Partition wiederherstellen nach 3maligen Formatieren

TestDisk benutzen um verlorene Partitionen wiederherzustellen
Forum rules
Your help is welcome: there are currently few answers or none to most message posted in the German forum!
If you want to post a request for help, please consider using the English forum.
Locked
Message
Author
Blumi
Posts: 2
Joined: 12 Aug 2015, 07:34

Partition wiederherstellen nach 3maligen Formatieren

#1 Post by Blumi »

Hallo,
ich habe seit 5 Jahren eine Backupfestplatte auf der ich alles gebackupt habe. Gestern kam mein neues Notebook und ich wollte mit dem Asus Backtracker die Schattenpartition sichern.
Dazu den Backtracker ausgeführt, und meine Festplatte ausgewählt. Bin es gewohnt, dass solche Werkzeuge ein Image kopieren und habe überlesen dass als 2. Warnmeldung kam: Alle Daten auf dem Medium gehen verloren
Dieses Werkzeug erstellt eine Partition für das Backup in Fat32 (ca. 16 GB) und eine leere NTFS Partition (1TB - 16 GB).

Ja, hier bin ich nun: alles weg
Ich habe daraufhin das Dateisystem und die Partitionierung auf der Platte gelöscht und Testdisk hat nach dem Deepscan die alte Partition von 1 TB wiedergefunden. Als ich dann alles wiederherstellen wollte ging es nicht (Can't open filesystem. Filesystem seems damaged.) ich habe auf "Continue" mit enter geklickt und bin zum Startbildschirm gekommen.
Dann habe ich die Platte erneut formatiert auf NTFS und mit mit Recuva versucht die Daten wiederherzustellen.

Das scheint aber nicht sonderlich gut zu funktionieren.
Gibt es eurer Meinung nach noch Rettung für meine Daten?

Vielen Dank und eine gute Zeit
Blumi

PS: Mein log:

Code: Select all


Tue Aug 11 16:12:46 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=157286400000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=139715411968
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512
Drive C: - 157 GB / 146 GiB - CHS 19122 255 63, sector size=512
Drive D: - 139 GB / 130 GiB - CHS 16986 255 63, sector size=512

Partition table type default to Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
FAT32 at 0/32/33
FAT1 : 4102-14338
FAT2 : 14339-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-41953279
sectors : 41953280
cluster_size : 32
no_of_cluster : 1310272 (2 - 1310273)
fat_length 10237 calculated 10237

FAT32 at 0/32/33
     FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
NTFS at 2611/152/38
filesystem size           1911500800
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
file_pread(5,2,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,2,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,2,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,1,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,14,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953458191(121597/37/56)) lseek err Invalid argument
file_pread(5,3,buffer,1953458238(121597/38/40)) lseek err Invalid argument
file_pread(5,8,buffer,1953458254(121597/38/56)) lseek err Invalid argument
file_pread(5,11,buffer,1953458301(121597/39/40)) lseek err Invalid argument
file_pread(5,2,buffer,1953460223(121597/70/9)) lseek err Invalid argument
file_pread(5,1,buffer,1953458194(121597/37/59)) lseek err Invalid argument
file_pread(5,1,buffer,1953458241(121597/38/43)) lseek err Invalid argument
file_pread(5,1,buffer,1953458262(121597/39/1)) lseek err Invalid argument
file_pread(5,1,buffer,1953458312(121597/39/51)) lseek err Invalid argument
file_pread(5,1,buffer,1953460225(121597/70/11)) lseek err Invalid argument

Results
   * FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
   P HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB

interface_write()
 1 * FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
 2 P HPFS - NTFS           2611 152 38 121597   5  8 1911500800
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
FAT32 at 0/32/33
FAT1 : 4102-14338
FAT2 : 14339-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-41953279
sectors : 41953280
cluster_size : 32
no_of_cluster : 1310272 (2 - 1310273)
fat_length 10237 calculated 10237

FAT32 at 0/32/33
     FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
FAT32 at 0/32/39
FAT1 : 4102-14338
FAT2 : 14339-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-41953279
sectors : 41953280
cluster_size : 32
no_of_cluster : 1310272 (2 - 1310273)
fat_length 10237 calculated 10237
set_FAT_info: name from BS used

FAT32 at 0/32/39
     FAT32 LBA                0  32 33  2611 152 37   41953280 [NO NAME]
     FAT32, blocksize=16384, 21 GB / 20 GiB
NTFS at 2611/152/38
filesystem size           1911500800
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
NTFS at 121596/227/39
filesystem size           1953452032
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121596 227 39 1953452032
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121597/5/8
filesystem size           1911500800
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS found using backup sector, blocksize=4096, 978 GB / 911 GiB
file_pread(5,2,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,2,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,2,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,1,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,14,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953458191(121597/37/56)) lseek err Invalid argument
file_pread(5,3,buffer,1953458238(121597/38/40)) lseek err Invalid argument
file_pread(5,8,buffer,1953458254(121597/38/56)) lseek err Invalid argument
file_pread(5,11,buffer,1953458301(121597/39/40)) lseek err Invalid argument
file_pread(5,2,buffer,1953460223(121597/70/9)) lseek err Invalid argument
file_pread(5,1,buffer,1953458194(121597/37/59)) lseek err Invalid argument
file_pread(5,1,buffer,1953458241(121597/38/43)) lseek err Invalid argument
file_pread(5,1,buffer,1953458262(121597/39/1)) lseek err Invalid argument
file_pread(5,1,buffer,1953458312(121597/39/51)) lseek err Invalid argument
file_pread(5,1,buffer,1953460225(121597/70/11)) lseek err Invalid argument

Results
     FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
     HPFS - NTFS              0  32 33 121596 227 39 1953452032
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
     HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
Not an exFAT boot sector.

