I think I screwed up

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
scoticus
Posts: 6
Joined: 17 Feb 2018, 21:59

I think I screwed up

#1 Post by scoticus »

Brief history, I had two partitions on a hard drive (created by the manufacturer). It was getting to the point where having two was pointless, so I decided to combine them with Easeus partition master. While running on the combine step of the recovery (which I was removing because the rec partition was for a different os altogether) the power shut off. When I started back up, received the missing operating system message. Got testdisk and ran it. At first I don't think it saw the missing partition, so ran it in deeper. After running deeper, it came up with a bunch of partitions. I chose the one that looked most correct, and went to write. That didn't work. When I checked with another partitioning application, it said that there was partitions overlapping.

At this point I decided to cut my losses and recover what I could. I bought getdataback, and ran it and recovered some of the files, but of course none of the ones that I actually really need, they're just not showing up at all. So now I'm going back and trying testdisk again to see if I can fix the issue. This is where I realized I'm probably an idiot and should ask for help. So I guess what I'm asking is, based on what I've done so far, where should I go next? I'm currently running another test disk analyze on deep mode to try again, so will post the screenshot here. Would love to be able to post you the log of the original, but only had the one thumb drive and already copied over it. I've slept about 2 hours in the last 2 days, so really hoping to get something out of this. Please help me!

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: I think I screwed up

#2 Post by cgrenier »

When testdisk lists the partition, you can try 'p' to list the files.
This may help to recover the correct partitions.
If nothing works, you can always use latest PhotoRec 7.1-WIP on whole disk. If you recover few valid files, as you have move/merge/... the partitions, you may have to enable the expert mode in options and choose a blocksize of 512 bytes, use the default options otherwise.

scoticus
Posts: 6
Joined: 17 Feb 2018, 21:59

Re: I think I screwed up

#3 Post by scoticus »

Hey, thanks so much for getting back to me. I'm currently running photorec right now. It's been running for 20 hours and found around 123k text files (I'm looking for arduino INO files, specifically one I worked about 2 months on). I tried running testdisk again on deep scan and like before, I couldn't list files on the partition I've been having trouble with, I hit p and it just says there's an error, and I think to run checkdisk, but not sure. The following is an error that came up after the scan:
ss2.png
ss2.png (35.17 KiB) Viewed 1956 times
Also here is the partition list and the options I chose:
ss2.png
ss2.png (35.17 KiB) Viewed 1956 times
Just wondering if that's in line with how I should have done it? I'm obviously over getting back things the way they were, but desperately need a few of the files. (My backup HDD failed horribly by getting stolen a few weeks ago, and wonderfully it's replacement arrives wednesday, so these are the only copies I have left). I'll let you know how I make out with the photorec. Again, thank you for your advice.

Also, one last thing, I did run the rebuildBS option, and it made it about 1/3rd of the way through before kicking me out and just shutting down, I tried again with the same issue.

I've also attached the log file, but not sure if I did it right. Again, I don't have the original file from the first time I ran testdisk, as it was on a usb stick in the victim computer, but hopefully says something?

Sat Feb 17 14:40:51 2018
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, February 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdi)=15664676864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=750156374016
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive6
filewin32_getfilesize(\\.\PhysicalDrive7) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive7) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive7
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive8)=15664676864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119507255296
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=0
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=300061556736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=0
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=524288000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=319546195968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=423247216640
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=15663628288
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - ST9320325AS, S/N:5VD105YZ, FW:0005HPM1
Disk /dev/sdb - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - KINGSTON SV300S37A120G, S/N:50026B736500AE51, FW:603ABBF0
Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - ST9750420AS, S/N:5WS107Z1, FW:0002SDM1
Disk /dev/sdi - 15 GB / 14 GiB - CHS 1904 255 63, sector size=512 - SanDisk Cruzer Glide, S/N:4C531001461010103325, FW:1.00

Partition table type (auto): Intel
Disk /dev/sdc - 750 GB / 698 GiB - ST9750420AS
Partition table type: Intel

Analyse Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 3263/170/44
NTFS at 39744/51/52
Current partition structure:
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]

search_part()
Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 39744/51/52
filesystem size 826654720
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB
Search for partition aborted

Results
* HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB

interface_write()
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 3263/170/44
NTFS at 39744/51/52
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB

ntfs_boot_sector
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 3263/170/44
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
repair_MFT
NTFS at 3263/170/44
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 3263/170/44
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Search mft stopped: 131072/586057728
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 3263/170/44
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Analyse Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 3263/170/44
NTFS at 39744/51/52
Current partition structure:
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]

search_part()
Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 39744/51/52
filesystem size 826654720
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB
file_pread(6,2,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(6,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(6,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(6,8,buffer,1465149184(91201/81/17)) lseek err Invalid argument
file_pread(6,1,buffer,1465149184(91201/81/17)) lseek err Invalid argument
file_pread(6,8,buffer,1465149312(91201/83/19)) lseek err Invalid argument
file_pread(6,6,buffer,1465149442(91201/85/23)) lseek err Invalid argument
file_pread(6,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(6,8,buffer,1465149448(91201/85/29)) lseek err Invalid argument
file_pread(6,3,buffer,1465149456(91201/85/37)) lseek err Invalid argument
file_pread(6,3,buffer,1465149503(91201/86/21)) lseek err Invalid argument
file_pread(6,8,buffer,1465149519(91201/86/37)) lseek err Invalid argument
file_pread(6,11,buffer,1465149566(91201/87/21)) lseek err Invalid argument
file_pread(6,2,buffer,1465151488(91201/117/53)) lseek err Invalid argument

