Partition disparue passée en RAW, TestDisk plante

Message

JagV12 · #1 Post by **JagV12** » 20 Feb 2015, 11:48

Bonjour à tous,

Mon disque Seagate ST3000DM001-9yn166 (FW CC4C) de 3To était le disque principal de mon portable avec W8x64. Pour utiliser W7x64 sans perdre la garantie, je l'utilise en secondaire, soit avec un adaptateur USB, soit directement en SATA (ce qui est le cas ici : Disque 0).

: Gestion des disques; Gestion des disques.png (118.26 KiB) Viewed 3107 times

Il est en GPT et comporte plusieurs partitions (récupération système entre autres) mais les deux principales sont (étaient) l'OS (W8-x64) et DATA. Pour une raison inconnue (utilisation USB au delà de 2To ?) les deux partitions essentielles sont passées en RAW (l'une d'abord puis l'autre quelques jours plus tard).

Lorsque j'utilise TestDisk pour analyser (EFI/GPT -> Analyse), je retrouve mes partitions (les spécialistes décoderons mieux que moi) :

: Partitionnement vu par TestDisk; TestDisk1.png (57.65 KiB) Viewed 3107 times

Je lance alors "Quick Search". L'analyse tourne pendant plusieurs heures puis plante.

Voici les fichiers "testdisk.log" et "testdisk_win.exe.stackdump" qui en résultent.

Code: Select all


Thu Feb 19 03:07:00 2015
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=214643507200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=535403954176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=214748364800
filewin32_getfilesize(\\.\F:) GetFileSize err Fonction incorrecte.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Fonction incorrecte.

Warning: can't get size for \\.\F:
filewin32_getfilesize(\\.\G:) GetFileSize err Fonction incorrecte.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Fonction incorrecte.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2763289264128
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-9YN166, S/N:2020202020202020202020203157314656444e31, FW:CC4B
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - Hitachi HTS547575A9E384, S/N:202020202020324a39353030343534474c554734, FW:JE4OA40J

Partition table type (auto): EFI GPT
Disk /dev/sda - 3000 GB / 2794 GiB - ST3000DM001-9YN166
Partition table type: EFI GPT

Analyse Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 4 P MS Reserved              1845248    2107391     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 5 P MS Data                  2107392  421537791  419430400 [Basic data partition]
check_part_gpt failed for partition
 6 P MS Data                421537792 5818587135 5397049344 [Basic data partition]
Current partition structure:
 1 P EFI System                  2048     616447     614400 [EFI system partition]
 2 P Unknown                   616448    1566719     950272 [Basic data partition]
 3 P EFI System               1566720    1771519     204800 [EFI system partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 4 P MS Reserved              1845248    2107391     262144 [Microsoft reserved partition]
 4 P MS Reserved              1845248    2107391     262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 5 P MS Data                  2107392  421537791  419430400 [Basic data partition]
 5 P MS Data                  2107392  421537791  419430400 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 6 P MS Data                421537792 5818587135 5397049344 [Basic data partition]
 6 P MS Data                421537792 5818587135 5397049344 [Basic data partition]
 7 P Unknown               5818589184 5860532223   41943040 [Basic data partition]
      1 [main] testdisk_win 2488 exception::handle: Exception: STATUS_INTEGER_DIVIDE_BY_ZERO
  37667 [main] testdisk_win 2488 open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

Lors d'une deuxième tentative, seules les deux dernières lignes étaient différentes :

Code: Select all

      2 [main] testdisk_win 3636 exception::handle: Exception: STATUS_INTEGER_DIVIDE_BY_ZERO
  42721 [main] testdisk_win 3636 open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

Code: Select all

Exception: STATUS_INTEGER_DIVIDE_BY_ZERO at eip=00415F73
eax=902B78A5 ebx=2014EED0 ecx=00000000 edx=00000000 esi=00000000 edi=00000400
ebp=201B7400 esp=00286790 program=C:\Users\Etienne\Downloads\testdisk-6.14\testdisk_win.exe, pid 3636, thread main
cs=0023 ds=002B es=002B fs=0053 gs=002B ss=002B
Stack trace:
Frame     Function  Args
201B7400  00415F73  (B88FA30D, 00000000, 00000000, 00000000)
End of stack trace

Tout est dit, je suis preneur de tout conseil...

