hello,
I have a 1tb WD hard drive that has failed after a series of blackouts in my office caused by the wind.
A windows system was installed in the hdd, and in fact it has a bigger NTFS partition, a recovery partition from the oem manufacturer, and a much smaller one called "SYSTEM"
the partition I need to recover is the bigger (about 900gb),
after a completed deeper search I was able to reconstruct the partition structure, in fact I know starting and ending sectors of the partition and through testdisk I can access and copy some folders but not all the ones I wanted,
I write on the forum because I noticed a strange behavior of the testdisk software,
I admit that I am working directly on the disk, because I could not get the same results using the partition image file, in this case the partition file system is not recognized and the search process inside the image has taken a lot of time and I can't manage to use the results of that search because it gives a lot of rows of the same partition with different start and end sector addresses, but I can't manage to use that informations to access the files inside.
if I try to read and copy the files running testdisk on windows I can correctly view the complete lists of folders and subfolders, so I was able to recover some data, but selecting a specific folder and starting the copy, the procedure is very slow and it does not seem to go on, and after some hours the progress is not even shown, I obviously think that the slowness is due to the presence of bad sectors and consequent reading errors.
The other scenario is when I tried to run testdisk for the same disk on linux ubuntu system, accessing the file system and viewing the folder lists is much faster and copying the files too, the problem is the lists of subfolders are sorted alphabetically and truncated at some point after a letter, in my case it would seem to be the "S", I obviously noticed that this problem only affects folders with a large number of subfolders
the strange thing is that this problem also affects a folder that I can completely recover in windows because it surely resides in a good status zone of the hard disk and the copy process in testdisk goes on,
in fact If I access to that same folder in windows I obtain a certain list of subfolders and files (complete),
if I acces in linux the list is truncated;
so I suspect that could be a configuration issue of how testdisk "approach" to the partition?
at this point I would like to ask in your opinion which would be the preferable path to follow:
A: try to find a way to speed up file system access and reading, or somehow skip the errors blocking the copy process using windows system
(I have the feeling that there is not much to do unfortunately)
or
B: try to solve the problem of truncating the returned list of files inside a folder in system linux ubuntu
regarding this last option, I found a forum thread that should be relevant:
viewtopic.php?t=4526
as the user is asked, also in my case I am sure that the partition is of type NTFS
if they are not strictly necessary for the moment I would prefer not to attach the logs in public, due to the fact that some file and folder names may contain personal information of third parties, maybe I will censore them in some way before posting.
I hope I have succeeded in explaining what my request is, and I apologize in advance for any incompleteness or incomprehensible sentences, if other information is needed I am ready to send additions to the information I have already provided.
thank you
Giovanni
list files in partition give incomplete result Topic is solved
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
recuperation
- Posts: 3036
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: list files in partition give incomplete result
Please post a Testdisk log file.
By duplicating your drive as described in the Testdisk manual you can get rid of slowdowns caused by broken sectors.
https://en.wikipedia.org/wiki/Uninterru ... wer_supply
By duplicating your drive as described in the Testdisk manual you can get rid of slowdowns caused by broken sectors.
If wind is sufficient to cause power outage in your office you should seriously consider installing ancioffinedd wrote: 19 Feb 2022, 20:16 hello,
I have a 1tb WD hard drive that has failed after a series of blackouts in my office caused by the wind.
https://en.wikipedia.org/wiki/Uninterru ... wer_supply
-
cioffinedd
- Posts: 3
- Joined: 18 Feb 2022, 12:43
Re: list files in partition give incomplete result
Hello many thanks for the reply,
I managed to partially edit the logs to avoid posting third party personal information, I hope the technical information I should have left completely is understandable
I attach the log from windows first (running testdisk from command prompt in safe mode)
for example I entered the desktop user folder which is the one that I was also able to copy and recover entirely and in this I can see the correct list of subfolders and files;
and then the log from an edition of ubuntu linux
in this you can see how even by accessing the same desktop folder, it seems like that 3 attempts are made and then the final list is shown which however is incomplete compared to the one shown on windows;
now I start again to try to work on the partition image instead of the direct disk if you confirm I can make the access to the file system run faster, and I start again reading the manual especially
I managed to partially edit the logs to avoid posting third party personal information, I hope the technical information I should have left completely is understandable
I attach the log from windows first (running testdisk from command prompt in safe mode)
Code: Select all
Sat Feb 19 16:37:05 2022
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, February 2022
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499460866048
filewin32_getfilesize(\\.\D:) GetFileSize err Funzione non corretta.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Funzione non corretta.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=984881299456
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=15215886336
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000LPCX-21VHAT0, S/N:WD-WXC1AC5KVAV6, FW:01.01A01
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EADS-65L5B1, S/N:801130168383
Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - WDC WD10 EADS-65L5B1
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 12/223/20
NTFS at 119751/52/46
1 P HPFS - NTFS 0 32 33 12 223 19 204800 [SYSTEM]
NTFS, blocksize=4096, 104 MB / 100 MiB
2 * HPFS - NTFS 12 223 20 119751 52 45 1923596288 [HP]
NTFS, blocksize=4096, 984 GB / 917 GiB
3 P HPFS - NTFS 119751 52 46 121601 25 24 29718528 [FACTORY_IMAGE]
NTFS, blocksize=4096, 15 GB / 14 GiB
ntfs_boot_sector
2 * HPFS - NTFS 12 223 20 119751 52 45 1923596288 [HP]
NTFS, blocksize=4096, 984 GB / 917 GiB
NTFS at 12/223/20
NTFS at 12/223/20
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
file_win32_pread(520,16,buffer,206849(12/223/21)) read err: read after end of file
file_win32_pread(520,16,buffer,206851(12/223/23)) read err: read after end of file
file_win32_pread(520,16,buffer,206852(12/223/24)) read err: read after end of file
file_win32_pread(520,16,buffer,206853(12/223/25)) read err: read after end of file
file_win32_pread(520,16,buffer,206854(12/223/26)) read err: read after end of file
file_win32_pread(520,16,buffer,206855(12/223/27)) read err: read after end of file
file_win32_pread(520,16,buffer,206856(12/223/28)) read err: read after end of file
file_win32_pread(520,1,buffer,206856(12/223/28)) read err: read after end of file
mft at 16
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024 bytes
ntfs_find_mft: index_block_size 4096
file_win32_pread(520,16,buffer,206848(12/223/20)) read err: read after end of file
Extrapolated boot sector and current boot sector are identical.
