NTFS partition lost on a 3TB disk with EFI/GPT partition

How to use TestDisk to recover lost partition
Post Reply
Message
Author
danilovcorrea
Posts: 6
Joined: 23 Apr 2014, 10:34

NTFS partition lost on a 3TB disk with EFI/GPT partition

#1 Post by danilovcorrea » 23 Apr 2014, 10:48

Dear Grenier,

after trying to recover GRUB with "Boot Repair Disk", one HD (without systems partition, contaning 2 NTFS partitions) was damaged, and the GPT e and one NTFS partition could not be found anymore, until now.
I ran testdisk -> Create -> Drive E: (the missing NTFS partition) -> Proceed -> Intel / PC partition -> Analyse -> Search and Deep Search after.
I couldn't recover the NTFS partition instead.

LOG file:

Tue Apr 22 18:16:27 2014
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Jul 30 2013 14:09:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
filewin32_getfilesize(\\.\I:) GetFileSize err Função incorreta.


filewin32_setfilepointer(\\.\I:) SetFilePointer err Função incorreta.


Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=16041115648
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.


filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.


Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive J: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512

Partition table type (auto): None
Drive E: - 2147 GB / 2000 GiB
Partition table type: Intel

Interface Advanced

Analyse Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
BAD_RS LBA=1535450125 4028305
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 362926 178 18 555980 150 41 3101410770
This partition ends after the disk limits. (start=1535450125, size=3101410770, end=341893598, disk end=4194304000)
BAD_RS LBA=3541218466 4289729
check_part_i386 failed for partition type 01
FAT12 220430 166 59 395880 144 31 2818602837
This partition ends after the disk limits. (start=3541218466, size=2818602837, end=2064854006, disk end=4194304000)
NTFS at 261083/88/61
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 0 1 261083 88 61 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Partition not added.
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2147 GB / 2000 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220430 166 59 395880 144 31 2818602837
FAT12 362926 178 18 555980 150 41 3101410770

Results
Can't open backup.log file: No such file or directory
interface_load

interface_write()

No partition found or selected for recovery

search_part()
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
BAD_RS LBA=1535450125 4028305
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 362926 178 18 555980 150 41 3101410770
This partition ends after the disk limits. (start=1535450125, size=3101410770, end=341893598, disk end=4194304000)
BAD_RS LBA=3541218466 4289729
check_part_i386 failed for partition type 01
FAT12 220430 166 59 395880 144 31 2818602837
This partition ends after the disk limits. (start=3541218466, size=2818602837, end=2064854006, disk end=4194304000)
NTFS at 261083/88/61
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 0 1 261083 88 61 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Partition not added.
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2147 GB / 2000 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220430 166 59 395880 144 31 2818602837
FAT12 362926 178 18 555980 150 41 3101410770

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition


Please, i need your help to recover the partition. Sorry for the english.

Thanks.

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 3458
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#2 Post by cgrenier » 23 Apr 2014, 16:53

What is the problem ? Missing partition, wrong partition size, corrupted filesystem ?

If a partition is missing or has a wrong size (ie 2 TB instead of 3 TB),
you must select the PhysicalDrive, not a drive letter. Please post the new log file if you are in this case.

danilovcorrea
Posts: 6
Joined: 23 Apr 2014, 10:34

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#3 Post by danilovcorrea » 24 Apr 2014, 17:40

Hi Grenier,

the problem is a lost NTFS partition, there is a RAW partition instead:

Image

There are three partitions on this disk: GPT reserved partition, Drive E: (NTFS before, and RAW now), and Drive F: "Data 3" (NTFS, working fine):

Image

As recomended, i ran the PhysicalDisk option:

LOG File:

Wed Apr 23 16:36:51 2014
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Jul 30 2013 14:09:04
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1010827264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=16041115648
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.


filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.


Warning: can't get size for \\.\K:
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive I: - 1010 MB / 964 MiB - CHS 241 64 32, sector size=2048
Drive J: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
BAD_RS LBA=4144590965 2156993
check_part_i386 failed for partition type 06
FAT16 >32M 257988 218 12 456562 73 21 3190082185
This partition ends after the disk limits. (start=4144590965, size=3190082185, end=3039705853, disk end=1565565872)
BAD_RS LBA=1535714317 4028305
check_part_i386 failed for partition type 01
FAT12 362943 36 51 555997 9 11 3101410770
This partition ends after the disk limits. (start=1535714317, size=3101410770, end=342157790, disk end=1565565872)
BAD_RS LBA=3541482658 4289729
check_part_i386 failed for partition type 01
FAT12 220447 25 29 395897 3 1 2818602837
This partition ends after the disk limits. (start=3541482658, size=2818602837, end=2065118198, disk end=1565565872)
NTFS at 261099/202/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220447 25 29 395897 3 1 2818602837
FAT16 >32M 257988 218 12 456562 73 21 3190082185
FAT12 362943 36 51 555997 9 11 3101410770

Results
* HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB

interface_write()

