cgsecurity.org

Bonjour

Je sollicite votre aide pour récupérer une partition perdu (pleine …)
Sur un disque dur externe ssd samsung
je pense a voir fait une erreur de manip en supprimant un volume mais je n'en suis pas sur
( j'étais en train de modifier les partitions du disque local (system) du pc ) et je comprend pas ce que j'ai pu faire a celui ci ...

sur testdisk le disk est reconnu comme :

Hint: EFI GPT partition table type has been detected

avec advance on ne voit que cette petite partition :
partition start end size in sectors
> 1 P MS Reserved 2048 264191 262144

lorsque j'utilise la commande analyse je voit cela

Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63
Current partition structure:
Partition Start End Size in sectors
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 2048 264191 262144
1 P MS Reserved 2048 264191 262144 ( 2 fois la meme ligne )

je lance la commande quick search / rien
puis deep search rien ( 7 heures de scan c'est normal ?)
Je n’arrive jamais a retrouver la grosse partition

en ravanche sur photorec je vois cela :
Sur photorec elle apparait comme cela :
Disk /dev/sdd - 500 GB / 465 GiB (RO) - Samsung Portable SSD T5
Partition Start End Size in sectors
> Unknown 0 0 1 60801 80 63 976773168 [Whole disk]
1 P MS Reserved 0 32 33 16 113 33 262144

merci de votre aide
cordialement
denis

Veuillez publier votre ficher testdisk.log, s.v.p..

Testdisk ne trouve rien même avec Deep Search. Essayez un programme commercial de récuperation ou Photorec.
Photorec vous donne le même résultat de la table de partition actuelle sauf que c'est en coordonnées CHS (cylinder/head/sector) au lieu de LBA (logical block address).

500 GB en 7 h correspond à 20 MB/sec. Cela m'apparait lent par rapport aux données ici:

https://www.samsung.com/de/memory-stora ... pa500b-eu/

Peut-être vous vous l'opérez en mode de chiffrage.

merci pour ce retour

voici le testdisk de cette nuit :

Wed May 10 22:41:48 2023
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=126906007552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000203091968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=118576064512
Hard disk list
Disk \\.\PhysicalDrive0 - 128 GB / 119 GiB - CHS 15566 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 126 GB / 118 GiB - CHS 15428 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive E: - 118 GB / 110 GiB - CHS 14416 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=976773167 (expected 976773167)
hdr_lba_start=34
hdr_lba_end=976773134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 2048 264191 262144
1 P MS Reserved 2048 264191 262144

search_part()
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63
file_win32_pread(276,11,buffer,976773162(60801/80/58)) read err: read after end of file
file_win32_pread(276,8,buffer,976773165(60801/80/61)) read err: read after end of file
file_win32_pread(276,14,buffer,976773156(60801/80/52)) read err: read after end of file
file_win32_pread(276,14,buffer,976773157(60801/80/53)) read err: read after end of file
file_win32_pread(276,14,buffer,976773158(60801/80/54)) read err: read after end of file
file_win32_pread(276,14,buffer,976773159(60801/80/55)) read err: read after end of file
file_win32_pread(276,14,buffer,976773160(60801/80/56)) read err: read after end of file
file_win32_pread(276,14,buffer,976773162(60801/80/58)) read err: read after end of file
file_win32_pread(276,14,buffer,976773164(60801/80/60)) read err: read after end of file
file_win32_pread(276,14,buffer,976773166(60801/80/62)) read err: read after end of file

Results

interface_write()

No partition found or selected for recovery
simulate write!


merci d'avance

denis

Utilisez la vérsion la plus récente de Testdisk, 7.2-WIP au lieu d'une vérsion de l'année 2015!

voila le 1er scan avec la version 7.2

Thu May 11 09:55:40 2023
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=126906007552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000203091968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=118576064512
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=256042336256
Hard disk list
Disk \\.\PhysicalDrive0 - 128 GB / 119 GiB - CHS 15566 255 63, sector size=512 - SanDisk SD8SN8U128G1002, S/N:175105421167, FW:X4131002
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000LM035-1RK172, S/N:WL15A15R, FW:SDM1
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - OCZ-AGILITY3, S/N:OCZ-575Y4Z25VFV9CBH7, FW:2.15
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung Portable SSD T5, S/N:10D5F7654321
Disk \\.\PhysicalDrive4 - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - Samsung SSD 860 PRO 256G, S/N:0123456789ABCDEF, FW:0509

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - Samsung Portable SSD T5
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=976773167 (expected 976773167)
hdr_lba_start=34
hdr_lba_end=976773134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 2048 264191 262144
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 2048 264191 262144
1 P MS Reserved 2048 264191 262144

search_part()
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 60801 255 63
file_win32_pread(564,11,buffer,976773159(60801/80/55)) read err: read after end of file
file_win32_pread(564,11,buffer,976773162(60801/80/58)) read err: read after end of file
file_win32_pread(564,8,buffer,976773161(60801/80/57)) read err: read after end of file
file_win32_pread(564,3,buffer,976773167(60801/80/63)) read err: read after end of file
file_win32_pread(564,8,buffer,976773165(60801/80/61)) read err: read after end of file
file_win32_pread(564,14,buffer,976773156(60801/80/52)) read err: read after end of file
file_win32_pread(564,14,buffer,976773157(60801/80/53)) read err: read after end of file
file_win32_pread(564,14,buffer,976773158(60801/80/54)) read err: read after end of file
file_win32_pread(564,14,buffer,976773159(60801/80/55)) read err: read after end of file
file_win32_pread(564,14,buffer,976773160(60801/80/56)) read err: read after end of file
file_win32_pread(564,14,buffer,976773162(60801/80/58)) read err: read after end of file
file_win32_pread(564,14,buffer,976773164(60801/80/60)) read err: read after end of file
file_win32_pread(564,14,buffer,976773166(60801/80/62)) read err: read after end of file

Results

interface_write()

No partition found or selected for recovery

Sie le "deep search" avec la vérsion 7.2-WIP ne vous montre pas la partition perdue, il n'y a pas plus rien à faire avec Testdisk.