Results
* HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB

interface_write()
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]

search_part()
Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 39634/47/30
filesystem size 1763328
sectors_per_cluster 8
mft_lcn 73472
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 39634 47 30 39743 241 50 1763328
NTFS, blocksize=4096, 902 MB / 861 MiB
NTFS at 39743/241/50
filesystem size 1763328
sectors_per_cluster 8
mft_lcn 73472
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 39634 47 30 39743 241 50 1763328
NTFS found using backup sector, blocksize=4096, 902 MB / 861 MiB
NTFS at 39744/19/19
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS found using backup sector, blocksize=4096, 300 GB / 279 GiB
FAT32 at 39744/19/26
FAT1 : 4598-14586
FAT2 : 14587-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-20479999
sectors : 20480000
cluster_size : 16
no_of_cluster : 1278464 (2 - 1278465)
fat_length 9989 calculated 9989
FAT differs, FAT sectors=0-16/9989
set_FAT_info: name from BS used

FAT32 at 39744/19/26
FAT: Can't list files, bad cluster size.
FAT32 LBA 39744 19 20 41018 228 42 20480000 [NO NAME]
FAT32, blocksize=8192, 10485 MB / 10000 MiB
NTFS at 39744/51/52
filesystem size 826654720
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB
BAD_RS LBA=5078981310 1546399
file_pread(6,3,buffer,5078981310(316151/245/61)) lseek err Invalid argument
file_pread(6,1,buffer,5078981310(316151/245/61)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 316151 245 61 417653 156 41 1630624004
This partition ends after the disk limits. (start=5078981310, size=1630624004, end=6709605313, disk end=1465149168)
NTFS at 91201/20/19
filesystem size 826654720
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS found using backup sector, blocksize=4096, 423 GB / 394 GiB
file_pread(6,2,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(6,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(6,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(6,8,buffer,1465149184(91201/81/17)) lseek err Invalid argument
file_pread(6,1,buffer,1465149184(91201/81/17)) lseek err Invalid argument
file_pread(6,8,buffer,1465149312(91201/83/19)) lseek err Invalid argument
file_pread(6,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(6,1,buffer,1465149440(91201/85/21)) lseek err Invalid argument
Disk /dev/sdc - 750 GB / 698 GiB - CHS 91201 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (750 GB / 698 GiB) seems too small! (< 3435 GB / 3199 GiB)
The following partition can't be recovered:
FAT12 316151 245 61 417653 156 41 1630624004

Results
HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
HPFS - NTFS 39634 47 30 39743 241 50 1763328
NTFS, blocksize=4096, 902 MB / 861 MiB
FAT32 LBA 39744 19 20 41018 228 42 20480000 [NO NAME]
FAT32, blocksize=8192, 10485 MB / 10000 MiB
HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Can't open backup.log file: No such file or directory
interface_load
Change partition type:
* HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
Not an exFAT boot sector.

* HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
Can't open filesystem. Filesystem seems damaged.
Can't open backup.log file: No such file or directory
interface_load

interface_write()
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 3263/170/44
NTFS at 39744/51/52
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
2 P HPFS - NTFS 39744 51 52 91201 20 19 826654720 [Backups]
NTFS, blocksize=4096, 423 GB / 394 GiB

1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 3263/170/44
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
repair_MFT
NTFS at 3263/170/44
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
1 * HPFS - NTFS 3263 170 44 39744 19 19 586057728
NTFS, blocksize=4096, 300 GB / 279 GiB
NTFS at 3263/170/44
NTFS at 3263/170/44
filesystem size 586057728
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
0 [main] testdisk_win 3536 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

scoticus
Posts: 6
Joined: 17 Feb 2018, 21:59

Re: I think I screwed up

#4 Post by scoticus »

So I've run photorec a couple times with no love. I watched it this time for the 6 or so hours, and it seems like it finds tons up to a certain point, and then nothing. I'll try it with the advanced setting you suggested, but is there anything else at all you can recommend?

scoticus
Posts: 6
Joined: 17 Feb 2018, 21:59

Re: I think I screwed up

#5 Post by scoticus »

Ok, ran it with the setting you suggested and ended up with about 1,000,000 text files. Searched in the contents and still can't find any of the program that I'm looking for. It should just be stored as plain text, so wouldn't think it'd be this difficult to find. Any more ideas whatsoever?

Locked