Par ailleurs, je pose la question de la compatibilité USB-GPT car j'ai lu ça :
"You cannot use the GPT partition style on removable media" (pour savoir où, comme les liens semblent inconstants, sélectionnez la phrase et faites une recherche dessus).

Par avance merci pour votre aide.
JagV12

#2 Post by **cgrenier** » 23 Feb 2015, 08:21

Pouvez-vous tester avec TestDisk 7.0-WIP ?

JagV12 · #3 Post by **JagV12** » 02 Mar 2015, 08:10

Je viens de faire un essai avec TestDisk 7.0-WIP. Ça ne plante pas. Au bout d'environ deux jours, voici le résultat :

: TestDisk7.0-1; TestDisk7.0-1.png (84.72 KiB) Viewed 3076 times

et le contenu du log :

Code: Select all

Sat Feb 28 11:16:35 2015
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, January 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-02-09T17:11:44
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=214643507200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=535403954176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=214748364800
filewin32_getfilesize(\\.\F:) GetFileSize err Fonction incorrecte.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Fonction incorrecte.

Warning: can't get size for \\.\F:
filewin32_getfilesize(\\.\G:) GetFileSize err Fonction incorrecte.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Fonction incorrecte.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2763289264128
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-9YN166, S/N:2020202020202020202020203157314656444e31, FW:CC4B
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - Hitachi HTS547575A9E384, S/N:202020202020324a39353030343534474c554734, FW:JE4OA40J

Partition table type (auto): EFI GPT
Disk /dev/sda - 3000 GB / 2794 GiB - ST3000DM001-9YN166
Partition table type: EFI GPT

Analyse Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 4 P MS Reserved              1845248    2107391     262144 [Microsoft reserved partition]
check_part_gpt failed for partition
 5 P MS Data                  2107392  421537791  419430400 [Basic data partition]
check_part_gpt failed for partition
 6 P MS Data                421537792 5818587135 5397049344 [Basic data partition]
Current partition structure:
 1 P EFI System                  2048     616447     614400 [EFI system partition]
 2 P Unknown                   616448    1566719     950272 [Basic data partition]
 3 P EFI System               1566720    1771519     204800 [EFI system partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 4 P MS Reserved              1845248    2107391     262144 [Microsoft reserved partition]
 4 P MS Reserved              1845248    2107391     262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 5 P MS Data                  2107392  421537791  419430400 [Basic data partition]
 5 P MS Data                  2107392  421537791  419430400 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 6 P MS Data                421537792 5818587135 5397049344 [Basic data partition]
 6 P MS Data                421537792 5818587135 5397049344 [Basic data partition]
 7 P Unknown               5818589184 5860532223   41943040 [Basic data partition]

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63

HFS+ magic value at 4296/171/5
part_size 1047904176
     Mac HFS                 69026017 1116930192 1047904176
     HFS+ blocksize=4096, 536 GB / 499 GiB

LVM magic value at 77411/144/61
NTFS at 94840/241/57
filesystem size           5397049337
sectors_per_cluster       8
mft_lcn                   20592
mftmirr_lcn               20591
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=780093357568, part_size=2763289260544, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 94840/241/57
filesystem size           5397049337
sectors_per_cluster       8
mft_lcn                   20592
mftmirr_lcn               20591
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1523619839 6920669175 5397049337
     NTFS, blocksize=4096, 2763 GB / 2573 GiB
This partition ends after the disk limits. (start=1523619839, size=5397049337, end=6920669175, disk end=5860533168)

LVM magic value at 128243/124/8

LVM magic value at 129105/21/6

LVM magic value at 129365/18/7

LVM magic value at 145905/8/4

LVM magic value at 150989/245/25
FAT12 at 158596/38/27
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 158596/38/27
     MS Data               2547847160 2547850039       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 158596/201/6
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2547851235 2547857408       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 158596/201/6
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2547857408 2547863581       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
FAT12 at 158597/44/8
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 158597/44/8
     MS Data               2547863584 2547866463       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 158597/89/53
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 158597/89/53
     MS Data               2547866464 2547869343       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 158597/135/35
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 158597/135/35
     MS Data               2547869344 2547872223       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB

