Recovering Corrupted WIndows Partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
americomflores
Posts: 3
Joined: 07 May 2016, 08:17

Recovering Corrupted WIndows Partition

#1 Post by americomflores »

I need help to recover a Windows partition. The computer froze and I had to force the shutdown. Upon restart it wouldn`t boot. I used the Windows DVD to try to restore the files, I did a chkdsk, among other things. Nothing worked, so I used a LiveCD to run testdisk. I read the basics on how it works but I would love to get some help with it. When I go to the deep scan it seems to get stuck (I didn`t wait too much, should I wait more?) I will attach some screenshots. Sorry for my bad english :P
Attachments
Screenshot from 2016-05-07 04-33-24.png
Screenshot from 2016-05-07 04-33-24.png (182.93 KiB) Viewed 1499 times
Screenshot from 2016-05-07 04-36-56.png
Screenshot from 2016-05-07 04-36-56.png (184.7 KiB) Viewed 1499 times
Screenshot from 2016-05-07 04-37-21.png
Screenshot from 2016-05-07 04-37-21.png (178.55 KiB) Viewed 1499 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovering Corrupted WIndows Partition

#2 Post by cgrenier »

Please copy/paste the testdisk.log file content

americomflores
Posts: 3
Joined: 07 May 2016, 08:17

Re: Recovering Corrupted WIndows Partition

#3 Post by americomflores »

When writing the partition structure I get an error. [Partition: Write error]

The log was very long, I couldn`t attach it

Sat May 7 21:27:47 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.4.0-21-generic (#37-Ubuntu SMP Mon Apr 18 18:33:37 UTC 2016) x86_64
Compiler: GCC 5.3
ext2fs lib: 1.42.13, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 1953525168 sectors
/dev/sda: user_max 1953525168 sectors
/dev/sda: native_max 1953525168 sectors
/dev/sdb: LBA, HPA, LBA48, DCO support
/dev/sdb: size 43975008 sectors
/dev/sdb: user_max 43975008 sectors
/dev/sdb: native_max 43975008 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MQ01ABD100, S/N:54RAS5W9S, FW:AX0R2J
Disk /dev/sdb - 22 GB / 20 GiB - CHS 2737 255 63, sector size=512 - SG9MSM6D024GPM00, S/N:F14B0746194200070466, FW:S8FM05.3
Disk /dev/sdc - 4007 MB / 3821 MiB - CHS 1018 124 62, sector size=512 - Kingston DT 101 G2, FW:PMAP

Partition table type (auto): EFI GPT
Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA MQ01ABD100
Partition table type: EFI GPT

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
hdr_size=92
hdr_lba_self=1953525167
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=1953525135
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
Trying alternate GPT
1 P EFI System 2048 206847 204800 [EFI system partition]
2 P Unknown 206848 2050047 1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
4 P MS Data 2312192 782796799 780484608 [Basic data partition]
5 P Unknown 782796800 783718399 921600
6 P MS Data 783718400 1911560191 1127841792 [Basic data partition]
7 P Unknown 1911560192 1953523711 41963520 [Basic data partition]
Current partition structure:
Trying alternate GPT
1 P EFI System 2048 206847 204800 [EFI system partition]
2 P Unknown 206848 2050047 1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
4 P MS Data 2312192 782796799 780484608 [Basic data partition]
5 P Unknown 782796800 783718399 921600
6 P MS Data 783718400 1911560191 1127841792 [Basic data partition]
7 P Unknown 1911560192 1953523711 41963520 [Basic data partition]

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
file_pread(4,16,buffer,10239(0/162/34)) read err: Partial read
fat32_set_part_name() cannot read FAT32 root cluster.
set_FAT_info: name from BS used

FAT32 at 0/32/33
MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=105906176, part_size=943718400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/20
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 143/236/30
filesystem size 780484608
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1183842304, part_size=399608119296, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 143/236/30
filesystem size 780484608
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
NTFS at 48726/216/3
filesystem size 921600
sectors_per_cluster 8
mft_lcn 38400
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
NTFS at 48726/216/3
filesystem size 921600
sectors_per_cluster 8
mft_lcn 38400
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
NTFS at 48784/54/39
filesystem size 1127841792
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=401263820800, part_size=577454997504, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 48784/54/39
filesystem size 1127841792
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
NTFS at 118989/30/18
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
NTFS at 118989/30/18
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB

