Que faire quand on a 1 seule partition et un Système de fichier corrompu

[ToshWD]

Bonjour,

J'ai un ordi portable sur w10 et 1 DD tohsiba de 6to et un WD de 20to, accessible en usb3 via un boitier externe à 2 compartiments. Le portable a évidement planté pile durant l'écriture sur ces Disques. Après redémarrage, Windows ne reconnait pas les disques. Le Toshiba et le WesternDigital n'ont qu'une seule partition et sont en NTFS.
Aucune nouvelle donnée ne fut écrite sur le disque Toshiba et comme sa capacité est la plus petite des 2, je débute avec lui. Mais je suis rapidement bloqué. Voici comment Windows voit le disque actuellement, c'est le disque physique 2, lettre T: en RAW :

ensuite je lance Testdisque suivant le tuto ici https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
fichier log testdisk.txt ici https://pastebin.com/gEqErt4B

mais lorsque je liste les fichiers de l'unique partition logique trouvée (qui est la seule que j'ai créée), le logiciel confirme que le système de fichier est endommagé. Et là je ne sais pas quoi faire car le tuto dit explicitement qu'il faut que les fichiers soient lisibles. Edit apparemment je suis dans le même cas irrésolu ici viewtopic.php?p=37971#p37971

J'ai lancé une analyse profonde mais la vitesse est de 1 cylindre/seconde, et avec 6to ça donne 8 jours d'analyse, j'imagine même pas avec le WD de 20to... Que dois je faire pour récupérer le système de fichier ? Je n'ai pas d'autres disques pour faire des copies de 6to et 20to.

j'édite pour précisé comment MiniTools voit le disque







données SMART,

avant de lancer testdisque j'ai lance une vérif rapide juste pour voir, RAS. Comme 6to est gros je n'ai pas encore fait la vérif longue

Le Disque ronronne, pas de bruit particulier. J’espère vraiment qu'il n'y a pas de dommage physique et que la solution n'est qu'une écriture correcte de la table des fichiers....

[recuperation]

Bonjour,

J'ai un ordi portable sur w10 et 1 DD tohsiba de 6to et un WD de 20to, accessible en usb3 via un boitier externe à 2 compartiments. Le portable a évidement planté pile durant l'écriture sur ces Disques. Après redémarrage, Windows ne reconnait pas les disques.

Disques ou partitions?
Si vos disques ne sont pas visibles au niveau de la gestion des disques vous vous adressez à un service professionel.
Si votre Windows tombe en panne au moment de l'écriture sur votre boitier cela m'étonne que tous les deux disques ne semblent pas lisibles en même temps. Il faudrait vérifier en mettant l'un après l'autre à l'intérieur dans un ordinateur regulier. Cela fonctionne uniquement si chaqu'un des deux disques a eu son propre système de fichiers (pas de bêtise comme "dynamic disque" ou "Storage Spaces").

Le Toshiba et le WesternDigital n'ont qu'une seule partition et sont en NTFS.

J'assume que ce sont deux partitions séparées.

Aucune nouvelle donnée ne fut écrite sur le disque Toshiba et comme sa capacité est la plus petite des 2, je débute avec lui. Mais je suis rapidement bloqué. Voici comment Windows voit le disque actuellement, c'est le disque physique 2, lettre T: en RAW :

ensuite je lance Testdisque suivant le tuto ici https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
fichier log testdisk.txt ici https://pastebin.com/gEqErt4B

mais lorsque je liste les fichiers de l'unique partition logique trouvée (qui est la seule que j'ai créée), le logiciel confirme que le système de fichier est endommagé. Et là je ne sais pas quoi faire car le tuto dit explicitement qu'il faut que les fichiers soient lisibles. Edit apparemment je suis dans le même cas irrésolu ici viewtopic.php?p=37971#p37971

Vous attendez la fin de l'analyse profonde et examinez toutes les partitions avec la touche "p" ("list files"). En cas des faillite vous essayez d'autre logiciels commerçials. Si rien fonctionne vous utilisez PhotoRec pour sauver vos données après avoir assuré que vous avez suffisament d'espace libre.

