Je tente de récupérer une partition devenue RAW, et n'étant pas un expert j'essaie de suivre le tuto TestDisk Etape par Etape.
Avant l'analyse j'ai bien la liste des partitions avec celle qui est défectueuse : Mais après un quick search et même un deep search cette partition n'apparait pas :
A noter que j'ai un message concernant le nombre de tête par cylindre :
Les données qui sont en jeu sont très importantes pour moi et je n'ose pas faire n'importe quoi et sortir du cadre du tuto. Y a-t-il un moyen de les récupérer et comment faire ?
Merci d'avance aux personnes qui pourront m'aider.
Cordialement,
Fayçal.
PS : voici le fichier log
Code: Select all
Tue May 12 10:35:16 2015
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=137517596672
filewin32_getfilesize(\\.\D:) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=111708995584
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1074790400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=448663552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=733123444736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=2147483648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=13801357312
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512
Drive C: - 137 GB / 128 GiB - CHS 16718 255 63, sector size=512
Drive E: - 111 GB / 104 GiB - CHS 13581 255 63, sector size=512
Drive F: - 1074 MB / 1025 MiB - CHS 130 255 63, sector size=512
Drive G: - 448 MB / 427 MiB - CHS 106 64 32, sector size=2048
Drive H: - 733 GB / 682 GiB - CHS 89130 255 63, sector size=512
Drive I: - 2147 MB / 2048 MiB - CHS 261 255 63, sector size=512
Drive J: - 13 GB / 12 GiB - CHS 1677 255 63, sector size=512
Partition table type default to None
Drive H: - 733 GB / 682 GiB
Partition table type: Intel
Analyse Drive H: - 733 GB / 682 GiB - CHS 89130 255 63
Current partition structure:
Partition sector doesn't have the endmark 0xAA55
search_part()
Drive H: - 733 GB / 682 GiB - CHS 89130 255 63
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Partition table type (auto): Intel
Disk /dev/sdb - 750 GB / 698 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
check_part_i386 failed for partition type 07
NTFS at 89261/79/35
FAT32 at 90939/59/1
Info: size boot_sector 4194304, partition 4194304
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Current partition structure:
1 * HPFS - NTFS 0 32 33 130 203 9 2099200
Invalid NTFS or EXFAT boot
2 P HPFS - NTFS 130 203 10 89261 79 34 1431881728
2 P HPFS - NTFS 130 203 10 89261 79 34 1431881728
3 P HPFS - NTFS 89261 79 35 90939 58 63 26955776
4 P FAT32 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
search_part()
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 2099200
sectors_per_cluster 8
mft_lcn 87466
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
NTFS at 89261/79/35
filesystem size 26955776
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
FAT32 at 90939/59/1
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
FAT32 at 90939/59/1
FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
file_pread(5,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(5,14,buffer,1465149441(91201/85/22)) lseek err Invalid argument
file_pread(5,3,buffer,1465149455(91201/85/36)) lseek err Invalid argument
file_pread(5,3,buffer,1465149502(91201/86/20)) lseek err Invalid argument
file_pread(5,8,buffer,1465149518(91201/86/36)) lseek err Invalid argument
file_pread(5,11,buffer,1465149565(91201/87/20)) lseek err Invalid argument
file_pread(5,2,buffer,1465151487(91201/117/52)) lseek err Invalid argument
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
Results
* HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
P HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
dir_partition inode=5
* HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
Directory /
5 dr-xr-xr-x 0 0 0 12-May-2015 09:32 .
5 dr-xr-xr-x 0 0 0 12-May-2015 09:32 ..
121 dr-xr-xr-x 0 0 0 12-May-2015 09:32 $RECYCLE.BIN
36 dr-xr-xr-x 0 0 0 11-May-2015 18:30 Boot
99 dr-xr-xr-x 0 0 0 20-Oct-2014 16:35 Recovery
97 dr-xr-xr-x 0 0 0 12-May-2015 09:31 System Volume Information
109 dr-xr-xr-x 0 0 0 11-May-2015 18:20 Temp
35 -r--r--r-- 0 0 0 25-Jun-2014 09:39 SYSTEM
86 -r--r--r-- 0 0 383786 21-Nov-2010 04:23 bootmgr
NTFS Volume is dirty.
dir_partition inode=5
P HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
Directory /
5 dr-xr-xr-x 0 0 0 20-Apr-2015 08:39 .
5 dr-xr-xr-x 0 0 0 20-Apr-2015 08:39 ..
