Nach QuickSearch mit TD waren schon viele Dateien sichtbar und mit "c" habe ich sie wegkopiert.
Nur das Verzeichnis "Sicherungen", wo viele größere Dateien (*.tip mit 10-100GB) eigentlich liegen müssten, ist leer!
Wie in Ihrem Beispiel hat TD ein Backup vom Bootsektor gefunden.
Jetzt meine Frage:
> soll ich den Bootsektor wiederherstellen obwohl ich weiß das nicht alle Dateien mit "p" anzeigbar sind??
Ich wäre seeehhhr dankbar für eine schnelle Antwort.
Hier die LOG-Datei:
Code: Select all
Tue Apr 05 09:02:38 2016
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000365289472
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2063597568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=141716094976
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=209715200000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=629143502848
filewin32_getfilesize(\\.\F:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=77594624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1000169537536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=2000364240896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=2063581184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=18441306112
Hard disk list
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2063 MB / 1968 MiB - CHS 250 255 63, sector size=512
Drive C: - 141 GB / 131 GiB - CHS 17229 255 63, sector size=512
Drive D: - 209 GB / 195 GiB - CHS 25496 255 63, sector size=512
Drive E: - 629 GB / 585 GiB - CHS 76489 255 63, sector size=512
Drive G: - 77 MB / 74 MiB - CHS 9 255 63, sector size=512
Drive H: - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512
Drive I: - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512
Drive J: - 2063 MB / 1967 MiB - CHS 250 255 63, sector size=512
Drive M: - 18 GB / 17 GiB - CHS 2242 255 63, sector size=512
Partition table type (auto): Intel
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121597 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
No partition is bootable
search_part()
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 121597/37/40
filesystem size 1953456128
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122091007
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Results
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
dir_partition inode=5
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Directory /
5 dr-xr-xr-x 0 0 0 4-Mar-2016 10:13 .
5 dr-xr-xr-x 0 0 0 4-Mar-2016 10:13 ..
68 dr-xr-xr-x 0 0 0 11-Dec-2015 08:12 #_Install
52 dr-xr-xr-x 0 0 0 4-Mar-2016 11:03 $RECYCLE.BIN
57 dr-xr-xr-x 0 0 0 10-Mar-2015 07:20 AX NF ZZ
656 dr-xr-xr-x 0 0 0 20-Apr-2015 17:53 Drösing Projektsicherung
48 dr-xr-xr-x 0 0 0 2-Oct-2014 07:39 PLS-01
447 dr-xr-xr-x 0 0 0 10-Mar-2015 12:35 Recovery Manager
49 dr-xr-xr-x 0 0 0 11-Mar-2016 08:38 Sicherungen
27 dr-xr-xr-x 0 0 0 18-Aug-2015 13:30 System Volume Information
661 dr-xr-xr-x 0 0 0 5-Dec-2014 10:39 Treiber SW ua
45 dr-xr-xr-x 0 0 0 10-Mar-2015 12:35 WD Smartware Pro Free Trial
641 dr-xr-xr-x 0 0 0 22-Dec-2015 16:55 WVA-Weikendorf PLS
619 dr-xr-xr-x 0 0 0 2-Oct-2014 07:40 WindowsImageBackup
455 -r--r--r-- 0 0 0 5-Apr-2011 08:44 ###_USB-Boot_Acronis2010 26.1.2011.txt
460 -r--r--r-- 0 0 14563 26-Jan-2011 18:39 C1.png
461 -r--r--r-- 0 0 15690 26-Jan-2011 18:39 C2.png
469 -r--r--r-- 0 0 22437 26-Jan-2011 18:39 SPL1.EXE
470 -r--r--r-- 0 0 22437 26-Jan-2011 18:39 SPL3.EXE
456 -r--r--r-- 0 0 7029636 26-Jan-2011 18:39 bootmenu.exe
457 -r--r--r-- 0 0 1035 26-Jan-2011 18:39 bootmenu.xml
458 -r--r--r-- 0 0 264 26-Jan-2011 18:39 bootwiz.cfg
459 -r--r--r-- 0 0 24576 26-Jan-2011 18:39 bootwiz.sys
462 -r--r--r-- 0 0 31775899 26-Jan-2011 18:39 dat2.dat
463 -r--r--r-- 0 0 1378288 26-Jan-2011 18:39 dat3.dat
464 -r--r--r-- 0 0 31775705 26-Jan-2011 18:39 dat4.dat
465 -r--r--r-- 0 0 1378288 26-Jan-2011 18:39 dat5.dat
466 -r--r--r-- 0 0 7908 26-Jan-2011 18:39 icon_continue_48.png
467 -r--r--r-- 0 0 130024 26-Jan-2011 18:39 menulogo.png
468 -r--r--r-- 0 0 4850 26-Jan-2011 18:39 mouse.com
###### DeepSearch
Code: Select all
interface_write()
1 * HPFS - NTFS 0 32 33 121597 37 40 1953456128
search_part()
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 121597/37/40
filesystem size 1953456128
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122091007
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Results
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
dir_partition inode=5
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
Directory /
5 dr-xr-xr-x 0 0 0 4-Mar-2016 10:13 .