J'ai lancé une analyse profonde mais la vitesse est de 1 cylindre/seconde, et avec 6to ça donne 8 jours d'analyse, j'imagine même pas avec le WD de 20to... Que dois je faire pour récupérer le système de fichier ? Je n'ai pas d'autres disques pour faire des copies de 6to et 20to.

1. Vous attendez jusqu'à l'achat de plusieurs disques pour tout sauver. N'achetez pas des disques qui contient l'hélium comme votre 20to, ces disques vont péter dans l'avenir.
2. Vous vous adressez à un labo qui va essayer de sauver les données dans votre disque dur à un prix qui correspond à un multiple du prix d'un disque de 6 ou 20to.
3. Vous apprenez NTFS vous-même et vous commençez à bricoler avec vos disques endommagés. Bien evidemment c'est très risqué.

[ToshWD]

oui les deux disques sont indépendants, le seul lien qu'il y a est d'être dans le même boitier externe.

L'analyse profonde en est à 1% après 2h15min, rdv dans 1 semaine...

[ToshWD]

J'ai annulé l'analyse profonde pour regarder rapidement l'état du Wd 20To, c'est la même histoire. Le petit changement est que dès que Windos détecte le disque, il propose de le formater, alors que le toshiba 6to n'a pas cette requête. Juste avant de ne plus être accessible du tout, Windows disait que 2 dossiers étaient illisibles sur le WD 20to, précisément els deux dossiers qui étaient en pleine écriture durant le crash.

Code: Select all

Tue Dec 17 19:57:39 2024
Command line: TestDisk

TestDisk 7.3-WIP, Data Recovery Utility, September 2024
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3003.3
ext2fs lib: 1.45.3, ntfs lib: available, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=4290772992
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=20000588955648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=6001175126016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=53015659520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=446419693568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\R:)=4287627264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=6001156685824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=20000570081280
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - NVMe Samsung SSD 970, S/N:xxxx., FW:2B2Q
Disk \\.\PhysicalDrive1 - 4290 MB / 4092 MiB - CHS 1023 256 32, sector size=512
Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - CHS 2431599 255 63, sector size=512 - WDC  WUH 722020ALE6L1, S/N:XXX, FW:k
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63, sector size=512 - TOSHIBA HDWR460UZSVB, S/N:XXX, FW:k
Drive R: - 4287 MB / 4089 MiB - CHS 1022 256 32, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - WDC  WUH 722020ALE6L1
Partition table type: EFI GPT
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=39063650303 (expected 39063650303)
hdr_lba_start=34
hdr_lba_end=39063650270
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
hdr_size=92
hdr_lba_self=39063650303
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=39063650270
hdr_lba_table=39063650271
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - WDC  WUH 722020ALE6L1
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=39063650303 (expected 39063650303)
hdr_lba_start=34
hdr_lba_end=39063650270
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
hdr_size=92
hdr_lba_self=39063650303
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=39063650270
hdr_lba_table=39063650271
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]

Analyse Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - CHS 2431599 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=39063650303 (expected 39063650303)
hdr_lba_start=34
hdr_lba_end=39063650270
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
hdr_size=92
hdr_lba_self=39063650303
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=39063650270
hdr_lba_table=39063650271
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
Current partition structure:
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]
 2 P MS Data                    32768 39063646207 39063613440 [Basic data partition]

search_part()
Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - CHS 2431599 255 63
NTFS at 2/10/23
filesystem size           39063613440
sectors_per_cluster       16
mft_lcn                   393216
mftmirr_lcn               1
clusters_per_mft_record   -10
clusters_per_index_record -12
NTFS part_offset=16784384, part_size=20000570081280, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/23
filesystem size           39063613440
sectors_per_cluster       16
mft_lcn                   393216
mftmirr_lcn               1
clusters_per_mft_record   -10
clusters_per_index_record -12
     MS Data                    32782 39063646221 39063613440
     NTFS, blocksize=8192, 20 TB / 18 TiB
file_win32_pread(604,11,buffer,39063650296(2431599/196/14)) read err: read after end of file
file_win32_pread(604,11,buffer,39063650300(2431599/196/18)) read err: read after end of file
file_win32_pread(604,8,buffer,39063650299(2431599/196/17)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650292(2431599/196/10)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650293(2431599/196/11)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650294(2431599/196/12)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650295(2431599/196/13)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650296(2431599/196/14)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650298(2431599/196/16)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650300(2431599/196/18)) read err: read after end of file
file_win32_pread(604,14,buffer,39063650302(2431599/196/20)) read err: read after end of file