LVM magic value at 164003/199/21

LVM magic value at 166150/49/33

LVM magic value at 167345/204/38
NTFS at 170932/249/14
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2746032107 2746038280       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 170932/249/14
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2746038280 2746044453       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 170933/92/32
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2746038299 2746044472       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 170933/92/32
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2746044472 2746050645       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 170933/190/50
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2746044491 2746050664       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 170933/190/50
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2746050664 2746056837       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
FAT12 at 170934/33/52
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 170934/33/52
     MS Data               2746056840 2746059719       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT12 at 170934/79/34
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 170934/79/34
     MS Data               2746059720 2746062599       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB

LVM magic value at 171022/48/15

LVM magic value at 171710/161/57

LVM magic value at 172556/253/56
NTFS at 173459/198/28
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2786625163 2786631336       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 173459/198/28
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               2786631336 2786637509       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB

HFS magic value at 174109/0/55
part_size 556405762
     Mac HFS               2797061139 3353466900  556405762 [T]
     HFS blocksize=16777216, 284 GB / 265 GiB

LVM magic value at 221911/230/53
check_FAT: Bad jump in FAT partition

HFS magic value at 238427/55/52
part_size 2257584170
     Mac HFS               3830333271 6087917440 2257584170
     HFS blocksize=134217728, 1155 GB / 1076 GiB
This partition ends after the disk limits. (start=3830333271, size=2257584170, end=6087917440, disk end=5860533168)

HFS magic value at 238427/55/54
part_size 2257584170
     Mac HFS               1572749105 3830333274 2257584170
     HFS found using backup sector!, 1155 GB / 1076 GiB

