pls help with my table ?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

pls help with my table ?

#1 Post by trevisan »

i abort at star for LOG...is a partition ARQUIVOS "D:" that i delete but dont can recovery because say

NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted





Fri Apr 19 18:22:38 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Apr 14 2013 19:47:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=70434947072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=10380902400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419078016000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=104857600
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 70 GB / 65 GiB - CHS 8563 255 63, sector size=512
Drive D: - 10380 MB / 9900 MiB - CHS 1262 255 63, sector size=512
Drive E: - 419 GB / 390 GiB - CHS 50950 255 63, sector size=512
Drive F: - 41 GB / 38 GiB - CHS 5086 255 63, sector size=512
Drive G: - 104 MB / 100 MiB - CHS 12 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 12/223/20
Current partition structure:
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 81715200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB
NTFS at 5099/104/62
filesystem size 1871800320
sectors_per_cluster 32
mft_lcn 196608
mftmirr_lcn 1
clusters_per_mft_record -10
clusters_per_index_record -12
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB

Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Top
trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

pls help with my table ?

#2 Post by trevisan »

The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)

I DELETE MY ''D: ARQUIVOS'' AT WINDOWS HERE SHOW SAME NOT ALOCATED SPACE....AND THE TESTDISK DON CAN RECOVERY


Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB



COMPLETE LOG




Fri Apr 19 18:22:38 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Apr 14 2013 19:47:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=70434947072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=10380902400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419078016000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=104857600
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 70 GB / 65 GiB - CHS 8563 255 63, sector size=512
Drive D: - 10380 MB / 9900 MiB - CHS 1262 255 63, sector size=512
Drive E: - 419 GB / 390 GiB - CHS 50950 255 63, sector size=512
Drive F: - 41 GB / 38 GiB - CHS 5086 255 63, sector size=512
Drive G: - 104 MB / 100 MiB - CHS 12 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 12/223/20
Current partition structure:
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size 81715200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB
NTFS at 5099/104/62
filesystem size 1871800320
sectors_per_cluster 32
mft_lcn 196608
mftmirr_lcn 1
clusters_per_mft_record -10
clusters_per_index_record -12
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 5099 104 62 121613 151 10 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB

Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 5099 104 61 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 12 223 20 5099 104 61 81715200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Top
trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

Re: pls help with my table ?

#3 Post by trevisan »

pls anyone can help ? :cry:
Top
User avatar
cgrenier
Site Admin
Posts: 5416
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: pls help with my table ?

#4 Post by cgrenier »

Run TestDisk, in Geometry, set 121614 cylinders, Analyse, Quick Search. You should be able to force the recovery of your partition this way.
Top
trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

Re: pls help with my table ?

#5 Post by trevisan »

solved!!!
Top
trevisan
Posts: 5
Joined: 19 Apr 2013, 18:51

Re: pls help with my table ?

#6 Post by trevisan »

i do something :(



Sun Apr 21 15:49:35 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Apr 14 2013 19:47:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=70434947072
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=10380902400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419078016000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=104857600
Hard disk list
Disk \\.\PhysicalDrive0 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19, sector size=512
Drive C: - 70 GB / 65 GiB - CHS 8563 255 63, sector size=512
Drive D: - 10380 MB / 9900 MiB - CHS 1262 255 63, sector size=512
Drive E: - 419 GB / 390 GiB - CHS 50950 255 63, sector size=512
Drive F: - 41 GB / 38 GiB - CHS 19200 224 19, sector size=512
Drive G: - 104 MB / 100 MiB - CHS 48 224 19, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19
Geometry from i386 MBR: head=224 sector=19
NTFS at 0/107/16
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
NTFS at 48/134/15
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 224 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 19 (HD)
1 * HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
Warning: number of heads/cylinder mismatches 255 (NTFS) != 224 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 19 (HD)
2 P HPFS - NTFS 48 134 15 19248 134 14 81715200

search_part()
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19
NTFS at 0/107/16
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 48/134/15
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
filesystem size 81715200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 48 134 15 19248 134 14 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB
NTFS at 19248/134/15
heads/cylinder 255 (NTFS) != 224 (HD)
sect/track 63 (NTFS) != 19 (HD)
filesystem size 1871800320
sectors_per_cluster 32
mft_lcn 196608
mftmirr_lcn 1
clusters_per_mft_record -10
clusters_per_index_record -12
HPFS - NTFS 19248 134 15 459051 69 1 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
This partition ends after the disk limits. (start=81922048, size=1871800320, end=1953722367, disk end=1953525168)
Search for partition aborted
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 459004 224 19
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
HPFS - NTFS 19248 134 15 459051 69 1 1871800320 [ARQUIVOS]
NTFS, blocksize=16384, 958 GB / 892 GiB
Warning: the current number of heads per cylinder is 224 but the correct value may be 255.

Results
* HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
NTFS, blocksize=4096, 104 MB / 100 MiB
P HPFS - NTFS 48 134 15 19248 134 14 81715200
NTFS, blocksize=4096, 41 GB / 38 GiB

interface_write()
1 * HPFS - NTFS 0 107 16 48 134 14 204800 [Reservado pelo Sistema]
2 P HPFS - NTFS 48 134 15 19248 134 14 81715200
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Top
User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: pls help with my table ?

#7 Post by Fiona »

Did you use the 64bit version?
TestDisk 6.14WIP 32bit is recommended.
The 64bit version is only recommended on Operating systems lacking a 32bit virtual machine like WOW64.
But those are very rare.
Would it be possible to repeat your diagnose using the 32bit version?
Top
Locked

Return to “Partition Recovery”