Results
   P MS Data                    32782 39063646221 39063613440
     NTFS, blocksize=8192, 20 TB / 18 TiB
Failed to open $MFT/$BITMAP: No such file or directory.
ntfs_mft_load(): Failed.
Failed to load $MFT: No such file or directory.
Failed to startup volume: No such file or directory.

   P MS Data                    32782 39063646221 39063613440
     NTFS, blocksize=8192, 20 TB / 18 TiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                    32782 39063646221 39063613440

J'ai une question avec les partitions abhérantes qui sont en doubles, debutant avec la capicité négative. Si je les supprimes avec Parition Wizard, ça ne devrait pas corriger tous les problèmes ?

[ToshWD]

L’analyse profonde tu Toshiba 6to continue, j'en suis à 5%, mais plus ça va, plus windows est lent : par exemple énorme délai pour ouvrir des menus, firefox est lent, l'horloge avec les seconde ne se met à jour que toutes les 2 secondes, puis 4 secondes. J'espère que l'ordi tiendra jusqu’au bout.

[ToshWD]

ce matin testdique montre de nouvelle partitions farfelues, des linux et mac

Code: Select all

Tue Dec 17 20:22:31 2024
Command line: TestDisk

TestDisk 7.3-WIP, Data Recovery Utility, September 2024
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3003.3
ext2fs lib: 1.45.3, ntfs lib: available, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=4290772992
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=20000588955648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=6001175126016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=53015659520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=446419693568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\R:)=4287627264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=6001156685824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=20000570081280
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - NVMe Samsung SSD 970, S/N:XXX., FW:2B2Q
Disk \\.\PhysicalDrive1 - 4290 MB / 4092 MiB - CHS 1023 256 32, sector size=512
Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - CHS 2431599 255 63, sector size=512 - WDC  WUH 722020ALE6L1, S/N:XXX, FW:k
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63, sector size=512 - TOSHIBA HDWR460UZSVB, S/N:XXX, FW:k
Drive R: - 4287 MB / 4089 MiB - CHS 1022 256 32, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - TOSHIBA HDWR460UZSVB
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=11721045167 (expected 11721045167)
hdr_lba_start=34
hdr_lba_end=11721045134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
hdr_size=92
hdr_lba_self=11721045167
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=11721045134
hdr_lba_table=11721045135
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 11721041919 11721009152 [Basic data partition] [Toshiba]
Current partition structure:
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 11721041919 11721009152 [Basic data partition] [Toshiba]

search_part()
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63
NTFS at 2/10/9
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=6001156685824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
file_win32_pread(608,11,buffer,11721045162(729601/80/58)) read err: read after end of file
file_win32_pread(608,8,buffer,11721045165(729601/80/61)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045156(729601/80/52)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045157(729601/80/53)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045158(729601/80/54)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045159(729601/80/55)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045160(729601/80/56)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045162(729601/80/58)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045164(729601/80/60)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045166(729601/80/62)) read err: read after end of file

Results
   P MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
Failed to open inode: Input/output error.

   P MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                    32768 11721041919 11721009152 [Toshiba]

testdisk_win_2024-12-19 08_19_35.png (66.29 KiB) Viewed 12888 times

[ToshWD]

Vous attendez la fin de l'analyse profonde et examinez toutes les partitions avec la touche "p" ("list files"). En cas des faillite vous essayez d'autre logiciels commerçials. Si rien fonctionne vous utilisez PhotoRec pour sauver vos données après avoir assuré que vous avez suffisament d'espace libre.