SYSV4 Marker at 242932/219/11

recover_sysv4
     Unknown               3902716387 7656100706826722 7656096804110336 [û%å±Š©]
     SysV4, 3919921 TB / 3565147 TiB
Partition not added.
NTFS at 362190/75/54
filesystem size           5397049337
sectors_per_cluster       8
mft_lcn                   20592
mftmirr_lcn               20591
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                421537792 5818587128 5397049337
     NTFS found using backup sector, blocksize=4096, 2763 GB / 2573 GiB
NTFS at 362190/75/54
filesystem size           5397049337
sectors_per_cluster       8
mft_lcn                   20592
mftmirr_lcn               20591
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               5818587128 11215636464 5397049337
     NTFS, blocksize=4096, 2763 GB / 2573 GiB
This partition ends after the disk limits. (start=5818587128, size=5397049337, end=11215636464, disk end=5860533168)
NTFS at 362190/75/61
filesystem size           5397049337
sectors_per_cluster       8
mft_lcn                   20592
mftmirr_lcn               20591
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                421537799 5818587135 5397049337
     NTFS found using backup sector, blocksize=4096, 2763 GB / 2573 GiB
NTFS at 362190/75/61
filesystem size           5397049337
sectors_per_cluster       8
mft_lcn                   20592
mftmirr_lcn               20591
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               5818587135 11215636471 5397049337
     NTFS, blocksize=4096, 2763 GB / 2573 GiB
This partition ends after the disk limits. (start=5818587135, size=5397049337, end=11215636471, disk end=5860533168)
NTFS at 362190/108/23
filesystem size           4977620985
sectors_per_cluster       8
mft_lcn                   18992
mftmirr_lcn               18991
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                840968192 5818589176 4977620985
     NTFS found using backup sector, blocksize=4096, 2548 GB / 2373 GiB
NTFS at 362190/108/23
filesystem size           4977620985
sectors_per_cluster       8
mft_lcn                   18992
mftmirr_lcn               18991
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               5818589176 10796210160 4977620985
     NTFS, blocksize=4096, 2548 GB / 2373 GiB
This partition ends after the disk limits. (start=5818589176, size=4977620985, end=10796210160, disk end=5860533168)
NTFS at 362190/108/30
filesystem size           4977620985
sectors_per_cluster       8
mft_lcn                   18992
mftmirr_lcn               18991
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                840968199 5818589183 4977620985
     NTFS found using backup sector, blocksize=4096, 2548 GB / 2373 GiB
NTFS at 362190/108/30
filesystem size           4977620985
sectors_per_cluster       8
mft_lcn                   18992
mftmirr_lcn               18991
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               5818589183 10796210167 4977620985
     NTFS, blocksize=4096, 2548 GB / 2373 GiB
This partition ends after the disk limits. (start=5818589183, size=4977620985, end=10796210167, disk end=5860533168)
NTFS at 362190/108/31
filesystem size           41943040
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               5776646145 5818589184   41943040
     NTFS found using backup sector, blocksize=4096, 21 GB / 20 GiB
NTFS at 362190/108/31
filesystem size           41943040
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               5818589184 5860532223   41943040
     NTFS, blocksize=4096, 21 GB / 20 GiB
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565566977(364801/98/35)) lseek err Invalid argument
file_pread(4,1,buffer,1565566979(364801/98/37)) lseek err Invalid argument
file_pread(4,1,buffer,1565566980(364801/98/38)) lseek err Invalid argument
file_pread(4,1,buffer,1565566981(364801/98/39)) lseek err Invalid argument
file_pread(4,1,buffer,1565566982(364801/98/40)) lseek err Invalid argument
file_pread(4,1,buffer,1565566983(364801/98/41)) lseek err Invalid argument
file_pread(4,1,buffer,1565566984(364801/98/42)) lseek err Invalid argument
file_pread(4,1,buffer,1565566985(364801/98/43)) lseek err Invalid argument
file_pread(4,1,buffer,1565566986(364801/98/44)) lseek err Invalid argument
file_pread(4,1,buffer,1565566987(364801/98/45)) lseek err Invalid argument
file_pread(4,1,buffer,1565566988(364801/98/46)) lseek err Invalid argument
file_pread(4,1,buffer,1565566989(364801/98/47)) lseek err Invalid argument
file_pread(4,1,buffer,1565566990(364801/98/48)) lseek err Invalid argument
