pagaille sur mon disque dur

Comment utiliser TestDisk pour récupérer une partition perdue
Locked
Message
Author
jano27
Posts: 2
Joined: 21 Oct 2022, 13:30

pagaille sur mon disque dur

#1 Post by jano27 »

bonjour après un arrêt forcé en pleine mise à jour mon disque dur est en mauvais état pouvez vous m'aider ? actuellement j'ai lancé un deeper search.
Par avance merci
le fichier log donne ceci : après avoir tronqué énormément de lignes d'erreur !




Fri Oct 21 13:56:23 2022
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, July 2022
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=498431141376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=307012994560
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST9500420AS, S/N:5VJ4E9CT, FW:0006HPM1
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD32 00BEVT-26A23T0, S/N:152D20329000

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - WDC WD32 00BEVT-26A23T0
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 27: no test
NTFS at 1303/0/2
NTFS at 1315/190/52
check_part_i386 4 type 27: no test
Current partition structure:
1 P Windows RE(store) 0 32 33 1302 254 59 20930643
2 * HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
3 P HPFS - NTFS 1315 190 52 38641 72 50 599634755
4 P Windows RE(store) 38641 72 56 38913 5 4 4365408

search_part()
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 0/32/33
filesystem size 20930643
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
NTFS, blocksize=4096, 10716 MB / 10220 MiB
NTFS at 1303/0/2
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 1315/190/52
filesystem size 599634755
sectors_per_cluster 8
mft_lcn 822005
mftmirr_lcn 2290
clusters_per_mft_record -10
clusters_per_index_record 1
file_win32_pread(532,16,buffer,27713542(1725/22/32)) read err: read after end of file
HPFS - NTFS 1315 190 52 38641 72 50 599634755
NTFS, blocksize=4096, 307 GB / 285 GiB
NTFS at 38641/72/56
filesystem size 4365408
sectors_per_cluster 8
mft_lcn 87199
mftmirr_lcn 18
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 38641 72 56 38913 5 4 4365408
NTFS, blocksize=4096, 2235 MB / 2131 MiB

Results
* HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
NTFS, blocksize=4096, 10716 MB / 10220 MiB
P HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 1315 190 52 38641 72 50 599634755
NTFS, blocksize=4096, 307 GB / 285 GiB
L HPFS - NTFS 38641 72 56 38913 5 4 4365408
NTFS, blocksize=4096, 2235 MB / 2131 MiB
add_ext_part_i386: max
add_ext_part_i386: max

interface_write()
1 * HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
2 P HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
3 P HPFS - NTFS 1315 190 52 38641 72 50 599634755
4 E extended LBA 38641 72 51 38913 80 63 4370197
5 L HPFS - NTFS 38641 72 56 38913 5 4 4365408

search_part()
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 0/32/33
filesystem size 20930643
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
NTFS, blocksize=4096, 10716 MB / 10220 MiB
file_win32_pread(532,16,buffer,6426126(400/2/1)) read err: read after end of file
file_win32_pread(532,1,buffer,6426126(400/2/1)) read err: read after end of file
file_win32_pread(532,16,buffer,6426127(400/2/2)) read err: read after end of file
file_win32_pread(532,1,buffer,6426127(400/2/2)) read err: read after end of file
file_win32_pread(532,8,buffer,6426142(400/2/17)) read err: read after end of file
file_win32_pread(532,16,buffer,6426132(400/2/7)) read err: read after end of file
file_win32_pread(532,1,buffer,6426132(400/2/7)) read err: read after end of file
NTFS at 1303/0/2
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 1315/190/52
filesystem size 599634755
sectors_per_cluster 8
mft_lcn 822005
mftmirr_lcn 2290
clusters_per_mft_record -10
clusters_per_index_record 1
file_win32_pread(532,16,buffer,27713542(1725/22/32)) read err: read after end of file
HPFS - NTFS 1315 190 52 38641 72 50 599634755
NTFS, blocksize=4096, 307 GB / 285 GiB

