Partition weg, testdsik findet auch nichts, alles weg?
Posted: 19 May 2012, 07:44
hi!
erstmal die geschichte meiner platte:
ich habe eine WD platte mit 1 TB. wovon ca. 730 GB verschwunden sind.
zuerst hatte ich meine laptop platte gesichert mit R-Drive, das tool hatte von den restlichen ca. 200 GB (von den 1TB waren 730 GB schon belegt) eine partition angelegt und darauf die windows dateien kopiert (leider als primäre partition). dadurch ist der hauptbereich meiner ex. platte (730 GB) im windows nicht erkannt wurden.
ich wollte über die datendrägerverwaltung was machen, dadurch wollte der die formatierung ausführen. aus panik stecker gezogen und schon war es nur noch im windows als RAW zu erkennen.
testdisk (6.14) drüber laufen lassen und schwubs wurden auf einmal die 730GB als "freier speicher" erkannt.
Testdisk hat also mir die infos am anfang der 730GB zerschossen. getdataback hatte ich versucht, der hatte kein dateisystem erkannt (nicht ntfs und nicht fat).
zum 2. mal testdisk ausgeführt.
hier die bilder mit den ergegnissen, die partition ist nicht mit dabei, auch bei deep search nix.
hatte die standardeinstellungen so gelassen von dem programm.
ist jetzt alles für immer weg?
O&O discrecovery hatte ca. 50.000 daten gefunden, aber der würde mir die ohne namen und ordnerstruktur wieder erstellen. das möchte ich eigentlich vermeiden.
O&O hatte auf dem unpartitionierten bereich die MFT und volumen dateien gesichert, damit kann ich aber nix anfangen.
hier das protokoll:
58,50 MB ( 61.341.696 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$MFT
4,00 KB ( 4.096 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$MFTMirr
64,00 MB ( 67.108.864 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$LogFile
0 Bytes ( 0 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$Volume Fehler!
kann ein datenrettungslabor sowas hin bekommen oder können die da auch nix machen?
ach in der log datei wird das angezeigt:
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
das ist die partition (bzw. das laufwerk, war vorher keine direkte partition) -> 730GiB
hier noch die log von testdisk:
Fri May 18 18:27:12 2012
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-08T10:52:46
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=999501594624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=999501594624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=169213952000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=470917578752
filewin32_getfilesize(\\.\E:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\E:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=169213952000
filewin32_getfilesize(\\.\G:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\G:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\G:
Hard disk list
Disk /dev/sda - 640 GB / 596 GiB - CHS 77825 255 63, sector size=512 - WDC WD6400BPVT-00HXZT1, S/N:2020202057202d445857314742454a3044533832, FW:01.01A01
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63, sector size=512 - WD My Book 1110, S/N:WCAU4D200275, FW:1032
Partition table type (auto): Intel
Disk /dev/sdb - 999 GB / 930 GiB - WD My Book 1110
Partition table type: Intel
Analyse Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
1 * HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
search_vista_part: 1
search_part()
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
NTFS at 0/32/33
filesystem size 330496000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
BAD_RS LBA=2052538890 7959744
file_pread(5,3,buffer,2052538890(127764/162/25)) lseek err Invalid argument
file_pread(5,1,buffer,2052538890(127764/162/25)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 127764 162 25 265132 3 61 2206806940
This partition ends after the disk limits. (start=2052538890, size=2206806940, end=4259345829, disk end=1952151552)
BAD_RS LBA=2719974238 14246489
file_pread(5,3,buffer,2719974238(169310/144/17)) lseek err Invalid argument
file_pread(5,1,buffer,2719974238(169310/144/17)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 169310 144 17 297923 195 63 2066171105
This partition ends after the disk limits. (start=2719974238, size=2066171105, end=491178046, disk end=1952151552)
file_pread(5,2,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
file_pread(5,1,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
file_pread(5,7,buffer,1952151553(121515/207/38)) lseek err Invalid argument
file_pread(5,8,buffer,1952151560(121515/207/45)) lseek err Invalid argument
file_pread(5,3,buffer,1952151568(121515/207/53)) lseek err Invalid argument
file_pread(5,3,buffer,1952151615(121515/208/37)) lseek err Invalid argument
file_pread(5,8,buffer,1952151631(121515/208/53)) lseek err Invalid argument
file_pread(5,11,buffer,1952151678(121515/209/37)) lseek err Invalid argument
file_pread(5,2,buffer,1952153600(121515/240/6)) lseek err Invalid argument
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (999 GB / 930 GiB) seems too small! (< 2450 GB / 2282 GiB)
The following partitions can't be recovered:
FAT32 LBA 127764 162 25 265132 3 61 2206806940
FAT16 <32M 169310 144 17 297923 195 63 2066171105
Results
* HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
dir_partition inode=5
* HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 .
