Disque externe inaccessible

Utiliser TestDisk pour réparer le système de fichier
Locked
Message
Author
Damsee
Posts: 2
Joined: 05 Feb 2017, 19:23

Disque externe inaccessible

#1 Post by Damsee »

Hello,

Mon disque est passé en mode RAW et j'ai tenté une réparation via testdisk qui n'a pas fonctionné (options Backup BS et rebuild BS).
TestDisk voit bien le disque et l'unique partition NTFS dessus mais la MFT semble KO. J'ai essayé le rebuild BS de nouveau mais il s'arrête en milieu d'opération et le disque est désormais inaccessible avec l'erreur "La structure du disque est endommagée et illisible".

Vous trouverez ci-dessous le résultat des derniers logs (Rebuild BS qui s'arrête en milieu d'opération)

testdisk.log :

Code: Select all


Sun Feb  5 15:20:24 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246111272960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000199946240
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 246 GB / 229 GiB - CHS 29921 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
filesystem size           1953514924
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
repair_MFT
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
filesystem size           1953514924
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Partition table type (auto): EFI GPT
Disk /dev/sda - 256 GB / 238 GiB
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=500118191 (expected 500118191)
hdr_lba_start=34
hdr_lba_end=500118158
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 3 P MS Reserved              1107968    1370111     262144 [Microsoft reserved partition]
 1 P EFI System                  2048    1026047    1024000 [EFI system partition]
 2 P Unknown                  1026048    1107967      81920 [Basic data partition]
 3 P MS Reserved              1107968    1370111     262144 [Microsoft reserved partition]
 4 P Unknown                  1370112    2906111    1536000 [Basic data partition]
 5 P MS Data                  2906112  483592191  480686080 [Basic data partition]
     NTFS, blocksize=4096, 246 GB / 229 GiB
 6 P Unknown                483592192  484513791     921600
 7 P Unknown                484513792  500116143   15602352 [Microsoft recovery partition]

Analyse Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=500118191 (expected 500118191)
hdr_lba_start=34
hdr_lba_end=500118158
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 3 P MS Reserved              1107968    1370111     262144 [Microsoft reserved partition]
Current partition structure:
 1 P EFI System                  2048    1026047    1024000 [EFI system partition]
 2 P Unknown                  1026048    1107967      81920 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 3 P MS Reserved              1107968    1370111     262144 [Microsoft reserved partition]
 3 P MS Reserved              1107968    1370111     262144 [Microsoft reserved partition]
 4 P Unknown                  1370112    2906111    1536000 [Basic data partition]
 5 P MS Data                  2906112  483592191  480686080 [Basic data partition]
 6 P Unknown                483592192  484513791     921600
 7 P Unknown                484513792  500116143   15602352 [Microsoft recovery partition]

search_part()
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63
FAT32 at 0/32/33
FAT1 : 6206-7198
FAT2 : 7199-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-1023999
sectors : 1024000
cluster_size : 8
no_of_cluster : 126976 (2 - 126977)
fat_length 993 calculated 993

FAT32 at 0/32/33
     MS Data                     2048    1026047    1024000 [ESP]
     FAT32, blocksize=4096, 524 MB / 500 MiB
FAT32 at 63/221/31
FAT1 : 7038-7614
FAT2 : 7615-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-81919
sectors : 81920
cluster_size : 1
no_of_cluster : 73728 (2 - 73729)
fat_length 577 calculated 577

FAT32 at 63/221/31
     MS Data                  1026048    1107967      81920 [DIAGS]
     FAT32, blocksize=512, 41 MB / 40 MiB
NTFS at 85/72/52
filesystem size           1536000
sectors_per_cluster       8
mft_lcn                   64000
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=701497344, part_size=786432000, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 85/72/52
filesystem size           1536000
sectors_per_cluster       8
mft_lcn                   64000
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                  1370112    2906111    1536000
     NTFS, blocksize=4096, 786 MB / 750 MiB
NTFS at 180/228/49
filesystem size           480686080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=1487929344, part_size=246111272960, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 180/228/49
filesystem size           480686080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                  2906112  483592191  480686080
     NTFS, blocksize=4096, 246 GB / 229 GiB
Search for partition aborted

Results
   P MS Data                     2048    1026047    1024000 [ESP]
     FAT32, blocksize=4096, 524 MB / 500 MiB
   P MS Data                  1026048    1107967      81920 [DIAGS]
     FAT32, blocksize=512, 41 MB / 40 MiB
   P MS Data                  1370112    2906111    1536000
     NTFS, blocksize=4096, 786 MB / 750 MiB
   P MS Data                  2906112  483592191  480686080
     NTFS, blocksize=4096, 246 GB / 229 GiB

interface_write()
 1 P MS Data                     2048    1026047    1024000 [ESP]
 2 P MS Data                  1026048    1107967      81920 [DIAGS]
 3 P MS Data                  1370112    2906111    1536000
 4 P MS Data                  2906112  483592191  480686080
simulate write!
Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
filesystem size           1953514924
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
repair_MFT
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
NTFS at 0/32/33
Info: size boot_sector 1953514924, partition 1953515520
filesystem size           1953514924
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

TestDisk exited normally.



