cgsecurity.org

Posted: **30 May 2021, 20:34**

Hi, so to tell you whole story:

(all of this is done from a USB stick using Manjaro, and the partition table type is a EFI GPT)
I wanted to move a partition (it was a large windows data partition), and the software crashes when it was working. Then I have found more or less how to recover the partitions which were broken, after backing up them in an image. One of it, when I write it and close testdisk, is able to mount and navigate, but when I reboot the system don't shows anymore the partition, and I have to write again, and again. This is my Windows system partition. In testdisk, when I try to go in the boot sector recovery for this partition, it shows me this:

Code: Select all

Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

but it also shows this for the other partition, except for the EFI system partition, for which one the option is not accessible.

Moreover, when I try to analyse, the current partition structure with a quick search, it shows me the 2 Windows partition (system and documents, NTFS) as deleted, when the boot and shared partitions appear as primary.

Well I hope so I gave enough details so that you can help me, thank you very much in advance, have a nice day!

Posted: **30 May 2021, 20:42**

Unfortunately no. Have a nice day!

Posted: **30 May 2021, 23:52**

recuperation wrote: 30 May 2021, 20:42 Unfortunately no. Have a nice day!

Right, here are my logs: https://justpaste.it/1pp77

Posted: **30 May 2021, 23:58**

Despite uploading the logfile your verbal description of you recovery efforts is unsufficient.
Please provide snapshots of your Testdisk repair action and upload them as an attachment to THIS website.
Thank you!

Posted: **31 May 2021, 02:00**

Right, sure
after analysis:

: analysis.png (34.03 KiB) Viewed 2401 times

the partitions I try to write (which ones appear again as "Deleted" after, whatever if I reboot or not):

: writing.png (39.64 KiB) Viewed 2401 times

the filesystem utils menu (with selected the partition I want to fix):

: utils menu.png (21.78 KiB) Viewed 2401 times

Posted: **31 May 2021, 02:02**

the state detected of this partition:

: boot recovery.png (18.99 KiB) Viewed 2400 times

finally the log file:

testdisk.log: (21.34 KiB) Downloaded 395 times

Posted: **31 May 2021, 04:39**

recuperation wrote: 30 May 2021, 23:58 Despite uploading the logfile your verbal description of you recovery efforts is unsufficient.
Please provide snapshots of your Testdisk repair action and upload them as an attachment to THIS website.
Thank you!

I just tried the command that my partition manager generates (check and repair):

Code: Select all

[manjaro@manjaro ~]$ sudo ntfsresize --no-progress-bar --info --force --verbose /dev/sda2 
ntfsresize v2017.3.23 (libntfs-3g)
Device name        : /dev/sda2
NTFS volume version: 3.1
Cluster size       : 4096 bytes
Current volume size: 238614999552 bytes (238615 MB)
Current device size: 238615003136 bytes (238616 MB)
Checking for bad sectors ...
Checking filesystem consistency ...
Accounting clusters ...
Cluster accounting failed at 58122427 (0x376e0bb): extra cluster in $Bitmap
Cluster accounting failed at 58122428 (0x376e0bc): extra cluster in $Bitmap
Cluster accounting failed at 58122429 (0x376e0bd): extra cluster in $Bitmap
Cluster accounting failed at 58122430 (0x376e0be): extra cluster in $Bitmap
Cluster accounting failed at 58122431 (0x376e0bf): extra cluster in $Bitmap
ERROR: $Bitmap size is smaller than expected (7281952 != 7265304)

I'm going to try a chkdsk /f

Posted: **31 May 2021, 10:38**

After quick search, try to look at the content using the "p"-key ("list files"). What happens when looking at your "Windows"-partition and the DATA-partition? Can you see the content you expect?

Posted: **02 Jun 2021, 19:36**

recuperation wrote: 31 May 2021, 10:38 After quick search, try to look at the content using the "p"-key ("list files"). What happens when looking at your "Windows"-partition and the DATA-partition? Can you see the content you expect?

Sure, all the files are listed. (well I'm not sure, maybe there is some files lost, but I don't know how to verificate)
But when I try a chkdsk /f from a USB stick, it tells me "error when transferring session messages to the event log with status 6", on others forums this is due to a damaged partition.

Posted: **02 Jun 2021, 19:45**

When running chkdsk please pass the right partition to the chkdsk command.
You are probably running chkdsk on your USB stick instead of the drive in question.

cgsecurity.org

Wrote partition disapears after reboot

Wrote partition disapears after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapear after reboot

Re: Wrote partition disapears after reboot

Re: Wrote partition disapear after reboot