I am tying to fix a partition than became "RAW" and since I'm not an expert I was trying to follow the tutorial TestDisk Step by Step
Before the analysis I can see all the partitions and the corrupted one is marked as Invalid NTFS or EXFAT Boot : But after a quick and a deep search this partition does not appear anymore :
Moreover I had this message after each search concerning the number of head per cylindre :
The data that I could loose if I make a mistake are very important for me so I am affraid to do anyting that is not on the tutorial. Is there a way to get this partition back and what should I try ?
I thank in advance those who can help me.
Regards,
Fayçal.
PS : Here is the log file
Code: Select all
Tue May 12 10:35:16 2015
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=137517596672
filewin32_getfilesize(\\.\D:) GetFileSize err Fonction incorrecte.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Fonction incorrecte.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=111708995584
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1074790400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=448663552
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=733123444736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=2147483648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=13801357312
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512
Drive C: - 137 GB / 128 GiB - CHS 16718 255 63, sector size=512
Drive E: - 111 GB / 104 GiB - CHS 13581 255 63, sector size=512
Drive F: - 1074 MB / 1025 MiB - CHS 130 255 63, sector size=512
Drive G: - 448 MB / 427 MiB - CHS 106 64 32, sector size=2048
Drive H: - 733 GB / 682 GiB - CHS 89130 255 63, sector size=512
Drive I: - 2147 MB / 2048 MiB - CHS 261 255 63, sector size=512
Drive J: - 13 GB / 12 GiB - CHS 1677 255 63, sector size=512
Partition table type default to None
Drive H: - 733 GB / 682 GiB
Partition table type: Intel
Analyse Drive H: - 733 GB / 682 GiB - CHS 89130 255 63
Current partition structure:
Partition sector doesn't have the endmark 0xAA55
search_part()
Drive H: - 733 GB / 682 GiB - CHS 89130 255 63
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Partition table type (auto): Intel
Disk /dev/sdb - 750 GB / 698 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
check_part_i386 failed for partition type 07
NTFS at 89261/79/35
FAT32 at 90939/59/1
Info: size boot_sector 4194304, partition 4194304
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Current partition structure:
1 * HPFS - NTFS 0 32 33 130 203 9 2099200
Invalid NTFS or EXFAT boot
2 P HPFS - NTFS 130 203 10 89261 79 34 1431881728
2 P HPFS - NTFS 130 203 10 89261 79 34 1431881728
3 P HPFS - NTFS 89261 79 35 90939 58 63 26955776
4 P FAT32 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
search_part()
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 2099200
sectors_per_cluster 8
mft_lcn 87466
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
NTFS at 89261/79/35
filesystem size 26955776
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
FAT32 at 90939/59/1
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
FAT32 at 90939/59/1
FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
file_pread(5,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(5,14,buffer,1465149441(91201/85/22)) lseek err Invalid argument
file_pread(5,3,buffer,1465149455(91201/85/36)) lseek err Invalid argument
file_pread(5,3,buffer,1465149502(91201/86/20)) lseek err Invalid argument
file_pread(5,8,buffer,1465149518(91201/86/36)) lseek err Invalid argument
file_pread(5,11,buffer,1465149565(91201/87/20)) lseek err Invalid argument
file_pread(5,2,buffer,1465151487(91201/117/52)) lseek err Invalid argument
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
Results
* HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
P HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
dir_partition inode=5
* HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
Directory /
5 dr-xr-xr-x 0 0 0 12-May-2015 09:32 .
5 dr-xr-xr-x 0 0 0 12-May-2015 09:32 ..
121 dr-xr-xr-x 0 0 0 12-May-2015 09:32 $RECYCLE.BIN
36 dr-xr-xr-x 0 0 0 11-May-2015 18:30 Boot
99 dr-xr-xr-x 0 0 0 20-Oct-2014 16:35 Recovery
97 dr-xr-xr-x 0 0 0 12-May-2015 09:31 System Volume Information
109 dr-xr-xr-x 0 0 0 11-May-2015 18:20 Temp
35 -r--r--r-- 0 0 0 25-Jun-2014 09:39 SYSTEM
86 -r--r--r-- 0 0 383786 21-Nov-2010 04:23 bootmgr
NTFS Volume is dirty.
dir_partition inode=5
P HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
Directory /
5 dr-xr-xr-x 0 0 0 20-Apr-2015 08:39 .
5 dr-xr-xr-x 0 0 0 20-Apr-2015 08:39 ..
