Page 1 of 1

testdisk crash during boot rebuild

Posted: 15 Mar 2017, 14:55
by archangel
Ok. I have a 3tb drive that I am working with. I know it was formatted causing loss of access to the data. Nothing written to the drive after.
Using testdisk I have went to "analyze ", advanced ", changed the type to what it would have been originally. Clicked "boot", "rebuild bs"

Now, after running many hours, and getting about a quarter of the way along.... the program just vanished from the screen. I have tried 3 times with the same results.

Running windows 7 ultimate.

Thanks for any ideas

Re: testdisk crash during boot rebuild

Posted: 16 Mar 2017, 18:25
by cgrenier
Did you try using latest 7.1-WIP ?
Please post the testdisk.log file content, it may contains some information about the problem

Re: testdisk crash during boot rebuild

Posted: 16 Mar 2017, 20:31
by archangel
I am currently trying 7.1 will update once it has ran. Thanks

Re: testdisk crash during boot rebuild

Posted: 16 Mar 2017, 23:18
by archangel
Ok. So looks like it died again. Here is the testdisk log.

Wed Mar 15 20:01:22 2017

Command line: TestDisk

 

TestDisk 7.1-WIP, Data Recovery Utility, August 2016

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

OS: Windows 7 (7600)

Compiler: GCC 5.4, Cygwin32 2005.2

ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=320072933376

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592982016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=320072933376

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592982016

filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive4

filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive5

filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive6

filewin32_getfilesize(\\.\PhysicalDrive7) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive7) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive7

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=250057064448

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=320071532544

filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\E:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=250058113024

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0

Warning: can't get size for \\.\H:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0

Warning: can't get size for \\.\I:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0

Warning: can't get size for \\.\J:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0

Warning: can't get size for \\.\K:

filewin32_getfilesize(\\.\L:) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\L:) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\L:

Hard disk list

Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - ST3250310AS, S/N:523645594343524c202020202020202020202020, FW:3.AHC

Disk /dev/sdb - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-00VWA0, S/N:2020202057202d44435752413057353430313136, FW:12.01B02

Disk /dev/sdc - 250 GB / 232 GiB - CHS 32301 240 63, sector size=512 - WDC WD2500JD-00HBB0, S/N:2020202057202d444d574c413237393736393431, FW:08.02D08

Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-1E6166, S/N:202020202020202020202020315734465a473339, FW:SC48

 

Partition table type (auto): Intel

Disk /dev/sdd - 3000 GB / 2794 GiB - ST3000DM001-1E6166

Partition table type: Intel

 

Analyse Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63

Geometry from i386 MBR: head=255 sector=63

check_part_i386 1 type EE: no test

Current partition structure:

 1 P EFI GPT                  0   0  2 267349  89  4 4294967295

No partition is bootable

 

search_part()

Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63

Error: size boot_sector 1565540352 > partition 4294967295

check_part_i386 failed for partition type 07

     HPFS - NTFS              1   5  5 267350  94  7 4294967295

file_pread(7,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument

file_pread(7,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument

Search for partition aborted

 

Results

   * HPFS - NTFS              1   5  5 267350  94  8 4294967296

 

interface_write()

 1 * HPFS - NTFS              1   5  5 267350  94  8 4294967296

simulate write!

 

write_mbr_i386: starting...

write_all_log_i386: starting...

No extended partition

 

Interface Advanced

Geometry from i386 MBR: head=255 sector=63

check_part_i386 1 type EE: no test

 1 P EFI GPT                  0   0  2 267349  89  4 4294967295

Change partition type:

 1 P HPFS - NTFS              0   0  2 267349  89  4 4294967295

 

ntfs_boot_sector

 1 P HPFS - NTFS              0   0  2 267349  89  4 4294967295

filesystem size           35 1

sectors_per_cluster       0 0

mft_lcn                   1565565838 0

mftmirr_lcn               3155090966 0

clusters_per_mft_record   -106 0

clusters_per_index_record -98 0

Boot sector

Status: Bad

 

Backup boot sector

Status: Bad

 

Sectors are not identical.

 

A valid NTFS Boot sector must be present in order to access

any data; even if the partition is not bootable.

rebuild_NTFS_BS

mft at 16399

read_mft_info failed

ntfs_find_mft: sectors_per_cluster invalid

ntfs_find_mft: mft_lcn             786432

ntfs_find_mft: mftmirr_lcn         2

ntfs_find_mft: mft_record_size     1024

 

Search mft stopped:      65536/4294967295

Failed to rebuild NTFS boot sector.

 

ntfs_boot_sector

 1 P HPFS - NTFS              0   0  2 267349  89  4 4294967295

filesystem size           35 1

sectors_per_cluster       0 0

mft_lcn                   1565565838 0

mftmirr_lcn               3155090966 0

clusters_per_mft_record   -106 0

clusters_per_index_record -98 0

Boot sector

Status: Bad

 

Backup boot sector

Status: Bad

 

Sectors are not identical.

 

A valid NTFS Boot sector must be present in order to access

any data; even if the partition is not bootable.

