The Thousandth Partition for you to help Answer

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#11 Post by Artfldgr »

Ok.
increasing the time and changing sleep settings worked. the drive stays connected and the software runs.
but after 19hours its only 31% done. the bigger problem is that i cant leave my computer chugging away for three days trying to finish this kind of job...

to bad your software cant save a place and then continue where it left off in its analysis
then someone could scan, stop to work, then go back to scanning at night.

anyway, here is what i have so far (and yes its still running!)
Mon Aug 17 23:52:25 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=104855502848
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=249526484992
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=407145283584
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=104857600000
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Q:)=320070483968
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30394 255 63, sector size=512
Disk /dev/sdb - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Disk /dev/sde - 104 GB / 97 GiB - CHS 12748 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Drive C: - 104 GB / 97 GiB - CHS 12747 255 63, sector size=512
Drive D: - 249 GB / 232 GiB - CHS 30336 255 63, sector size=512
Drive E: - 407 GB / 379 GiB - CHS 49499 255 63, sector size=512
Drive Q: - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45599 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=732558335 (expected 732558335)
hdr_lba_start=6
hdr_lba_end=732558330
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
Warning: number of heads/cylinder mismatches 1 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 1 (NTFS) != 63 (HD)
1 P MS Data 256 732558335 732558080

search_part()
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45599 255 63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
filesystem size 732558080
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366279039
clusters_per_mft_record 1
clusters_per_index_record 1
MS Data 256 732558335 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB

Results
P MS Data 256 732558335 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB

interface_write()
1 P MS Data 256 732558335 732558080
hopefully that's enough or i will have to figure out another way to get the stuff to run the deeper scan to the end, but as i said, three days is a long time when you need your equipment for other things than a scan.


Thanks

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#12 Post by Artfldgr »

I had to kill the task after it hit 40%..
i readjusted the system so it will run and not sleep for more than 4 days
and am now running it again, hopefully i can finish the run to the end
the larger question is, once it gets to the end, then what?

if i need the results in the software, and i dont know what to do with it, i will end up having to run again for another 3-4 days, which for a professional IT person is quite the pale and its pretty hard to do as i need the machine and ability to reboot to different operating systems to do my work... you know, the thing that puts food on the table.

so far this is turning into a month long project... sigh.

thanks for the help fiona!!!
are you there? :)

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#13 Post by Artfldgr »

I was doing some research to try to determine how this was originally formatted hoping that would help
in this case, the drive was formatted as a NTFS MBR with 4096 sized sectors (as i said it was formatted on XP)
somehow the wrong type of partition type was written or changed as it could never be a GPT from an XP system.

does that help? if its MBR and deep scan is run as a GPT, wouldn't that fail?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: The Thousandth Partition for you to help Answer

#14 Post by Fiona »

As I've mentionned in my post above, Intel scan does not take as long.
Despite that you scanned your disk using EFI GPT.
As far as I've seen, I got only the result from Quick Search again.
If you'd like to get a faster result, you should use Intel.
Also I've recommended to select Disk instead of PhysicalDrive.
Would be probaly your Disk here:
Hard disk list
Disk /dev/sda - 82 GB / 76 GiB - CHS 10011 255 63, sector size=512
Disk /dev/sdb - 250 GB / 232 GiB - CHS 484521 16 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdd - 200 GB / 186 GiB - CHS 24321 255 63, sector size=512
Disk /dev/sde - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Disk \\.\PhysicalDrive7 - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Drive C: - 48 GB / 45 GiB - CHS 5930 255 63, sector size=512
Drive F: - 33 GB / 31 GiB - CHS 4078 255 63, sector size=512
Drive K: - 83 GB / 78 GiB - CHS 162539 16 63, sector size=512
Drive L: - 84 GB / 79 GiB - CHS 164572 16 63, sector size=512
Drive M: - 81 GB / 75 GiB - CHS 157406 16 63, sector size=512
Drive O: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Drive V: - 320 GB / 298 GiB - CHS 38912 255 63, sector size=512
Drive X: - 200 GB / 186 GiB - CHS 24320 255 63, sector size=512
On WindowsXP, if you didn't use GPT, your disk was probably advanced formatted.
The sector size 4k fits perfectly.
In TestDisk, you can stop quick serach by pressing enter and pressing enter again you'll see Deeper Search.
Can you run it to have a try to find your partition and list your files?
The backup of the boot sector, as I already mentionned too, is the last sector of your partition.
On a 3 TB-Disk it takes some time.
If nothing would be found, you'll need datarecovery software.
Info will follow.