Results
P MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
P MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
echo "0 1843200 linear /dev/sda 206848" | dmsetup create test1
echo "0 780484608 linear /dev/sda 2312192" | dmsetup create test2
echo "0 921600 linear /dev/sda 781875201" | dmsetup create test3
echo "0 921600 linear /dev/sda 782796800" | dmsetup create test4
echo "0 1127841792 linear /dev/sda 783718400" | dmsetup create test5
echo "0 41963520 linear /dev/sda 1869596673" | dmsetup create test6
echo "0 41963520 linear /dev/sda 1911560192" | dmsetup create test7

interface_write()
1 P MS Data 2048 206847 204800 [NO NAME]
2 P MS Data 206848 2050047 1843200
3 P MS Data 2312192 782796799 780484608
4 P MS Data 782796800 783718399 921600
5 P MS Data 783718400 1911560191 1127841792
6 P MS Data 1911560192 1953523711 41963520
write!
file_pwrite(4,32,buffer,2(0/0/3)) write err Input/output error

Partition: Write error

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(4,1,buffer,1(0/0/2)) read err: Input/output error
hdr_size=92
hdr_lba_self=1953525167
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=1953525135
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
Trying alternate GPT
1 P EFI System 2048 206847 204800 [EFI system partition]
2 P Unknown 206848 2050047 1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
4 P MS Data 2312192 782796799 780484608 [Basic data partition]
5 P Unknown 782796800 783718399 921600
6 P MS Data 783718400 1911560191 1127841792 [Basic data partition]
7 P Unknown 1911560192 1953523711 41963520 [Basic data partition]
Current partition structure:
Trying alternate GPT
1 P EFI System 2048 206847 204800 [EFI system partition]
2 P Unknown 206848 2050047 1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
4 P MS Data 2312192 782796799 780484608 [Basic data partition]
5 P Unknown 782796800 783718399 921600
6 P MS Data 783718400 1911560191 1127841792 [Basic data partition]
7 P Unknown 1911560192 1953523711 41963520 [Basic data partition]

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
file_pread(4,16,buffer,10239(0/162/34)) read err: Partial read
fat32_set_part_name() cannot read FAT32 root cluster.
set_FAT_info: name from BS used

FAT32 at 0/32/33
MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=105906176, part_size=943718400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/20
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 143/236/30
filesystem size 780484608
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1183842304, part_size=399608119296, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 143/236/30
filesystem size 780484608
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
NTFS at 48726/216/3
filesystem size 921600
sectors_per_cluster 8
mft_lcn 38400
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
NTFS at 48726/216/3
filesystem size 921600
sectors_per_cluster 8
mft_lcn 38400
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
NTFS at 48784/54/39
filesystem size 1127841792
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=401263820800, part_size=577454997504, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 48784/54/39
filesystem size 1127841792
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
NTFS at 118989/30/18
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
NTFS at 118989/30/18
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB

Results
P MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
P MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
echo "0 1843200 linear /dev/sda 206848" | dmsetup create test1
echo "0 780484608 linear /dev/sda 2312192" | dmsetup create test2
echo "0 921600 linear /dev/sda 781875201" | dmsetup create test3
echo "0 921600 linear /dev/sda 782796800" | dmsetup create test4
echo "0 1127841792 linear /dev/sda 783718400" | dmsetup create test5
echo "0 41963520 linear /dev/sda 1869596673" | dmsetup create test6
echo "0 41963520 linear /dev/sda 1911560192" | dmsetup create test7


dir_partition inode=0
P MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
FAT: cluster=2(0x2), pos=10240
file_pread(4,16,buffer,10240(0/162/35)) read err: Input/output error
file_pread(4,1,buffer,10240(0/162/35)) read err: Input/output error
FAT: Can't read directory cluster.
Directory /

interface_write()
1 P MS Data 206848 2050047 1843200
simulate write!

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(4,1,buffer,1(0/0/2)) read err: Input/output error
hdr_size=92
hdr_lba_self=1953525167
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=1953525135
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
Trying alternate GPT
1 P EFI System 2048 206847 204800 [EFI system partition]
2 P Unknown 206848 2050047 1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
4 P MS Data 2312192 782796799 780484608 [Basic data partition]
5 P Unknown 782796800 783718399 921600
6 P MS Data 783718400 1911560191 1127841792 [Basic data partition]
7 P Unknown 1911560192 1953523711 41963520 [Basic data partition]
Current partition structure:
Trying alternate GPT
1 P EFI System 2048 206847 204800 [EFI system partition]
2 P Unknown 206848 2050047 1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
3 P MS Reserved 2050048 2312191 262144 [Microsoft reserved partition]
4 P MS Data 2312192 782796799 780484608 [Basic data partition]
5 P Unknown 782796800 783718399 921600
6 P MS Data 783718400 1911560191 1127841792 [Basic data partition]
7 P Unknown 1911560192 1953523711 41963520 [Basic data partition]