LVM magic value at 1384/213/46
file_win32_pread(532,16,buffer,27713536(1725/22/26)) read err: read after end of file
file_win32_pread(532,16,buffer,27713535(1725/22/25)) read err: read after end of file
file_win32_pread(532,16,buffer,27713538(1725/22/28)) read err: read after end of file
file_win32_pread(532,1,buffer,27713544(1725/22/34)) read err: read after end of file
file_win32_pread(532,7,buffer,27713545(1725/22/35)) read err: read after end of file
file_win32_pread(532,16,buffer,124168433(7729/32/33)) read err: read after end of file
file_win32_pread(532,1,buffer,124168433(7729/32/33)) read err: read after end of file
file_win32_pread(532,8,buffer,124166527(7729/2/17)) read err: read after end of file
file_win32_pread(532,11,buffer,124166574(7729/3/1)) read err: read after end of file
file_win32_pread(532,2,buffer,124168496(7729/33/33)) read err: read after end of file
file_win32_pread(532,2,buffer,124167344(7729/15/15)) read err: read after end of file


file_win32_pread(532,1,buffer,625141759(38913/70/5)) read err: read after end of file
file_win32_pread(532,13,buffer,625141762(38913/70/8)) read err: read after end of file
file_win32_pread(532,3,buffer,625141775(38913/70/21)) read err: read after end of file
file_win32_pread(532,3,buffer,625141822(38913/71/5)) read err: read after end of file
file_win32_pread(532,8,buffer,625141838(38913/71/21)) read err: read after end of file
file_win32_pread(532,11,buffer,625141885(38913/72/5)) read err: read after end of file
file_win32_pread(532,1,buffer,625141778(38913/70/24)) read err: read after end of file
file_win32_pread(532,1,buffer,625141825(38913/71/8)) read err: read after end of file
file_win32_pread(532,1,buffer,625141846(38913/71/29)) read err: read after end of file
file_win32_pread(532,1,buffer,625141896(38913/72/16)) read err: read after end of file

Results
* HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
NTFS, blocksize=4096, 10716 MB / 10220 MiB
P HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 1315 190 52 38641 72 50 599634755
NTFS, blocksize=4096, 307 GB / 285 GiB
Can't open backup.log file: No such file or directory
interface_load
Can't open backup.log file: No such file or directory
interface_load
Can't open backup.log file: No such file or directory
interface_load
Can't open backup.log file: No such file or directory
interface_load

interface_write()
1 * HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
2 P HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
3 P HPFS - NTFS 1315 190 52 38641 72 50 599634755
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.
file_win32_pread(532,1,buffer,20932696(1303/0/2)) read err: read after end of file
Can't read exFAT boot sector.

P HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
NTFS, blocksize=4096, 104 MB / 100 MiB
Can't open filesystem. Filesystem seems damaged.
file_win32_pread(532,1,buffer,21137496(1315/190/52)) read err: read after end of file
Can't read exFAT boot sector.

P HPFS - NTFS 1315 190 52 38641 72 50 599634755
NTFS, blocksize=4096, 307 GB / 285 GiB
Can't open filesystem. Filesystem seems damaged.
file_win32_pread(532,1,buffer,2048(0/32/33)) read err: read after end of file
Can't read exFAT boot sector.

* HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
NTFS, blocksize=4096, 10716 MB / 10220 MiB
Can't open filesystem. Filesystem seems damaged.
Can't open backup.log file: No such file or directory
interface_load
Can't open backup.log file: No such file or directory
interface_load

interface_write()
1 * HPFS - NTFS 0 32 33 1302 254 59 20930643 [Recovery]
2 P HPFS - NTFS 1303 0 2 1315 190 51 204800 [System Reserved]
3 P HPFS - NTFS 1315 190 52 38641 72 50 599634755
write!

write_mbr_i386: starting...
file_win32_pread(532,1,buffer,0(0/0/1)) read err: read after end of file

Partition: Read error
Store new MBR code
file_win32_pwrite(532,1,buffer,0(0/0/1)) write err
write_all_log_i386: starting...
No extended partition

Partition: Write error

TestDisk exited normally.

jano27
Posts: 2
Joined: 21 Oct 2022, 13:30

Re: pagaille sur mon disque dur

#2 Post by jano27 »

Bonjour
voilà le deeper search en cours ! Il tourne depuis longtemps. A l'aide !
Linux ? j'avais vu 2 part ou vol en RAW. c'est pas dans le tuto ! bon WEnd.
Attachments
Sans titre.png
Sans titre.png (26.53 KiB) Viewed 13327 times

Locked