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS Volume is dirty.
file_win32_pread(520,16,buffer,6498350(404/128/27)) read err: read after end of file
Directory /
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
5931 dr-xr-xr-x 0 0 0 29-Oct-2021 10:57 $RECYCLE.BIN
659082 dr-xr-xr-x 0 0 0 28-Oct-2021 18:11 .Trash-999
344845 dr-xr-xr-x 0 0 0 23-Aug-2017 18:59 2f9fd7d905cd264abf934b53846d5883
179408 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 3bef033f5e34d4ce8a40d921
343165 dr-xr-xr-x 0 0 0 13-Aug-2015 19:27 4e67de6d2d5de13f6d8d71db05486c
323482 dr-xr-xr-x 0 0 0 16-Oct-2014 19:08 55b32716a4e19f48fb206ed12e16
152166 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 5edaabef8346408c52c69384c9aaa7
... other folders e files
58251 -r--r--r-- 0 0 904704 1-Dec-2006 22:37 msdia80.dll
13524 -r--r--r-- 0 0 4258390016 27-Oct-2021 08:07 pagefile.sys
606 -r--r--r-- 0 0 2228365 3-Nov-2013 19:07 sh4_service.log
147263 -r--r--r-- 0 0 285747 18-Oct-2013 16:01 shldr
212961 -r--r--r-- 0 0 8192 18-Oct-2013 16:01 shldr.mbr
223308 -r--r--r-- 0 0 0 29-Oct-2012 10:12 sparkraw.log
375 -r--r--r-- 0 0 358163 3-Nov-2013 20:05 spyhunter.log
150213 -r--r--r-- 0 0 1491701 21-Dec-2016 15:52 uninstall.exe
Directory /Users
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
35565 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 All Users
16948 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 AppData
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 DIEGO
20487 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 Default
35567 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 Default User
20523 dr-xr-xr-x 0 0 0 14-Apr-2015 09:36 Public
341977 dr-xr-xr-x 0 0 0 26-Oct-2021 12:04 Scanner
341844 -r--r--r-- 0 0 1700 18-Mar-2021 11:21 Scanner - collegamento.lnk
341970 -r--r--r-- 0 0 41984 28-May-2014 10:31 Thumbs.db
341970 -r--r--r-- 0 0 0 28-May-2014 10:31 Thumbs.db:encryptable
35351 -r--r--r-- 0 0 174 14-Jul-2009 06:54 desktop.ini
Directory /Users/DIEGO
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 .
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 ..
321709 dr-xr-xr-x 0 0 0 16-Oct-2020 13:57 .arDigiSign
11531 dr-xr-xr-x 0 0 0 23-Nov-2018 09:20 .designer
123776 dr-xr-xr-x 0 0 0 22-Nov-2018 17:43 .gdal
588285 dr-xr-xr-x 0 0 0 22-Nov-2018 11:05 .matplotlib
440467 dr-xr-xr-x 0 0 0 7-Mar-2017 16:49 .oracle_jre_usage
451944 dr-xr-xr-x 0 0 0 21-Nov-2018 17:48 .qgis
144028 dr-xr-xr-x 0 0 0 24-Jun-2020 12:42 A
227 dr-xr-xr-x 0 0 0 1-Dec-2009 17:56 AppData
12235 dr-xr-xr-x 0 0 0 19-Nov-2009 10:53 Application Data
5452 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Contacts
1507 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Cookies
1506 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Dati applicazioni
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 Desktop
1502 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Documenti
87 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Documents
86 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 Downloads
81 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Favorites
1573 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Impostazioni locali
673270 dr-xr-xr-x 0 0 0 18-Dec-2019 09:21 InstallAnywhere
61 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Links
1570 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Menu Avvio
1572 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Modelli
60 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Music
643006 dr-xr-xr-x 0 0 0 18-Dec-2019 10:46 Nuova cartella
59 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Pictures
1568 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Recenti
1508 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Risorse di rete
1509 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Risorse di stampa
53 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Saved Games
5557 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Searches
1569 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 SendTo
49 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Videos
436472 dr-xr-xr-x 0 0 0 22-Oct-2016 17:37 gvSIG
35111 dr-xr-xr-x 0 0 0 26-Oct-2009 20:15 nu
438157 dr-xr-xr-x 0 0 0 22-Oct-2016 17:36 sextante
260489 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 suape
355123 dr-xr-xr-x 0 0 0 10-May-2021 10:25 suapeSignedDoc
322661 dr-xr-xr-x 0 0 0 7-Mar-2017 10:27 webconf
871 -r--r--r-- 0 0 65536 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
873 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
876 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
229721 -r--r--r-- 0 0 0 16-Feb-2012 18:17 Sti_Trace.log
263103 -r--r--r-- 0 0 1766 23-Nov-2012 18:07 Wrinnovo.log
46375 -r--r--r-- 0 0 314 23-Nov-2012 18:07 dikeutil.ini
263121 -r--r--r-- 0 0 5301 23-Nov-2012 18:07 icRinnovo.log
11985 -r--r--r-- 0 0 12 10-May-2012 10:30 intlname.ols
366871 -r--r--r-- 0 0 10747904 27-Oct-2021 17:06 ntuser.dat
857 -r--r--r-- 0 0 262144 27-Oct-2021 17:06 ntuser.dat.LOG1
858 -r--r--r-- 0 0 0 24-Oct-2009 15:40 ntuser.dat.LOG2