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
file_pread(4,16,buffer,10239(0/162/34)) read err: Partial read
fat32_set_part_name() cannot read FAT32 root cluster.
set_FAT_info: name from BS used

FAT32 at 0/32/33
MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=105906176, part_size=943718400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/20
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 143/236/30
filesystem size 780484608
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1183842304, part_size=399608119296, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 143/236/30
filesystem size 780484608
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
NTFS at 48726/216/3
filesystem size 921600
sectors_per_cluster 8
mft_lcn 38400
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
NTFS at 48726/216/3
filesystem size 921600
sectors_per_cluster 8
mft_lcn 38400
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
NTFS at 48784/54/39
filesystem size 1127841792
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=401263820800, part_size=577454997504, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 48784/54/39
filesystem size 1127841792
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
NTFS at 118989/30/18
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
NTFS at 118989/30/18
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB

Results
P MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
P MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
echo "0 1843200 linear /dev/sda 206848" | dmsetup create test1
echo "0 780484608 linear /dev/sda 2312192" | dmsetup create test2
echo "0 921600 linear /dev/sda 781875201" | dmsetup create test3
echo "0 921600 linear /dev/sda 782796800" | dmsetup create test4
echo "0 1127841792 linear /dev/sda 783718400" | dmsetup create test5
echo "0 41963520 linear /dev/sda 1869596673" | dmsetup create test6
echo "0 41963520 linear /dev/sda 1911560192" | dmsetup create test7


dir_partition inode=0
P MS Data 2048 206847 204800 [NO NAME]
FAT32, blocksize=1024, 104 MB / 100 MiB
FAT: cluster=2(0x2), pos=10240
file_pread(4,16,buffer,10240(0/162/35)) read err: Input/output error
file_pread(4,1,buffer,10240(0/162/35)) read err: Input/output error
FAT: Can't read directory cluster.
Directory /
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
P MS Data 206848 2050047 1843200
NTFS, blocksize=4096, 943 MB / 900 MiB
Directory /
5 dr-xr-xr-x 0 0 0 14-Jun-2014 11:56 .
5 dr-xr-xr-x 0 0 0 14-Jun-2014 11:56 ..
35 dr-xr-xr-x 0 0 0 4-May-2016 21:05 Boot
39 dr-xr-xr-x 0 0 0 3-Jul-2012 07:24 EFI
113 dr-xr-xr-x 0 0 0 14-Jun-2014 10:38 FACLog
101 dr-xr-xr-x 0 0 0 14-Jun-2014 11:55 Recovery
48 dr-xr-xr-x 0 0 0 14-Jun-2014 11:39 Sources
111 dr-xr-xr-x 0 0 0 13-Jan-2016 21:24 System Volume Information
47 dr-xr-xr-x 0 0 0 3-Jul-2012 07:27 en-us
116 -r--r--r-- 0 0 2361 14-Jun-2014 10:38 AsFac.log
102 -r--r--r-- 0 0 617 12-Aug-2013 11:03 AsPartition.ini
109 -r--r--r-- 0 0 8361 14-Jun-2014 11:06 AsTCDProc_20140614030655.log
119 -r--r--r-- 0 0 8590 14-Jun-2014 11:56 AsTCDProc_20140614035654.log
108 -r--r--r-- 0 0 57 14-Jun-2014 11:56 AsTool.state
107 -r--r--r-- 0 0 44 15-Aug-2013 10:54 AsToolCDVer.txt
105 -r--r--r-- 0 0 1383 14-Jun-2014 10:25 DetectResult.ini
110 -r--r--r-- 0 0 28807 14-Jun-2014 11:06 FAC1_dism.log
120 -r--r--r-- 0 0 8074856 14-Jun-2014 11:55 FAC3_dism.log
121 -r--r--r-- 0 0 6 14-Jun-2014 11:56 PASS.txt
103 -r--r--r-- 0 0 183 13-Aug-2013 01:57 SWPackage.ini
104 -r--r--r-- 0 0 332 31-Jul-2013 08:02 ToolDL.ini
49 -r--r--r-- 0 0 398156 25-Jul-2012 12:44 bootmgr
50 -r--r--r-- 0 0 1350896 25-Jul-2012 13:57 bootmgr.efi
ntfs_device_testdisk_io_ioctl() unimplemented
NTFS Volume is dirty.


