As pointed out in the thread title, i am dealing with a recovering data procedure. It is the firs time i find myself in such a situation and so i have no experience about this. The problem originated when my laptop died suddenly. Now if i try to turn it on i can't even reach the bios screen, that it already shuts down. It was an old device, so i don't mind too much. It was time for it to pass away. However, just 1-2 years ago i bought and put into it a brand new 500GB western digital 72000 rpm 2,5'' hard drive. After the notebook died, i removed the internal hard drive and connected via ata/sata/usb adapter to another computer. I tought i could read the drive and access my files but i was wrong. I got the same messages from windows that another user got here (http://www.bleepingcomputer.com/forums/t/446260/problem-reading-hard-drive-with-usb-adapter/). Windows sees that drive but suggest me to format it.
I read a lot (on this forum and on the internet) about parted magic, ddrescue and testdisk .... but before trying these tools on the 500GB hard disk (or on its .dd image) i care about, i was trying to learn how to properly use them trying to recover another hard disk (a 2,5'' hitachi 250GB hard disk wich is fine and gets recognised when connected via usb adapter; so it's not really a recovery procedure but just a "simulation"). I have some doubts and some questions though. So i decided to open this thread and post to ask for help. The screenshots i will be posting now come from this hitachi hard disk.
The laptop that died was running windows 7 pro.
And the laptop i am now using to try the recover procedure is running windows 7 pro too.
The hitachi 250GB HDD had 3 partitions: one hidden partition of about 8GB and then other 2 partition of the same size (about 111 GB).
I downloaded parted magic, installed it on a USB drive through YUMI installer and get acquainted with this distro. I run ddrescue from ROXTerm and created a .dd image of the drive and saved it on an external 1TB 3,5'' drive. Now, from what i have red on the forum, i think i have to analyse this image with "testdisk" in order to fix the image and then mount it with OSFmount or, alternatively, to access the files inside the partitions of the hard drive.
Question 1: i see that this application "testdisk" is both available on parted magic (linux) and windows. So, do you suggest using one or the other version? If they are both reliable in the same way, i would prefer staying in the windows environment.
Provided that the answer to the previous question is "yes, they are the same, use what you like" i tried to start using testdisk for windows. Since i was not able to use the command line to make to program open the .dd image, i just dragged the image.dd file over the testdisk_win.exe file. And at this point comes my second question.
Question 2: if i use testdisk in windows 7, is it the same if i open the .dd image file with command line or by dragging the file over the .exe ?
Provided that the answer is yes, i proceeded by dragging the file over the .exe and here is what i get:
Question 3: Does everithing in this screenshot seem ok to you?
I clicked [proceed] and got this screen:
I cliked [intel] and got this screen:
The name/mumber and size of the partitions looks ok. The hitachi hard drive had one hidden partion (for recovering the
windows system) and two other partitions of the same size (the first was the C drive with windowns installed on it and the
other was just a partition used for data). So i clicked [quick search] and the process started:
After the quicksearch finished i got to this screen:
Question 4: How is it that, after the quick search, i only get 2 partions, when in the previous step i saw all the 3 expected partitions? Does this means something? I was expeting to find 3 partition at this point too ...
At this point i think i have to proceede for a deeper search by pressing the "enter button". But what line/partiotion should i highlight before pressing enter to make the deeper search start?
Question 5: I mean, if i press enter when i am here ...
... or when i am here ...
... is it the same?
Provided that it is really the same, i pressed enter without caring about which of those two line was highlited and this is
I clicked Deeper Search and during the process this was the appereance of th window:
At the end of the Deeper Search this was the result:
What is the meaning of all this? Six partitions? Can someone explain me what i see in this window?
Thanks in advance.