65772 -r--r--r-- 0 0 65536 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TM.blf
113989 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
438878 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
54151 -r--r--r-- 0 0 65536 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TM.blf
71955 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76647 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
11010 -r--r--r-- 0 0 65536 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TM.blf
11045 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
11048 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
61926 -r--r--r-- 0 0 65536 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TM.blf
438891 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
520386 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
3864 -r--r--r-- 0 0 65536 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TM.blf
3874 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
3883 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
141364 -r--r--r-- 0 0 65536 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TM.blf
141464 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
141472 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
76609 -r--r--r-- 0 0 65536 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TM.blf
76650 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76719 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
219433 -r--r--r-- 0 0 65536 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TM.blf
221047 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
221478 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
182072 -r--r--r-- 0 0 65536 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TM.blf
183027 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
183763 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
272012 -r--r--r-- 0 0 20 24-Oct-2009 15:40 ntuser.ini
234327 -r--r--r-- 0 0 24 2-Jan-2013 10:00 password wi-fi.txt
263123 -r--r--r-- 0 0 119 23-Nov-2012 18:06 tmpSubjectDN
file_win32_pread(520,16,buffer,445672(27/189/11)) read err: read after end of file
file_win32_pread(520,16,buffer,445680(27/189/19)) read err: read after end of file
file_win32_pread(520,1,buffer,445683(27/189/22)) read err: read after end of file
Directory /Users/DIEGO/Desktop
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 .
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 ..
... other folders e files
746098 dr-xr-xr-x 0 0 0 13-Jan-2022 10:20 DOCUMENTO FRANCESCA
... other folders e files
527679 -r--r--r-- 0 0 162 28-Apr-2020 10:36 ~$ASWORD.doc
166658 -r--r--r-- 0 0 162 17-Dec-2011 12:40 ~$DICE IBAN IT90N0101585250000070189435 - Copia.doc
146703 -r--r--r-- 0 0 162 27-Feb-2014 09:21 ~$UDIO TECNICO AGRONOMICO.docx
Directory /Users/DIEGO
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 .
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 ..
321709 dr-xr-xr-x 0 0 0 16-Oct-2020 13:57 .arDigiSign
11531 dr-xr-xr-x 0 0 0 23-Nov-2018 09:20 .designer
123776 dr-xr-xr-x 0 0 0 22-Nov-2018 17:43 .gdal
588285 dr-xr-xr-x 0 0 0 22-Nov-2018 11:05 .matplotlib
440467 dr-xr-xr-x 0 0 0 7-Mar-2017 16:49 .oracle_jre_usage
451944 dr-xr-xr-x 0 0 0 21-Nov-2018 17:48 .qgis
144028 dr-xr-xr-x 0 0 0 24-Jun-2020 12:42 A
227 dr-xr-xr-x 0 0 0 1-Dec-2009 17:56 AppData
12235 dr-xr-xr-x 0 0 0 19-Nov-2009 10:53 Application Data
5452 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Contacts
1507 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Cookies
1506 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Dati applicazioni
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 Desktop
1502 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Documenti
87 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Documents
86 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 Downloads
81 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Favorites
1573 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Impostazioni locali
673270 dr-xr-xr-x 0 0 0 18-Dec-2019 09:21 InstallAnywhere
61 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Links
1570 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Menu Avvio
1572 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Modelli
60 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Music
643006 dr-xr-xr-x 0 0 0 18-Dec-2019 10:46 Nuova cartella
59 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Pictures
1568 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Recenti
1508 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Risorse di rete
1509 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Risorse di stampa
53 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Saved Games
5557 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Searches
1569 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 SendTo
49 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Videos
436472 dr-xr-xr-x 0 0 0 22-Oct-2016 17:37 gvSIG
35111 dr-xr-xr-x 0 0 0 26-Oct-2009 20:15 nu
438157 dr-xr-xr-x 0 0 0 22-Oct-2016 17:36 sextante