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 ..
6076 -r--r--r-- 0 0 4290437120 3-May-2012 17:28 pagefile.sys
180744 dr-xr-xr-x 0 0 0 5-May-2012 09:34 $RECYCLE.BIN
221711 dr-xr-xr-x 0 0 0 17-May-2012 05:12 archive_db
18927 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 Documents and Settings
19973 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Dokumente und Einstellungen
18694 -r--r--r-- 0 0 3217825792 3-May-2012 17:27 hiberfil.sys
180743 dr-xr-xr-x 0 0 0 16-May-2012 09:22 LAUFWERK D - Sicherung
155980 dr-xr-xr-x 0 0 0 3-Aug-2011 09:02 MSOCache
37 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Program Files
945 dr-xr-xr-x 0 0 0 29-Apr-2012 15:43 Program Files (x86)
1748 dr-xr-xr-x 0 0 0 25-Apr-2012 08:48 ProgramData
20376 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Programme
83537 -r--r--r-- 0 0 3346 6-Nov-2010 04:30 RHDSetup.log
18692 -r--r--r-- 0 0 282 22-Jun-2010 09:29 SWSTAMP.TXT
80473 dr-xr-xr-x 0 0 0 18-May-2012 18:24 System Volume Information
4372 dr-xr-xr-x 0 0 0 5-Mar-2011 12:28 Toshiba
1900 -r--r--r-- 0 0 1237686 18-Aug-2011 21:16 Unbenannt-1.psd
4675 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Users
94991 -r--r--r-- 0 0 489156 6-Nov-2010 04:50 vcredist_x86.log
4975 dr-xr-xr-x 0 0 0 30-Apr-2012 17:33 Windows
interface_write()
1 * HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
search_part()
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
NTFS at 0/32/33
filesystem size 330496000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
NTFS at 20572/140/48
filesystem size 330496000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 169 GB / 157 GiB
BAD_RS LBA=2052538890 7959744
file_pread(5,3,buffer,2052538890(127764/162/25)) lseek err Invalid argument
file_pread(5,1,buffer,2052538890(127764/162/25)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 127764 162 25 265132 3 61 2206806940
This partition ends after the disk limits. (start=2052538890, size=2206806940, end=4259345829, disk end=1952151552)
BAD_RS LBA=2719974238 14246489
file_pread(5,3,buffer,2719974238(169310/144/17)) lseek err Invalid argument
file_pread(5,1,buffer,2719974238(169310/144/17)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 169310 144 17 297923 195 63 2066171105
This partition ends after the disk limits. (start=2719974238, size=2066171105, end=491178046, disk end=1952151552)
NTFS at 95407/122/11
filesystem size 1532719104
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122009343
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
NTFS at 121515/142/35
filesystem size 1952145408
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122009343
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121515 142 35 1952145408 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
file_pread(5,2,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
file_pread(5,1,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
NTFS at 121515/207/36
filesystem size 1952149504
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122009343
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
file_pread(5,7,buffer,1952151553(121515/207/38)) lseek err Invalid argument
file_pread(5,1,buffer,1952151553(121515/207/38)) lseek err Invalid argument
file_pread(5,8,buffer,1952151560(121515/207/45)) lseek err Invalid argument
file_pread(5,3,buffer,1952151568(121515/207/53)) lseek err Invalid argument
file_pread(5,3,buffer,1952151615(121515/208/37)) lseek err Invalid argument
file_pread(5,8,buffer,1952151631(121515/208/53)) lseek err Invalid argument
file_pread(5,11,buffer,1952151678(121515/209/37)) lseek err Invalid argument
file_pread(5,2,buffer,1952153600(121515/240/6)) lseek err Invalid argument
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (999 GB / 930 GiB) seems too small! (< 2450 GB / 2282 GiB)
The following partitions can't be recovered:
FAT32 LBA 127764 162 25 265132 3 61 2206806940
FAT16 <32M 169310 144 17 297923 195 63 2066171105
Results
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
HPFS - NTFS 0 32 33 121515 142 35 1952145408 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
dir_partition inode=5
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 .