Fiona

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#15 Post by Artfldgr »

Fiona, your great.

however, the disk has halted so many times on trying to do a 3-4 day run of deeper scan its now starting to say there are errors where before it didnt say there were any... your software is great, your assistance as well, but its just not really up to being used on 3 terabyte drives under windows 10, which wants to update the computer without you being able to stop it among other things.

i think all the attempts and such is killing the drive as under deeper scan its constantly spinning for days on end

its a usb 3 drive formated under XP before GPT..

i have purchased another 4tb drive (internal) that i can move things to if i found any..
but other than one file, recycle bin, . and .. there is nothing showing up and i cant get it to complete the deeper scan
on the XP box its a lot slower and would take a week to run...

as i mentioned, it would be great if the software allows a pause where you can go back to finish some more each time. then one can run it at night, and continue each night a bit more. but since it wont do this, the drive is so massive that the time it takes to do the deeper scan just cant be completed (with one reason being microsoft knows better what you want and wont let you argue with it... so its set up to address the weakest link and dumbest users at the expense of its more knowlegeable users. so far its taken me a while to get into the settings and turn on those things that would allow one more control, like control over windows update which they have set up in such a way that its very hard to get it to stop... i bet the gamers will love buying $4000 dollar boxes that they cant stop from updating in the middle of their game and clobbering their play... not to mention how it has clobbered your software that runs for days, and other stuff i was trying to run (i work in research computing at a prestigious hospital/university)

sigh.

im looking forward to your suggestions... i am at the point of using diskpart to delete it all, reformat it as MBR to insure it can be used to xfer from windows XP and call it a lovely one month attempt at becoming bald pulling my hair out... every day, a bit more face to wash...

:)

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#16 Post by Artfldgr »

Looks like the suggestion box is empty
:shock:

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: The Thousandth Partition for you to help Answer

#17 Post by Fiona »

Sry for late!
I'm still on vacation until september 12!
In any case, each day I read the forum and answer as much as possible.
As I mentionned before you should choose Intel in testdisk.
Even if you have a GPT-Disk.
A GPT disk scans each sector and is very time consuming.
Intel scans for partition by cylinder.
Info about CHS (Cylinder-Heads-Sectors)
1 Cylinder has 255 heads (0-254) and 1 head is 63 sectors.
If you add all together 1 cylinder would have approximately 8 MB.
So it will be much faster than scanning each sector (512 or 4096 Bytes).
The difference would be, you can't write an intel partition to a GUID partition table, but if your partition would be found and lists your data, you have to copy them to another healthy disk or partition.
Also GPT is more exact, because it scans each sector.
Actually testdisk works datarecovery standard as read only.
So it's not harmful to any disk.
In any case, I'm trying to avoid a scan.
If any partition is available, I'll check the partition table and if it's ok I'm trying to run a boot sector or Superblock diagnose.
So it can make a scan unnecessary.
In your case, you have a partition in your partition table.
That's why I tried to find another one displaying your data
Until yet I've only seen Quick Search and even one scan was scanned by GPT.
Under disk selection I've also recommeded to select Disk / dev sda etc.. instead of physically drive and run testdisk 32 bit.

If you have seen any errors during a scan, you should run CrystalDiskInfo to watch the status of your disk.
It provides results immediately.
http://crystalmark.info/download/index-e.html
Please use the portable version.
If testdisk doesn't find another partition and listing your files, you'll need datarecovery software.
Info about PhotoRec will follow.

PhotoRec allows to resume a session.
But in TestDisk it wouldn't be as much helpful, because it doesn't decrease scan time.
For example only scanning a certain region to have a try to find a backup of a boot sector could ease the use.
But it's only an idea and I don't know would it be possible or not.
At least I could suggest it.