90 dr-xr-xr-x 0 0 0 20-Oct-2014 16:36 $RECYCLE.BIN
68 dr-xr-xr-x 0 0 0 14-Oct-2014 19:52 FIRTOOLS
77 dr-xr-xr-x 0 0 0 14-Oct-2014 19:52 SYSTEM.SAV
88 dr-xr-xr-x 0 0 0 12-May-2015 09:44 System Volume Information
105 dr-xr-xr-x 0 0 0 22-Oct-2014 10:41 WinMagic
40 dr-xr-xr-x 0 0 0 20-Oct-2014 16:36 boot
54 dr-xr-xr-x 0 0 0 14-Oct-2014 19:52 efi
73 dr-xr-xr-x 0 0 0 14-Oct-2014 23:58 sources
36 -r--r--r-- 0 0 0 14-Oct-2014 18:50 1
35 -r--r--r-- 0 0 0 14-Oct-2014 19:52 HP_RECOVERY
112 -r--r--r-- 0 0 27 14-Nov-2014 01:03 HP_WINRE
106 -r--r--r-- 0 0 51458048 22-Oct-2014 16:42 WinMagicSECURDOC.WMG
37 -r--r--r-- 0 0 383786 20-Nov-2010 07:40 bootmgr
38 -r--r--r-- 0 0 669568 20-Nov-2010 08:33 bootmgr.efi
39 -r--r--r-- 0 0 19622 14-Oct-2014 19:32 wpeinit.log
dir_partition inode=0
P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
FAT: cluster=2(0x2), pos=1460955136
Directory /
0 -rwxr-xr-x 0 0 0 14-Oct-2014 08:47 HP_TOOLS
3 drwxr-xr-x 0 0 0 14-Oct-2014 09:32 $RECYCLE.BIN
5 drwxr-xr-x 0 0 0 11-May-2015 09:25 Hewlett-Packard
X 8751 drwxr-xr-x 0 0 4096 20-Apr-2015 08:39 MSIf5044.tmp
X 8751 drwxr-xr-x 0 0 4096 17-Apr-2015 13:26 926c702b-cce8
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c62.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c69.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c70.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c77.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c7e.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c85.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c8d.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c95.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c9d.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58ca4.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cac.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cb3.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cbb.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cc4.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:02 _231462_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:02 MSI58ccc.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:05 _398274_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:05 _SI27929.TMP
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:07 MSI485f5.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:08 MSI485fc.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:08 MSI485ff.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:09 52af24c9-0f86-4ca0-afd7-498bf8a361fd
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:10 MSI4860b.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:13 _894263_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:13 MSIa0226.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:14 _961047_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:14 MSIb0aae.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:17 22cf31ed-b258-4ff0-941c-ccce658282bb
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:17 MSId8c6b.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:23 _469299_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:23 MSI2df1c.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:24 _573601_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:24 MSI463e5.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:38 9c62e1bf-c44b-4cde-88ea-beb7d8a31805
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:38 _SI9013.TMP
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:41 06b6d4cf-badb-4273-aec8-03fd9d7d67b1
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:41 MSI3cdce.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:42 _650897_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:42 MSI4d2ce.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:48 7bdbe341-eefa-4c34-ad2b-f9676b8c3f53
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:48 MSI9ed6f.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:50 _108495_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:50 MSIbcd13.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:11 _620603_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:13 _778491_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc2484.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc2487.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc2494.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc24c0.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:32 MSIc2525.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:37 _170675_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:37 MSIc2599.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:39 MSI39c71.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:39 MSI39c74.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:40 6750da52-e6ec-4caa-8f57-1077ae834103
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:41 MSI39cb3.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:44 MSI39fd8.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:45 _SI90437.TMP
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 12:17 MSIfa40f.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 12:46 MSI3f653.tmp
interface_write()
1 * HPFS - NTFS 0 32 33 130 203 9 2099200
2 P HPFS - NTFS 89261 79 35 90939 58 63 26955776
3 P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
search_part()
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 2099200
sectors_per_cluster 8
mft_lcn 87466
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
NTFS at 130/203/9
filesystem size 2099200
sectors_per_cluster 8
mft_lcn 87466
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS found using backup sector, blocksize=4096, 1074 MB / 1025 MiB
NTFS at 89261/79/35
filesystem size 26955776
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
NTFS at 90939/58/63
filesystem size 26955776
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS found using backup sector, blocksize=4096, 13 GB / 12 GiB
FAT32 at 90939/59/1
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
FAT32 at 90939/59/1
FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
FAT32 at 90939/59/7
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
set_FAT_info: name from BS used
FAT32 at 90939/59/7
FAT32 LBA 90939 59 1 91200 80 16 4194304 [NO NAME]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
file_pread(5,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(5,14,buffer,1465149441(91201/85/22)) lseek err Invalid argument
file_pread(5,3,buffer,1465149455(91201/85/36)) lseek err Invalid argument
file_pread(5,3,buffer,1465149502(91201/86/20)) lseek err Invalid argument
file_pread(5,8,buffer,1465149518(91201/86/36)) lseek err Invalid argument
file_pread(5,11,buffer,1465149565(91201/87/20)) lseek err Invalid argument
file_pread(5,2,buffer,1465151487(91201/117/52)) lseek err Invalid argument
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
Results
* HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
P HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
interface_write()
1 * HPFS - NTFS 0 32 33 130 203 9 2099200
2 P HPFS - NTFS 89261 79 35 90939 58 63 26955776
3 P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]