90 dr-xr-xr-x 0 0 0 20-Oct-2014 16:36 $RECYCLE.BIN
68 dr-xr-xr-x 0 0 0 14-Oct-2014 19:52 FIRTOOLS
77 dr-xr-xr-x 0 0 0 14-Oct-2014 19:52 SYSTEM.SAV
88 dr-xr-xr-x 0 0 0 12-May-2015 09:44 System Volume Information
105 dr-xr-xr-x 0 0 0 22-Oct-2014 10:41 WinMagic
40 dr-xr-xr-x 0 0 0 20-Oct-2014 16:36 boot
54 dr-xr-xr-x 0 0 0 14-Oct-2014 19:52 efi
73 dr-xr-xr-x 0 0 0 14-Oct-2014 23:58 sources
36 -r--r--r-- 0 0 0 14-Oct-2014 18:50 1
35 -r--r--r-- 0 0 0 14-Oct-2014 19:52 HP_RECOVERY
112 -r--r--r-- 0 0 27 14-Nov-2014 01:03 HP_WINRE
106 -r--r--r-- 0 0 51458048 22-Oct-2014 16:42 WinMagicSECURDOC.WMG
37 -r--r--r-- 0 0 383786 20-Nov-2010 07:40 bootmgr
38 -r--r--r-- 0 0 669568 20-Nov-2010 08:33 bootmgr.efi
39 -r--r--r-- 0 0 19622 14-Oct-2014 19:32 wpeinit.log
dir_partition inode=0
P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
FAT: cluster=2(0x2), pos=1460955136
Directory /
0 -rwxr-xr-x 0 0 0 14-Oct-2014 08:47 HP_TOOLS
3 drwxr-xr-x 0 0 0 14-Oct-2014 09:32 $RECYCLE.BIN
5 drwxr-xr-x 0 0 0 11-May-2015 09:25 Hewlett-Packard
X 8751 drwxr-xr-x 0 0 4096 20-Apr-2015 08:39 MSIf5044.tmp
X 8751 drwxr-xr-x 0 0 4096 17-Apr-2015 13:26 926c702b-cce8
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c62.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c69.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c70.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:51 MSI58c77.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c7e.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c85.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c8d.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c95.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58c9d.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:52 MSI58ca4.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cac.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cb3.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cbb.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 09:53 MSI58cc4.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:02 _231462_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:02 MSI58ccc.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:05 _398274_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:05 _SI27929.TMP
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:07 MSI485f5.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:08 MSI485fc.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:08 MSI485ff.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:09 52af24c9-0f86-4ca0-afd7-498bf8a361fd
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:10 MSI4860b.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:13 _894263_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:13 MSIa0226.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:14 _961047_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:14 MSIb0aae.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:17 22cf31ed-b258-4ff0-941c-ccce658282bb
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:17 MSId8c6b.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:23 _469299_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:23 MSI2df1c.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:24 _573601_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:24 MSI463e5.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:38 9c62e1bf-c44b-4cde-88ea-beb7d8a31805
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:38 _SI9013.TMP
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:41 06b6d4cf-badb-4273-aec8-03fd9d7d67b1
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:41 MSI3cdce.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:42 _650897_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:42 MSI4d2ce.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:48 7bdbe341-eefa-4c34-ad2b-f9676b8c3f53
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:48 MSI9ed6f.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:50 _108495_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 10:50 MSIbcd13.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:11 _620603_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:13 _778491_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc2484.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc2487.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc2494.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:31 MSIc24c0.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:32 MSIc2525.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:37 _170675_
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:37 MSIc2599.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:39 MSI39c71.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:39 MSI39c74.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:40 6750da52-e6ec-4caa-8f57-1077ae834103
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:41 MSI39cb3.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:44 MSI39fd8.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 11:45 _SI90437.TMP
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 12:17 MSIfa40f.tmp
X 6328 drwxr-xr-x 0 0 4096 21-Oct-2014 12:46 MSI3f653.tmp
interface_write()
1 * HPFS - NTFS 0 32 33 130 203 9 2099200
2 P HPFS - NTFS 89261 79 35 90939 58 63 26955776
3 P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
search_part()
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63
NTFS at 0/32/33
filesystem size 2099200
sectors_per_cluster 8
mft_lcn 87466
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
NTFS at 130/203/9
filesystem size 2099200
sectors_per_cluster 8
mft_lcn 87466
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS found using backup sector, blocksize=4096, 1074 MB / 1025 MiB
NTFS at 89261/79/35
filesystem size 26955776
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
NTFS at 90939/58/63
filesystem size 26955776
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS found using backup sector, blocksize=4096, 13 GB / 12 GiB
FAT32 at 90939/59/1
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
FAT32 at 90939/59/1
FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
FAT32 at 90939/59/7
FAT1 : 8222-12302
FAT2 : 12303-16383
start_rootdir : 16384 root cluster : 2
Data : 16384-4194303
sectors : 4194304
cluster_size : 8
no_of_cluster : 522240 (2 - 522241)
fat_length 4081 calculated 4081
set_FAT_info: name from BS used
FAT32 at 90939/59/7
FAT32 LBA 90939 59 1 91200 80 16 4194304 [NO NAME]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
file_pread(5,2,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149440(91201/85/21)) lseek err Invalid argument
file_pread(5,1,buffer,1465149439(91201/85/20)) lseek err Invalid argument
file_pread(5,14,buffer,1465149441(91201/85/22)) lseek err Invalid argument
file_pread(5,3,buffer,1465149455(91201/85/36)) lseek err Invalid argument
file_pread(5,3,buffer,1465149502(91201/86/20)) lseek err Invalid argument
file_pread(5,8,buffer,1465149518(91201/86/36)) lseek err Invalid argument
file_pread(5,11,buffer,1465149565(91201/87/20)) lseek err Invalid argument
file_pread(5,2,buffer,1465151487(91201/117/52)) lseek err Invalid argument
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
Results
* HPFS - NTFS 0 32 33 130 203 9 2099200
NTFS, blocksize=4096, 1074 MB / 1025 MiB
P HPFS - NTFS 89261 79 35 90939 58 63 26955776
NTFS, blocksize=4096, 13 GB / 12 GiB
P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]
FAT32, blocksize=4096, 2147 MB / 2048 MiB
interface_write()
1 * HPFS - NTFS 0 32 33 130 203 9 2099200
2 P HPFS - NTFS 89261 79 35 90939 58 63 26955776
3 P FAT32 LBA 90939 59 1 91200 80 16 4194304 [HP_TOOLS]