file_pread(4,1,buffer,1565566991(364801/98/49)) lseek err Invalid argument
file_pread(4,1,buffer,1565566992(364801/98/50)) lseek err Invalid argument
file_pread(4,1,buffer,1565566993(364801/98/51)) lseek err Invalid argument
file_pread(4,1,buffer,1565566994(364801/98/52)) lseek err Invalid argument
file_pread(4,1,buffer,1565566995(364801/98/53)) lseek err Invalid argument
file_pread(4,1,buffer,1565566996(364801/98/54)) lseek err Invalid argument
file_pread(4,1,buffer,1565566997(364801/98/55)) lseek err Invalid argument
file_pread(4,1,buffer,1565566998(364801/98/56)) lseek err Invalid argument
file_pread(4,1,buffer,1565566999(364801/98/57)) lseek err Invalid argument
file_pread(4,1,buffer,1565567000(364801/98/58)) lseek err Invalid argument
file_pread(4,1,buffer,1565567001(364801/98/59)) lseek err Invalid argument
file_pread(4,1,buffer,1565567002(364801/98/60)) lseek err Invalid argument
file_pread(4,1,buffer,1565567003(364801/98/61)) lseek err Invalid argument
file_pread(4,1,buffer,1565567004(364801/98/62)) lseek err Invalid argument
file_pread(4,1,buffer,1565567005(364801/98/63)) lseek err Invalid argument
file_pread(4,1,buffer,1565567006(364801/99/1)) lseek err Invalid argument
file_pread(4,1,buffer,1565567007(364801/99/2)) lseek err Invalid argument
file_pread(4,1,buffer,1565567008(364801/99/3)) lseek err Invalid argument
file_pread(4,1,buffer,1565567009(364801/99/4)) lseek err Invalid argument
file_pread(4,1,buffer,1565567010(364801/99/5)) lseek err Invalid argument
file_pread(4,1,buffer,1565567011(364801/99/6)) lseek err Invalid argument
file_pread(4,1,buffer,1565567012(364801/99/7)) lseek err Invalid argument
file_pread(4,1,buffer,1565567013(364801/99/8)) lseek err Invalid argument
file_pread(4,1,buffer,1565567014(364801/99/9)) lseek err Invalid argument
file_pread(4,1,buffer,1565567015(364801/99/10)) lseek err Invalid argument
file_pread(4,1,buffer,1565567016(364801/99/11)) lseek err Invalid argument
file_pread(4,1,buffer,1565567017(364801/99/12)) lseek err Invalid argument
file_pread(4,1,buffer,1565567018(364801/99/13)) lseek err Invalid argument
file_pread(4,1,buffer,1565567019(364801/99/14)) lseek err Invalid argument
file_pread(4,1,buffer,1565567020(364801/99/15)) lseek err Invalid argument
file_pread(4,1,buffer,1565567021(364801/99/16)) lseek err Invalid argument
file_pread(4,1,buffer,1565567022(364801/99/17)) lseek err Invalid argument
file_pread(4,1,buffer,1565567023(364801/99/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565567024(364801/99/19)) lseek err Invalid argument
file_pread(4,1,buffer,1565567025(364801/99/20)) lseek err Invalid argument
file_pread(4,1,buffer,1565567026(364801/99/21)) lseek err Invalid argument
file_pread(4,1,buffer,1565567027(364801/99/22)) lseek err Invalid argument
file_pread(4,1,buffer,1565567028(364801/99/23)) lseek err Invalid argument
file_pread(4,1,buffer,1565567029(364801/99/24)) lseek err Invalid argument
file_pread(4,1,buffer,1565567030(364801/99/25)) lseek err Invalid argument
file_pread(4,1,buffer,1565567031(364801/99/26)) lseek err Invalid argument
file_pread(4,1,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567033(364801/99/28)) lseek err Invalid argument
file_pread(4,1,buffer,1565567034(364801/99/29)) lseek err Invalid argument
file_pread(4,1,buffer,1565567035(364801/99/30)) lseek err Invalid argument
file_pread(4,1,buffer,1565567036(364801/99/31)) lseek err Invalid argument
file_pread(4,1,buffer,1565567037(364801/99/32)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567040(364801/99/35)) lseek err Invalid argument
file_pread(4,1,buffer,1565567041(364801/99/36)) lseek err Invalid argument
file_pread(4,1,buffer,1565567042(364801/99/37)) lseek err Invalid argument
file_pread(4,1,buffer,1565567043(364801/99/38)) lseek err Invalid argument
file_pread(4,1,buffer,1565567044(364801/99/39)) lseek err Invalid argument
file_pread(4,1,buffer,1565567045(364801/99/40)) lseek err Invalid argument
file_pread(4,1,buffer,1565567046(364801/99/41)) lseek err Invalid argument
file_pread(4,1,buffer,1565567047(364801/99/42)) lseek err Invalid argument
file_pread(4,1,buffer,1565567048(364801/99/43)) lseek err Invalid argument
file_pread(4,1,buffer,1565567049(364801/99/44)) lseek err Invalid argument
file_pread(4,1,buffer,1565567050(364801/99/45)) lseek err Invalid argument
file_pread(4,1,buffer,1565567051(364801/99/46)) lseek err Invalid argument
file_pread(4,1,buffer,1565567052(364801/99/47)) lseek err Invalid argument
file_pread(4,1,buffer,1565567053(364801/99/48)) lseek err Invalid argument
