Partion perdue en 2 morceaux

Comment utiliser TestDisk pour récupérer une partition perdue
Locked
Message
Author
labat
Posts: 4
Joined: 28 Nov 2014, 11:38

Partion perdue en 2 morceaux

#1 Post by labat »

Bonjour,

Un ami vient de me passer son disque dur externe qui un pris un coup alors qu'il était éteint et débranché. Lorqu'il a voulu le rebrancher, windows lui a demandé si il voulait le formater. Il n'a rien fait.

Le disque dur est un WD Green de 4 To, en une seule partition.

J'ai branché le disque en interne sur mon pc. Sous Windows, j'ai une partition de 2 To au format RAW, et les 1.7 To restant en non alloué.

J'ai utilisé l'UBCD et la version de testdisk, et voila ce que j'obtiens sous Gparted et Testdisk :

Code: Select all


Fri Nov 28 11:30:14 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.10.4-pmagic (#2 Tue Jul 30 11:06:11 CDT 2013) i686
Compiler: GCC 4.4
Compilation date: 2014-11-13T19:05:07
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size       976773168 sectors
/dev/sda: user_max   976773168 sectors
/dev/sda: native_max 976773168 sectors
/dev/sda: dco        976773168 sectors
/dev/sdb: LBA, HPA, LBA48, DCO support
/dev/sdb: size       976771055 sectors
/dev/sdb: user_max   976771055 sectors
/dev/sdb: native_max 976773168 sectors
/dev/sdb: dco        976773168 sectors
/dev/sdc: LBA, LBA48, DCO support
/dev/sdc: size       7813971633 sectors
/dev/sdc: user_max   7813971633 sectors
/dev/sdc: dco        7814037168 sectors
/dev/sdd: LBA, HPA, LBA48, DCO support
/dev/sdd: size       976773168 sectors
/dev/sdd: user_max   976773168 sectors
/dev/sdd: native_max 976773168 sectors
/dev/sdd: dco        976773168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000AAKX-001CA0, S/N:WD-WMAYUM409835, FW:15.01H15
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - SAMSUNG HD501LJ, S/N:S0MUJ1KP984761, FW:CR100-11
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 486397 255 63, sector size=512 - WDC WD40EZRX-00SPEB0, S/N:WD-WCC4E1386814, FW:80.00A80
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5001AALS-00E3A0, S/N:WD-WCATR4685192, FW:05.01D05

user_max=7813971633 dco=7814037167
/dev/sdc: Device Configuration Overlay (DCO) present.
Partition table type (auto): Intel
Disk /dev/sdc - 4000 GB / 3725 GiB - WDC WD40EZRX-00SPEB0
Partition table type: Intel

Analyse Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 486397 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
check_part_i386 failed for partition type 07
Current partition structure:
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
Invalid NTFS or EXFAT boot
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295

search_part()
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 486397 255 63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           976745984
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               488372991
clusters_per_mft_record   1
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB

Results
   * HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 7813967872 linear /dev/sdc 2048" | dmsetup create test0

interface_write()
 1 P HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
Image

labat
Posts: 4
Joined: 28 Nov 2014, 11:38

Re: Partion perdue en 2 morceaux

#2 Post by labat »

Pour la suite, j'ai fait "write", et j'ai donc inscrit la nouvelle table des partitions.

Pour reconstruire le secteur de boot, lorsque je vais dans "advanced -> boot", voila ce que j'ai :

Code: Select all


Sat Nov 29 08:43:49 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, MinGW 3.11
Compilation date: Nov 13 2014 18:59:59
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=4000753476096
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500106780160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250048512000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=250056705024
filewin32_getfilesize(\\.\G:) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\G:) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2199023255040
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=395247091712
filewin32_getfilesize(\\.\K:) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\K:) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB - CHS 486397 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 104 GB / 97 GiB - CHS 12748 255 63, sector size=512
Drive D: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive E: - 250 GB / 232 GiB - CHS 30400 255 63, sector size=512
Drive F: - 250 GB / 232 GiB - CHS 30400 255 63, sector size=512
Drive H: - 2199 GB / 2047 GiB - CHS 267349 255 63, sector size=512
Drive I: - 395 GB / 368 GiB - CHS 48052 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB - CHS 486397 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
check_part_i386 failed for partition type 07
Current partition structure:
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
Invalid NTFS or EXFAT boot
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295

search_part()
Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB - CHS 486397 255 63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           976745984
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               488372991
clusters_per_mft_record   1
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB

Results
   * HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB


dir_partition inode=5
   * HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 18-Nov-2014 15:45 .
       5 dr-xr-xr-x     0      0         0 18-Nov-2014 15:45 ..
     148 dr-xr-xr-x     0      0         0 22-Aug-2014 12:54 $RECYCLE.BIN
     220 dr-xr-xr-x     0      0         0 27-Sep-2014 22:23 Fait
    2419 dr-xr-xr-x     0      0         0 17-Nov-2014 18:24 Pc
     196 dr-xr-xr-x     0      0         0 21-Nov-2014 21:14 Portable
    5453 dr-xr-xr-x     0      0         0 18-Nov-2014 14:53 S (A Faire)
      27 dr-xr-xr-x     0      0         0 28-Jun-2014 12:23 System Volume Information
    5454 dr-xr-xr-x     0      0         0 26-Nov-2014 17:56 T (A Faire)
     151 dr-xr-xr-x     0      0         0 27-Sep-2014 17:36 XXX WD
    1146 -r--r--r--     0      0    130560 22-Sep-2014 22:31 Thumbs.db
    1146 -r--r--r--     0      0         0 22-Sep-2014 22:31 Thumbs.db:encryptable

interface_write()
 1 * HPFS - NTFS              0  32 33 486397  33 36 7813967872 [My Book]
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
check_part_i386 failed for partition type 07
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
filesystem size           976745984 16347595071208370171
sectors_per_cluster       1 235
mft_lcn                   786432 925621015
mftmirr_lcn               488372991 2847387417
clusters_per_mft_record   1 -56
clusters_per_index_record 1 -52
Boot sector
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
check_part_i386 failed for partition type 07
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33 267349 121 35 4294967295
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
filesystem size           976745984 16347595071208370171
sectors_per_cluster       1 235
mft_lcn                   786432 925621015
mftmirr_lcn               488372991 2847387417
clusters_per_mft_record   1 -56
clusters_per_index_record 1 -52
Boot sector
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Error: size boot_sector 976745984 > partition 4294967295
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
C'est la que j'aurai besoin d'un coup de main car je ne sais pas trop quoi faire ensuite.

labat
Posts: 4
Joined: 28 Nov 2014, 11:38

Re: Partion perdue en 2 morceaux

#3 Post by labat »

Après un peu de réflexion et de recherche, je viens de me rendre compte que je suis mal partit dès le départ.

Je suis partit sur une partition de type "Intel", ce qui n'était pas bon étant donné que cela me limité à des partitions de 2 To, d’où mes 2 partitions.

Je suis passé sur un partitionnement en "EFI GPT" et j'ai bien retrouvé mon unique partition avec les fichiers.

Voila le log actuel, je suis en train de faire un "rebuild BS"

Code: Select all


Sat Nov 29 14:24:18 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, MinGW 3.11
Compilation date: Nov 13 2014 18:59:59
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=4000753476096
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500106780160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250048512000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=250056705024
filewin32_getfilesize(\\.\G:) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\G:) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=4000751550464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=395247091712
filewin32_getfilesize(\\.\K:) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\K:) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB - CHS 486397 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 104 GB / 97 GiB - CHS 12748 255 63, sector size=512
Drive D: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive E: - 250 GB / 232 GiB - CHS 30400 255 63, sector size=512
Drive F: - 250 GB / 232 GiB - CHS 30400 255 63, sector size=512
Drive H: - 4000 GB / 3725 GiB - CHS 486397 255 63, sector size=512
Drive I: - 395 GB / 368 GiB - CHS 48052 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB - CHS 486397 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=7813971632 (expected 7813971632)
hdr_lba_start=34
hdr_lba_end=7813971599
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
 1 P MS Data                     2048 7813969919 7813967872 [My Book]

search_part()
Disk \\.\PhysicalDrive0 - 4000 GB / 3725 GiB - CHS 486397 255 63
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           976745984
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               488372991
clusters_per_mft_record   1
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=4000751550464, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           976745984
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               488372991
clusters_per_mft_record   1
clusters_per_index_record 1
     MS Data                     2048 7813969919 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB
file_win32_pread(88,11,buffer,3519004328(486397/60/40)) read err: read after end of file
file_win32_pread(88,11,buffer,3519004331(486397/60/43)) read err: read after end of file
file_win32_pread(88,8,buffer,3519004330(486397/60/42)) read err: read after end of file
file_win32_pread(88,3,buffer,3519004336(486397/60/48)) read err: read after end of file
file_win32_pread(88,8,buffer,3519004334(486397/60/46)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004325(486397/60/37)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004326(486397/60/38)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004327(486397/60/39)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004328(486397/60/40)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004329(486397/60/41)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004331(486397/60/43)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004333(486397/60/45)) read err: read after end of file
file_win32_pread(88,14,buffer,3519004335(486397/60/47)) read err: read after end of file