bon l'analyse profonde est finie mais je ne sais pas interpréter le résultat. Juste avant le dernier cylindre analysé j'avais cette fenêtre de testdisque

testdisk_win_2024-12-28 18_33_03.png (185.72 KiB) Viewed 11489 times

ensuite vraiment au dernier cylindre 729600 il trouva une MS Data, mais je n'ais pas eut le temps de prendre un capture d'écran, la fenêtre est allée directement à : (je crois que durant l'analyse profonde j'ai appuyé sur une touche du clavier et dès qu'elle fut finit cette appuie foireux fut interprété ?)

testdisk_win_2024-12-28 18_43_50.png (86.44 KiB) Viewed 11489 times

ensuite j'ai eut la liste des partitions de l’analyse profonde, plein de Linux et Mac, et en appuyant sur la touche <p> ça dit que ce n'était pas prise en charge.
J'ai appuyé sur la touche échappe en panique et je crois que ça à perdu le résultat de l'analyse profonde. Voici le fichier log qui doit rester complet normalement. À la toute fin j'ai lancé photorec et ça m'a bien trouvé des fichiers très facilement, mais les noms de fichiers sont pas les originaux...

Code: Select all

Thu Dec 19 09:41:11 2024
Command line: TestDisk

TestDisk 7.3-WIP, Data Recovery Utility, September 2024
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3003.3
ext2fs lib: 1.45.3, ntfs lib: available, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=4290772992
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=20000588955648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=6001175126016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=53015659520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=446419693568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\R:)=4287627264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=6001156685824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\W:)=20000570081280
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - NVMe Samsung SSD 970, S/N:xxxxx., FW:2B2Q
Disk \\.\PhysicalDrive1 - 4290 MB / 4092 MiB - CHS 1023 256 32, sector size=512
Disk \\.\PhysicalDrive2 - 20 TB / 18 TiB - CHS 2431599 255 63, sector size=512 - WDC  WUH 722020ALE6L1, S/N:xxxxxxx, FW:k
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63, sector size=512 - TOSHIBA HDWR460UZSVB, S/N:xxxxxxxxx, FW:k
Drive R: - 4287 MB / 4089 MiB - CHS 1022 256 32, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - TOSHIBA HDWR460UZSVB
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=11721045167 (expected 11721045167)
hdr_lba_start=34
hdr_lba_end=11721045134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
hdr_size=92
hdr_lba_self=11721045167
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=11721045134
hdr_lba_table=11721045135
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 11721041919 11721009152 [Basic data partition] [Toshiba]
Current partition structure:
Bad GPT partition entries, invalid checksum.
Trying alternate GPT
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 11721041919 11721009152 [Basic data partition] [Toshiba]

search_part()
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63
NTFS at 2/10/9
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=6001156685824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
file_win32_pread(608,11,buffer,11721045162(729601/80/58)) read err: read after end of file
file_win32_pread(608,8,buffer,11721045165(729601/80/61)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045156(729601/80/52)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045157(729601/80/53)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045158(729601/80/54)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045159(729601/80/55)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045160(729601/80/56)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045162(729601/80/58)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045164(729601/80/60)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045166(729601/80/62)) read err: read after end of file

Results
   P MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
Failed to open inode: Input/output error.

   P MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                    32768 11721041919 11721009152 [Toshiba]

search_part()
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63
NTFS at 2/10/9
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=16777216, part_size=6001156685824, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 2/10/9
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB

LVM magic value at 39914/93/62

LVM magic value at 65482/122/56
check_FAT: Bad jump in FAT partition
check_FAT: Bad number of sectors per cluster
check_FAT: Bad number of sectors per cluster

LVM magic value at 112976/138/44

cramfs Marker at 117062/30/11

recover_cramfs
     Linux filesys. data   1880602930 1888380339    7777409 [ît¦Kå
?¥éiã² ­]
     cramfs, 3982 MB / 3797 MiB

cramfs Marker at 117062/30/12

recover_cramfs
     Linux filesys. data   1880602931 1888380340    7777409 [ît¦Kå
?¥éiã² ­]
     cramfs, 3982 MB / 3797 MiB

LVM magic value at 117225/60/29

HFS magic value at 128933/247/14
part_size 1550
     Mac HFS               2071324219 2071325768       1550 [\]
     HFS blocksize=131072, 793 KB / 775 KiB

HFS magic value at 128933/247/16
part_size 1550
     Mac HFS               2071322673 2071324222       1550 [\]
     HFS found using backup sector!, 793 KB / 775 KiB
check_FAT: Bad jump in FAT partition

LVM magic value at 131294/54/37

SYSV4 Marker at 131343/158/24

recover_sysv4
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown               2110035272 2110035271          0 [-Áž+ø]
     SysV4, 0 B
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.

