depuis quelques jours le PC sous windows 10 de mon fils ne démarre plus, le système indiquant qu'aucun système d'exploitation ne peut être trouvé.
Après quelques essais de récupération sous windows (boot depuis une liveUSB, essai bootrec et fixmbr), je me suis rendu compte que fdisk ne trouvait
pas de partition NTFS mais une partition Microsoft RAW.
j'ai sorti le disque dur, en ai fait une copie sur un disque de même capacité (1TB) sous Linux en utilisant ddrescue, et fait une recherche approfondie des partitions avec testdisk.
J'obtiens des résultats qui m’intriguent beaucoup (partitions plus grandes que le disque), et surtout testdisk m'indique qu'aucune partition n'est récupérable.
Voici la capture d'écran à la fin:
Si je regarde une partition quelque et essaie de visualiser les fichiers, testdisk m'indique que le système de fichier n'est pas lisible.
Certains utilitaires de récupération payant sous windows me trouvent une partition NTFS apparemment récupérable (en mode payant), mais je n'ai pas encore essayé,
ne sachant pas dans quelle mesure c'était fiable.
Est-ce que quelqu'un pourrait m'indiquer s'il y a des chances de récupération?
Le log complet de testdisk est ici:
https://www.casimages.com/f/43BxyOdk6Vb
Un grand merci par avance,
Mathieu
Je mets aussi le log de testdisk en fin de ce messsage.
Thu Apr 8 19:43:11 2021
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, March 2021
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 5.11.11-200.fc33.x86_64 (#1 SMP Tue Mar 30 16:53:32 UTC 2021) x86_64
Compiler: GCC 4.8
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop13 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop7 - 0 B - 0 sectors (RO), sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - Hitachi HDT721010SLA360
Disk /dev/mapper/fedora-home - 128 GB / 120 GiB - 251666432 sectors, sector size=512
Disk /dev/mapper/fedora-root - 53 GB / 50 GiB - 104857600 sectors, sector size=512
Disk /dev/mapper/fedora-swap - 16 GB / 15 GiB - 32931840 sectors, sector size=512
Disk /dev/dm-0 - 53 GB / 50 GiB - 104857600 sectors, sector size=512
Disk /dev/dm-1 - 16 GB / 15 GiB - 32931840 sectors, sector size=512
Disk /dev/dm-2 - 128 GB / 120 GiB - 251666432 sectors, sector size=512
Disk /dev/loop0 - 147 MB / 140 MiB - 288032 sectors (RO), sector size=512
Disk /dev/loop1 - 159 KB / 156 KiB - 312 sectors (RO), sector size=512
Disk /dev/loop10 - 58 MB / 55 MiB - 113592 sectors (RO), sector size=512
Disk /dev/loop11 - 104 MB / 99 MiB - 203184 sectors (RO), sector size=512
Disk /dev/loop12 - 103 MB / 99 MiB - 203056 sectors (RO), sector size=512
Disk /dev/loop2 - 67 MB / 64 MiB - 132648 sectors (RO), sector size=512
Disk /dev/loop3 - 159 KB / 156 KiB - 312 sectors (RO), sector size=512
Disk /dev/loop4 - 317 MB / 303 MiB - 620696 sectors (RO), sector size=512
Disk /dev/loop5 - 147 MB / 140 MiB - 288032 sectors (RO), sector size=512
Disk /dev/loop6 - 58 MB / 55 MiB - 113560 sectors (RO), sector size=512
Disk /dev/loop8 - 170 MB / 162 MiB - 333552 sectors (RO), sector size=512
Disk /dev/loop9 - 354 MB / 337 MiB - 691616 sectors (RO), sector size=512
Disk /dev/nvme0n1 - 1024 GB / 953 GiB - CHS 976762 64 32, sector size=512
Partition table type (auto): EFI GPT
Disk /dev/sda - 1000 GB / 931 GiB - Hitachi HDT721010SLA360
Partition table type: EFI GPT
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
2 P MS Reserved 206848 239615 32768 [Microsoft reserved partition]
check_part_gpt failed for partition
3 P MS Data 239616 1951424511 1951184896 [Basic data partition]
Current partition structure:
1 P EFI System 2048 206847 204800 [EFI system partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Reserved 206848 239615 32768 [Microsoft reserved partition]
2 P MS Reserved 206848 239615 32768 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Data 239616 1951424511 1951184896 [Basic data partition]
3 P MS Data 239616 1951424511 1951184896 [Basic data partition]
4 P Windows Recovery Env 1951424512 1953521663 2097152 [Basic data partition]
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
EFI System 2048 206847 204800 [EFI System Partition] [ESP]
FAT32, blocksize=1024, 104 MB / 100 MiB
LVM magic value at 289/12/50
LVM magic value at 1064/252/23
HFS magic value at 1083/188/23
part_size 3001438791
Mac HFS 17410261 3018849051 3001438791