dir_partition inode=5
MS Data 2312192 782796799 780484608
NTFS, blocksize=4096, 399 GB / 372 GiB
file_pread(4,16,buffer,339978258(21162/170/19)) read err: Partial read
file_pread(4,16,buffer,8603682(535/141/25)) read err: Partial read
Directory /
5 dr-xr-xr-x 0 0 0 4-May-2016 21:06 .
5 dr-xr-xr-x 0 0 0 4-May-2016 21:06 ..
267990 dr-xr-xr-x 0 0 0 8-Jan-2015 02:09 $Recycle.Bin
35468 dr-xr-xr-x 0 0 0 2-Mar-2016 02:03 Arquivos de Programas RFB
87963 dr-xr-xr-x 0 0 0 2-Nov-2015 01:44 Bluestacks
ntfs_mst_post_read_fixup_warn: magic: 0x00000000 size: 1024 usa_ofs: 0 usa_count: 65535: Invalid argument
Record 0 has no FILE magic (0x0)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x00000000 size: 1024 usa_ofs: 0 usa_count: 65535: Invalid argument
Record 0 has no FILE magic (0x0)
Failed to load $MFT: Input/output error
37 dr-xr-xr-x 0 0 0 25-Apr-2013 23:30 Boot
36387 dr-xr-xr-x 0 0 0 3-May-2016 16:21 Config.Msi
170427 dr-xr-xr-x 0 0 0 29-Jul-2015 05:05 GOG Games
160410 dr-xr-xr-x 0 0 0 14-Jun-2014 10:14 Intel
142767 dr-xr-xr-x 0 0 0 7-Jul-2015 18:13 LinhaDefensiva
268956 dr-xr-xr-x 0 0 0 17-Dec-2014 21:56 MSOCache
145871 dr-xr-xr-x 0 0 0 10-Jul-2015 11:04 PerfLogs
145872 dr-xr-xr-x 0 0 0 4-May-2016 18:52 Program Files
150634 dr-xr-xr-x 0 0 0 25-Apr-2016 23:45 Program Files (x86)
150725 dr-xr-xr-x 0 0 0 21-Apr-2016 04:21 ProgramData
177192 dr-xr-xr-x 0 0 0 4-May-2016 21:06 Recovery
1610 dr-xr-xr-x 0 0 0 3-Apr-2015 01:40 RegBackup
111997 dr-xr-xr-x 0 0 0 27-Jul-2015 22:32 Sandbox
164199 dr-xr-xr-x 0 0 0 5-May-2016 06:51 System Volume Information
10189 dr-xr-xr-x 0 0 0 3-May-2016 16:22 Temp
150991 dr-xr-xr-x 0 0 0 8-Aug-2015 18:18 Users
151050 dr-xr-xr-x 0 0 0 4-May-2016 18:52 Windows
163400 dr-xr-xr-x 0 0 0 14-Jun-2014 10:28 eSupport
17 dr-xr-xr-x 0 0 0 23-Apr-2016 20:25 found.000
25 dr-xr-xr-x 0 0 0 5-May-2016 06:15 found.001
267363 dr-xr-xr-x 0 0 0 14-Dec-2014 00:37 sources
59102 dr-xr-xr-x 0 0 0 27-Jul-2015 21:45 testdisk-7.0
8822 -r--r--r-- 0 0 1024 4-Apr-2015 01:29 .rnd
186436 -r--r--r-- 0 0 1 10-Jul-2015 11:00 BOOTNXT
9520 -r--r--r-- 0 0 1528 17-Jul-2015 18:44 DelFix.txt
161128 -r--r--r-- 0 0 6293504 17-May-2013 03:23 K46CA.BIN
161129 -r--r--r-- 0 0 6293504 17-May-2013 03:50 K46CM.BIN
18921 -r--r--r-- 0 0 0 5-May-2016 06:31 Recovery.txt
36021 -r--r--r-- 0 0 398156 26-Jul-2012 03:44 bootmgr
19765 -r--r--r-- 0 0 305 26-Dec-2015 22:43 cleaner.bat
84 -r--r--r-- 0 0 2528972800 4-May-2016 16:35 hiberfil.sys
13933 -r--r--r-- 0 0 1543503872 3-May-2016 16:21 pagefile.sys
10736 -r--r--r-- 0 0 268435456 3-May-2016 16:21 swapfile.sys
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