260489 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 suape
355123 dr-xr-xr-x 0 0 0 10-May-2021 10:25 suapeSignedDoc
322661 dr-xr-xr-x 0 0 0 7-Mar-2017 10:27 webconf
871 -r--r--r-- 0 0 65536 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
873 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
876 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
229721 -r--r--r-- 0 0 0 16-Feb-2012 18:17 Sti_Trace.log
263103 -r--r--r-- 0 0 1766 23-Nov-2012 18:07 Wrinnovo.log
46375 -r--r--r-- 0 0 314 23-Nov-2012 18:07 dikeutil.ini
263121 -r--r--r-- 0 0 5301 23-Nov-2012 18:07 icRinnovo.log
11985 -r--r--r-- 0 0 12 10-May-2012 10:30 intlname.ols
366871 -r--r--r-- 0 0 10747904 27-Oct-2021 17:06 ntuser.dat
857 -r--r--r-- 0 0 262144 27-Oct-2021 17:06 ntuser.dat.LOG1
858 -r--r--r-- 0 0 0 24-Oct-2009 15:40 ntuser.dat.LOG2
65772 -r--r--r-- 0 0 65536 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TM.blf
113989 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
438878 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
54151 -r--r--r-- 0 0 65536 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TM.blf
71955 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76647 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
11010 -r--r--r-- 0 0 65536 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TM.blf
11045 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
11048 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
61926 -r--r--r-- 0 0 65536 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TM.blf
438891 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
520386 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
3864 -r--r--r-- 0 0 65536 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TM.blf
3874 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
3883 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
141364 -r--r--r-- 0 0 65536 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TM.blf
141464 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
141472 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
76609 -r--r--r-- 0 0 65536 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TM.blf
76650 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76719 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
219433 -r--r--r-- 0 0 65536 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TM.blf
221047 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
221478 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
182072 -r--r--r-- 0 0 65536 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TM.blf
183027 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
183763 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
272012 -r--r--r-- 0 0 20 24-Oct-2009 15:40 ntuser.ini
234327 -r--r--r-- 0 0 24 2-Jan-2013 10:00 password wi-fi.txt
263123 -r--r--r-- 0 0 119 23-Nov-2012 18:06 tmpSubjectDN
Directory /Users
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
35565 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 All Users
16948 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 AppData
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 DIEGO
20487 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 Default
35567 dr-xr-xr-x 0 0 0 14-Jul-2009 07:08 Default User
20523 dr-xr-xr-x 0 0 0 14-Apr-2015 09:36 Public
341977 dr-xr-xr-x 0 0 0 26-Oct-2021 12:04 Scanner
341844 -r--r--r-- 0 0 1700 18-Mar-2021 11:21 Scanner - collegamento.lnk
341970 -r--r--r-- 0 0 41984 28-May-2014 10:31 Thumbs.db
341970 -r--r--r-- 0 0 0 28-May-2014 10:31 Thumbs.db:encryptable
35351 -r--r--r-- 0 0 174 14-Jul-2009 06:54 desktop.ini
file_win32_pread(520,16,buffer,6498350(404/128/27)) read err: read after end of file
Directory /
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
5931 dr-xr-xr-x 0 0 0 29-Oct-2021 10:57 $RECYCLE.BIN
659082 dr-xr-xr-x 0 0 0 28-Oct-2021 18:11 .Trash-999
344845 dr-xr-xr-x 0 0 0 23-Aug-2017 18:59 2f9fd7d905cd264abf934b53846d5883
179408 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 3bef033f5e34d4ce8a40d921
343165 dr-xr-xr-x 0 0 0 13-Aug-2015 19:27 4e67de6d2d5de13f6d8d71db05486c
323482 dr-xr-xr-x 0 0 0 16-Oct-2014 19:08 55b32716a4e19f48fb206ed12e16
152166 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 5edaabef8346408c52c69384c9aaa7
... other folders e files
58251 -r--r--r-- 0 0 904704 1-Dec-2006 22:37 msdia80.dll
13524 -r--r--r-- 0 0 4258390016 27-Oct-2021 08:07 pagefile.sys
606 -r--r--r-- 0 0 2228365 3-Nov-2013 19:07 sh4_service.log
147263 -r--r--r-- 0 0 285747 18-Oct-2013 16:01 shldr
212961 -r--r--r-- 0 0 8192 18-Oct-2013 16:01 shldr.mbr
223308 -r--r--r-- 0 0 0 29-Oct-2012 10:12 sparkraw.log
375 -r--r--r-- 0 0 358163 3-Nov-2013 20:05 spyhunter.log
150213 -r--r--r-- 0 0 1491701 21-Dec-2016 15:52 uninstall.exe
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
ntfs_boot_sector
2 * HPFS - NTFS 12 223 20 119751 52 45 1923596288 [HP]
NTFS, blocksize=4096, 984 GB / 917 GiB
file_win32_pread(520,16,buffer,206848(12/223/20)) read err: read after end of file
NTFS at 12/223/20
NTFS at 12/223/20
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.
