New
#71
Hi Jumanji,
Great tutorial, I have used test disk many times, However, there is a danger that has been overlooked here. If there is more than one partition in an extended partition, and the partition table is corrupted, there is a very high probability that desk disk will return a finding, after running search, where the same partition is listed twice, for example, partition 2. will be listed twice. This is due to the table being corrupted and some overlap occurs. The danger here is, testdisk will by default, prefix BOTH partitions with the letter D, ie, DELETE. You must check each entry for partition 2 and check for files using the P switch. one will have no files and the other will contain your files. The one containing files must have it's prefix CHANGED to Primary or logical, using right/left arrow keys. the one with no files must remain as D for delete.
Failure to do this will result in test disk deleting both entries and subsequently the partition 2.
Something to be aware of before selecting 'write'.
Just thought I would share this,
regards,
Ron.