5 dr-xr-xr-x 0 0 0 4-Mar-2016 10:13 ..
68 dr-xr-xr-x 0 0 0 11-Dec-2015 08:12 #_Install
52 dr-xr-xr-x 0 0 0 4-Mar-2016 11:03 $RECYCLE.BIN
57 dr-xr-xr-x 0 0 0 10-Mar-2015 07:20 AX NF ZZ
656 dr-xr-xr-x 0 0 0 20-Apr-2015 17:53 Drösing Projektsicherung
48 dr-xr-xr-x 0 0 0 2-Oct-2014 07:39 PLS-01
447 dr-xr-xr-x 0 0 0 10-Mar-2015 12:35 Recovery Manager
49 dr-xr-xr-x 0 0 0 11-Mar-2016 08:38 Sicherungen
27 dr-xr-xr-x 0 0 0 18-Aug-2015 13:30 System Volume Information
661 dr-xr-xr-x 0 0 0 5-Dec-2014 10:39 Treiber SW ua
45 dr-xr-xr-x 0 0 0 10-Mar-2015 12:35 WD Smartware Pro Free Trial
641 dr-xr-xr-x 0 0 0 22-Dec-2015 16:55 WVA-Weikendorf PLS
619 dr-xr-xr-x 0 0 0 2-Oct-2014 07:40 WindowsImageBackup
455 -r--r--r-- 0 0 0 5-Apr-2011 08:44 ###_USB-Boot_Acronis2010 26.1.2011.txt
460 -r--r--r-- 0 0 14563 26-Jan-2011 18:39 C1.png
461 -r--r--r-- 0 0 15690 26-Jan-2011 18:39 C2.png
469 -r--r--r-- 0 0 22437 26-Jan-2011 18:39 SPL1.EXE
470 -r--r--r-- 0 0 22437 26-Jan-2011 18:39 SPL3.EXE
456 -r--r--r-- 0 0 7029636 26-Jan-2011 18:39 bootmenu.exe
457 -r--r--r-- 0 0 1035 26-Jan-2011 18:39 bootmenu.xml
458 -r--r--r-- 0 0 264 26-Jan-2011 18:39 bootwiz.cfg
459 -r--r--r-- 0 0 24576 26-Jan-2011 18:39 bootwiz.sys
462 -r--r--r-- 0 0 31775899 26-Jan-2011 18:39 dat2.dat
463 -r--r--r-- 0 0 1378288 26-Jan-2011 18:39 dat3.dat
464 -r--r--r-- 0 0 31775705 26-Jan-2011 18:39 dat4.dat
465 -r--r--r-- 0 0 1378288 26-Jan-2011 18:39 dat5.dat
466 -r--r--r-- 0 0 7908 26-Jan-2011 18:39 icon_continue_48.png
467 -r--r--r-- 0 0 130024 26-Jan-2011 18:39 menulogo.png
468 -r--r--r-- 0 0 4850 26-Jan-2011 18:39 mouse.com
dir_partition inode=49
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
ntfs_readdir failed for cluster 49: Input/output error
Directory /Sicherungen
49 dr-xr-xr-x 0 0 0 11-Mar-2016 08:38 .
5 dr-xr-xr-x 0 0 0 4-Mar-2016 10:13 ..