and then the log from an edition of ubuntu linux
Code: Select all
Mon Feb 21 16:50:16 2022
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, February 2022
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 4.18.0-25-generic (#26-Ubuntu SMP Mon Jun 24 09:32:08 UTC 2019) x86_64
Compiler: GCC 4.8
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 3907029168 sectors
/dev/sda: user_max 3907029168 sectors
/dev/sda: native_max 3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop0 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop1 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop2 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop3 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop4 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop5 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop6 - 0 B - 0 sectors, sector size=512
Warning: can't get size for Disk /dev/loop7 - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EFRX-68EUZN0, S/N:WD-WCC4M0UXYCJ6, FW:82.00A82
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 EADS-65L5B1
Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32, sector size=512
Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - WDC WD10 EADS-65L5B1
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 12/223/20
NTFS at 119751/52/46
1 P HPFS - NTFS 0 32 33 12 223 19 204800 [SYSTEM]
NTFS, blocksize=4096, 104 MB / 100 MiB
2 * HPFS - NTFS 12 223 20 119751 52 45 1923596288 [HP]
NTFS, blocksize=4096, 984 GB / 917 GiB
3 P HPFS - NTFS 119751 52 46 121601 25 24 29718528 [FACTORY_IMAGE]
NTFS, blocksize=4096, 15 GB / 14 GiB
ntfs_boot_sector
2 * HPFS - NTFS 12 223 20 119751 52 45 1923596288 [HP]
NTFS, blocksize=4096, 984 GB / 917 GiB
NTFS at 12/223/20
NTFS at 12/223/20
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 16
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024 bytes
ntfs_find_mft: index_block_size 4096
Extrapolated boot sector and current boot sector are identical.
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
ntfs_device_testdisk_io_ioctl() unimplemented
NTFS Volume is dirty.
file_pread(5,16,buffer,6498350(404/128/27)) read err: Partial read
Directory /
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
5931 dr-xr-xr-x 0 0 0 29-Oct-2021 10:57 $RECYCLE.BIN
659082 dr-xr-xr-x 0 0 0 28-Oct-2021 18:11 .Trash-999
344845 dr-xr-xr-x 0 0 0 23-Aug-2017 18:59 2f9fd7d905cd264abf934b53846d5883
179408 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 3bef033f5e34d4ce8a40d921
343165 dr-xr-xr-x 0 0 0 13-Aug-2015 19:27 4e67de6d2d5de13f6d8d71db05486c
323482 dr-xr-xr-x 0 0 0 16-Oct-2014 19:08 55b32716a4e19f48fb206ed12e16
152166 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 5edaabef8346408c52c69384c9aaa7
... other folders e files
58251 -r--r--r-- 0 0 904704 1-Dec-2006 22:37 msdia80.dll
13524 -r--r--r-- 0 0 4258390016 27-Oct-2021 08:07 pagefile.sys
606 -r--r--r-- 0 0 2228365 3-Nov-2013 19:07 sh4_service.log
147263 -r--r--r-- 0 0 285747 18-Oct-2013 16:01 shldr
212961 -r--r--r-- 0 0 8192 18-Oct-2013 16:01 shldr.mbr
223308 -r--r--r-- 0 0 0 29-Oct-2012 10:12 sparkraw.log
375 -r--r--r-- 0 0 358163 3-Nov-2013 20:05 spyhunter.log
150213 -r--r--r-- 0 0 1491701 21-Dec-2016 15:52 uninstall.exe
Directory /Users
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
16948 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 AppData
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 DIEGO
20487 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 Default
20523 dr-xr-xr-x 0 0 0 14-Apr-2015 09:36 Public
341977 dr-xr-xr-x 0 0 0 26-Oct-2021 12:04 Scanner
341844 -r--r--r-- 0 0 1700 18-Mar-2021 11:21 Scanner - collegamento.lnk
341970 -r--r--r-- 0 0 41984 28-May-2014 10:31 Thumbs.db
341970 -r--r--r-- 0 0 0 28-May-2014 10:31 Thumbs.db:encryptable
35351 -r--r--r-- 0 0 174 14-Jul-2009 06:54 desktop.ini
Directory /Users/DIEGO
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 .
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 ..