     HPFS - NTFS              0  32 33 121596 227 39 1953452032
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

     HPFS - NTFS              0  32 33 121596 227 39 1953452032
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

     HPFS - NTFS              0  32 33 121596 227 39 1953452032
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
FAT32 at 0/32/33
FAT1 : 4102-14338
FAT2 : 14339-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-41953279
sectors : 41953280
cluster_size : 32
no_of_cluster : 1310272 (2 - 1310273)
fat_length 10237 calculated 10237

FAT32 at 0/32/33
     FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
NTFS at 2611/152/38
filesystem size           1911500800
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
file_pread(5,2,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,2,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,2,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,1,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,14,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953458191(121597/37/56)) lseek err Invalid argument
file_pread(5,3,buffer,1953458238(121597/38/40)) lseek err Invalid argument
file_pread(5,8,buffer,1953458254(121597/38/56)) lseek err Invalid argument
file_pread(5,11,buffer,1953458301(121597/39/40)) lseek err Invalid argument
file_pread(5,2,buffer,1953460223(121597/70/9)) lseek err Invalid argument
file_pread(5,1,buffer,1953458194(121597/37/59)) lseek err Invalid argument
file_pread(5,1,buffer,1953458241(121597/38/43)) lseek err Invalid argument
file_pread(5,1,buffer,1953458262(121597/39/1)) lseek err Invalid argument
file_pread(5,1,buffer,1953458312(121597/39/51)) lseek err Invalid argument
file_pread(5,1,buffer,1953460225(121597/70/11)) lseek err Invalid argument

Results
   * FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
   P HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB


dir_partition inode=5
   P HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 11-Aug-2015 15:42 .
       5 dr-xr-xr-x     0      0         0 11-Aug-2015 15:42 ..
      35 dr-xr-xr-x     0      0         0 11-Aug-2015 15:42 System Volume Information

interface_write()
 1 * FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
 2 P HPFS - NTFS           2611 152 38 121597   5  8 1911500800
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Current partition structure:
No partition is bootable

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
FAT32 at 0/32/33
FAT1 : 4102-14338
FAT2 : 14339-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-41953279
sectors : 41953280
cluster_size : 32
no_of_cluster : 1310272 (2 - 1310273)
fat_length 10237 calculated 10237

FAT32 at 0/32/33
     FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
NTFS at 2611/152/38
filesystem size           1911500800
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
file_pread(5,2,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,2,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458231(121597/38/33)) lseek err Invalid argument
file_pread(5,2,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,1,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458294(121597/39/33)) lseek err Invalid argument
file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,14,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,3,buffer,1953458191(121597/37/56)) lseek err Invalid argument
file_pread(5,3,buffer,1953458238(121597/38/40)) lseek err Invalid argument
file_pread(5,8,buffer,1953458254(121597/38/56)) lseek err Invalid argument
file_pread(5,11,buffer,1953458301(121597/39/40)) lseek err Invalid argument
file_pread(5,2,buffer,1953460223(121597/70/9)) lseek err Invalid argument
file_pread(5,1,buffer,1953458194(121597/37/59)) lseek err Invalid argument
file_pread(5,1,buffer,1953458241(121597/38/43)) lseek err Invalid argument
file_pread(5,1,buffer,1953458262(121597/39/1)) lseek err Invalid argument
file_pread(5,1,buffer,1953458312(121597/39/51)) lseek err Invalid argument
file_pread(5,1,buffer,1953460225(121597/70/11)) lseek err Invalid argument

Results
   * FAT32 LBA                0  32 33  2611 152 37   41953280 [ASUSBAKEUP]
     FAT32, blocksize=16384, 21 GB / 20 GiB
   P HPFS - NTFS           2611 152 38 121597   5  8 1911500800
     NTFS, blocksize=4096, 978 GB / 911 GiB
SIGHUP detected! TestDisk has been killed.
Top
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Partition wiederherstellen nach 3maligen Formatieren

#2 Post by Fiona »

Gegenwärtig wird bei dir keine Partition in der Partitionstabelle angezeigt.
Könntest du von der FAT32-Partition auch versuchen die Daten anzeigen zu lassen?
Geht darum, ob in deiner verlorenen Partition geschrieben wurde.
Ansonsten lasse mal Deeper Search laufen, um das Backup vom Bootsektor gefunden wird, und versuche auch deine Daten zu listen.

Fiona
Top
Blumi
Posts: 2
Joined: 12 Aug 2015, 07:34

Re: Partition wiederherstellen nach 3maligen Formatieren

#3 Post by Blumi »

Hallo Fiona,
danke für deine Antwort.
In der FAT32-Partition wurde das Bakup hinkopiert.
Mit Recuva habe ich viele Daten wiedergefunden, es fehlen aber 2 große Videodateien. Ich nehme an die wurden überschrieben. Das Logfile müsste von der Deepsearch kommen. Ich konnte dann auch bei einer NTFS Partition Dateien listen, aber dieses Dateisystem nicht wiederherstellen, mit der Begründung es könnte kaputt sein.

Gruß,
Blumi
Top
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Partition wiederherstellen nach 3maligen Formatieren

#4 Post by Fiona »

Wenn das Dateisystem kaputt ist, können oftmals keine Daten mehr gelistet werden.
Kommt Meldung ähnlich "filesystem seems to be damaged".
Du könntest auch PhotoRec noch testen:
Info:
http://www.cgsecurity.org/wiki/PhotoRec_DE
Und Beispiel:
http://www.cgsecurity.org/wiki/PhotoRec ... Cr_Schritt
Unter File Opt, kannst du mit s drücken alle Dateitypen abwählen und nur diese wählen welche du wiederherstellen möchtest.

Fiona
Top
Locked

Return to “Partitionen wiederherstellen”