I tried to recover partition with TestDisk, it has showed it in the table in analysis but weren't able to write showed structure to disk - Write error occurred. Please, help me to recover my lost partition (it's the 51 GB one).
Here is my .log file:
Code: Select all
Thu Aug 2 01:37:29 2012
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320071851520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320071851520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=236230009344
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=83840246784
filewin32_getfilesize(\\.\F:) GetFileSize err Неверная функция.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Неверная функция.
Warning: can't get size for \\.\F:
filewin32_getfilesize(\\.\H:) GetFileSize err Неверная функция.
filewin32_setfilepointer(\\.\H:) SetFilePointer err Неверная функция.
Warning: can't get size for \\.\H:
file_pread(4,1,buffer,625153409(38913/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAKS-00SBA0, S/N:2020202057202d4443575041305a363137393235, FW:12.01B01
Partition table type (auto): Intel
Disk /dev/sda - 320 GB / 298 GiB - WDC WD3200AAKS-00SBA0
Partition table type: Intel
file_pread(4,1,buffer,625153409(38913/254/63)) lseek err Invalid argument
Analyse Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
Info: size boot_sector 56629057, partition 56629062
check_part_i386 failed for partition type 07
NTFS at 10193/1/1
get_geometry_from_list_part_aux head=255 nbr=10
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=10
Current partition structure:
1 * HPFS - NTFS 0 1 1 3524 254 63 56629062
2 E extended LBA 3525 0 1 38912 254 63 568508220
Invalid NTFS or EXFAT boot
5 L HPFS - NTFS 3525 1 1 10192 254 63 107121357
5 L HPFS - NTFS 3525 1 1 10192 254 63 107121357
X extended 10193 0 1 38912 254 63 461386800
6 L HPFS - NTFS 10193 1 1 38912 254 63 461386737
Ask the user for vista mode
Allow partial last cylinder : No
search_vista_part: 0
search_part()
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 0/1/1
filesystem size 56629057
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6399890
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 3524 254 58 56629057
NTFS, 28 GB / 27 GiB
check_part_i386 failed for partition type 07
HPFS - NTFS 3525 1 1 10192 254 63 107121357
NTFS at 10193/1/1
filesystem size 461386737
sectors_per_cluster 8
mft_lcn 3356832
mftmirr_lcn 24970026
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 10193 1 1 38912 254 63 461386737
NTFS, 236 GB / 220 GiB
file_pread(4,8,buffer,625140432(38913/49/1)) lseek err Invalid argument
file_pread(4,1,buffer,625140432(38913/49/1)) lseek err Invalid argument
file_pread(4,8,buffer,625140560(38913/51/3)) lseek err Invalid argument
file_pread(4,8,buffer,625140688(38913/53/5)) lseek err Invalid argument
file_pread(4,8,buffer,625140816(38913/55/7)) lseek err Invalid argument
file_pread(4,8,buffer,625140944(38913/57/9)) lseek err Invalid argument
file_pread(4,8,buffer,625141072(38913/59/11)) lseek err Invalid argument
file_pread(4,8,buffer,625141200(38913/61/13)) lseek err Invalid argument
file_pread(4,8,buffer,625141328(38913/63/15)) lseek err Invalid argument
file_pread(4,8,buffer,625141456(38913/65/17)) lseek err Invalid argument
file_pread(4,8,buffer,625141584(38913/67/19)) lseek err Invalid argument
file_pread(4,8,buffer,625141712(38913/69/21)) lseek err Invalid argument
file_pread(4,8,buffer,625141840(38913/71/23)) lseek err Invalid argument
file_pread(4,8,buffer,625141968(38913/73/25)) lseek err Invalid argument
file_pread(4,8,buffer,625142096(38913/75/27)) lseek err Invalid argument
file_pread(4,8,buffer,625142224(38913/77/29)) lseek err Invalid argument
file_pread(4,8,buffer,625142352(38913/79/31)) lseek err Invalid argument
file_pread(4,8,buffer,625142480(38913/81/33)) lseek err Invalid argument
file_pread(4,8,buffer,625142608(38913/83/35)) lseek err Invalid argument
file_pread(4,8,buffer,625142736(38913/85/37)) lseek err Invalid argument
file_pread(4,8,buffer,625142864(38913/87/39)) lseek err Invalid argument
file_pread(4,8,buffer,625142992(38913/89/41)) lseek err Invalid argument
file_pread(4,8,buffer,625143120(38913/91/43)) lseek err Invalid argument
file_pread(4,8,buffer,625143248(38913/93/45)) lseek err Invalid argument
file_pread(4,8,buffer,625143376(38913/95/47)) lseek err Invalid argument
file_pread(4,8,buffer,625143504(38913/97/49)) lseek err Invalid argument
file_pread(4,8,buffer,625143632(38913/99/51)) lseek err Invalid argument
file_pread(4,8,buffer,625143760(38913/101/53)) lseek err Invalid argument
file_pread(4,8,buffer,625143888(38913/103/55)) lseek err Invalid argument
file_pread(4,8,buffer,625144016(38913/105/57)) lseek err Invalid argument
file_pread(4,8,buffer,625144144(38913/107/59)) lseek err Invalid argument
file_pread(4,8,buffer,625144272(38913/109/61)) lseek err Invalid argument
file_pread(4,8,buffer,625144400(38913/111/63)) lseek err Invalid argument
file_pread(4,8,buffer,625144528(38913/114/2)) lseek err Invalid argument
file_pread(4,8,buffer,625144656(38913/116/4)) lseek err Invalid argument
file_pread(4,8,buffer,625144784(38913/118/6)) lseek err Invalid argument
file_pread(4,8,buffer,625144912(38913/120/8)) lseek err Invalid argument
file_pread(4,8,buffer,625145040(38913/122/10)) lseek err Invalid argument
file_pread(4,8,buffer,625145168(38913/124/12)) lseek err Invalid argument
file_pread(4,8,buffer,625145296(38913/126/14)) lseek err Invalid argument
file_pread(4,8,buffer,625145424(38913/128/16)) lseek err Invalid argument
file_pread(4,8,buffer,625145552(38913/130/18)) lseek err Invalid argument
file_pread(4,8,buffer,625145680(38913/132/20)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=6
Results
* HPFS - NTFS 0 1 1 3524 254 63 56629062
NTFS, 28 GB / 27 GiB
L HPFS - NTFS 3525 1 1 10192 254 63 107121357
L HPFS - NTFS 10193 1 1 38912 254 63 461386737
NTFS, 236 GB / 220 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 3524 254 63 56629062
2 E extended LBA 3525 0 1 38912 254 63 568508220
5 L HPFS - NTFS 3525 1 1 10192 254 63 107121357
6 L HPFS - NTFS 10193 1 1 38912 254 63 461386737
write!
write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 3525/0/1,lba=56629125
file_pwrite(4,1,buffer,56629125(3525/0/1)) write err Permission denied
write_all_log_i386: CHS: 10193/0/1,lba=163750545
Partition: Write error
TestDisk exited normally.