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 ..
6076 -r--r--r-- 0 0 4290437120 3-May-2012 17:28 pagefile.sys
180744 dr-xr-xr-x 0 0 0 5-May-2012 09:34 $RECYCLE.BIN
221711 dr-xr-xr-x 0 0 0 17-May-2012 05:12 archive_db
18927 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 Documents and Settings
19973 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Dokumente und Einstellungen
18694 -r--r--r-- 0 0 3217825792 3-May-2012 17:27 hiberfil.sys
180743 dr-xr-xr-x 0 0 0 16-May-2012 09:22 LAUFWERK D - Sicherung
155980 dr-xr-xr-x 0 0 0 3-Aug-2011 09:02 MSOCache
37 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Program Files
945 dr-xr-xr-x 0 0 0 29-Apr-2012 15:43 Program Files (x86)
1748 dr-xr-xr-x 0 0 0 25-Apr-2012 08:48 ProgramData
20376 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Programme
83537 -r--r--r-- 0 0 3346 6-Nov-2010 04:30 RHDSetup.log
18692 -r--r--r-- 0 0 282 22-Jun-2010 09:29 SWSTAMP.TXT
80473 dr-xr-xr-x 0 0 0 18-May-2012 18:24 System Volume Information
4372 dr-xr-xr-x 0 0 0 5-Mar-2011 12:28 Toshiba
1900 -r--r--r-- 0 0 1237686 18-Aug-2011 21:16 Unbenannt-1.psd
4675 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Users
94991 -r--r--r-- 0 0 489156 6-Nov-2010 04:50 vcredist_x86.log
4975 dr-xr-xr-x 0 0 0 30-Apr-2012 17:33 Windows
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 121515 142 35 1952145408 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Can't open filesystem. Filesystem seems damaged.
Sat May 19 04:21:32 2012
Command line: TestDisk
erstmal die geschichte meiner platte:
ich habe eine WD platte mit 1 TB. wovon ca. 730 GB verschwunden sind.
zuerst hatte ich meine laptop platte gesichert mit R-Drive, das tool hatte von den restlichen ca. 200 GB (von den 1TB waren 730 GB schon belegt) eine partition angelegt und darauf die windows dateien kopiert (leider als primäre partition). dadurch ist der hauptbereich meiner ex. platte (730 GB) im windows nicht erkannt wurden.
ich wollte über die datendrägerverwaltung was machen, dadurch wollte der die formatierung ausführen. aus panik stecker gezogen und schon war es nur noch im windows als RAW zu erkennen.
testdisk (6.14) drüber laufen lassen und schwubs wurden auf einmal die 730GB als "freier speicher" erkannt.
Testdisk hat also mir die infos am anfang der 730GB zerschossen. getdataback hatte ich versucht, der hatte kein dateisystem erkannt (nicht ntfs und nicht fat).
zum 2. mal testdisk ausgeführt.
hier die bilder mit den ergegnissen, die partition ist nicht mit dabei, auch bei deep search nix.
hatte die standardeinstellungen so gelassen von dem programm.
ist jetzt alles für immer weg?
O&O discrecovery hatte ca. 50.000 daten gefunden, aber der würde mir die ohne namen und ordnerstruktur wieder erstellen. das möchte ich eigentlich vermeiden.
O&O hatte auf dem unpartitionierten bereich die MFT und volumen dateien gesichert, damit kann ich aber nix anfangen.
hier das protokoll:
58,50 MB ( 61.341.696 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$MFT
4,00 KB ( 4.096 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$MFTMirr
64,00 MB ( 67.108.864 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$LogFile
0 Bytes ( 0 Bytes) - O&O FormatRecovery\NTFS - Offset# 462,43 GB - 773,26 GB\$Volume Fehler!
kann ein datenrettungslabor sowas hin bekommen oder können die da auch nix machen?
