cgsecurity.org

TestDisk & PhotoRec forum
https://forum.cgsecurity.org/phpBB3/

can't recover partition, disk seems too small

https://forum.cgsecurity.org/phpBB3/viewtopic.php?t=9840

Page 1 of 1

can't recover partition, disk seems too small

Posted: 14 Feb 2020, 19:57
by Nimbuzz
After running Tesdisk I can't recover the lost partition (Volumename "Media 3"). It says the disk is too small. The data from the other partitions have been backup up on another harddrive, those partitions may be deleted. Can anyone help me recover the partition "Media 3"?



Output from the log file:

Code: Select all

Mon Feb  3 15:48:54 2020
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511433506816
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2000395723264
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=107373133824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=1876797947904
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-1CH166, S/N:W1F4K0KL, FW:CC27
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - SAMSUNG HD204UI, S/N:S2H7JD2ZC00621, FW:1AQ10001
Disk /dev/sdc - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - ST4000VN008-2DR166, S/N:WDH1VE0S, FW:SC60
Disk /dev/sdd - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - ADATA SX6000PNP, S/N:0000_0000_0100_0000_4CE0_0018_DD8C_9084., FW:V9001c27
Disk /dev/sde - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST320005 42AS, S/N:801130168383

Partition table type (auto): Intel
Disk /dev/sda - 3000 GB / 2794 GiB - ST3000DM001-1CH166
Partition table type: Intel

Analyse Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 39174/253/56
Info: size boot_sector 3665620985, partition 3665620992
Current partition structure:
 1 * HPFS - NTFS              0  32 33    12 223 19     204800

Bad sector count.
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
 3 P HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 12     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 13066 233 24  209713145 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 32 39174 253 48  419426297 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 56 267349  88 60 3665620985 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
BAD_RS LBA=6144 2048
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 38 364801  65 57 1565558777 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
file_pread(4,2,buffer,1565566969(364801/98/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565566969(364801/98/27)) lseek err Invalid argument
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1571677525(365181/191/24)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB
This partition ends after the disk limits. (start=5860532223, size=1565558777, end=7426090999, disk end=5860533168)
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1565565959(364801/82/25)) lseek err Invalid argument
file_pread(4,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(4,7,buffer,1565566088(364801/84/28)) lseek err Invalid argument
file_pread(4,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(4,7,buffer,1565566216(364801/86/30)) lseek err Invalid argument
file_pread(4,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(4,7,buffer,1565566344(364801/88/32)) lseek err Invalid argument
file_pread(4,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(4,7,buffer,1565566472(364801/90/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(4,7,buffer,1565566600(364801/92/36)) lseek err Invalid argument
file_pread(4,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(4,7,buffer,1565566728(364801/94/38)) lseek err Invalid argument
file_pread(4,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(4,7,buffer,1565566856(364801/96/40)) lseek err Invalid argument
file_pread(4,8,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566984(364801/98/42)) lseek err Invalid argument
file_pread(4,3,buffer,1565566992(364801/98/50)) lseek err Invalid argument
file_pread(4,3,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565567055(364801/99/50)) lseek err Invalid argument
file_pread(4,11,buffer,1565567102(364801/100/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565569024(364801/131/3)) lseek err Invalid argument
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 3802 GB / 3541 GiB)
The following partition can't be recovered:
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB

Results
     HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
     HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 12     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/19
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 40    12 223 19     204793
     NTFS found using backup sector, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 13066 233 24  209713145 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/31
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 27 13066 233 31  209713145
     NTFS found using backup sector, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 32 39174 253 48  419426297 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/55
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 39 39174 253 55  419426297
     NTFS found using backup sector, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 56 267349  88 60 3665620985 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
BAD_RS LBA=6144 2048
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 38 364801  65 57 1565558777 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
file_pread(4,2,buffer,1565566969(364801/98/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565566969(364801/98/27)) lseek err Invalid argument
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1571677525(365181/191/24)) lseek err Invalid argument
file_pread(4,1,buffer,1571677525(365181/191/24)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB
This partition ends after the disk limits. (start=5860532223, size=1565558777, end=7426090999, disk end=5860533168)
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1565565959(364801/82/25)) lseek err Invalid argument
file_pread(4,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(4,7,buffer,1565566088(364801/84/28)) lseek err Invalid argument
file_pread(4,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(4,7,buffer,1565566216(364801/86/30)) lseek err Invalid argument
file_pread(4,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(4,7,buffer,1565566344(364801/88/32)) lseek err Invalid argument
file_pread(4,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(4,7,buffer,1565566472(364801/90/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(4,7,buffer,1565566600(364801/92/36)) lseek err Invalid argument
file_pread(4,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(4,7,buffer,1565566728(364801/94/38)) lseek err Invalid argument
file_pread(4,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(4,7,buffer,1565566856(364801/96/40)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 12/223/12
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 12/223/19
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 13066/233/24
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 13066/233/31
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 39174/253/48
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 39174/253/55
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 3802 GB / 3541 GiB)
The following partition can't be recovered:
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB

Results
     HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
     HPFS - NTFS              0  32 40    12 223 19     204793
     NTFS found using backup sector, blocksize=4096, 104 MB / 99 MiB
     HPFS - NTFS             12 223 12    25 158 54     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
     HPFS - NTFS             12 223 19    25 158 61     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
     HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS             12 223 27 13066 233 31  209713145
     NTFS found using backup sector, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 24 26120 243 28  209713145
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 31 26120 243 35  209713145
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          13066 233 39 39174 253 55  419426297
     NTFS found using backup sector, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 48 65283  19  1  419426297
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 55 65283  19  8  419426297
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

Re: can't recover partition, disk seems too small

Posted: 15 Feb 2020, 08:24
by cgrenier
After Quick Search, use the arrow keys to switch the partitions from D(eleted) to *(bootable) or P(rimary) to get

Code: Select all

  *  HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
  P  HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
  D  HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
  P  HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
  P  HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
  D  HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
On next screen, choose Write, confirm, Quit and restart your computer.

Re: can't recover partition, disk seems too small

Posted: 18 Feb 2020, 19:57
by Nimbuzz
Hi,

I had to fiddle around a bit. I got the warning that the MBR was bad. So I did a rebuild. It still din't work. When I did mark the partition as logical / extended I got it fixed.

So thanks for pointing me in the right direction. :D 8-)

To complete my post here is the log file:

Code: Select all


Mon Feb 17 19:59:48 2020
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
Error reading $MFT: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
Error reading $MFT: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Error reading $MFT: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
Error reading $MFT: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511433506816
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=214746267648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=4000768327680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=107373133824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=801566093824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=2000395723264
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-1CH166, S/N:W1F4K0KL, FW:CC27
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - WDC WD40EZRZ-00GXCB0, S/N:WD-WCC7K0XDEV0C, FW:80.00A80
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - SAMSUNG HD204UI, S/N:S2H7JD2ZC00621, FW:1AQ10001
Disk /dev/sdd - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - ST4000VN008-2DR166, S/N:WDH1VE0S, FW:SC60
Disk /dev/sde - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - ADATA SX6000PNP, S/N:0000_0000_0100_0000_4CE0_0018_DD8C_9084., FW:V9001c27
Disk /dev/sdf - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST320005 42AS, S/N:801130168383

Partition table type (auto): Intel
Disk /dev/sda - 3000 GB / 2794 GiB - ST3000DM001-1CH166
Partition table type: Intel
Partition table type (auto): Intel
Disk /dev/sda - 3000 GB / 2794 GiB - ST3000DM001-1CH166
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
check_part_i386 failed for partition type 07
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777


dir_partition inode=5
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
Directory /
       5 dr-xr-xr-x     0      0         0  5-Feb-2020 18:07 .
       5 dr-xr-xr-x     0      0         0  5-Feb-2020 18:07 ..
     101 dr-xr-xr-x     0      0         0 30-Jan-2020 21:12 $RECYCLE.BIN
      35 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 Boot
     105 dr-xr-xr-x     0      0         0 31-Jan-2020 03:52 Recovery
      97 dr-xr-xr-x     0      0         0 30-Jan-2020 21:09 System Volume Information
     100 -r--r--r--     0      0      3206  4-Feb-2013 23:27 ActiveDiskImage.log
      96 -r--r--r--     0      0      8192 16-Jan-2011 21:34 BOOTSECT.BAK
      85 -r--r--r--     0      0    383786 20-Nov-2010 13:40 bootmgr

