So sieht meine log File aus wenn ich versuche die Partitionstabelle neu zu schreiben. Ich hoffe ihr könnt damit mir helfen.
Code: Select all
Sat Apr 9 11:03:41 2016
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107861504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107861504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=154505576448
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=165197905920
filewin32_getfilesize(\\.\E:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\E:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105217024
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 154 GB / 143 GiB - CHS 18784 255 63, sector size=512
Drive D: - 165 GB / 153 GiB - CHS 20084 255 63, sector size=512
Drive F: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
Info: size boot_sector 976768001, partition 976768002
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 62 976768001
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 60800/254/63
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 2 60800 254 63 976768001
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
NTFS at 60800/254/63
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(5,1024,buffer,983062592(61192/208/9)) lseek err Invalid argument
file_pread(5,1,buffer,983062592(61192/208/9)) lseek err Invalid argument
NTFS: Can't read MFT
HPFS - NTFS 60800 254 63 121601 253 61 976768001
NTFS, blocksize=4096, 500 GB / 465 GiB
This partition ends after the disk limits. (start=976768064, size=976768001, end=1953536064, disk end=976773167)
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,1,buffer,976773191(60801/81/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,1,buffer,976773319(60801/83/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,1,buffer,976773447(60801/85/28)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,1,buffer,976773575(60801/87/30)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,1,buffer,976773703(60801/89/32)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,1,buffer,976773831(60801/91/34)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,1,buffer,976773959(60801/93/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,1,buffer,976774087(60801/95/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,1,buffer,976774215(60801/97/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,1,buffer,976774343(60801/99/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,1,buffer,976774471(60801/101/44)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,1,buffer,976774599(60801/103/46)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,1,buffer,976774727(60801/105/48)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,1,buffer,976774855(60801/107/50)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,1,buffer,976774983(60801/109/52)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775111(60801/111/54)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,14,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 60800 254 63 121601 253 61 976768001
NTFS, blocksize=4096, 500 GB / 465 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
HPFS - NTFS 0 1 2 60800 254 63 976768001
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
NTFS Volume is dirty.
dir_partition inode=5
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
Directory /
5 dr-xr-xr-x 0 0 0 5-Apr-2016 01:28 .
5 dr-xr-xr-x 0 0 0 5-Apr-2016 01:28 ..
69 dr-xr-xr-x 0 0 0 6-Apr-2016 20:59 $RECYCLE.BIN
16034 dr-xr-xr-x 0 0 0 22-Dec-2013 16:58 .crid
16012 dr-xr-xr-x 0 0 0 22-Dec-2013 17:55 .tsr
5734 dr-xr-xr-x 0 0 0 13-Mar-2012 23:16 Android Apps
33 dr-xr-xr-x 0 0 0 11-Aug-2014 10:37 Bilder
1454 dr-xr-xr-x 0 0 0 6-Apr-2016 18:38 Camera
1453 dr-xr-xr-x 0 0 0 5-Apr-2016 01:58 Datenrettung
1448 dr-xr-xr-x 0 0 0 6-Apr-2016 18:38 Ebooks
580 dr-xr-xr-x 0 0 0 11-Aug-2014 10:12 IDE
1502 dr-xr-xr-x 0 0 0 27-Feb-2012 17:25 Musik
2670 dr-xr-xr-x 0 0 0 23-May-2015 11:35 Programme
6185 dr-xr-xr-x 0 0 0 27-Aug-2011 17:45 RECYCLER
5837 dr-xr-xr-x 0 0 0 27-Feb-2012 17:13 Schriftart
27 dr-xr-xr-x 0 0 0 6-Apr-2016 22:21 System Volume Information
4689 dr-xr-xr-x 0 0 0 5-Apr-2016 01:45 Video
15103 dr-xr-xr-x 0 0 0 27-Aug-2013 19:02 asus
6112 -r--r--r-- 0 0 37661 27-Feb-2012 17:16 bookmarks_27.02.12.html
Not an exFAT boot sector.
HPFS - NTFS 0 1 2 60800 254 63 976768001
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
Can't open filesystem. Filesystem seems damaged.
Can't open backup.log file: No such file or directory
interface_load
Change partition type:
P HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 P HPFS - NTFS 0 1 1 60800 254 63 976768002
write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
Info: size boot_sector 976768001, partition 976768002
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS 0 1 1 60800 254 63 976768002
No partition is bootable
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 62 976768001
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 60800/254/63
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 2 60800 254 63 976768001
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
NTFS at 60800/254/63
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(5,1024,buffer,983062592(61192/208/9)) lseek err Invalid argument
file_pread(5,1,buffer,983062592(61192/208/9)) lseek err Invalid argument
NTFS: Can't read MFT
HPFS - NTFS 60800 254 63 121601 253 61 976768001
NTFS, blocksize=4096, 500 GB / 465 GiB
This partition ends after the disk limits. (start=976768064, size=976768001, end=1953536064, disk end=976773167)
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,1,buffer,976773191(60801/81/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,1,buffer,976773319(60801/83/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,1,buffer,976773447(60801/85/28)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,1,buffer,976773575(60801/87/30)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,1,buffer,976773703(60801/89/32)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,1,buffer,976773831(60801/91/34)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,1,buffer,976773959(60801/93/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,1,buffer,976774087(60801/95/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,1,buffer,976774215(60801/97/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,1,buffer,976774343(60801/99/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,1,buffer,976774471(60801/101/44)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,1,buffer,976774599(60801/103/46)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,1,buffer,976774727(60801/105/48)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,1,buffer,976774855(60801/107/50)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,1,buffer,976774983(60801/109/52)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775111(60801/111/54)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,14,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 60800 254 63 121601 253 61 976768001
NTFS, blocksize=4096, 500 GB / 465 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
HPFS - NTFS 0 1 2 60800 254 63 976768001
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 P HPFS - NTFS 0 1 1 60800 254 63 976768002
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
New options :
Dump : No
Align partition: Yes
Expert mode : No
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
Info: size boot_sector 976768001, partition 976768002
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
1 P HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
ntfs_boot_sector
1 P HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 0/1/1
Info: size boot_sector 976768001, partition 976768002
NTFS at 0/1/1
Info: size boot_sector 976768001, partition 976768002
filesystem size 976768001
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 488384000
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 61048000
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 61048000
ntfs_find_mft: mft_record_size 1024
ntfs_find_mft: index_block_size 4096
New / Current boot sector
filesystem size 976768002 976768001
sectors_per_cluster 8 8
mft_lcn 786432 786432
mftmirr_lcn 61048000 61048000
clusters_per_mft_record -10 -10
clusters_per_index_record 1 1
Extrapolated boot sector and current boot sector are different.
filesystem size 976768002 976768001
sectors_per_cluster 8 8
mft_lcn 786432 786432
mftmirr_lcn 61048000 61048000
clusters_per_mft_record -10 -10
clusters_per_index_record 1 1
Write new boot!
ntfs_boot_sector
1 P HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 0/1/1
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 61048000
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.