windows blue screen when trying to boot.

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
njkenrob
Posts: 2
Joined: 02 Jan 2023, 08:32

windows blue screen when trying to boot.

#1 Post by njkenrob »

i am running testdisk and i am able to see the partitions (disk 1)
partition 3 is marked as ntfs file system
the boot check says files match
the mbr check says ok as well
i can see all the files with the p command

this partition has a win 7 os
i use F12 key to choose boot device, select this drive, and i get blue screen

this all happened when i installed another drive an installed win10

i can boot win10 from the 3rd drive, and the drive shows up in file explorer, but is not accesible
the partition shows up in diskmgr as RAW

any guidance in getting this disk to boot with partition 3 would be greatly appreciated!

log details below:



Mon Jan 2 23:45:28 2023
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, November 2022
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1987758260224
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=987565350912
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
filewin32_getfilesize(\\.\K:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\K:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM001-1ER164, S/N:W4Z20R7X, FW:CC25
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - Samsung SSD 850 EVO 1TB, S/N:S3PJNF0JB06989Z, FW:EMT03B6Q
Disk \\.\PhysicalDrive2 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Samsung SSD 870 EVO 2TB, S/N:S6PNNM0TA04309B, FW:SVT02B6Q

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - Samsung SSD 850 EVO 1TB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type DE: no test
check_part_i386 2 type 27: no test
NTFS at 1536/170/43
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P Dell Utility 0 1 1 4 254 63 80262
2 * Windows RE(store) 5 25 21 1536 170 42 24604672
3 P HPFS - NTFS 1536 170 43 121601 80 63 1928838576 [OS-W7]

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
FAT16 at 0/1/1
FAT1 : 1-79
FAT2 : 80-158
start_rootdir : 159
Data : 191-80258
sectors : 80262
cluster_size : 4
no_of_cluster : 20017 (2 - 20018)
fat_length 79 calculated 79

FAT16 at 0/1/1
FAT16 >32M 0 1 1 4 254 63 80262 [DellUtility]
FAT16, blocksize=2048, 41 MB / 39 MiB
NTFS at 5/25/21
filesystem size 24604672
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 5 25 21 1536 170 42 24604672 [RECOVERY]
NTFS, blocksize=4096, 12 GB / 11 GiB
NTFS at 1536/170/43
filesystem size 1928838576
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 120552405
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1536 170 43 121601 80 63 1928838576 [OS-W7]
NTFS, blocksize=4096, 987 GB / 919 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* FAT16 >32M 0 1 1 4 254 63 80262 [DellUtility]
FAT16, blocksize=2048, 41 MB / 39 MiB
P HPFS - NTFS 5 25 21 1536 170 42 24604672 [RECOVERY]
NTFS, blocksize=4096, 12 GB / 11 GiB
P HPFS - NTFS 1536 170 43 121601 90 25 1928839168 [OS-W7]
NTFS, blocksize=4096, 987 GB / 919 GiB
NTFS Volume is dirty.