dir_partition inode=35
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
Directory /Boot
      35 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 .
       5 dr-xr-xr-x     0      0         0  5-Feb-2020 18:07 ..
      86 dr-xr-xr-x     0      0         0 16-Jan-2011 21:34 Fonts
      37 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 cs-CZ
      39 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 da-DK
      41 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 de-DE
      43 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 el-GR
      45 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 en-US
      47 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 es-ES
      49 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 fi-FI
      51 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 fr-FR
      53 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 hu-HU
      55 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 it-IT
      57 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 ja-JP
      59 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 ko-KR
      62 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 nb-NO
      64 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 nl-NL
      67 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 pl-PL
      69 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 pt-BR
      71 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 pt-PT
      73 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 ru-RU
      75 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 sv-SE
      77 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 tr-TR
      79 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 zh-CN
      81 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 zh-HK
      83 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 zh-TW
      92 -r--r--r--     0      0     28672 28-Dec-2018 20:40 BCD
      93 -r--r--r--     0      0     25600 28-Dec-2018 20:40 BCD.LOG
      94 -r--r--r--     0      0         0 16-Jan-2011 21:34 BCD.LOG1
      95 -r--r--r--     0      0         0 16-Jan-2011 21:34 BCD.LOG2
      36 -r--r--r--     0      0     65536 16-Jan-2011 21:34 BOOTSTAT.DAT
      61 -r--r--r--     0      0    509672 14-Jun-2016 17:25 memtest.exe
Directory /
       5 dr-xr-xr-x     0      0         0  5-Feb-2020 18:07 .
       5 dr-xr-xr-x     0      0         0  5-Feb-2020 18:07 ..
     101 dr-xr-xr-x     0      0         0 30-Jan-2020 21:12 $RECYCLE.BIN
      35 dr-xr-xr-x     0      0         0 20-Jun-2017 07:07 Boot
     105 dr-xr-xr-x     0      0         0 31-Jan-2020 03:52 Recovery
      97 dr-xr-xr-x     0      0         0 30-Jan-2020 21:09 System Volume Information
     100 -r--r--r--     0      0      3206  4-Feb-2013 23:27 ActiveDiskImage.log
      96 -r--r--r--     0      0      8192 16-Jan-2011 21:34 BOOTSECT.BAK
      85 -r--r--r--     0      0    383786 20-Nov-2010 13:40 bootmgr


dir_partition inode=5
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 15-Feb-2020 23:04 .
       5 dr-xr-xr-x     0      0         0 15-Feb-2020 23:04 ..
      57 dr-xr-xr-x     0      0         0 17-Feb-2020 19:50 $Recycle.Bin
  348683 dr-xr-xr-x     0      0         0  2-Jan-2018 20:38 NVIDIA
      58 dr-xr-xr-x     0      0         0 14-Jul-2009 05:20 PerfLogs
      60 dr-xr-xr-x     0      0         0 12-Jan-2018 19:48 Program Files
     250 dr-xr-xr-x     0      0         0 19-Dec-2018 03:18 Program Files (x86)
     369 dr-xr-xr-x     0      0         0 15-Feb-2020 23:03 ProgramData
   24277 dr-xr-xr-x     0      0         0 16-Jan-2011 21:43 Recovery
   16799 dr-xr-xr-x     0      0         0  7-Feb-2020 20:27 System Volume Information
     463 dr-xr-xr-x     0      0         0 23-Aug-2011 23:04 Users
     625 dr-xr-xr-x     0      0         0 28-Aug-2018 23:22 Windows
  183299 -r--r--r--     0      0      7681 27-Feb-2015 10:29 formatter.log
  265677 -r--r--r--     0      0       351 15-Aug-2016 22:39 prefs.js


dir_partition inode=5
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
Directory /
       5 dr-xr-xr-x     0      0         0  2-Feb-2020 20:49 .
       5 dr-xr-xr-x     0      0         0  2-Feb-2020 20:49 ..
      37 dr-xr-xr-x     0      0         0 30-Jan-2020 21:12 $RECYCLE.BIN
      35 dr-xr-xr-x     0      0         0 30-Jan-2020 21:09 System Volume Information
file_pread(4,2,buffer,3275971671(471269/39/26)) lseek err Invalid argument
file_pread(4,1,buffer,3275971671(471269/39/26)) lseek err Invalid argument
file_pread(4,1,buffer,3275971672(471269/39/27)) lseek err Invalid argument
Not an exFAT boot sector.

 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
Can't open filesystem. Filesystem seems damaged.

 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
Can't open filesystem. Filesystem seems damaged.