ach in der log datei wird das angezeigt:
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
das ist die partition (bzw. das laufwerk, war vorher keine direkte partition) -> 730GiB
hier noch die log von testdisk:
Fri May 18 18:27:12 2012
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-08T10:52:46
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=999501594624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=999501594624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=169213952000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=470917578752
filewin32_getfilesize(\\.\E:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\E:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=169213952000
filewin32_getfilesize(\\.\G:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\G:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\G:
Hard disk list
Disk /dev/sda - 640 GB / 596 GiB - CHS 77825 255 63, sector size=512 - WDC WD6400BPVT-00HXZT1, S/N:2020202057202d445857314742454a3044533832, FW:01.01A01
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63, sector size=512 - WD My Book 1110, S/N:WCAU4D200275, FW:1032
Partition table type (auto): Intel
Disk /dev/sdb - 999 GB / 930 GiB - WD My Book 1110
Partition table type: Intel
Analyse Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
1 * HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
search_vista_part: 1
search_part()
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
NTFS at 0/32/33
filesystem size 330496000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
BAD_RS LBA=2052538890 7959744
file_pread(5,3,buffer,2052538890(127764/162/25)) lseek err Invalid argument
file_pread(5,1,buffer,2052538890(127764/162/25)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 127764 162 25 265132 3 61 2206806940
This partition ends after the disk limits. (start=2052538890, size=2206806940, end=4259345829, disk end=1952151552)
BAD_RS LBA=2719974238 14246489
file_pread(5,3,buffer,2719974238(169310/144/17)) lseek err Invalid argument
file_pread(5,1,buffer,2719974238(169310/144/17)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 169310 144 17 297923 195 63 2066171105
This partition ends after the disk limits. (start=2719974238, size=2066171105, end=491178046, disk end=1952151552)
file_pread(5,2,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
file_pread(5,1,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
file_pread(5,7,buffer,1952151553(121515/207/38)) lseek err Invalid argument
file_pread(5,8,buffer,1952151560(121515/207/45)) lseek err Invalid argument
file_pread(5,3,buffer,1952151568(121515/207/53)) lseek err Invalid argument
file_pread(5,3,buffer,1952151615(121515/208/37)) lseek err Invalid argument
file_pread(5,8,buffer,1952151631(121515/208/53)) lseek err Invalid argument
file_pread(5,11,buffer,1952151678(121515/209/37)) lseek err Invalid argument
file_pread(5,2,buffer,1952153600(121515/240/6)) lseek err Invalid argument
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (999 GB / 930 GiB) seems too small! (< 2450 GB / 2282 GiB)
The following partitions can't be recovered:
FAT32 LBA 127764 162 25 265132 3 61 2206806940
FAT16 <32M 169310 144 17 297923 195 63 2066171105
Results
* HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
dir_partition inode=5
* HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 .
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 ..
6076 -r--r--r-- 0 0 4290437120 3-May-2012 17:28 pagefile.sys
180744 dr-xr-xr-x 0 0 0 5-May-2012 09:34 $RECYCLE.BIN
221711 dr-xr-xr-x 0 0 0 17-May-2012 05:12 archive_db
18927 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 Documents and Settings
19973 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Dokumente und Einstellungen
18694 -r--r--r-- 0 0 3217825792 3-May-2012 17:27 hiberfil.sys
180743 dr-xr-xr-x 0 0 0 16-May-2012 09:22 LAUFWERK D - Sicherung
155980 dr-xr-xr-x 0 0 0 3-Aug-2011 09:02 MSOCache
37 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Program Files
945 dr-xr-xr-x 0 0 0 29-Apr-2012 15:43 Program Files (x86)
1748 dr-xr-xr-x 0 0 0 25-Apr-2012 08:48 ProgramData
20376 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Programme
83537 -r--r--r-- 0 0 3346 6-Nov-2010 04:30 RHDSetup.log
18692 -r--r--r-- 0 0 282 22-Jun-2010 09:29 SWSTAMP.TXT
80473 dr-xr-xr-x 0 0 0 18-May-2012 18:24 System Volume Information
4372 dr-xr-xr-x 0 0 0 5-Mar-2011 12:28 Toshiba
1900 -r--r--r-- 0 0 1237686 18-Aug-2011 21:16 Unbenannt-1.psd
4675 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Users
94991 -r--r--r-- 0 0 489156 6-Nov-2010 04:50 vcredist_x86.log
4975 dr-xr-xr-x 0 0 0 30-Apr-2012 17:33 Windows
interface_write()
1 * HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
