Windows 7: NTFS -> Raw.... help

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Chau
Posts: 3
Joined: 20 Aug 2012, 07:25

Windows 7: NTFS -> Raw.... help

#1 Post by Chau »

I have e 3TB disk which suddently went from NTFS to RAW in Windows 7.

I ran TestDisk once and found a partition with incorrect size, but having no idea what to do, I finally exited TestDisk. Running TestDisk again I got the following log, which is completely different from my first run.

My question is: Are there anything I can do to access my data again?

Code: Select all

Fri Aug 17 16:40:42 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, July 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Aug 14 2012 11:59:38
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500040728576
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499997736960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500037582848
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\O:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\V:)=0
Warning: can't get size for \\.\V:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=0
Warning: can't get size for \\.\W:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Y:)=0
Warning: can't get size for \\.\Y:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=0
Warning: can't get size for \\.\Z:
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60793 255 63, sector size=512
Disk \\.\PhysicalDrive6 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Drive C: - 499 GB / 465 GiB - CHS 60787 255 63, sector size=512
Drive D: - 500 GB / 465 GiB - CHS 60792 255 63, sector size=512
Drive O: - 3000 GB / 2794 GiB - CHS 364784 255 63, sector size=512

Partition table type (auto): None
Drive O: - 3000 GB / 2794 GiB
Partition table type: EFI GPT

Analyse Drive O: - 3000 GB / 2794 GiB - CHS 364784 255 63
Current partition structure:
Bad GPT partition, invalid signature.

search_part()
Drive O: - 3000 GB / 2794 GiB - CHS 364784 255 63

HFS magic value at 10666/65/36
part_size 30516
     Mac HFS                171353420  171383935      30516 [€€]
     HFS blocksize=16896, 15 MB / 14 MiB

HFS magic value at 16002/19/28
part_size 208029954
     Mac HFS                257073354  465103307  208029954 [Ú9çg„Ü:ä´1âþ¶ß³zûm™¿¾3éٝ3Ü]
     HFS blocksize=4521984, 106 GB / 99 GiB

SYSV4 Marker at 30363/6/1

recover_sysv4
     Unknown                487781973 1095603779668 1095115997696 [wµê	›]
     SysV4, 560 TB / 509 TiB
Partition not added.

HFS magic value at 34909/44/30
part_size 12605827
     Mac HFS                560815886  573421712   12605827 []
     HFS blocksize=50405888, 6454 MB / 6155 MiB

HFS magic value at 40107/90/47
part_size 537272384
     Mac HFS                644324671 1181597054  537272384
     HFS blocksize=2148958208, 275 GB / 256 GiB

     Unknown               1194662042 32905305340285659 32905304145623617
     VMFS 1218750711, 16847515 TB / 15322726 TiB
Partition not added.

     Unknown               1259341202 19614667378331985 19614666118990783
     VMFS 3122190330, 10042709 TB / 9133790 TiB
Partition not added.

     Unknown               1666097904 4427189855465878 4427188189367974
     VMFS 1855575546, 2266720 TB / 2061570 TiB
Partition not added.

     Unknown               1703245350 15507413586489873 15507411883244523
     VMFS 1304313519, 7939794 TB / 7221201 TiB
Partition not added.

SYSV4 Marker at 134107/12/47

recover_sysv4
     Unknown               2154429757 202981624636 200827194880 [\V”׶j]
     SysV4, 102 TB / 93 TiB
Partition not added.

SYSV4 Marker at 141698/237/33

recover_sysv4
     Unknown               2276393333 360982578548 358706185216 [óùzÕý2]
     SysV4, 183 TB / 167 TiB
Partition not added.

HFS magic value at 142536/85/1
part_size 25207299
     Mac HFS               2289846195 2315053493   25207299 []
     HFS blocksize=50405888, 12 GB / 12 GiB

     Unknown               2317415422 28639447783717711 28639445466302289
     VMFS 2027998921, 14663396 TB / 13336281 TiB
Partition not added.

cramfs Marker at 147605/13/13

recover_cramfs
     MS Data               2371275156 2373028394    1753238 [¾]
     cramfs, 897 MB / 856 MiB

     Unknown               2681656343 23506517803940793 23506515122284450
     VMFS 3446263083, 12035335 TB / 10946074 TiB
Partition not added.