HFS blocksize=67108864, 1536 GB / 1431 GiB
This partition ends after the disk limits. (start=17410261, size=3001438791, end=3018849051, disk end=1953525168)
HFS magic value at 1083/188/25
LVM magic value at 1532/136/52
HFS magic value at 2607/197/43
part_size 514
Mac HFS 41893908 41894421 514
HFS blocksize=512, 263 KB / 257 KiB
LVM magic value at 11078/70/54
cramfs Marker at 11287/10/61
recover_cramfs
Linux filesys. data 181326345 182698328 1371983 [GWケ、リォン歓ヘ(b枦Sワ]
cramfs, 702 MB / 669 MiB
LVM magic value at 12668/63/2
NTFS at 18367/34/4
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=151074816000, part_size=999006666752, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 18367/34/4
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 295068000 2246252895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=295068000, size=1951184896, end=2246252895, disk end=1953525168)
NTFS at 18922/75/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=155641184256, part_size=999006666752, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 18922/75/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 303986688 2255171583 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=303986688, size=1951184896, end=2255171583, disk end=1953525168)
NTFS at 19403/44/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=159596544000, part_size=999006666752, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 19403/44/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 311712000 2262896895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=311712000, size=1951184896, end=2262896895, disk end=1953525168)
NTFS at 121470/142/17
filesystem size 2097152
sectors_per_cluster 8
mft_lcn 87381
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1949327361 1951424512 2097152
NTFS found using backup sector, blocksize=4096, 1073 MB / 1024 MiB
NTFS at 121470/142/17
filesystem size 2097152
sectors_per_cluster 8
mft_lcn 87381
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1951424512 1953521663 2097152 [Recovery]
NTFS, blocksize=4096, 1073 MB / 1024 MiB
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1545 GB / 1439 GiB)
The following partitions can't be recovered:
Mac HFS 17410261 3018849051 3001438791
HFS blocksize=67108864, 1536 GB / 1431 GiB
MS Data 295068000 2246252895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
MS Data 303986688 2255171583 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
MS Data 311712000 2262896895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
Results
P EFI System 2048 206847 204800 [EFI System Partition] [ESP]
FAT32, blocksize=1024, 104 MB / 100 MiB
P Mac HFS 41893908 41894421 514
HFS blocksize=512, 263 KB / 257 KiB
P Linux filesys. data 181326345 182698328 1371984 [GWケ、リォン歓ヘ(b枦Sワ]
cramfs, 702 MB / 669 MiB
MS Data 1949327361 1951424512 2097152
NTFS found using backup sector, blocksize=4096, 1073 MB / 1024 MiB
MS Data 1951424512 1953521663 2097152 [Recovery]
NTFS, blocksize=4096, 1073 MB / 1024 MiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
echo "0 514 linear /dev/sda 41893908" | dmsetup create test1
echo "0 1371984 linear /dev/sda 181326345" | dmsetup create test2
echo "0 2097152 linear /dev/sda 1949327361" | dmsetup create test3
echo "0 2097152 linear /dev/sda 1951424512" | dmsetup create test4
interface_write()
1 P EFI System 2048 206847 204800 [EFI System Partition] [ESP]
2 P Mac HFS 41893908 41894421 514
3 P Linux filesys. data 181326345 182698328 1371984 [GWケ、リォン歓ヘ(b枦Sワ]
interface_write()
1 P EFI System 2048 206847 204800 [EFI System Partition] [ESP]
2 P Mac HFS 41893908 41894421 514
3 P Linux filesys. data 181326345 182698328 1371984 [GWケ、リォン歓ヘ(b枦Sワ]
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
EFI System 2048 206847 204800 [EFI System Partition] [ESP]
FAT32, blocksize=1024, 104 MB / 100 MiB
FAT32 at 0/32/39
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT differs, FAT sectors=752-768/769
set_FAT_info: name from BS used
FAT32 at 0/32/39
FAT: cluster=2(0x2), pos=10240
EFI System 2048 206847 204800 [EFI System Partition] [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
FAT32 at 0/32/39
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT differs, FAT sectors=752-768/769
set_FAT_info: name from BS used
FAT32 at 0/32/39
FAT: Directory entry is marked as free.