search_part()
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
NTFS at 0/32/33
filesystem size 330496000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
NTFS at 20572/140/48
filesystem size 330496000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 169 GB / 157 GiB
BAD_RS LBA=2052538890 7959744
file_pread(5,3,buffer,2052538890(127764/162/25)) lseek err Invalid argument
file_pread(5,1,buffer,2052538890(127764/162/25)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 127764 162 25 265132 3 61 2206806940
This partition ends after the disk limits. (start=2052538890, size=2206806940, end=4259345829, disk end=1952151552)
BAD_RS LBA=2719974238 14246489
file_pread(5,3,buffer,2719974238(169310/144/17)) lseek err Invalid argument
file_pread(5,1,buffer,2719974238(169310/144/17)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 169310 144 17 297923 195 63 2066171105
This partition ends after the disk limits. (start=2719974238, size=2066171105, end=491178046, disk end=1952151552)
NTFS at 95407/122/11
filesystem size 1532719104
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122009343
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
NTFS at 121515/142/35
filesystem size 1952145408
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122009343
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121515 142 35 1952145408 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
file_pread(5,2,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
file_pread(5,1,buffer,1952151552(121515/207/37)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
NTFS at 121515/207/36
filesystem size 1952149504
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122009343
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
file_pread(5,7,buffer,1952151553(121515/207/38)) lseek err Invalid argument
file_pread(5,1,buffer,1952151553(121515/207/38)) lseek err Invalid argument
file_pread(5,8,buffer,1952151560(121515/207/45)) lseek err Invalid argument
file_pread(5,3,buffer,1952151568(121515/207/53)) lseek err Invalid argument
file_pread(5,3,buffer,1952151615(121515/208/37)) lseek err Invalid argument
file_pread(5,8,buffer,1952151631(121515/208/53)) lseek err Invalid argument
file_pread(5,11,buffer,1952151678(121515/209/37)) lseek err Invalid argument
file_pread(5,2,buffer,1952153600(121515/240/6)) lseek err Invalid argument
Disk /dev/sdb - 999 GB / 930 GiB - CHS 121515 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (999 GB / 930 GiB) seems too small! (< 2450 GB / 2282 GiB)
The following partitions can't be recovered:
FAT32 LBA 127764 162 25 265132 3 61 2206806940
FAT16 <32M 169310 144 17 297923 195 63 2066171105
Results
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
HPFS - NTFS 0 32 33 121515 142 35 1952145408 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
dir_partition inode=5
HPFS - NTFS 0 32 33 20572 140 48 330496000 [WINDOWS]
NTFS, blocksize=4096, 169 GB / 157 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 .
5 dr-xr-xr-x 0 0 0 18-May-2012 07:45 ..
6076 -r--r--r-- 0 0 4290437120 3-May-2012 17:28 pagefile.sys
180744 dr-xr-xr-x 0 0 0 5-May-2012 09:34 $RECYCLE.BIN
221711 dr-xr-xr-x 0 0 0 17-May-2012 05:12 archive_db
18927 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 Documents and Settings
19973 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Dokumente und Einstellungen
18694 -r--r--r-- 0 0 3217825792 3-May-2012 17:27 hiberfil.sys
180743 dr-xr-xr-x 0 0 0 16-May-2012 09:22 LAUFWERK D - Sicherung
155980 dr-xr-xr-x 0 0 0 3-Aug-2011 09:02 MSOCache
37 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Program Files
945 dr-xr-xr-x 0 0 0 29-Apr-2012 15:43 Program Files (x86)
1748 dr-xr-xr-x 0 0 0 25-Apr-2012 08:48 ProgramData
20376 dr-xr-xr-x 0 0 0 5-Mar-2011 12:25 Programme
83537 -r--r--r-- 0 0 3346 6-Nov-2010 04:30 RHDSetup.log
18692 -r--r--r-- 0 0 282 22-Jun-2010 09:29 SWSTAMP.TXT
80473 dr-xr-xr-x 0 0 0 18-May-2012 18:24 System Volume Information
4372 dr-xr-xr-x 0 0 0 5-Mar-2011 12:28 Toshiba
1900 -r--r--r-- 0 0 1237686 18-Aug-2011 21:16 Unbenannt-1.psd
4675 dr-xr-xr-x 0 0 0 5-May-2012 09:10 Users
94991 -r--r--r-- 0 0 489156 6-Nov-2010 04:50 vcredist_x86.log
4975 dr-xr-xr-x 0 0 0 30-Apr-2012 17:33 Windows
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 95407 122 11 1532719104 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 784 GB / 730 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 121515 142 35 1952145408 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 0 32 33 121515 207 36 1952149504 [WINDOWS]
NTFS found using backup sector, blocksize=4096, 999 GB / 930 GiB
Can't open filesystem. Filesystem seems damaged.
Sat May 19 04:21:32 2012
Command line: TestDisk