Dear Grenier,
after trying to recover GRUB with "Boot Repair Disk", one HD (without systems partition, contaning 2 NTFS partitions) was damaged, and the GPT e and one NTFS partition could not be found anymore, until now.
I ran testdisk -> Create -> Drive E: (the missing NTFS partition) -> Proceed -> Intel / PC partition -> Analyse -> Search and Deep Search after.
I couldn't recover the NTFS partition instead.
LOG file:
Tue Apr 22 18:16:27 2014
Command line: TestDisk
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Jul 30 2013 14:09:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
filewin32_getfilesize(\\.\I:) GetFileSize err Função incorreta.
filewin32_setfilepointer(\\.\I:) SetFilePointer err Função incorreta.
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=16041115648
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.
filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.
Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive J: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Partition table type (auto): None
Drive E: - 2147 GB / 2000 GiB
Partition table type: Intel
Interface Advanced
Analyse Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
Current partition structure:
Partition sector doesn't have the endmark 0xAA55
search_part()
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
BAD_RS LBA=1535450125 4028305
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 362926 178 18 555980 150 41 3101410770
This partition ends after the disk limits. (start=1535450125, size=3101410770, end=341893598, disk end=4194304000)
BAD_RS LBA=3541218466 4289729
check_part_i386 failed for partition type 01
FAT12 220430 166 59 395880 144 31 2818602837
This partition ends after the disk limits. (start=3541218466, size=2818602837, end=2064854006, disk end=4194304000)
NTFS at 261083/88/61
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 0 1 261083 88 61 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Partition not added.
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2147 GB / 2000 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220430 166 59 395880 144 31 2818602837
FAT12 362926 178 18 555980 150 41 3101410770
Results
Can't open backup.log file: No such file or directory
interface_load
interface_write()
No partition found or selected for recovery
search_part()
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
BAD_RS LBA=1535450125 4028305
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 362926 178 18 555980 150 41 3101410770
This partition ends after the disk limits. (start=1535450125, size=3101410770, end=341893598, disk end=4194304000)
BAD_RS LBA=3541218466 4289729
check_part_i386 failed for partition type 01
FAT12 220430 166 59 395880 144 31 2818602837
This partition ends after the disk limits. (start=3541218466, size=2818602837, end=2064854006, disk end=4194304000)
NTFS at 261083/88/61
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 0 1 261083 88 61 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Partition not added.
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2147 GB / 2000 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220430 166 59 395880 144 31 2818602837
FAT12 362926 178 18 555980 150 41 3101410770
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Please, i need your help to recover the partition. Sorry for the english.
Thanks.
NTFS partition lost on a 3TB disk with EFI/GPT partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
- Posts: 6
- Joined: 23 Apr 2014, 10:34
- cgrenier
- Site Admin
- Posts: 5437
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
What is the problem ? Missing partition, wrong partition size, corrupted filesystem ?
If a partition is missing or has a wrong size (ie 2 TB instead of 3 TB),
you must select the PhysicalDrive, not a drive letter. Please post the new log file if you are in this case.
If a partition is missing or has a wrong size (ie 2 TB instead of 3 TB),
you must select the PhysicalDrive, not a drive letter. Please post the new log file if you are in this case.
-
- Posts: 6
- Joined: 23 Apr 2014, 10:34
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
Hi Grenier,
the problem is a lost NTFS partition, there is a RAW partition instead:
There are three partitions on this disk: GPT reserved partition, Drive E: (NTFS before, and RAW now), and Drive F: "Data 3" (NTFS, working fine):
As recomended, i ran the PhysicalDisk option:
LOG File:
Wed Apr 23 16:36:51 2014
Command line: TestDisk
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Jul 30 2013 14:09:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1010827264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=16041115648
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.
filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.
Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive I: - 1010 MB / 964 MiB - CHS 241 64 32, sector size=2048
Drive J: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295
Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable
search_part()
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
BAD_RS LBA=4144590965 2156993
check_part_i386 failed for partition type 06
FAT16 >32M 257988 218 12 456562 73 21 3190082185
This partition ends after the disk limits. (start=4144590965, size=3190082185, end=3039705853, disk end=1565565872)
BAD_RS LBA=1535714317 4028305
check_part_i386 failed for partition type 01
FAT12 362943 36 51 555997 9 11 3101410770
This partition ends after the disk limits. (start=1535714317, size=3101410770, end=342157790, disk end=1565565872)
BAD_RS LBA=3541482658 4289729
check_part_i386 failed for partition type 01
FAT12 220447 25 29 395897 3 1 2818602837
This partition ends after the disk limits. (start=3541482658, size=2818602837, end=2065118198, disk end=1565565872)
NTFS at 261099/202/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220447 25 29 395897 3 1 2818602837
FAT16 >32M 257988 218 12 456562 73 21 3190082185
FAT12 362943 36 51 555997 9 11 3101410770
Results
* HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
interface_write()
No partition found or selected for recovery
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
search_part()
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
BAD_RS LBA=4144590965 2156993
check_part_i386 failed for partition type 06
FAT16 >32M 257988 218 12 456562 73 21 3190082185
This partition ends after the disk limits. (start=4144590965, size=3190082185, end=3039705853, disk end=1565565872)
BAD_RS LBA=1535714317 4028305
check_part_i386 failed for partition type 01
FAT12 362943 36 51 555997 9 11 3101410770
This partition ends after the disk limits. (start=1535714317, size=3101410770, end=342157790, disk end=1565565872)
BAD_RS LBA=3541482658 4289729
check_part_i386 failed for partition type 01
FAT12 220447 25 29 395897 3 1 2818602837
This partition ends after the disk limits. (start=3541482658, size=2818602837, end=2065118198, disk end=1565565872)
NTFS at 261099/202/31
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
NTFS at 261099/202/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
NTFS at 364801/33/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS found using backup sector, blocksize=4096, 852 GB / 794 GiB
NTFS at 364801/66/1
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220447 25 29 395897 3 1 2818602837
FAT16 >32M 257988 218 12 456562 73 21 3190082185
FAT12 362943 36 51 555997 9 11 3101410770
Results
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.
dir_partition inode=5
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 23-Apr-2014 18:43 .
5 dr-xr-xr-x 0 0 0 23-Apr-2014 18:43 ..
35 dr-xr-xr-x 0 0 0 11-Feb-2014 07:52 $RECYCLE.BIN
237736 dr-xr-xr-x 0 0 0 13-Apr-2014 19:45 ADMIN-PC
26093 dr-xr-xr-x 0 0 0 21-Dec-2013 12:19 BACKUPS
143 dr-xr-xr-x 0 0 0 20-Dec-2013 15:39 DOCUMENTOS
10916 dr-xr-xr-x 0 0 0 29-Dec-2013 12:01 F$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
OTOS
42 dr-xr-xr-x 0 0 0 20-Dec-2013 15:36 LIVROS
38 dr-xr-xr-x 0 0 0 22-Apr-2014 16:19 System Volume Information
49 dr-xr-xr-x 0 0 0 20-Dec-2013 15:36 VIDEOS
237734 -r--r--r-- 0 0 528 17-Jan-2014 03:32 MediaID.bin
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
How can i recover the lost NTFS partition?
Thank you for the help.
the problem is a lost NTFS partition, there is a RAW partition instead:
There are three partitions on this disk: GPT reserved partition, Drive E: (NTFS before, and RAW now), and Drive F: "Data 3" (NTFS, working fine):
As recomended, i ran the PhysicalDisk option:
LOG File:
Wed Apr 23 16:36:51 2014
Command line: TestDisk
TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Jul 30 2013 14:09:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1010827264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=16041115648
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.
filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.
Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive I: - 1010 MB / 964 MiB - CHS 241 64 32, sector size=2048
Drive J: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295
Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable
search_part()
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
BAD_RS LBA=4144590965 2156993
check_part_i386 failed for partition type 06
FAT16 >32M 257988 218 12 456562 73 21 3190082185
This partition ends after the disk limits. (start=4144590965, size=3190082185, end=3039705853, disk end=1565565872)
BAD_RS LBA=1535714317 4028305
check_part_i386 failed for partition type 01
FAT12 362943 36 51 555997 9 11 3101410770
This partition ends after the disk limits. (start=1535714317, size=3101410770, end=342157790, disk end=1565565872)
BAD_RS LBA=3541482658 4289729
check_part_i386 failed for partition type 01
FAT12 220447 25 29 395897 3 1 2818602837
This partition ends after the disk limits. (start=3541482658, size=2818602837, end=2065118198, disk end=1565565872)
NTFS at 261099/202/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220447 25 29 395897 3 1 2818602837
FAT16 >32M 257988 218 12 456562 73 21 3190082185
FAT12 362943 36 51 555997 9 11 3101410770
Results
* HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
interface_write()
No partition found or selected for recovery
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
search_part()
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
BAD_RS LBA=4144590965 2156993
check_part_i386 failed for partition type 06
FAT16 >32M 257988 218 12 456562 73 21 3190082185
This partition ends after the disk limits. (start=4144590965, size=3190082185, end=3039705853, disk end=1565565872)
BAD_RS LBA=1535714317 4028305
check_part_i386 failed for partition type 01
FAT12 362943 36 51 555997 9 11 3101410770
This partition ends after the disk limits. (start=1535714317, size=3101410770, end=342157790, disk end=1565565872)
BAD_RS LBA=3541482658 4289729
check_part_i386 failed for partition type 01
FAT12 220447 25 29 395897 3 1 2818602837
This partition ends after the disk limits. (start=3541482658, size=2818602837, end=2065118198, disk end=1565565872)
NTFS at 261099/202/31
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
NTFS at 261099/202/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
NTFS at 364801/33/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS found using backup sector, blocksize=4096, 852 GB / 794 GiB
NTFS at 364801/66/1
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220447 25 29 395897 3 1 2818602837
FAT16 >32M 257988 218 12 456562 73 21 3190082185
FAT12 362943 36 51 555997 9 11 3101410770
Results
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.
dir_partition inode=5
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 23-Apr-2014 18:43 .