MS Data 781875201 782796800 921600
NTFS found using backup sector, blocksize=4096, 471 MB / 450 MiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
MS Data 782796800 783718399 921600
NTFS, blocksize=4096, 471 MB / 450 MiB
Directory /
5 dr-xr-xr-x 0 0 0 4-May-2016 18:16 .
5 dr-xr-xr-x 0 0 0 4-May-2016 18:16 ..
35 dr-xr-xr-x 0 0 0 8-Aug-2015 18:05 Recovery
40 dr-xr-xr-x 0 0 0 13-Jan-2016 21:24 System Volume Information
44 -r--r--r-- 0 0 0 5-May-2016 06:29 Recovery.txt
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
MS Data 783718400 1911560191 1127841792
NTFS, blocksize=4096, 577 GB / 537 GiB
Directory /
5 dr-xr-xr-x 0 0 0 3-May-2016 02:50 .
5 dr-xr-xr-x 0 0 0 3-May-2016 02:50 ..
37 dr-xr-xr-x 0 0 0 14-Dec-2014 05:46 $RECYCLE.BIN
12232 dr-xr-xr-x 0 0 0 11-Dec-2015 03:48 Config.Msi
2876 dr-xr-xr-x 0 0 0 13-Mar-2016 21:16 Filmes
2350 dr-xr-xr-x 0 0 0 10-Apr-2016 21:45 Filmes e Séries
123 dr-xr-xr-x 0 0 ntfs_mst_post_read_fixup_warn: magic: 0xf33b3911 size: 1024 usa_ofs: 2633 usa_count: 17074: Invalid argument
Record 0 has no FILE magic (0xf33b3911)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0xf33b3911 size: 1024 usa_ofs: 2633 usa_count: 17074: Invalid argument
Record 0 has no FILE magic (0xf33b3911)
Failed to load $MFT: Input/output error
0 10-Apr-2016 21:40 Simpsons
35 dr-xr-xr-x 0 0 0 13-Jan-2016 21:30 System Volume Information
2548 dr-xr-xr-x 0 0 0 22-Feb-2016 00:49 The Beatles
44 dr-xr-xr-x 0 0 0 27-Jul-2015 05:51 msdownld.tmp
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

MS Data 1869596673 1911560192 41963520
NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
MS Data 1911560192 1953523711 41963520
NTFS, blocksize=4096, 21 GB / 20 GiB
Directory /
5 dr-xr-xr-x 0 0 0 14-Jun-2014 11:55 .
5 dr-xr-xr-x 0 0 0 14-Jun-2014 11:55 ..
39 dr-xr-xr-x 0 0 0 14-Jun-2014 11:39 RecoveryBoot
49 dr-xr-xr-x 0 0 0 8-Aug-2015 18:37 RecoveryImage
45 dr-xr-xr-x 0 0 0 13-Jan-2016 21:24 System Volume Information
35 -r--r--r-- 0 0 108 26-Apr-2013 00:49 ASHDI_N-SA-WN8S6-32.00_03.01.md5
36 -r--r--r-- 0 0 94720 2-May-2013 05:08 ASHDI_N-SA-WN8S6-32.00_03.01.xls
40 -r--r--r-- 0 0 153 26-Jul-2013 18:02 AsKit64.md5
38 -r--r--r-- 0 0 48 12-Jun-2014 11:25 Driver64.md5
42 -r--r--r-- 0 0 107207 12-Jun-2014 11:25 FileList.txt
43 -r--r--r-- 0 0 123122 12-Jun-2014 11:25 Inst.ini
44 -r--r--r-- 0 0 263 12-Jun-2014 11:25 release.txt

interface_write()
1 P MS Data 206848 2050047 1843200
2 P MS Data 2312192 782796799 780484608
3 P MS Data 782796800 783718399 921600
4 P MS Data 783718400 1911560191 1127841792
5 P MS Data 1911560192 1953523711 41963520
Attachments
If I delete the partitions without files it looks like this.
If I delete the partitions without files it looks like this.
Screenshot from 2016-05-07 21-35-23.png (225.63 KiB) Viewed 1486 times

americomflores
Posts: 3
Joined: 07 May 2016, 08:17

Re: Recovering Corrupted WIndows Partition

#4 Post by americomflores »

tomhackth wrote:Hello Americomflores,

Few days back, I had faced the similar issue. I also tried various methods such as test disk tool, etc. do get my data back, but unfortunately, it didn’t work for me. So, I decided to go for the windows data recovery software tool and I have downloaded it online. I found it the safest and the easiest method to recover the lost data files. I recommend you to go with the paid software rather than opting for the free one.
I got to recover some files with MiniTool, but I would like to recover the partitions, and it seems to be so close to doing so...
Is there anyone who knows how to write the partition without the error? And thanks for TestDisk, it's really great!

Locked