Results
   P MS Data                     2048 7813969919 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB

interface_write()
 1 P MS Data                     2048 7813969919 7813967872 [My Book]
write!
No extended partition
You will have to reboot for the change to take effect.

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=7813971632 (expected 7813971632)
hdr_lba_start=34
hdr_lba_end=7813971599
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
 1 P MS Data                     2048 7813969919 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB

ntfs_boot_sector
 1 P MS Data                     2048 7813969919 7813967872 [My Book]
     NTFS, blocksize=4096, 4000 GB / 3725 GiB
NTFS at 0/32/33
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Info: size boot_sector 976745984, partition 3519000576
filesystem size           976745984 1
sectors_per_cluster       1 0
mft_lcn                   786432 0
mftmirr_lcn               488372991 0
clusters_per_mft_record   1 0
clusters_per_index_record 1 0
Boot sector
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Status: OK

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
J’essaie de reconstruire le disque afin de pouvoir le récupérer avec tous les fichiers présents, car je n'ai pas la place pour sauvegarder 3 To de données et formater le disque. Suis-je sur la bonne voie ?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Partion perdue en 2 morceaux

#4 Post by cgrenier »

Qu'est-ce que cela donne en faisant TestDisk, Advanced, Boot, List ?

labat
Posts: 4
Joined: 28 Nov 2014, 11:38

Re: Partion perdue en 2 morceaux

#5 Post by labat »

Bonjour,

Pour le boot-> list, j'obtiens bien tous les fichiers présents sur le disque.

J'ai également essayé de faire une analyse sur le disque H: et non le lecteur, voila le résultat qui a mis plusieurs jours :

Code: Select all

Drive H: - 4000 GB / 3725 GiB
Partition table type: EFI GPT

Analyse Drive H: - 4000 GB / 3725 GiB - CHS 486397 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Drive H: - 4000 GB / 3725 GiB - CHS 486397 255 63
check_FAT: Bad jump in FAT partition
check_FAT: Bad number of sectors per cluster

LVM magic value at 92470/175/27
check_FAT: Bad jump in FAT partition

HFS magic value at 118209/11/28
part_size 2706415194
     Mac HFS               1899028305 4605443498 2706415194 [:Ã9&ϳª.ÙØÔh.É-C'Übîô›]
     HFS blocksize=33554432, 1385 GB / 1290 GiB
check_FAT: Bad number of sectors per cluster
check_FAT: Bad jump in FAT partition
check_FAT: Bad jump in FAT partition

LVM magic value at 353478/63/57
file_win32_pread(120,11,buffer,3519000570(486397/0/62)) read err: read after end of file
file_win32_pread(120,8,buffer,3519000573(486397/1/2)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000564(486397/0/56)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000565(486397/0/57)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000566(486397/0/58)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000567(486397/0/59)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000568(486397/0/60)) read err: read after end of file
NTFS at 486397/0/60
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           976745984
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               488372991
clusters_per_mft_record   1
clusters_per_index_record 1
NTFS part_offset=4000751546368, part_size=4000751550464, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
file_win32_pread(120,14,buffer,3519000570(486397/0/62)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000572(486397/1/1)) read err: read after end of file
file_win32_pread(120,14,buffer,3519000574(486397/1/3)) read err: read after end of file
NTFS at 486397/1/4
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           976745984
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               488372991
clusters_per_mft_record   1
clusters_per_index_record 1
     MS Data                        0 7813967871 7813967872 [My Book]
     NTFS found using backup sector, blocksize=4096, 4000 GB / 3725 GiB
Partition not added.

Results
   P Mac HFS               1899028305 4605443498 2706415194 [:Ã9&ϳª.ÙØÔh.É-C'Übîô›]
     HFS blocksize=33554432, 1385 GB / 1290 GiB

Locked