LVM magic value at 143826/28/42
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown               2649382500 6746745286 4097362787
     FATX, 2097 GB / 1953 GiB
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.

cramfs Marker at 170263/209/49

recover_cramfs
     Linux filesys. data   2735288310 2736437350    1149040 [æE]
     cramfs, 588 MB / 561 MiB

cramfs Marker at 170263/209/50

recover_cramfs
     Linux filesys. data   2735288311 2736437351    1149040 [æE]
     cramfs, 588 MB / 561 MiB
check_FAT: Bad number of sectors per cluster

cramfs Marker at 199764/41/52

recover_cramfs
     Linux filesys. data   3209211294 3213919148    4707854 [=÷¢9ªúj;s‘“Qd]
     cramfs, 2410 MB / 2298 MiB

cramfs Marker at 199764/41/53

recover_cramfs
     Linux filesys. data   3209211295 3213919149    4707854 [=÷¢9ªúj;s‘“Qd]
     cramfs, 2410 MB / 2298 MiB
check_FAT: Bad jump in FAT partition
check_FAT: Bad jump in FAT partition

LVM magic value at 247996/188/46

SYSV4 Marker at 256693/229/24

recover_sysv4
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown               4123787495 467814082412774 467809958625280 [´uãhL]
     SysV4, 239518 TB / 217840 TiB
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.

LVM magic value at 258877/132/55
     BeFS                  5167340522 32886084736380497 32886079569039976 [Dht÷×Êa1¡AcÂñÕ‰H©>ön¥ ¡¡¬C¢ËU]
     BeFS blocksize=4096, 16837672 TB / 15313774 TiB
This partition ends after the disk limits. (start=5167340522, size=32886079569039976, end=32886084736380497, disk end=11721045168)

cramfs Marker at 351061/209/43

recover_cramfs
     Linux filesys. data   5639808174 5647371111    7562937 [‘¤®ä–oÐ^kiÚ½Ž3]
     cramfs, 3872 MB / 3692 MiB

cramfs Marker at 351061/209/44

recover_cramfs
     Linux filesys. data   5639808175 5647371112    7562937 [‘¤®ä–oÐ^kiÚ½Ž3]
     cramfs, 3872 MB / 3692 MiB
check_FAT: Bad jump in FAT partition

LVM magic value at 372459/224/25
check_FAT: Bad jump in FAT partition
     BeFS                  6690377439 10103756265819870 10103749575442432 [ƒvSÓ¨<쪷¼‡/rÒ9é=q¹ôŠ`ÍÁ¬à~à]
     BeFS blocksize=134217728, 5173119 TB / 4704925 TiB
This partition ends after the disk limits. (start=6690377439, size=10103749575442432, end=10103756265819870, disk end=11721045168)
check_FAT: Bad jump in FAT partition

LVM magic value at 516164/22/11
check_FAT: Bad number of sectors per cluster
     BeFS                  8589158754 35885011224530587 35885002635371833 [¾/°À¶¯èDÓ­—zßb0°2Ê?O6ÑÓ¦ÅϾ]
     BeFS blocksize=8, 18373121 TB / 16710256 TiB
This partition ends after the disk limits. (start=8589158754, size=35885002635371833, end=35885011224530587, disk end=11721045168)

cramfs Marker at 549611/61/50

recover_cramfs
     Linux filesys. data   8829504607 8833169341    3664734 [ÌZwí_õ,±°wÍÔÍ]
     cramfs, 1876 MB / 1789 MiB

cramfs Marker at 549611/61/51

recover_cramfs
     Linux filesys. data   8829504608 8833169342    3664734 [ÌZwí_õ,±°wÍÔÍ]
     cramfs, 1876 MB / 1789 MiB

cramfs Marker at 560110/103/54

recover_cramfs
     Linux filesys. data   8998173692 9002028986    3855294 [ÅF¤·~÷/"ãñg]
     cramfs, 1973 MB / 1882 MiB

cramfs Marker at 560110/103/55

recover_cramfs
     Linux filesys. data   8998173693 9002028987    3855294 [ÅF¤·~÷/"ãñg]
     cramfs, 1973 MB / 1882 MiB

