisk?

Thank u in advance!

this is the log running analyse

Sat Aug 17 15:24:27 2019
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-04-15T19:00:04
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=960197124096
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=960197124096
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=479493881856
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=319478038528
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=480099958784
Hard disk list
Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63, sector size=512 - ADATA SP550, S/N:2G1820078347, FW:O1126A
Disk /dev/sdb - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-22VWA0, S/N:WD-WCARW4727600, FW:12.01B02
Disk /dev/sdc - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - ADATA SP550, S/N:2G2620044862, FW:P0330AA
Disk /dev/sdd - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - SanDisk SDSSDXPS480G, S/N:163446400239, FW:X21200RL

Partition table type default to Intel
Disk /dev/sda - 960 GB / 894 GiB - ADATA SP550
Partition table type: EFI GPT

Analyse Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Current partition structure:
Bad GPT partition, invalid signature.

search_part()
Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Unknown XFS version e

XFS Marker at 38976/225/58

recover_xfs
MS Data 626163672 32569943148259184 32569942522095512 [roí6S
©ÉX^]
XFS 6.2+ - bitmap version, 16675810 TB / 15166561 TiB
This partition ends after the disk limits. (start=626163672, size=2925684632, end=3551848304, disk end=1875385008)
check_FAT: Bad number of sectors per cluster

recover_JFS: s_blocksize=955178625
recover_JFS: s_size 2122208238
recover_JFS: s_fsckpxd.len:1749232
recover_JFS: s_logpxd.len:12900392
recover_JFS: part_size 423106019
MS Data 761104950 33810164126949401 33810163365844451
JFS 3906304930, 17310803 TB / 15744084 TiB
This partition ends after the disk limits. (start=761104950, size=423106019, end=1184210969, disk end=1875385008)
check_FAT: Bad number of sectors per cluster

LVM magic value at 60666/20/54
Unknown XFS version 5

XFS Marker at 73861/62/25

recover_xfs
MS Data 1186580895 28852362303175655 28852361116594760 [Ä«Qœƒˆæ† ¦@]
XFS 6.2+ - bitmap version, 14772408 TB / 13435427 TiB
This partition ends after the disk limits. (start=1186580895, size=3477680712, end=369294311, disk end=1875385008)
Unknown XFS version 7

XFS Marker at 75609/213/49

recover_xfs
MS Data 1214672052 16440738013735095 16440736799063043 [Ù®´óÔ
ꟈ ]
XFS 6.2+ - bitmap version, 8417657 TB / 7655814 TiB
This partition ends after the disk limits. (start=1214672052, size=1421933571, end=2636605623, disk end=1875385008)

LVM magic value at 82329/128/20

HFS magic value at 96695/140/10
part_size 2900390155
Mac HFS 1553414004 4453804158 2900390155 [6ŸS›”*è¢ÝæÇ«sÛÆ1J(2]
¸]
HFS, 1484 GB / 1383 GiB
This partition ends after the disk limits. (start=1553414004, size=2900390155, end=158836862, disk end=1875385008)
file_pread(4,1,buffer,1875385008(116737/81/1)) ReadFile Incorrect function.

file_pread(4,1,buffer,1875385009(116737/81/2)) lseek err Invalid argument
file_pread(4,1,buffer,1875385010(116737/81/3)) lseek err Invalid argument
file_pread(4,1,buffer,1875385011(116737/81/4)) lseek err Invalid argument