No partition found or selected for recovery
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

search_part()
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
BAD_RS LBA=4144590965 2156993
check_part_i386 failed for partition type 06
FAT16 >32M 257988 218 12 456562 73 21 3190082185
This partition ends after the disk limits. (start=4144590965, size=3190082185, end=3039705853, disk end=1565565872)
BAD_RS LBA=1535714317 4028305
check_part_i386 failed for partition type 01
FAT12 362943 36 51 555997 9 11 3101410770
This partition ends after the disk limits. (start=1535714317, size=3101410770, end=342157790, disk end=1565565872)
BAD_RS LBA=3541482658 4289729
check_part_i386 failed for partition type 01
FAT12 220447 25 29 395897 3 1 2818602837
This partition ends after the disk limits. (start=3541482658, size=2818602837, end=2065118198, disk end=1565565872)
NTFS at 261099/202/31
filesystem size 4194304000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
NTFS at 261099/202/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
NTFS at 364801/33/32
filesystem size 1665961984
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS found using backup sector, blocksize=4096, 852 GB / 794 GiB
NTFS at 364801/66/1
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4573 GB / 4259 GiB)
The following partitions can't be recovered:
FAT12 220447 25 29 395897 3 1 2818602837
FAT16 >32M 257988 218 12 456562 73 21 3190082185
FAT12 362943 36 51 555997 9 11 3101410770

Results
HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Not an exFAT boot sector.

HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.


dir_partition inode=5
HPFS - NTFS 261099 202 32 364801 33 32 1665961984 [DATA 3]
NTFS, blocksize=4096, 852 GB / 794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 23-Apr-2014 18:43 .
5 dr-xr-xr-x 0 0 0 23-Apr-2014 18:43 ..
35 dr-xr-xr-x 0 0 0 11-Feb-2014 07:52 $RECYCLE.BIN
237736 dr-xr-xr-x 0 0 0 13-Apr-2014 19:45 ADMIN-PC
26093 dr-xr-xr-x 0 0 0 21-Dec-2013 12:19 BACKUPS
143 dr-xr-xr-x 0 0 0 20-Dec-2013 15:39 DOCUMENTOS
10916 dr-xr-xr-x 0 0 0 29-Dec-2013 12:01 F$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
OTOS
42 dr-xr-xr-x 0 0 0 20-Dec-2013 15:36 LIVROS
38 dr-xr-xr-x 0 0 0 22-Apr-2014 16:19 System Volume Information
49 dr-xr-xr-x 0 0 0 20-Dec-2013 15:36 VIDEOS
237734 -r--r--r-- 0 0 528 17-Jan-2014 03:32 MediaID.bin
Not an exFAT boot sector.

HPFS - NTFS 16 113 34 261099 202 31 4194304000
NTFS found using backup sector, blocksize=4096, 2147 GB / 2000 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

HPFS - NTFS 16 113 34 364801 66 1 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.


How can i recover the lost NTFS partition?

Thank you for the help.

danilovcorrea
Posts: 6
Joined: 23 Apr 2014, 10:34

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#4 Post by danilovcorrea » 25 Apr 2014, 18:26

Hi Grenier,

I've read the step by step tutorial, but i still don't know how to recover the NTFS damaged partition.

I really appreciate your help. Thanks.

User avatar
cgrenier
Site Admin
Posts: 3458
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#5 Post by cgrenier » 27 Apr 2014, 10:30

Run TestDisk, Advanced, select your 2TB partition, Boot,
- if the NTFS boot sector is corrupted and the backup is ok, choose BackupBS and confirm,
- if both are bad, choose RebuildBS, List and if you can see your files, choose Write and confirm
Quit and reboot
Please post the testdisk.log file if you have problems.

danilovcorrea
Posts: 6
Joined: 23 Apr 2014, 10:34

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#6 Post by danilovcorrea » 27 Apr 2014, 13:29

Hi Grenier,

the damaged NTFS partition (Drive E:) is a non bootable partition (contains only data).

As recommended i ran the testdisk commands that you posted:

Image

Image

Image

Image

"No partition available"

LOG File:

Sun Apr 27 09:14:07 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, MinGW 3.11
Compilation date: Apr 20 2014 11:45:25
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=16043212800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119478943744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2147483648000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=852972535808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=536661196800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1010827264
filewin32_getfilesize(\\.\K:) GetFileSize err Função incorreta.


filewin32_setfilepointer(\\.\K:) SetFilePointer err Função incorreta.


Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=16041115648
Hard disk list
Disk \\.\PhysicalDrive0 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14525 255 63, sector size=512
Drive D: - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Drive E: - 2147 GB / 2000 GiB - CHS 261083 255 63, sector size=512
Drive F: - 852 GB / 794 GiB - CHS 103701 255 63, sector size=512
Drive G: - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512
Drive H: - 536 GB / 499 GiB - CHS 65245 255 63, sector size=512
Drive I: - 1010 MB / 964 MiB - CHS 241 64 32, sector size=2048
Drive M: - 16 GB / 14 GiB - CHS 1950 255 63, sector size=512

Partition table type (auto): None
Drive E: - 2147 GB / 2000 GiB
Partition table type: Intel

TestDisk exited normally.

danilovcorrea
Posts: 6
Joined: 23 Apr 2014, 10:34

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#7 Post by danilovcorrea » 29 Apr 2014, 00:15

Should i choose the EFI / GPT partition?

danilovcorrea
Posts: 6
Joined: 23 Apr 2014, 10:34

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#8 Post by danilovcorrea » 30 Apr 2014, 05:42

There is a way to see the archives list at this ntfs damaged partition?

User avatar
cgrenier
Site Admin
Posts: 3458
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: NTFS partition lost on a 3TB disk with EFI/GPT partition

#9 Post by cgrenier » 02 May 2014, 09:21

Please select the PhysicalDrive and not E:
Even if the partition is not bootable, the first sector is called a boot sector.
Please follow my previous instructions ;-)

Post Reply

Who is online

Users browsing this forum: No registered users and 2 guests