Fiona

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#18 Post by Artfldgr »

thanks for answering on your vacation... sorry

here is what ran tonight. i will try again tomorrow on the other system. for some reason it runs and at some point it decides to quit. when it does it seems to disconnect and go to sleep, then the log gives errors instead of info

Thu Aug 27 18:58:42 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=104855502848
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=249998344192
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=407145283584
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=104857600000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=7384137728
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Q:)=319937314816
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30394 255 63, sector size=512
Disk /dev/sdb - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdd - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512
Disk /dev/sde - 104 GB / 97 GiB - CHS 12748 255 63, sector size=512
Disk /dev/sdf - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Disk \\.\PhysicalDrive5 - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Drive C: - 104 GB / 97 GiB - CHS 12747 255 63, sector size=512
Drive D: - 249 GB / 232 GiB - CHS 30393 255 63, sector size=512
Drive E: - 407 GB / 379 GiB - CHS 49499 255 63, sector size=512
Drive G: - 7384 MB / 7042 MiB - CHS 1760 64 32, sector size=2048
Drive M: - 4000 GB / 3725 GiB - CHS 486384 255 63, sector size=512
Drive Q: - 319 GB / 297 GiB - CHS 38896 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk /dev/sdf - 3000 GB / 2794 GiB
Partition table type: Intel

Analyse Disk /dev/sdf - 3000 GB / 2794 GiB - CHS 45599 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
Current partition structure:
Warning: number of heads/cylinder mismatches 1 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 1 (NTFS) != 63 (HD)
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
No partition is bootable

search_part()
Disk /dev/sdf - 3000 GB / 2794 GiB - CHS 45599 255 63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
filesystem size 732558080
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366279039
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
file_pread(9,1,buffer,732558336(45599/165/7)) ReadFile The drive cannot find the sector requested.

file_pread(9,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(9,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(9,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(9,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(9,3,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(9,1,buffer,732558592(45599/169/11)) lseek err Invalid argument

Results
* HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB

interface_write()
1 * HPFS - NTFS 0 4 5 45599 165 6 732558080

search_part()
Disk /dev/sdf - 3000 GB / 2794 GiB - CHS 45599 255 63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
filesystem size 732558080
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366279039
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
file_pread(9,3,buffer,438293511(27282/129/55)) ReadFile The system cannot find the file specified.

file_pread(9,2,buffer,438293511(27282/129/55)) ReadFile The system cannot find the file specified.

file_pread(9,2,buffer,438293513(27282/129/57)) ReadFile The system cannot find the file specified.

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#19 Post by Artfldgr »

Finally got the system to finish parsing the drive without dropping it...

Fri Aug 28 18:53:40 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=82348277760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=200049647616
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdh)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=82348277760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=200049647616
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=320072933376
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive7)=3000558944256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=48784103424
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=33550884864
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
filewin32_getfilesize(\\.\H:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\H:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=83886211584
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=84934950912
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=81236606976
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\O:)=3000557895680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\V:)=320070288384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\X:)=200047002624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Y:)=320070288384
Hard disk list
Disk /dev/sda - 82 GB / 76 GiB - CHS 10011 255 63, sector size=512
Disk /dev/sdb - 250 GB / 232 GiB - CHS 484521 16 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdd - 200 GB / 186 GiB - CHS 24321 255 63, sector size=512
Disk /dev/sde - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Disk \\.\PhysicalDrive7 - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Drive C: - 48 GB / 45 GiB - CHS 5930 255 63, sector size=512
Drive F: - 33 GB / 31 GiB - CHS 4078 255 63, sector size=512
Drive K: - 83 GB / 78 GiB - CHS 162539 16 63, sector size=512
Drive L: - 84 GB / 79 GiB - CHS 164572 16 63, sector size=512
Drive M: - 81 GB / 75 GiB - CHS 157406 16 63, sector size=512
Drive O: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096
Drive V: - 320 GB / 298 GiB - CHS 38912 255 63, sector size=512
Drive X: - 200 GB / 186 GiB - CHS 24320 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk /dev/sdh - 3000 GB / 2794 GiB
Partition table type: Intel