Sun Feb  5 19:11:40 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246111272960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000199946240
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 246 GB / 229 GiB - CHS 29921 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.



Sun Feb  5 19:18:49 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246111272960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000199946240
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 246 GB / 229 GiB - CHS 29921 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: EFI GPT

Interface Advanced
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=1000199946240, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048 1953517567 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,1,buffer,1953525168(121601/81/1)) ReadFile Le lecteur ne trouve pas le secteur demandé.

file_pread(5,1,buffer,1953525169(121601/81/2)) lseek err Invalid argument
...
file_pread(5,1,buffer,1953526900(121601/108/32)) lseek err Invalid argument
file_pread(5,1,buffer,1953526901(121601/108/33)) lseek err Invalid argument
file_pread($MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
5,1,buffer,1953526902(121601/108/34)) lseek err Invalid argument
file_pread(5,1,buffer,1953526903(121601/108/35)) lseek err Invalid argument
....
file_pread(5,1,buffer,1953525168(121601/81/1)) ReadFile Le lecteur ne trouve pas le secteur demandé.
file_pread(5,1,buffer,1953527217(121601/113/34)) lseek err Invalid argument

Results
   P MS Data                     2048 1953517567 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

   P MS Data                     2048 1953517567 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                     2048 1953517567 1953515520
simulate write!

TestDisk exited normally.



Sun Feb  5 19:19:46 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246111272960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000199946240
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 246 GB / 229 GiB - CHS 29921 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
      1 [main] testdisk_win 6324 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump




Sun Feb  5 23:12:47 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246111272960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000199946240
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 246 GB / 229 GiB - CHS 29921 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
      1 [main] testdisk_win 5068 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

stackdump :

Code: Select all

Exception: STATUS_ACCESS_VIOLATION at eip=0043E5A6
eax=00000000 ebx=200A8958 ecx=0079B8DE edx=D07000DD esi=3E02B363 edi=00000000
ebp=200A8460 esp=0079B210 program=C:\testdisk-7.0\testdisk_win.exe, pid 5068, thread main
cs=0023 ds=002B es=002B fs=0053 gs=002B ss=002B
Stack trace:
Frame     Function  Args
200A8460  0043E5A6 (00000000, 00000000, 00000000, 00000000)
End of stack trace
J'ai essayé l'option de réparation MFT mais j'obtiens l'erreur suivante : "MFT and MFT mirror are bad. Failed to repair them."
Par ailleurs, impossible de lire les fichiers via l'option "p", le système de fichiers affiche une erreur "Can't open filesystem. Filesystem seems damaged". Impossible de faire un chkdsk sur le disque car windows ne peut pas accéder à la partition.

Si qqun a une idée car je sèche... Merci d'avance

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Disque externe inaccessible

#2 Post by cgrenier »

Pouvez-vous retester avec TestDisk 7.1-WIP ?
Si cela ne marche pas mieux, vous pouvez utiliser photorec en selectionnant la partition, Search puis [Whole] au lieu de [Free], cela va récupérer la majorité des données mais sans les noms de fichiers ou répertoires.

Damsee
Posts: 2
Joined: 05 Feb 2017, 19:23

Re: Disque externe inaccessible

#3 Post by Damsee »

Bonsoir Christophe,

Merci pour votre retour.
Je viens donc d'essayer la version 7.1-WIP (64 bits) et vous trouverez la log testdisk.txt ci-dessous :

Code: Select all


Wed Feb  8 19:42:02 2017
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=246111272960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000199946240
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - SAMSUNG SSD PM851 2.5 7mm 256GB, S/N:S1CUNYAFC16618, FW:EXT08D0Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MQ01ABD100, S/N:X3RSSRJSS, FW:8001

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - TOSHIBA MQ01ABD100
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
repair_MFT
NTFS at 0/32/33
MFT and MFT mirror match perfectly.
MFT and MFT mirror match perfectly.

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size           1953515520
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,2,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,7,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525768(121601/90/34)) lseek err Invalid argument
file_pread(5,3,buffer,1953525776(121601/90/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953525823(121601/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525839(121601/91/42)) lseek err Invalid argument
file_pread(5,11,buffer,1953525886(121601/92/26)) lseek err Invalid argument
file_pread(5,2,buffer,1953527808(121601/122/58)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0  32 33 121600 215 23 1953515520
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 * HPFS - NTFS              0  32 33 121600 215 23 1953515520
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Les boot sector et MFT semblent en bon état d'après les messages "Sectors are identical." et "MFT and MFT mirror match perfectly.".
Je constate néanmoins les erreurs suivantes j'essaye d'afficher les fichiers :
1/
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
2/
Can't open filesystem. Filesystem seems damaged.

Quelle autre option puis-je envisager ? Je n'ai pas lancé le RebuildBS mais est-ce utile dans ce cas ?

Côté photorec, l'utilitaire va t-il recopier l'ensemble des fichiers sur la destination ? (car je n'ai pas d'autre disque de 1To pour recopier les données...). Quand vous dites sans les noms de fichiers ni de répertoire, conservons-nous la structure des répertoires ? ou tous les fichiers sont recopiés à la racine de la destination ? Conservons-nous les attributs de fichiers (date de création/modification) afin de retrouver et faire du tri ?

Merci pour votre retour

Locked