file_pread(4,1,buffer,1565567054(364801/99/49)) lseek err Invalid argument
file_pread(4,1,buffer,1565567055(364801/99/50)) lseek err Invalid argument
file_pread(4,1,buffer,1565567056(364801/99/51)) lseek err Invalid argument
file_pread(4,1,buffer,1565567057(364801/99/52)) lseek err Invalid argument
file_pread(4,1,buffer,1565567058(364801/99/53)) lseek err Invalid argument
...
file_pread(4,1,buffer,1565567637(364801/109/2)) lseek err Invalid argument
file_pread(4,1,buffer,1565567638(364801/109/3)) lseek err Invalid argument
file_pread(4,1,buffer,1565567639(364801/109/4)) lseek err Invalid argument
file_pread(4,1,buffer,1565567640(364801/109/5)) lseek err Invalid argument
file_pread(4,1,buffer,1565567641(364801/109/6)) lseek err Invalid argument
file_pread(4,1,buffer,1565567642(364801/109/7)) lseek err Invalid argument
file_pread(4,1,buffer,1565567643(364801/109/8)) lseek err Invalid argument
file_pread(4,1,buffer,1565567644(364801/109/9)) lseek err Invalid argument
file_pread(4,1,buffer,1565567645(364801/109/10)) lseek err Invalid argument
file_pread(4,1,buffer,1565567646(364801/109/11)) lseek err Invalid argument
file_pread(4,1,buffer,1565567647(364801/109/12)) lseek err Invalid argument
file_pread(4,1,buffer,1565567648(364801/109/13)) lseek err Invalid argument
file_pread(4,1,buffer,1565567649(364801/109/14)) lseek err Invalid argument
file_pread(4,1,buffer,1565567650(364801/109/15)) lseek err Invalid argument
file_pread(4,1,buffer,1565567651(364801/109/16)) lseek err Invalid argument
file_pread(4,1,buffer,1565567652(364801/109/17)) lseek err Invalid argument
file_pread(4,1,buffer,1565567653(364801/109/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565567654(364801/109/19)) lseek err Invalid argument
file_pread(4,1,buffer,1565567655(364801/109/20)) lseek err Invalid argument
file_pread(4,1,buffer,1565567656(364801/109/21)) lseek err Invalid argument
file_pread(4,1,buffer,1565567657(364801/109/22)) lseek err Invalid argument
file_pread(4,1,buffer,1565567658(364801/109/23)) lseek err Invalid argument
file_pread(4,1,buffer,1565567659(364801/109/24)) lseek err Invalid argument
file_pread(4,1,buffer,1565567660(364801/109/25)) lseek err Invalid argument
file_pread(4,1,buffer,1565567661(364801/109/26)) lseek err Invalid argument
file_pread(4,1,buffer,1565567662(364801/109/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567663(364801/109/28)) lseek err Invalid argument
file_pread(4,1,buffer,1565567664(364801/109/29)) lseek err Invalid argument
file_pread(4,1,buffer,1565567665(364801/109/30)) lseek err Invalid argument
file_pread(4,1,buffer,1565567666(364801/109/31)) lseek err Invalid argument
file_pread(4,1,buffer,1565567667(364801/109/32)) lseek err Invalid argument
file_pread(4,1,buffer,1565567668(364801/109/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567669(364801/109/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567670(364801/109/35)) lseek err Invalid argument
file_pread(4,1,buffer,1565567671(364801/109/36)) lseek err Invalid argument
file_pread(4,1,buffer,1565567672(364801/109/37)) lseek err Invalid argument
file_pread(4,1,buffer,1565567673(364801/109/38)) lseek err Invalid argument
file_pread(4,1,buffer,1565567674(364801/109/39)) lseek err Invalid argument
file_pread(4,1,buffer,1565567675(364801/109/40)) lseek err Invalid argument
file_pread(4,1,buffer,1565567676(364801/109/41)) lseek err Invalid argument
file_pread(4,1,buffer,1565567677(364801/109/42)) lseek err Invalid argument
file_pread(4,1,buffer,1565567678(364801/109/43)) lseek err Invalid argument
file_pread(4,1,buffer,1565567679(364801/109/44)) lseek err Invalid argument
file_pread(4,1,buffer,1565567680(364801/109/45)) lseek err Invalid argument
file_pread(4,1,buf

J'ai amputé le fichier log d'une partie de son contenu au milieu (là où se trouvent les ...) pour rester sous la limite des 60 000 caractères mais la fin est authentique (interruption brutale du fichier bien que TestDisk fonctionne encore). Le fichier fait 68Ko mais je ne peux pas le mettre en pièce jointe car les extensions log ou txt ne sont pas autorisées. Je peux l'envoyer par mail (MP) si nécessaire.

Que puis-je faire à partir de là ?

Merci pour vos réponses.
JagV12

JagV12 · #4 Post by **JagV12** » 07 Mar 2015, 19:39

Aucune réponse...

Quelqu'un a-t-il des suggestions à faire ?

cgsecurity.org

Partition disparue passée en RAW, TestDisk plante

Partition disparue passée en RAW, TestDisk plante

Re: Partition disparue passée en RAW, TestDisk plante

Re: Partition disparue passée en RAW, TestDisk plante

Re: Partition disparue passée en RAW, TestDisk plante