{********this lines with come combinations repeats a lot*******}

file_pread(4,1,buffer,1875387057(116737/113/34)) lseek err Invalid argument

Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (960 GB / 894 GiB) seems too small! (< 17310804 TB / 15744084 TiB)
The following partitions can't be recovered:
MS Data 626163672 32569943148259184 32569942522095512 [roí6S
©ÉX^]
XFS 6.2+ - bitmap version, 16675810 TB / 15166561 TiB
MS Data 761104950 33810164126949401 33810163365844451
JFS 3906304930, 17310803 TB / 15744084 TiB
MS Data 1186580895 28852362303175655 28852361116594760 [Ä«Qœƒˆæ† ¦@]
XFS 6.2+ - bitmap version, 14772408 TB / 13435427 TiB
MS Data 1214672052 16440738013735095 16440736799063043 [Ù®´óÔ
ꟈ ]
XFS 6.2+ - bitmap version, 8417657 TB / 7655814 TiB
Mac HFS 1553414004 4453804158 2900390155 [6ŸS›”*è¢ÝæÇ«sÛÆ1J(2]
¸]
HFS, 1484 GB / 1383 GiB

Results

interface_write()

No partition found or selected for recovery
simulate write!

Analyse Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Current partition structure:
Bad GPT partition, invalid signature.

search_part()
Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery
simulate write!

Interface Advanced
New options :
Dump : No
Align partition: Yes
Expert mode : Yes

Analyse Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Current partition structure:
Bad GPT partition, invalid signature.

search_part()
Disk /dev/sda - 960 GB / 894 GiB - CHS 116737 255 63
Unknown XFS version e

XFS Marker at 38976/225/58

recover_xfs
MS Data 626163672 32569943148259184 32569942522095512 [roí6S
©ÉX^]
XFS 6.2+ - bitmap version, 16675810 TB / 15166561 TiB
This partition ends after the disk limits. (start=626163672, size=2925684632, end=3551848304, disk end=1875385008)
check_FAT: Bad number of sectors per cluster

recover_JFS: s_blocksize=955178625
recover_JFS: s_size 2122208238
recover_JFS: s_fsckpxd.len:1749232
recover_JFS: s_logpxd.len:12900392
recover_JFS: part_size 423106019
MS Data 761104950 33810164126949401 33810163365844451
JFS 3906304930, 17310803 TB / 15744084 TiB
This partition ends after the disk limits. (start=761104950, size=423106019, end=1184210969, disk end=1875385008)
check_FAT: Bad number of sectors per cluster

LVM magic value at 60666/20/54
Unknown XFS version 5

XFS Marker at 73861/62/25

recover_xfs
MS Data 1186580895 28852362303175655 28852361116594760 [Ä«Qœƒˆæ† ¦@]
XFS 6.2+ - bitmap version, 14772408 TB / 13435427 TiB
This partition ends after the disk limits. (start=1186580895, size=3477680712, end=369294311, disk end=1875385008)
Unknown XFS version 7

XFS Marker at 75609/213/49

recover_xfs
MS Data 1214672052 16440738013735095 16440736799063043 [Ù®´óÔ
ꟈ ]
XFS 6.2+ - bitmap version, 8417657 TB / 7655814 TiB
This partition ends after the disk limits. (start=1214672052, size=1421933571, end=2636605623, disk end=1875385008)

LVM magic value at 82329/128/20

HFS magic value at 96695/140/10
part_size 2900390155
Mac HFS 1553414004 4453804158 2900390155 [6ŸS›”*è¢ÝæÇ«sÛÆ1J(2]
¸]
HFS, 1484 GB / 1383 GiB
This partition ends after the disk limits. (start=1553414004, size=2900390155, end=158836862, disk end=1875385008)
file_pread(4,1,buffer,1875385008(116737/81/1)) ReadFile Incorrect function.

file_pread(4,1,buffer,1875385009(116737/81/2)) lseek err Invalid argument

{********this lines with come combinations repeats a lot*******}

file_pread(4,1,buffer,1875386726(116737/108/18)) lseek err Invalid argument

Piolon wrote: 14 Aug 2019, 16:06 I had a spanned volume of 3 HD

Neither the web pages nor the manual testdisk.pdf mentions anything about Testdisk being able to repair spanned volumes.

How did you solve your problem?
I'm at a similar point as you are....