after i restored it with test disk all seems fine.
can i continue normal work with the partition or should i make a backup and then restore the filesystem from scratch?
there are also errors shown in the testdisk log:
Code: Select all
Wed Sep 7 14:37:50 2016
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000395698176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000395698176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=35311845376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=214745219072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=13925089280
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63, sector size=512
Drive C: - 35 GB / 32 GiB - CHS 4293 255 63, sector size=512
Drive D: - 214 GB / 199 GiB - CHS 26107 255 63, sector size=512
Drive W: - 13 GB / 12 GiB - CHS 13280 64 32, sector size=512
Partition table type default to Intel
Disk /dev/sdb - 2000 GB / 1863 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63
Current partition structure:
No partition is bootable
search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63
BAD_RS LBA=1544316556 4408265
file_pread(5,3,buffer,1544316556(363478/155/18)) lseek err Invalid argument
file_pread(5,1,buffer,1544316556(363478/155/18)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 363478 155 18 427622 11 8 1030464279
This partition ends after the disk limits. (start=5839283852, size=1030464279, end=6869748130, disk end=3907022848)
NTFS at 243199/254/63
filesystem size 3907007937
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 244187996
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 243199 254 63 3907007937
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 243199/254/63
filesystem size 3907007937
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 244187996
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(5,1024,buffer,3913302527(243591/208/9)) lseek err Invalid argument
file_pread(5,1,buffer,3913302527(243591/208/9)) lseek err Invalid argument
NTFS: Can't read MFT
HPFS - NTFS 243199 254 63 486399 253 62 3907007937
NTFS, blocksize=4096, 2000 GB / 1863 GiB
This partition ends after the disk limits. (start=3907007999, size=3907007937, end=7814015935, disk end=3907022848)
file_pread(5,2,buffer,3907022848(243200/235/44)) ReadFile Unzulässige Funktion.
file_pread(5,1,buffer,3907022848(243200/235/44)) ReadFile Unzulässige Funktion.
file_pread(5,14,buffer,3907022849(243200/235/45)) lseek err Invalid argument
file_pread(5,1,buffer,3907022849(243200/235/45)) lseek err Invalid argument
file_pread(5,8,buffer,3907022855(243200/235/51)) lseek err Invalid argument
file_pread(5,3,buffer,3907022863(243200/235/59)) lseek err Invalid argument
file_pread(5,3,buffer,3907022910(243200/236/43)) lseek err Invalid argument
file_pread(5,8,buffer,3907022926(243200/236/59)) lseek err Invalid argument
file_pread(5,11,buffer,3907022973(243200/237/43)) lseek err Invalid argument
file_pread(5,2,buffer,3907024895(243201/13/12)) lseek err Invalid argument
file_pread(5,14,buffer,3907022850(243200/235/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907022866(243200/235/62)) lseek err Invalid argument
file_pread(5,1,buffer,3907022913(243200/236/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907022934(243200/237/4)) lseek err Invalid argument
file_pread(5,1,buffer,3907022984(243200/237/54)) lseek err Invalid argument
file_pread(5,1,buffer,3907024897(243201/13/14)) lseek err Invalid argument
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243200 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 4000 GB / 3726 GiB)
The following partitions can't be recovered:
HPFS - NTFS 243199 254 63 486399 253 62 3907007937
NTFS, blocksize=4096, 2000 GB / 1863 GiB
FAT12 363478 155 18 427622 11 8 1030464279
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 243199 254 63 3907007937
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 243199 254 63 3907007937
write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 243199 254 63 3907007937
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/1/1
filesystem size 1 3907007937
sectors_per_cluster 0 8
mft_lcn 0 786432
mftmirr_lcn 0 244187996
clusters_per_mft_record 0 -10
clusters_per_index_record 0 1
Boot sector
Status: Bad
Backup boot sector
Status: OK
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
copy backup boot sector over boot sector
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 243199 254 63 3907007937
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/1/1
NTFS at 0/1/1
filesystem size 3907007937
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 244187996
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
You will have to reboot for the change to take effect.
TestDisk exited normally.