HFS magic value at 174426/190/32
part_size 537828994
     Mac HFS               2802165691 3339994684  537828994 [€€-€]
     HFS blocksize=2151251968, 275 GB / 256 GiB

HFS magic value at 231616/157/6
part_size 12605827
     Mac HFS               3720920936 3733526762   12605827 []
     HFS blocksize=50405888, 6454 MB / 6155 MiB

     Unknown               3779341178 23272460166376313 23272456387035136
     WBFS, 11915497 TB / 10837082 TiB
Partition not added.

HFS magic value at 244120/83/57
part_size 185827346
     Mac HFS               3921793085 4107620430  185827346 [i]
     HFS blocksize=4587520, 95 GB / 88 GiB

HFS magic value at 265387/250/62
part_size 324337776
     Mac HFS               4263457966 4587795741  324337776
     HFS blocksize=6619136, 166 GB / 154 GiB
file_win32_pread(112,11,buffer,1565300726(364784/207/22)) read err: read after end of file
file_win32_pread(112,11,buffer,1565300733(364784/207/29)) read err: read after end of file
file_win32_pread(112,8,buffer,1565300731(364784/207/27)) read err: read after end of file
file_win32_pread(112,16,buffer,1565300722(364784/207/18)) read err: read after end of file
file_win32_pread(112,16,buffer,1565300725(364784/207/21)) read err: read after end of file
file_win32_pread(112,16,buffer,1565300728(364784/207/24)) read err: read after end of file
file_win32_pread(112,16,buffer,1565300731(364784/207/27)) read err: read after end of file
file_win32_pread(112,16,buffer,1565300734(364784/207/30)) read err: read after end of file

Results
   P Mac HFS                171353420  171383935      30516 [€€]
     HFS blocksize=16896, 15 MB / 14 MiB
   P Mac HFS                257073354  465103307  208029954 [Ú9çg„Ü:ä
Top
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Windows 7: NTFS -> Raw.... help

#2 Post by Fiona »

Did you use the testdisk6.14-64bit?
In case, please use TestDisk 6.14 - 32 bit and repeat your diagnose.
After Disk selection, please choose partition table type EFI GPT.
Important would be Analyse with your current GUID partition table.
If your partition appears as RAW means, you have a partition in your partition table but the boot sector or superblock might be wrong.
In this case you can diagnose your boot sector.
If your partition doesn't match you'll need Quick or Deeper Search.
But it takes time.
Information about TestDisk and Analyse are appreciated.

Fiona
Top
Chau
Posts: 3
Joined: 20 Aug 2012, 07:25

Re: Windows 7: NTFS -> Raw.... help

#3 Post by Chau »

Fiona wrote:Did you use the testdisk6.14-64bit?
Yes I did.
Fiona wrote:In case, please use TestDisk 6.14 - 32 bit and repeat your diagnose.
I have started a new analysis using TestDisk 6.14 - 32bit.
Fiona wrote:After Disk selection, please choose partition table type EFI GPT.
So I did and I hintet me to do so.
Fiona wrote:Important would be Analyse with your current GUID partition table.
Here you lost me, my current GUID partition table? I haven't tried partition recovery before, so I'm trying to learn fast :)
Fiona wrote:In this case you can diagnose your boot sector.
How? I can see according to http://www.cgsecurity.org/wiki/Advanced ... MFT_Repair, that I have to select the partition and boot, but I haven't found that option yet.
Fiona wrote:If your partition doesn't match you'll need Quick or Deeper Search.
But it takes time.
I initially formatted the drive as a single NTFS GPT partition in Windows 7 and the drive is just a data drive - it doesn't contain any OS.

I have startet an analysis, but it takes a couple of days. Below you'll see the log TestDisk has generated so far.