      9 [main] testdisk_win 5528 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

Re: testdisk crash during boot rebuild

Posted: 16 Mar 2017, 23:25
by archangel
Before this was accidentally formated, it was still lost, but at least I could see my files. This is the log from that point. ..

 

Mon Mar  6 17:13:42 2017

Command line: TestDisk

 

TestDisk 7.0, Data Recovery Utility, April 2015

Christophe GRENIER <grenier@cgsecurity.org>

http://www.cgsecurity.org

OS: Windows 7 (7600)

Compiler: GCC 4.8, Cygwin 1007.34

Compilation date: 2015-04-18T13:01:55

ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=320072933376

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdh)=3000592979968

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=320072933376

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=250059350016

filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive3

filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive4

filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive5

filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\PhysicalDrive6

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive7)=3000592979968

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=250057064448

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=320071532544

filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\E:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=250058113024

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=375072489472

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0

Warning: can't get size for \\.\H:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0

Warning: can't get size for \\.\I:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0

Warning: can't get size for \\.\J:

disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0

Warning: can't get size for \\.\K:

filewin32_getfilesize(\\.\L:) GetFileSize err Incorrect function.

 

filewin32_setfilepointer(\\.\L:) SetFilePointer err Incorrect function.

 

Warning: can't get size for \\.\L:

Hard disk list

Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512

Disk /dev/sdb - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512

Disk /dev/sdc - 250 GB / 232 GiB - CHS 32301 240 63, sector size=512

Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512

Drive C: - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512

Drive D: - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512

Drive F: - 250 GB / 232 GiB - CHS 32301 240 63, sector size=512

Drive G: - 375 GB / 349 GiB - CHS 45599 255 63, sector size=512

 

Partition table type (auto): Intel

Disk /dev/sdh - 3000 GB / 2794 GiB

Partition table type: Intel

 

Analyse Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 364801 255 63

Geometry from i386 MBR: head=255 sector=63

check_part_i386 failed for partition type 07

Current partition structure:

Invalid NTFS or EXFAT boot

 1 P HPFS - NTFS              0  32 33 45600  23 55  732563456

 1 P HPFS - NTFS              0  32 33 45600  23 55  732563456

No partition is bootable

 

search_part()

Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 364801 255 63

NTFS at 1/5/5

Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)

filesystem size           732563456

sectors_per_cluster       1

mft_lcn                   786432

mftmirr_lcn               2

clusters_per_mft_record   1

clusters_per_index_record 1

     HPFS - NTFS              1   5  5 364800 190 62 5860507648 [Seagate Expansion Drive]

     NTFS, blocksize=4096, 3000 GB / 2794 GiB

file_pread(7,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument

file_pread(7,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument

file_pread(7,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument

file_pread(7,14,buffer,1565566977(364801/98/35)) lseek err Invalid argument

file_pread(7,3,buffer,1565566991(364801/98/49)) lseek err Invalid argument

file_pread(7,3,buffer,1565567038(364801/99/33)) lseek err Invalid argument

file_pread(7,8,buffer,1565567054(364801/99/49)) lseek err Invalid argument

file_pread(7,11,buffer,1565567101(364801/100/33)) lseek err Invalid argument

file_pread(7,2,buffer,1565569023(364801/131/2)) lseek err Invalid argument

 

Results

   * HPFS - NTFS              1   5  5 364800 190 62 5860507648 [Seagate Expansion Drive]

     NTFS, blocksize=4096, 3000 GB / 2794 GiB

 

 

dir_partition inode=5

   * HPFS - NTFS              1   5  5 364800 190 62 5860507648 [Seagate Expansion Drive]

     NTFS, blocksize=4096, 3000 GB / 2794 GiB

Directory /

       5 dr-xr-xr-x     0      0         0  8-Feb-2017 17:00 .

       5 dr-xr-xr-x     0      0         0  8-Feb-2017 17:00 ..

  522003 dr-xr-xr-x     0      0         0 14-Apr-2016 20:39 $RECYCLE.BIN

  122583 dr-xr-xr-x     0      0         0 12-Oct-2014 06:55 ABE VOLUME CALCULATORS, CYLINDER_files

  299543 dr-xr-xr-x     0      0         0 13-Oct-2014 18:11 Isaac's Stories

  255893 dr-xr-xr-x     0      0         0 16-Nov-2015 18:45 MUSIC

  393778 dr-xr-xr-x     0      0         0 26-May-2016 00:07 My Documents4

  451036 dr-xr-xr-x     0      0         0 14-Oct-2014 13:15 My Videos

  463994 dr-xr-xr-x     0      0         0 14-Oct-2014 13:58 Outlook Express

      36 dr-xr-xr-x     0      0         0 14-Oct-2014 14:16 Seagate

  465971 dr-xr-xr-x     0      0         0 14-Oct-2014 13:59 Seagate Backup

  533270 dr-xr-xr-x     0      0         0  5-Nov-2014 14:32 System Volume Information

  451443 dr-xr-xr-x     0      0         0 14-Oct-2014 13:32 VIDEO_TS

     588 dr-xr-xr-x     0      0         0 11-Dec-2016 15:42 _incoming photos

  122548 dr-xr-xr-x     0      0         

And the rest of my files.

Can I get back to this point?

Thanks