FAT: cluster=2(0x2), pos=10246
MS Data 2054 206853 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
LVM magic value at 289/12/50
LVM magic value at 1064/252/23
HFS magic value at 1083/188/23
part_size 3001438791
Mac HFS 17410261 3018849051 3001438791
HFS blocksize=67108864, 1536 GB / 1431 GiB
This partition ends after the disk limits. (start=17410261, size=3001438791, end=3018849051, disk end=1953525168)
HFS magic value at 1083/188/25
LVM magic value at 1532/136/52
HFS magic value at 2607/197/43
part_size 514
Mac HFS 41893908 41894421 514
HFS blocksize=512, 263 KB / 257 KiB
HFS magic value at 2607/197/45
part_size 514
Mac HFS 41893398 41893911 514
HFS found using backup sector!, 263 KB / 257 KiB
LVM magic value at 11078/70/54
cramfs Marker at 11287/10/61
recover_cramfs
Linux filesys. data 181326345 182698328 1371983 [GWケ、リォン歓ヘ(b枦Sワ]
cramfs, 702 MB / 669 MiB
cramfs Marker at 11287/10/62
recover_cramfs
Linux filesys. data 181326346 182698329 1371983 [GWケ、リォン歓ヘ(b枦Sワ]
cramfs, 702 MB / 669 MiB
LVM magic value at 12668/63/2
NTFS at 18367/34/4
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=151074816000, part_size=999006666752, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 18367/34/4
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 295068000 2246252895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=295068000, size=1951184896, end=2246252895, disk end=1953525168)
NTFS at 18922/75/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=155641184256, part_size=999006666752, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 18922/75/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 303986688 2255171583 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=303986688, size=1951184896, end=2255171583, disk end=1953525168)
NTFS at 19403/44/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=159596544000, part_size=999006666752, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 19403/44/34
filesystem size 1951184896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 311712000 2262896895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
This partition ends after the disk limits. (start=311712000, size=1951184896, end=2262896895, disk end=1953525168)
NTFS at 121470/142/17
filesystem size 2097152
sectors_per_cluster 8
mft_lcn 87381
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1949327361 1951424512 2097152
NTFS found using backup sector, blocksize=4096, 1073 MB / 1024 MiB
NTFS at 121470/142/17
filesystem size 2097152
sectors_per_cluster 8
mft_lcn 87381
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1951424512 1953521663 2097152 [Recovery]
NTFS, blocksize=4096, 1073 MB / 1024 MiB
NTFS at 121597/195/63
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 1953461979 1953468152 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 121597/195/63
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 1953468152 1953474325 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 121601/25/24
filesystem size 2097152
sectors_per_cluster 8
mft_lcn 87381
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1951424512 1953521663 2097152 [Recovery]
NTFS found using backup sector, blocksize=4096, 1073 MB / 1024 MiB
NTFS at 121601/25/24
filesystem size 2097152
sectors_per_cluster 8
mft_lcn 87381
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS: Can't read MFT
MS Data 1953521663 1955618814 2097152
NTFS, blocksize=4096, 1073 MB / 1024 MiB
This partition ends after the disk limits. (start=1953521663, size=2097152, end=1955618814, disk end=1953525168)
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1545 GB / 1439 GiB)
The following partitions can't be recovered:
Mac HFS 17410261 3018849051 3001438791
HFS blocksize=67108864, 1536 GB / 1431 GiB
MS Data 295068000 2246252895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
MS Data 303986688 2255171583 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
MS Data 311712000 2262896895 1951184896
NTFS, blocksize=4096, 999 GB / 930 GiB
MS Data 1953521663 1955618814 2097152
NTFS, blocksize=4096, 1073 MB / 1024 MiB
Results
EFI System 2048 206847 204800 [EFI System Partition] [ESP]
FAT32, blocksize=1024, 104 MB / 100 MiB
MS Data 2054 206853 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
Mac HFS 41893398 41893911 514
HFS found using backup sector!, 263 KB / 257 KiB
Mac HFS 41893908 41894421 514
HFS blocksize=512, 263 KB / 257 KiB
Linux filesys. data 181326345 182698328 1371984 [GWケ、リォン歓ヘ(b枦Sワ]
cramfs, 702 MB / 669 MiB
Linux filesys. data 181326346 182698329 1371984 [GWケ、リォン歓ヘ(b枦Sワ]
cramfs, 702 MB / 669 MiB
MS Data 1949327361 1951424512 2097152
NTFS found using backup sector, blocksize=4096, 1073 MB / 1024 MiB
MS Data 1951424512 1953521663 2097152 [Recovery]
NTFS, blocksize=4096, 1073 MB / 1024 MiB
MS Data 1953461979 1953468152 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
MS Data 1953468152 1953474325 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
echo "0 204800 linear /dev/sda 2054" | dmsetup create test1
echo "0 514 linear /dev/sda 41893398" | dmsetup create test2
echo "0 514 linear /dev/sda 41893908" | dmsetup create test3
echo "0 1371984 linear /dev/sda 181326345" | dmsetup create test4
echo "0 1371984 linear /dev/sda 181326346" | dmsetup create test5
echo "0 2097152 linear /dev/sda 1949327361" | dmsetup create test6
echo "0 2097152 linear /dev/sda 1951424512" | dmsetup create test7
echo "0 6174 linear /dev/sda 1953461979" | dmsetup create test8
echo "0 6174 linear /dev/sda 1953468152" | dmsetup create test9
ntfs_mst_post_read_fixup_warn: magic: 0x00000000 size: 1024 usa_ofs: 0 usa_count: 0: Invalid argument
Record 0 has no FILE magic (0x0)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x00000000 size: 1024 usa_ofs: 0 usa_count: 0: Invalid argument
Record 0 has no FILE magic (0x0)
Failed to load $MFT: Input/output error