Regards, Casper

New log:

Code: Select all

Mon Aug 20 09:39:21 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, July 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-08-14T11:59:29
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500040728576
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdg)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500040728576
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499997736960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500037582848
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\O:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\V:)=0
Warning: can't get size for \\.\V:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=0
Warning: can't get size for \\.\W:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Y:)=0
Warning: can't get size for \\.\Y:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=0
Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512 - Intel Raid 1 Volume, S/N:Raid1, FW:1.0.
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60793 255 63, sector size=512 - Intel Raid 1 Volume, S/N:Array_0001, FW:1.0.
Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30 EZRX-00MMMB0, S/N:WD-WMAWZ0195516, FW:80.0

Partition table type (auto): EFI GPT
Disk /dev/sdg - 3000 GB / 2794 GiB - WDC WD30 EZRX-00MMMB0
Partition table type: EFI GPT
Partition table type (auto): EFI GPT
Disk /dev/sdg - 3000 GB / 2794 GiB - WDC WD30 EZRX-00MMMB0
Partition table type: EFI GPT

Analyse Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
Top
Chau
Posts: 3
Joined: 20 Aug 2012, 07:25

Re: Windows 7: NTFS -> Raw.... help

#4 Post by Chau »

I have appended the rest of the log from my analysis. The following image shows the graphical result:

Image

Does this mean, that there's nothing I can do?

Code: Select all

Mon Aug 20 09:39:21 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, July 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-08-14T11:59:29
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500040728576
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdg)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500040728576
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499997736960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500037582848
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\O:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\V:)=0
Warning: can't get size for \\.\V:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=0
Warning: can't get size for \\.\W:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Y:)=0
Warning: can't get size for \\.\Y:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=0
Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512 - Intel Raid 1 Volume, S/N:Raid1, FW:1.0.
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60793 255 63, sector size=512 - Intel Raid 1 Volume, S/N:Array_0001, FW:1.0.
Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30 EZRX-00MMMB0, S/N:WD-WMAWZ0195516, FW:80.0

Partition table type (auto): EFI GPT
Disk /dev/sdg - 3000 GB / 2794 GiB - WDC WD30 EZRX-00MMMB0
Partition table type: EFI GPT
Partition table type (auto): EFI GPT
Disk /dev/sdg - 3000 GB / 2794 GiB - WDC WD30 EZRX-00MMMB0
Partition table type: EFI GPT

Analyse Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]

search_part()
Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No
New options :
 Dump : No
 Align partition: Yes
 Expert mode : Yes

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]

Analyse Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]

search_part()
Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
simulate write!
Partition table type (auto): EFI GPT
Disk /dev/sdg - 3000 GB / 2794 GiB - WDC WD30 EZRX-00MMMB0
Partition table type: EFI GPT

Analyse Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]
 2 P MS Data                   264192 5860532223 5860268032 [Basic data partition]

search_part()
Disk /dev/sdg - 3000 GB / 2794 GiB - CHS 364801 255 63

HFS magic value at 4337/7/60
part_size 3501316867
     Mac HFS                 69674405 3570991271 3501316867
     HFS blocksize=37749248, 1792 GB / 1669 GiB

HFS magic value at 223747/224/38
part_size 1702307714
     Mac HFS               3594509704 5296817417 1702307714
     HFS blocksize=42663936, 871 GB / 811 GiB
file_pread(6,1,buffer,1565565872(364801/81/1)) ReadFile The request could not be performed because of an I/O device error.

file_pread(6,1,buffer,1565565873(364801/81/2)) lseek err Invalid argument
...
file_pread(6,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
NTFS at 364801/66/1
filesystem size           5860268032
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(6,4096,buffer,1571856383(365192/225/25)) lseek err Invalid argument
NTFS: Can't read MFT
     MS Data               5860532223 11720800254 5860268032
     NTFS, blocksize=4096, 3000 GB / 2794 GiB
This partition ends after the disk limits. (start=1565564927, size=1565300736, end=3130865662, disk end=1565565872)
file_pread(6,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(6,1,buffer,1565566977(364801/98/35)) lseek err Invalid argument
file_pread(6,1,buffer,1565566978(364801/98/36)) lseek err Invalid argument
...
file_pread(6,1,buffer,1565567602(364801/108/30)) lseek err Invalid argume
Top
Locked

Return to “Partition Recovery”