321709 dr-xr-xr-x 0 0 0 16-Oct-2020 13:57 .arDigiSign
11531 dr-xr-xr-x 0 0 0 23-Nov-2018 09:20 .designer
123776 dr-xr-xr-x 0 0 0 22-Nov-2018 17:43 .gdal
588285 dr-xr-xr-x 0 0 0 22-Nov-2018 11:05 .matplotlib
440467 dr-xr-xr-x 0 0 0 7-Mar-2017 16:49 .oracle_jre_usage
451944 dr-xr-xr-x 0 0 0 21-Nov-2018 17:48 .qgis
144028 dr-xr-xr-x 0 0 0 24-Jun-2020 12:42 A
227 dr-xr-xr-x 0 0 0 1-Dec-2009 17:56 AppData
12235 dr-xr-xr-x 0 0 0 19-Nov-2009 10:53 Application Data
5452 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Contacts
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 Desktop
87 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Documents
86 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 Downloads
81 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Favorites
673270 dr-xr-xr-x 0 0 0 18-Dec-2019 09:21 InstallAnywhere
61 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Links
60 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Music
643006 dr-xr-xr-x 0 0 0 18-Dec-2019 10:46 Nuova cartella
59 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Pictures
53 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Saved Games
5557 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Searches
49 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Videos
436472 dr-xr-xr-x 0 0 0 22-Oct-2016 17:37 gvSIG
35111 dr-xr-xr-x 0 0 0 26-Oct-2009 20:15 nu
438157 dr-xr-xr-x 0 0 0 22-Oct-2016 17:36 sextante
260489 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 suape
355123 dr-xr-xr-x 0 0 0 10-May-2021 10:25 suapeSignedDoc
322661 dr-xr-xr-x 0 0 0 7-Mar-2017 10:27 webconf
871 -r--r--r-- 0 0 65536 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
873 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
876 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
229721 -r--r--r-- 0 0 0 16-Feb-2012 18:17 Sti_Trace.log
263103 -r--r--r-- 0 0 1766 23-Nov-2012 18:07 Wrinnovo.log
46375 -r--r--r-- 0 0 314 23-Nov-2012 18:07 dikeutil.ini
263121 -r--r--r-- 0 0 5301 23-Nov-2012 18:07 icRinnovo.log
11985 -r--r--r-- 0 0 12 10-May-2012 10:30 intlname.ols
366871 -r--r--r-- 0 0 10747904 27-Oct-2021 17:06 ntuser.dat
857 -r--r--r-- 0 0 262144 27-Oct-2021 17:06 ntuser.dat.LOG1
858 -r--r--r-- 0 0 0 24-Oct-2009 15:40 ntuser.dat.LOG2
65772 -r--r--r-- 0 0 65536 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TM.blf
113989 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
438878 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
54151 -r--r--r-- 0 0 65536 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TM.blf
71955 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76647 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
11010 -r--r--r-- 0 0 65536 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TM.blf
11045 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
11048 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer000ntfs_attr_pread_i: ntfs_pread failed: Input/output error
Failed to read index block: Input/output error
00000000000000002.regtrans-ms
61926 -r--r--r-- 0 0 65536 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TM.blf
438891 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
520386 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
3864 -r--r--r-- 0 0 65536 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TM.blf
3874 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
3883 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
141364 -r--r--r-- 0 0 65536 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TM.blf
141464 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
141472 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
76609 -r--r--r-- 0 0 65536 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TM.blf
76650 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76719 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
219433 -r--r--r-- 0 0 65536 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TM.blf
221047 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
221478 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
182072 -r--r--r-- 0 0 65536 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TM.blf
183027 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
183763 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
272012 -r--r--r-- 0 0 20 24-Oct-2009 15:40 ntuser.ini
234327 -r--r--r-- 0 0 24 2-Jan-2013 10:00 password wi-fi.txt
263123 -r--r--r-- 0 0 119 23-Nov-2012 18:06 tmpSubjectDN
file_pread(5,16,buffer,445672(27/189/11)) read err: Partial read
ntfs_readdir failed for cluster 88: Input/output error
Directory /Users/DIEGO/Desktop
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 .
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 ..
... other folders e files
746098 dr-xr-xr-x 0 0 0 13-Jan-2022 10:20 DOCUMENTO FRntfs_attr_pread_i: ntfs_pread failed: Input/output error
Failed to read index block: Input/output error
ANCESCA
... other folders e files
527679 -r--r--r-- 0 0 162 28-Apr-2020 10:36 ~$ASWORD.doc
146703 -r--r--r-- 0 0 162 27-Feb-2014 09:21 ~$UDIO TECNICO AGRONOMICO.docx
file_pread(5,16,buffer,445672(27/189/11)) read err: Partial read
ntfs_readdir failed for cluster 88: Input/output error
Directory /Users/DIEGO/Desktop
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 .
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 ..
... other folders e files
241950 dr-xr-xr-x 0 0 0 1-Aug-2019 16:24 C Bentfs_attr_pread_i: ntfs_pread failed: Input/output error
Failed to read index block: Input/output error
rchidda
... other folders e files
527679 -r--r--r-- 0 0 162 28-Apr-2020 10:36 ~$ASWORD.doc
146703 -r--r--r-- 0 0 162 27-Feb-2014 09:21 ~$UDIO TECNICO AGRONOMICO.docx
file_pread(5,16,buffer,445672(27/189/11)) read err: Partial read
ntfs_readdir failed for cluster 88: Input/output error
Directory /Users/DIEGO/Desktop
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 .
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 ..
... other folders e files
527679 -r--r--r-- 0 0 162 28-Apr-2020 10:36 ~$ASWORD.doc
146703 -r--r--r-- 0 0 162 27-Feb-2014 09:21 ~$UDIO TECNICO AGRONOMICO.docx
Directory /Users/DIEGO
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 .
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 ..