SYSV4 Marker at 574236/155/19

recover_sysv4
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown               9225111123 51912275666 42687164544 [@rÎÅ%]
     SysV4, 21 TB / 19 TiB
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown               9714056307 10511177797  797121491
     FATX, 408 GB / 380 GiB
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.
check_FAT: Bad number of sectors per cluster

SYSV4 Marker at 714812/214/36

recover_sysv4
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown               11483468297 11483468296          0 [çòæ4]
     SysV4, 0 B
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.
NTFS at 729601/29/28
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS found using backup sector, blocksize=4096, 6001 GB / 5589 GiB
NTFS at 729601/29/28
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS: Can't read MFT
     MS Data               11721041919 23442051070 11721009152
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
This partition ends after the disk limits. (start=11721041919, size=11721009152, end=23442051070, disk end=11721045168)
file_win32_pread(608,11,buffer,11721045163(729601/80/59)) read err: read after end of file
file_win32_pread(608,8,buffer,11721045162(729601/80/58)) read err: read after end of file
file_win32_pread(608,8,buffer,11721045166(729601/80/62)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045155(729601/80/51)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045156(729601/80/52)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045157(729601/80/53)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045158(729601/80/54)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045159(729601/80/55)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045160(729601/80/56)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045162(729601/80/58)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045164(729601/80/60)) read err: read after end of file
file_win32_pread(608,14,buffer,11721045166(729601/80/62)) read err: read after end of file
Disk \\.\PhysicalDrive3 - 6001 GB / 5589 GiB - CHS 729601 255 63
Check the hard disk size: HD jumper settings, BIOS detection...
The hard disk (6001 GB / 5589 GiB) seems too small! (< 18373125 TB / 16710260 TiB)
The following partitions can't be recovered:
     BeFS                  5167340522 32886084736380497 32886079569039976 [Dht÷×Êa1¡AcÂñÕ‰H©>ön¥ ¡¡¬C¢ËU]
     BeFS blocksize=4096, 16837672 TB / 15313774 TiB
     BeFS                  6690377439 10103756265819870 10103749575442432 [ƒvSÓ¨<쪷¼‡/rÒ9é=q¹ôŠ`ÍÁ¬à~à]
     BeFS blocksize=134217728, 5173119 TB / 4704925 TiB
     BeFS                  8589158754 35885011224530587 35885002635371833 [¾/°À¶¯èDÓ­—zßb0°2Ê?O6ÑÓ¦ÅϾ]
     BeFS blocksize=8, 18373121 TB / 16710256 TiB
     MS Data               11721041919 23442051070 11721009152
     NTFS, blocksize=4096, 6001 GB / 5589 GiB