Analyse Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 45599 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
Current partition structure:
Warning: number of heads/cylinder mismatches 1 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 1 (NTFS) != 63 (HD)
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
No partition is bootable

search_part()
Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 45599 255 63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
filesystem size 732558080
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366279039
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
file_pread(9,1,buffer,732558336(45599/165/7)) ReadFile The drive cannot find the sector requested.

file_pread(9,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(9,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(9,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(9,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(9,3,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(9,1,buffer,732558592(45599/169/11)) lseek err Invalid argument

Results
* HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB

interface_write()
1 * HPFS - NTFS 0 4 5 45599 165 6 732558080

search_part()
Disk /dev/sdh - 3000 GB / 2794 GiB - CHS 45599 255 63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
filesystem size 732558080
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366279039
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
file_pread(9,1,buffer,732558336(45599/165/7)) ReadFile The drive cannot find the sector requested.

file_pread(9,2,buffer,732558336(45599/165/7)) ReadFile The drive cannot find the sector requested.

file_pread(9,2,buffer,732558336(45599/165/7)) ReadFile The drive cannot find the sector requested.

file_pread(9,1,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(9,2,buffer,732558337(45599/165/8)) lseek err Invalid argument
file_pread(9,2,buffer,732558343(45599/165/14)) lseek err Invalid argument
file_pread(9,2,buffer,732558345(45599/165/16)) lseek err Invalid argument
file_pread(9,2,buffer,732558351(45599/165/22)) lseek err Invalid argument
file_pread(9,2,buffer,732558591(45599/169/10)) lseek err Invalid argument
file_pread(9,1,buffer,732558338(45599/165/9)) lseek err Invalid argument
file_pread(9,1,buffer,732558344(45599/165/15)) lseek err Invalid argument
file_pread(9,1,buffer,732558346(45599/165/17)) lseek err Invalid argument
file_pread(9,1,buffer,732558353(45599/165/24)) lseek err Invalid argument
file_pread(9,1,buffer,732558592(45599/169/11)) lseek err Invalid argument

Results
* HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS filesystem need to be repaired.


dir_partition inode=5
* HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 .
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 ..
1756 dr-xr-xr-x 0 0 0 1-Aug-2015 20:52 $RECYCLE.BIN
1742 dr-xr-xr-x 0 0 0 18-Jul-2015 09:59 disk2vhd

dir_partition inode=1756
* HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
Directory /$RECYCLE.BIN
1756 dr-xr-xr-x 0 0 0 1-Aug-2015 20:52 .
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 ..
1759 dr-xr-xr-x 0 0 0 1-Aug-2015 21:49 S-1-5-21-1074361647-649854972-2827186090-1001
1757 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 S-1-5-21-451022587-68356514-72691679-1001
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 .
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 ..
1756 dr-xr-xr-x 0 0 0 1-Aug-2015 20:52 $RECYCLE.BIN
1742 dr-xr-xr-x 0 0 0 18-Jul-2015 09:59 disk2vhd

interface_write()
1 * HPFS - NTFS 0 4 5 45599 165 6 732558080
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
heads/cylinder 1 (NTFS) != 255 (HD)
sect/track 1 (NTFS) != 63 (HD)
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS filesystem need to be repaired.


dir_partition inode=5
1 P HPFS - NTFS 0 4 5 45599 165 6 732558080
NTFS, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 .
5 dr-xr-xr-x 0 0 0 1-Aug-2015 21:35 ..
1756 dr-xr-xr-x 0 0 0 1-Aug-2015 20:52 $RECYCLE.BIN
1742 dr-xr-xr-x 0 0 0 18-Jul-2015 09:59 disk2vhd

TestDisk exited normally.
now what? :)
Thanks

Artfldgr
Posts: 18
Joined: 04 Aug 2015, 01:02

Re: The Thousandth Partition for you to help Answer

#20 Post by Artfldgr »

Welcome back from vacation!!!!!
:)

Locked