321709 dr-xr-xr-x 0 0 0 16-Oct-2020 13:57 .arDigiSign
11531 dr-xr-xr-x 0 0 0 23-Nov-2018 09:20 .designer
123776 dr-xr-xr-x 0 0 0 22-Nov-2018 17:43 .gdal
588285 dr-xr-xr-x 0 0 0 22-Nov-2018 11:05 .matplotlib
440467 dr-xr-xr-x 0 0 0 7-Mar-2017 16:49 .oracle_jre_usage
451944 dr-xr-xr-x 0 0 0 21-Nov-2018 17:48 .qgis
144028 dr-xr-xr-x 0 0 0 24-Jun-2020 12:42 A
227 dr-xr-xr-x 0 0 0 1-Dec-2009 17:56 AppData
12235 dr-xr-xr-x 0 0 0 19-Nov-2009 10:53 Application Data
5452 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Contacts
88 dr-xr-xr-x 0 0 0 7-Feb-2022 16:12 Desktop
87 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Documents
86 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 Downloads
81 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Favorites
673270 dr-xr-xr-x 0 0 0 18-Dec-2019 09:21 InstallAnywhere
61 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Links
60 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Music
643006 dr-xr-xr-x 0 0 0 18-Dec-2019 10:46 Nuova cartella
59 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Pictures
53 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Saved Games
5557 dr-xr-xr-x 0 0 0 13-Jun-2019 08:57 Searches
49 dr-xr-xr-x 0 0 0 24-Oct-2009 15:40 Videos
436472 dr-xr-xr-x 0 0 0 22-Oct-2016 17:37 gvSIG
35111 dr-xr-xr-x 0 0 0 26-Oct-2009 20:15 nu
438157 dr-xr-xr-x 0 0 0 22-Oct-2016 17:36 sextante
260489 dr-xr-xr-x 0 0 0 3-Sep-2021 17:22 suape
355123 dr-xr-xr-x 0 0 0 10-May-2021 10:25 suapeSignedDoc
322661 dr-xr-xr-x 0 0 0 7-Mar-2017 10:27 webconf
871 -r--r--r-- 0 0 65536 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TM.blf
873 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000001.regtrans-ms
876 -r--r--r-- 0 0 524288 24-Oct-2009 16:03 NTUSER.DAT{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.TMContainer00000000000000000002.regtrans-ms
229721 -r--r--r-- 0 0 0 16-Feb-2012 18:17 Sti_Trace.log
263103 -r--r--r-- 0 0 1766 23-Nov-2012 18:07 Wrinnovo.log
46375 -r--r--r-- 0 0 314 23-Nov-2012 18:07 dikeutil.ini
263121 -r--r--r-- 0 0 5301 23-Nov-2012 18:07 icRinnovo.log
11985 -r--r--r-- 0 0 12 10-May-2012 10:30 intlname.ols
366871 -r--r--r-- 0 0 10747904 27-Oct-2021 17:06 ntuser.dat
857 -r--r--r-- 0 0 262144 27-Oct-2021 17:06 ntuser.dat.LOG1
858 -r--r--r-- 0 0 0 24-Oct-2009 15:40 ntuser.dat.LOG2
65772 -r--r--r-- 0 0 65536 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TM.blf
113989 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
438878 -r--r--r-- 0 0 524288 12-Oct-2017 20:55 ntuser.dat{02e6ff26-af43-11e7-84ee-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
54151 -r--r--r-- 0 0 65536 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TM.blf
71955 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76647 -r--r--r-- 0 0 524288 27-Feb-2012 11:19 ntuser.dat{041a77e6-611b-11e1-8fd9-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
11010 -r--r--r-- 0 0 65536 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TM.blf
11045 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
11048 -r--r--r-- 0 0 524288 12-Feb-2010 18:55 ntuser.dat{1f9c3ba5-17ff-11df-8988-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
61926 -r--r--r-- 0 0 65536 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TM.blf
438891 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
520386 -r--r--r-- 0 0 524288 3-Nov-2017 18:58 ntuser.dat{56f826ac-c063-11e7-bc8b-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
3864 -r--r--r-- 0 0 65536 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TM.blf
3874 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
3883 -r--r--r-- 0 0 524288 29-Jun-2018 21:11 ntuser.dat{8742fc74-7b6a-11e8-bae3-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
141364 -r--r--r-- 0 0 65536 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TM.blf
141464 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
141472 -r--r--r-- 0 0 524288 24-Jan-2019 09:54 ntuser.dat{8e78c625-1fb5-11e9-b8e1-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
76609 -r--r--r-- 0 0 65536 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TM.blf
76650 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000001.regtrans-ms
76719 -r--r--r-- 0 0 524288 27-Feb-2012 11:55 ntuser.dat{9aaa88ad-612c-11e1-b6a7-5404a6988395}.TMContainer00000000000000000002.regtrans-ms
219433 -r--r--r-- 0 0 65536 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TM.blf
221047 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
221478 -r--r--r-- 0 0 524288 23-Jun-2011 12:33 ntuser.dat{ec1916cd-9d81-11e0-915c-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
182072 -r--r--r-- 0 0 65536 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TM.blf
183027 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000001.regtrans-ms
183763 -r--r--r-- 0 0 524288 5-Nov-2010 15:57 ntuser.dat{f7ede86c-e8e9-11df-a0cf-90e6ba23ffa6}.TMContainer00000000000000000002.regtrans-ms
272012 -r--r--r-- 0 0 20 24-Oct-2009 15:40 ntuser.ini
234327 -r--r--r-- 0 0 24 2-Jan-2013 10:00 password wi-fi.txt
263123 -r--r--r-- 0 0 119 23-Nov-2012 18:06 tmpSubjectDN
Directory /Users
20375 dr-xr-xr-x 0 0 0 28-May-2014 10:31 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
16948 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 AppData
42 dr-xr-xr-x 0 0 0 4-Oct-2021 11:37 DIEGO
20487 dr-xr-xr-x 0 0 0 24-Nov-2011 18:34 Default
20523 dr-xr-xr-x 0 0 0 14-Apr-2015 09:36 Public
341977 dr-xr-xr-x 0 0 0 26-Oct-2021 12:04 Scanner
341844 -r--r--r-- 0 0 1700 18-Mar-2021 11:21 Scanner - collegamento.lnk
341970 -r--r--r-- 0 0 41984 28-May-2014 10:31 Thumbs.db
341970 -r--r--r-- 0 0 0 28-May-2014 10:31 Thumbs.db:encryptable
35351 -r--r--r-- 0 0 174 14-Jul-2009 06:54 desktop.ini
file_pread(5,16,buffer,6498350(404/128/27)) read err: Partial read
Directory /
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 .