dir_partition inode=5
P HPFS - NTFS 1536 170 43 121601 90 25 1928839168 [OS-W7]
NTFS, blocksize=4096, 987 GB / 919 GiB
Directory /
5 dr-xr-xr-x 0 0 0 2-Jan-2023 23:43 .
5 dr-xr-xr-x 0 0 0 2-Jan-2023 23:43 ..
64 dr-xr-xr-x 0 0 0 1-Jan-2023 17:49 $Recycle.Bin
180342 dr-xr-xr-x 0 0 0 19-Dec-2022 22:35 $WINDOWS.~BT
64726 dr-xr-xr-x 0 0 0 31-Dec-2022 12:34 $Windows.~WS
76617 dr-xr-xr-x 0 0 0 9-Jul-2015 21:56 Apps
443739 dr-xr-xr-x 0 0 0 19-Dec-2022 22:21 Config.Msi
15794 dr-xr-xr-x 0 0 0 14-Jul-2009 01:08 Documents and Settings
67326 dr-xr-xr-x 0 0 0 11-Nov-2013 19:23 Drivers
1704772 dr-xr-xr-x 0 0 0 19-Dec-2022 22:31 ESD
4089051 dr-xr-xr-x 0 0 0 17-Nov-2021 02:07 HDM_Server_E
721690 dr-xr-xr-x 0 0 0 24-Apr-2018 20:04 HL7Tools
435499 dr-xr-xr-x 0 0 0 17-Feb-2016 17:57 HP Universal Print Driver
692908 dr-xr-xr-x 0 0 0 14-Dec-2016 00:32 ImportAfter
1539 dr-xr-xr-x 0 0 0 9-Jul-2015 21:43 Intel
3484706 dr-xr-xr-x 0 0 0 30-Aug-2020 15:04 Investintech.com Inc
4318210 dr-xr-xr-x 0 0 0 22-Feb-2022 10:39 Jts
91447 dr-xr-xr-x 0 0 0 11-Nov-2015 17:16 LJP1100_P1560_P1600_Full_Solution
416898 dr-xr-xr-x 0 0 0 11-Nov-2015 17:13 LJP1100_P1560_P1600_SI_Utility
286018 dr-xr-xr-x 0 0 0 6-Oct-2015 19:17 MSOCache
720824 dr-xr-xr-x 0 0 0 30-May-2018 09:21 MedClaimSoftware
442890 dr-xr-xr-x 0 0 0 27-Sep-2018 15:09 Medicare Remit EasyPrint
1276446 dr-xr-xr-x 0 0 0 25-Dec-2018 00:49 Microsoft
463729 dr-xr-xr-x 0 0 0 30-Dec-2017 23:47 My Backups
67 dr-xr-xr-x 0 0 0 13-Jul-2009 23:20 PerfLogs
69 dr-xr-xr-x 0 0 0 28-Sep-2022 11:56 Program Files
256 dr-xr-xr-x 0 0 0 2-Dec-2022 08:07 Program Files (x86)
374 dr-xr-xr-x 0 0 0 1-Jan-2023 11:50 ProgramData
270224 dr-xr-xr-x 0 0 0 13-May-2018 21:31 Projects
430119 dr-xr-xr-x 0 0 0 15-Dec-2022 14:39 Python372
2382181 dr-xr-xr-x 0 0 0 9-May-2021 22:41 Python395
459236 dr-xr-xr-x 0 0 0 26-Mar-2018 11:28 Recovery
1392236 dr-xr-xr-x 0 0 0 22-Apr-2022 20:13 Scan
3034655 dr-xr-xr-x 0 0 0 21-Apr-2017 16:58 SymCache
1826 dr-xr-xr-x 0 0 0 10-Jul-2015 01:29 System Recovery
81194 dr-xr-xr-x 0 0 0 2-Jan-2023 23:41 System Volume Information
206155 dr-xr-xr-x 0 0 0 23-Oct-2021 16:58 TMRescueDisk
3602010 dr-xr-xr-x 0 0 0 18-Nov-2020 16:40 TWS API
85058 dr-xr-xr-x 0 0 0 1-Jan-2023 16:11 Temp
454894 dr-xr-xr-x 0 0 0 5-Jul-2022 10:12 TradeHawk
2499407 dr-xr-xr-x 0 0 0 28-Nov-2022 09:01 TradeHawk20
475 dr-xr-xr-x 0 0 0 11-Oct-2015 00:28 Users
2878899 dr-xr-xr-x 0 0 0 4-Feb-2020 13:25 WINPCACE
470307 dr-xr-xr-x 0 0 0 14-Sep-2016 22:44 WarThunder
640 dr-xr-xr-x 0 0 0 31-Dec-2022 13:02 Windows
4047429 dr-xr-xr-x 0 0 0 28-Feb-2022 14:18 aa
77935 dr-xr-xr-x 0 0 0 31-Dec-2017 10:46 boot
3133944 dr-xr-xr-x 0 0 0 29-May-2018 17:57 data
35 dr-xr-xr-x 0 0 0 6-Oct-2015 17:58 dell
99221 dr-xr-xr-x 0 0 0 29-Feb-2020 22:56 flutter
2836372 dr-xr-xr-x 0 0 0 6-May-2020 21:54 flutter_1.17
2807097 dr-xr-xr-x 0 0 0 28-Jul-2020 16:43 flutter_1.17.5
2596865 dr-xr-xr-x 0 0 0 23-Aug-2020 23:46 flutter_1.20.2
455266 dr-xr-xr-x 0 0 0 26-Sep-2020 23:00 flutter_1.20.4
17 dr-xr-xr-x 0 0 0 1-Nov-2017 13:44 found.000
1565570 dr-xr-xr-x 0 0 0 16-Jun-2020 11:29 found.001
1733308 dr-xr-xr-x 0 0 0 26-Jun-2019 01:21 html
3678249 dr-xr-xr-x 0 0 0 12-Sep-2019 23:26 java
23234 dr-xr-xr-x 0 0 0 23-Nov-2017 13:51 xampp181
197475 dr-xr-xr-x 0 0 0 26-Jan-2018 01:31 xampp721
4334494 dr-xr-xr-x 0 0 0 11-Aug-2022 23:52 xampp816
121871 -r--r--r-- 0 0 107 26-Jan-2015 16:48 DBAR_Ver.txt
29917 -r--r--r-- 0 0 354 6-Oct-2015 18:06 IFRToolLog.txt
129350 -r--r--r-- 0 0 676570 31-Dec-2017 10:03 Reflect_Install.log
81125 -r--r--r-- 0 0 30057 9-Jul-2015 23:26 dell.sdr
785159 -r--r--r-- 0 0 114254 14-Jul-2016 12:59 fhmc_groupj_20160714.initial.txt
61763 -r--r--r-- 0 0 12846526464 1-Jan-2023 18:13 hiberfil.sys
403347 -r--r--r-- 0 0 17128706048 1-Jan-2023 18:13 pagefile.sys

interface_write()
1 * FAT16 >32M 0 1 1 4 254 63 80262 [DellUtility]
2 P HPFS - NTFS 5 25 21 1536 170 42 24604672 [RECOVERY]
3 P HPFS - NTFS 1536 170 43 121601 90 25 1928839168 [OS-W7]

interface_write()
1 * FAT16 >32M 0 1 1 4 254 63 80262 [DellUtility]
2 P HPFS - NTFS 5 25 21 1536 170 42 24604672 [RECOVERY]
3 P HPFS - NTFS 1536 170 43 121601 90 25 1928839168 [OS-W7]

interface_write()
1 * FAT16 >32M 0 1 1 4 254 63 80262 [DellUtility]
2 P HPFS - NTFS 5 25 21 1536 170 42 24604672 [RECOVERY]
3 P HPFS - NTFS 1536 170 43 121601 90 25 1928839168 [OS-W7]

Locked