pls help with my table ?

How to use TestDisk to recover lost partition
Post Reply
Message
Author
trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

pls help with my table ?

#1 Post by trevisan » 19 Apr 2013, 22:26

i abort at star for LOG...is a partition ARQUIVOS "D:" that i delete but dont can recovery because say

NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted





Fri Apr 19 18:22:38 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Apr 14 2013 19:47:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=70434947072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=10380902400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419078016000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=104857600
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 70 GB / 65 GiB - CHS 8563 255 63, sector size=512
Drive D: - 10380 MB / 9900 MiB - CHS 1262 255 63, sector size=512
Drive E: - 419 GB / 390 GiB - CHS 50950 255 63, sector size=512
Drive F: - 41 GB / 38 GiB - CHS 5086 255 63, sector size=512
Drive G: - 104 MB / 100 MiB - CHS 12 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 12/223/20
Current partition structure:
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 81715200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB
NTFS at 5099/104/62
filesystem size 1871800320
sectors_per_cluster 32
mft_lcn 196608
mftmirr_lcn 1
clusters_per_mft_record -10
clusters_per_index_record -12
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB

Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

Sponsored links

trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

pls help with my table ?

#2 Post by trevisan » 19 Apr 2013, 22:32

The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)

I DELETE MY ''D: ARQUIVOS'' AT WINDOWS HERE SHOW SAME NOT ALOCATED SPACE....AND THE TESTDISK DON CAN RECOVERY


Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB



COMPLETE LOG




Fri Apr 19 18:22:38 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Apr 14 2013 19:47:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=70434947072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=10380902400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419078016000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=104857600
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 70 GB / 65 GiB - CHS 8563 255 63, sector size=512
Drive D: - 10380 MB / 9900 MiB - CHS 1262 255 63, sector size=512
Drive E: - 419 GB / 390 GiB - CHS 50950 255 63, sector size=512
Drive F: - 41 GB / 38 GiB - CHS 5086 255 63, sector size=512
Drive G: - 104 MB / 100 MiB - CHS 12 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 12/223/20
Current partition structure:
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 81715200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB
NTFS at 5099/104/62
filesystem size 1871800320
sectors_per_cluster 32
mft_lcn 196608
mftmirr_lcn 1
clusters_per_mft_record -10
clusters_per_index_record -12
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB

Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

Re: pls help with my table ?

#3 Post by trevisan » 20 Apr 2013, 17:54

pls anyone can help ? :cry:

User avatar
cgrenier
Site Admin
Posts: 3615
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: pls help with my table ?

#4 Post by cgrenier » 21 Apr 2013, 11:16

Run TestDisk, in Geometry, set 121614 cylinders, Analyse, Quick Search. You should be able to force the recovery of your partition this way.

trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

Re: pls help with my table ?

#5 Post by trevisan » 21 Apr 2013, 19:10

solved!!!

trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

Re: pls help with my table ?

#6 Post by trevisan » 21 Apr 2013, 19:50

i do something :(



Sun Apr 21 15:49:35 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Apr 14 2013 19:47:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=70434947072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=10380902400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419078016000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=104857600
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19, sector size=512
Drive C: - 70 GB / 65 GiB - CHS 8563 255 63, sector size=512
Drive D: - 10380 MB / 9900 MiB - CHS 1262 255 63, sector size=512
Drive E: - 419 GB / 390 GiB - CHS 50950 255 63, sector size=512
Drive F: - 41 GB / 38 GiB - CHS 19200 224 19, sector size=512
Drive G: - 104 MB / 100 MiB - CHS 48 224 19, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19
Geometry from i386 MBR: head=224 sector=19
NTFS at 0/107/16
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
NTFS at 48/134/15
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 224 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 19 (HD)
1 * HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
Warning: number of heads/cylinder mismatches 255 (NTFS) != 224 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 19 (HD)
2 P HPFS - NTFS 48 134 15 19248 134 14 81715200

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19
NTFS at 0/107/16
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 48/134/15
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
filesystem size 81715200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 48 134 15 19248 134 14 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB
NTFS at 19248/134/15
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
filesystem size 1871800320
sectors_per_cluster 32
mft_lcn 196608
mftmirr_lcn 1
clusters_per_mft_record -10
clusters_per_index_record -12
HPFS - NTFS 19248 134 15 459051 69 1 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 19248 134 15 459051 69 1 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
Warning: the current number of heads per cylinder is 224 but the correct value may be 255.

Results
* HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 48 134 15 19248 134 14 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB

interface_write()
1 * HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 48 134 15 19248 134 14 81715200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

User avatar
Fiona
Posts: 2836
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: pls help with my table ?

#7 Post by Fiona » 25 Apr 2013, 06:34

Did you use the 64bit version?
TestDisk 6.14WIP 32bit is recommended.
The 64bit version is only recommended on Operating systems lacking a 32bit virtual machine like WOW64.
But those are very rare.
Would it be possible to repeat your diagnose using the 32bit version?

Post Reply

Who is online

Users browsing this forum: No registered users and 4 guests