5 dr-xr-xr-x 0 0 0 23-Apr-2014 18:43 ..
35 dr-xr-xr-x 0 0 0 11-Feb-2014 07:52 $RECYCLE.BIN
237736 dr-xr-xr-x 0 0 0 13-Apr-2014 19:45 ADMIN-PC
26093 dr-xr-xr-x 0 0 0 21-Dec-2013 12:19 BACKUPS
143 dr-xr-xr-x 0 0 0 20-Dec-2013 15:39 DOCUMENTOS
10916 dr-xr-xr-x 0 0 0 29-Dec-2013 12:01 F$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
OTOS
42 dr-xr-xr-x 0 0 0 20-Dec-2013 15:36 LIVROS
38 dr-xr-xr-x 0 0 0 22-Apr-2014 16:19 System Volume Information
49 dr-xr-xr-x 0 0 0 20-Dec-2013 15:36 VIDEOS
237734 -r--r--r-- 0 0 528 17-Jan-2014 03:32 MediaID.bin
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
How can i recover the lost NTFS partition?
Thank you for the help.
-
- Posts: 6
- Joined: 23 Apr 2014, 10:34
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
Hi Grenier,
I've read the step by step tutorial, but i still don't know how to recover the NTFS damaged partition.
I really appreciate your help. Thanks.
I've read the step by step tutorial, but i still don't know how to recover the NTFS damaged partition.
I really appreciate your help. Thanks.
- cgrenier
- Site Admin
- Posts: 5437
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
Run TestDisk, Advanced, select your 2TB partition, Boot,
- if the NTFS boot sector is corrupted and the backup is ok, choose BackupBS and confirm,
- if both are bad, choose RebuildBS, List and if you can see your files, choose Write and confirm
Quit and reboot
Please post the testdisk.log file if you have problems.
- if the NTFS boot sector is corrupted and the backup is ok, choose BackupBS and confirm,
- if both are bad, choose RebuildBS, List and if you can see your files, choose Write and confirm
Quit and reboot
Please post the testdisk.log file if you have problems.
-
- Posts: 6
- Joined: 23 Apr 2014, 10:34
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
Hi Grenier,
the damaged NTFS partition (Drive E:) is a non bootable partition (contains only data).
As recommended i ran the testdisk commands that you posted:
"No partition available"
LOG File:
Sun Apr 27 09:14:07 2014
Command line: TestDisk
TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, MinGW 3.11
Compilation date: Apr 20 2014 11:45:25
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1010827264
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.
filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=16041115648
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive I: - 1010 MB / 964 MiB - CHS 241 64 32, sector size=2048
Drive M: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Partition table type (auto): None
Drive E: - 2147 GB / 2000 GiB
Partition table type: Intel
TestDisk exited normally.
the damaged NTFS partition (Drive E:) is a non bootable partition (contains only data).
As recommended i ran the testdisk commands that you posted:
"No partition available"
LOG File:
Sun Apr 27 09:14:07 2014
Command line: TestDisk
TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, MinGW 3.11
Compilation date: Apr 20 2014 11:45:25
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1010827264
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.
filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=16041115648
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive I: - 1010 MB / 964 MiB - CHS 241 64 32, sector size=2048
Drive M: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Partition table type (auto): None
Drive E: - 2147 GB / 2000 GiB
Partition table type: Intel
TestDisk exited normally.
-
- Posts: 6
- Joined: 23 Apr 2014, 10:34
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
Should i choose the EFI / GPT partition?
-
- Posts: 6
- Joined: 23 Apr 2014, 10:34
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
There is a way to see the archives list at this ntfs damaged partition?
- cgrenier
- Site Admin
- Posts: 5437
- Joined: 18 Feb 2012, 15:08
- Location: Le Perreux Sur Marne, France
- Contact:
Re: NTFS partition lost on a 3TB disk with EFI/GPT partition
Please select the PhysicalDrive and not E:
Even if the partition is not bootable, the first sector is called a boot sector.
Please follow my previous instructions
Even if the partition is not bootable, the first sector is called a boot sector.
Please follow my previous instructions