Results
     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
     Linux filesys. data   1880602930 1888380339    7777410 [ît¦Kå
?¥éiã² ­]
     cramfs, 3982 MB / 3797 MiB
     Linux filesys. data   1880602931 1888380340    7777410 [ît¦Kå
?¥éiã² ­]
     cramfs, 3982 MB / 3797 MiB
     Mac HFS               2071322673 2071324222       1550 [\]
     HFS found using backup sector!, 793 KB / 775 KiB
     Mac HFS               2071324219 2071325768       1550 [\]
     HFS blocksize=131072, 793 KB / 775 KiB
     Linux filesys. data   2735288310 2736437350    1149041 [æE]
     cramfs, 588 MB / 561 MiB
     Linux filesys. data   2735288311 2736437351    1149041 [æE]
     cramfs, 588 MB / 561 MiB
     Linux filesys. data   3209211294 3213919148    4707855 [=÷¢9ªúj;s‘“Qd]
     cramfs, 2410 MB / 2298 MiB
     Linux filesys. data   3209211295 3213919149    4707855 [=÷¢9ªúj;s‘“Qd]
     cramfs, 2410 MB / 2298 MiB
     Linux filesys. data   5639808174 5647371111    7562938 [‘¤®ä–oÐ^kiÚ½Ž3]
     cramfs, 3872 MB / 3692 MiB
     Linux filesys. data   5639808175 5647371112    7562938 [‘¤®ä–oÐ^kiÚ½Ž3]
     cramfs, 3872 MB / 3692 MiB
     Linux filesys. data   8829504607 8833169341    3664735 [ÌZwí_õ,±°wÍÔÍ]
     cramfs, 1876 MB / 1789 MiB
     Linux filesys. data   8829504608 8833169342    3664735 [ÌZwí_õ,±°wÍÔÍ]
     cramfs, 1876 MB / 1789 MiB
     Linux filesys. data   8998173692 9002028986    3855295 [ÅF¤·~÷/"ãñg]
     cramfs, 1973 MB / 1882 MiB
     Linux filesys. data   8998173693 9002028987    3855295 [ÅF¤·~÷/"ãñg]
     cramfs, 1973 MB / 1882 MiB
Failed to open inode: Input/output error.

     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
Can't open filesystem. Filesystem seems damaged.

     Linux filesys. data   1880602930 1888380339    7777410 [ît¦Kå
?¥éiã² ­]
     cramfs, 3982 MB / 3797 MiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   1880602931 1888380340    7777410 [ît¦Kå
?¥éiã² ­]
     cramfs, 3982 MB / 3797 MiB
Support for this filesystem hasn't been implemented.

     Mac HFS               2071322673 2071324222       1550 [\]
     HFS found using backup sector!, 793 KB / 775 KiB
Support for this filesystem hasn't been implemented.

     Mac HFS               2071324219 2071325768       1550 [\]
     HFS blocksize=131072, 793 KB / 775 KiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   2735288310 2736437350    1149041 [æE]
     cramfs, 588 MB / 561 MiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   2735288311 2736437351    1149041 [æE]
     cramfs, 588 MB / 561 MiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   3209211294 3213919148    4707855 [=÷¢9ªúj;s‘“Qd]
     cramfs, 2410 MB / 2298 MiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   3209211295 3213919149    4707855 [=÷¢9ªúj;s‘“Qd]
     cramfs, 2410 MB / 2298 MiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   5639808174 5647371111    7562938 [‘¤®ä–oÐ^kiÚ½Ž3]
     cramfs, 3872 MB / 3692 MiB
Support for this filesystem hasn't been implemented.

     Linux filesys. data   5639808175 5647371112    7562938 [‘¤®ä–oÐ^kiÚ½Ž3]
     cramfs, 3872 MB / 3692 MiB
Support for this filesystem hasn't been implemented.

interface_write()
 
No partition found or selected for recovery
simulate write!
SIGHUP detected! PhotoRec has been killed.

[ToshWD]

donc dans le log il y a l'échec de la première MSDATA toruvée,

Code: Select all

     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
Can't open filesystem. Filesystem seems damaged.

mais il y a aussi l'indication « NTFS found using backup sector »

Code: Select all

NTFS at 729601/29/28
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    32768 11721041919 11721009152 [Toshiba]
     NTFS found using backup sector, blocksize=4096, 6001 GB / 5589 GiB

ça semble une bonne nouvelle non ?

juste en dessous il y aussi une MS DATA foireuse

Code: Select all

NTFS at 729601/29/28
filesystem size           11721009152
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS: Can't read MFT
     MS Data               11721041919 23442051070 11721009152
     NTFS, blocksize=4096, 6001 GB / 5589 GiB
This partition ends after the disk limits. (start=11721041919, size=11721009152, end=23442051070, disk end=11721045168)
file_win32_pread(608,11,buffer,11721045163(729601/80/59)) read err: read after end of file
file_win32_pread(608,8,buffer,11721045162(729601/80/58)) read err: read after end of file