5 dr-xr-xr-x 0 0 0 4-Feb-2022 10:45 ..
5931 dr-xr-xr-x 0 0 0 29-Oct-2021 10:57 $RECYCLE.BIN
659082 dr-xr-xr-x 0 0 0 28-Oct-2021 18:11 .Trash-999
344845 dr-xr-xr-x 0 0 0 23-Aug-2017 18:59 2f9fd7d905cd264abf934b53846d5883
179408 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 3bef033f5e34d4ce8a40d921
343165 dr-xr-xr-x 0 0 0 13-Aug-2015 19:27 4e67de6d2d5de13f6d8d71db05486c
323482 dr-xr-xr-x 0 0 0 16-Oct-2014 19:08 55b32716a4e19f48fb206ed12e16
152166 dr-xr-xr-x 0 0 0 22-Nov-2011 11:14 5edaabef8346408c52c69384c9aaa7
... other folders e files
58251 -r--r--r-- 0 0 904704 1-Dec-2006 22:37 msdia80.dll
13524 -r--r--r-- 0 0 4258390016 27-Oct-2021 08:07 pagefile.sys
606 -r--r--r-- 0 0 2228365 3-Nov-2013 19:07 sh4_service.log
147263 -r--r--r-- 0 0 285747 18-Oct-2013 16:01 shldr
212961 -r--r--r-- 0 0 8192 18-Oct-2013 16:01 shldr.mbr
223308 -r--r--r-- 0 0 0 29-Oct-2012 10:12 sparkraw.log
375 -r--r--r-- 0 0 358163 3-Nov-2013 20:05 spyhunter.log
150213 -r--r--r-- 0 0 1491701 21-Dec-2016 15:52 uninstall.exe
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
ntfs_boot_sector
2 * HPFS - NTFS 12 223 20 119751 52 45 1923596288 [HP]
NTFS, blocksize=4096, 984 GB / 917 GiB
file_pread(5,16,buffer,206848(12/223/20)) read err: Partial read
NTFS at 12/223/20
NTFS at 12/223/20
filesystem size 1923596288
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.
now I start again to try to work on the partition image instead of the direct disk if you confirm I can make the access to the file system run faster, and I start again reading the manual especially
-
recuperation
- Posts: 3036
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: list files in partition give incomplete result
???cioffinedd wrote: 21 Feb 2022, 17:45 now I start again to try to work on the partition image instead of the direct disk if you confirm I can make the access to the file system run faster, and I start again reading the manual especially
Please use separator elements like "." where necessary to make that sentence above understandable!
The logfile confirms broken sectors on your drive and states that they affect at least one directory as well.
Duplicate your drive using ddrescue as decribed in the manual.
Use Photorec or any other recovery software hoping to get the remains of what Testdisk could not retrieve.
You might duplicate the duplicate and attach the second duplicate to a running windows machine and run chkdsk A: /f /v /x. Replace the letter A by the drive symbol that is assigned to your partition labeled "SYSTEM". This will return your file system in a healthy state but will erase possible remains that data other recovery software needs.
-
cioffinedd
- Posts: 3
- Joined: 18 Feb 2022, 12:43
Re: list files in partition give incomplete result
Hello, and Thank you very much for helping, sorry so much for not been clear in my sentencies.
I managed to recover all the content in hard drive, maybe some files could be missing but I can now access even through windows to the folders and files;
these are the steps that lead to my solution (in the order that I used, not necessarily the correct order maybe):
the disk was disappeared in windows and unable to mount even in disk management it was asking for formatting
1. Deeper search with testdisk
2. Write partition table with results of point 1 (this led to previous status when I started the post)
3. Create image of disk with ddrescue
4. Copy the image to a healty hdd
5. Connect the healty hdd to a working Windows system
6. Run chkdsk with the "SYSTEM" partition as argument recuperation stated in last post with options /f /v /x
7. run chkdsk also to the bigger partition with options /f /v /r (this took a lot of time like 10 hours but at least all folders are magically appeared in their place)
thanks again
I managed to recover all the content in hard drive, maybe some files could be missing but I can now access even through windows to the folders and files;
these are the steps that lead to my solution (in the order that I used, not necessarily the correct order maybe):
the disk was disappeared in windows and unable to mount even in disk management it was asking for formatting
1. Deeper search with testdisk
2. Write partition table with results of point 1 (this led to previous status when I started the post)
3. Create image of disk with ddrescue
4. Copy the image to a healty hdd
5. Connect the healty hdd to a working Windows system
6. Run chkdsk with the "SYSTEM" partition as argument recuperation stated in last post with options /f /v /x
7. run chkdsk also to the bigger partition with options /f /v /r (this took a lot of time like 10 hours but at least all folders are magically appeared in their place)
thanks again