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
check_part_i386 failed for partition type 07
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
Change partition type:
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
New options :
 Dump : No
 Align partition: Yes
 Expert mode : No

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
check_part_i386 failed for partition type 07
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
filesystem size           3665620985 2325405121387731523
sectors_per_cluster       8 103
mft_lcn                   409496459 665850398
mftmirr_lcn               408741328 3733735780
clusters_per_mft_record   -10 -30
clusters_per_index_record 1 -48
Boot sector
Error: size boot_sector 3665620985 > partition 1565558777
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
filesystem size           3665620985 2325405121387731523
sectors_per_cluster       8 103
mft_lcn                   409496459 665850398
mftmirr_lcn               408741328 3733735780
clusters_per_mft_record   -10 -30
clusters_per_index_record 1 -48
Boot sector
Error: size boot_sector 3665620985 > partition 1565558777
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 6161
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             764074
ntfs_find_mft: mftmirr_lcn         2
ntfs_find_mft: mft_record_size     1024

mft at 6118737
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             764074
ntfs_find_mft: mftmirr_lcn         2
ntfs_find_mft: mft_record_size     1024

Potential partition:
 4 P HPFS - NTFS          267349 186 38 364801  65 57 1565558777
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
filesystem size           3665620985 2325405121387731523
sectors_per_cluster       8 103
mft_lcn                   409496459 665850398
mftmirr_lcn               408741328 3733735780
clusters_per_mft_record   -10 -30
clusters_per_index_record 1 -48
Boot sector
Error: size boot_sector 3665620985 > partition 1565558777
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Boot sector                        Backup boot sector
0000 eb52904e 54465320   .R.NTFS   948f501f b5b8f954   ..P....T
0008 20202000 02080000      .....  df13567d 1467099f   ..V}.g..
0010 00000000 00f80000   ........  c34fa0ea 3a75842d   .O..:u.-
0018 3f00ff00 00108325   ?......%  9827d20b b9faa7d4   .'......
0020 00000000 80008000   ........  e3c2a3a5 4835f179   ....H5.y
0028 f8ef7cda 00000000   ..|.....  429a302b a37f4520   B.0+..E 
0030 8b6b6818 00000000   .kh.....  1e12b027 07bf85fa   ...'....
0038 d0e55c18 00000000   ..\.....  64498cde 3e64a725   dI..>d.%
0040 f6000000 01000000   ........  e27baf9f d03f2b85   .{...?+.
0048 5dda6e0c 995e5a14   ].n..^Z.  9ff71f9c 8a059ce4   ........
0050 00000000 fa33c08e   .....3..  e2cfd33f c2b959d7   ...?..Y.
0058 d0bc007c fb68c007   ...|.h..  3cd00938 eaedaef1   <..8....
0060 1f1e6866 00cb8816   ..hf....  75e93b50 1f4f26a7   u.;P.O&.
0068 0e006681 3e03004e   ..f.>..N  361df431 dfb4cb3b   6..1...;
0070 54465375 15b441bb   TFSu..A.  17f6be13 785ed4ce   ....x^..
0078 aa55cd13 720c81fb   .U..r...  d9df5a4d 7152951f   ..ZMqR..
0080 55aa7506 f7c10100   U.u.....  795288ab 083f55be   yR...?U.
0088 7503e9dd 001e83ec   u.......  54306028 371777f9   T0`(7.w.
0090 18681a00 b4488a16   .h...H..  df716c66 85cca79d   .qlf....
0098 0e008bf4 161fcd13   ........  e140bfa2 d1fab056   .@.....V
00A0 9f83c418 9e581f72   .....X.r  4c41369f 3ce3aff9   LA6.<...
00A8 e13b060b 0075dba3   .;...u..  d98c3ced bcb0f0ca   ..<.....
00B0 0f00c12e 0f00041e   ........  d590236c 7c9e3be5   ..#l|.;.
00B8 5a33dbb9 00202bc8   Z3... +.  665529a5 e28c47c3   fU)...G.
00C0 66ff0611 0003160f   f.......  780c6956 57a357e4   x.iVW.W.
00C8 008ec2ff 061600e8   ........  fc7e8dfb 7dcf9881   .~..}...
00D0 4b002bc8 77efb800   K.+.w...  9b7cd0e5 ef728d37   .|...r.7
00D8 bbcd1a66 23c0752d   ...f#.u-  7c61f68c 314b17cd   |a..1K..
00E0 6681fb54 43504175   f..TCPAu  e94fc511 57276fff   .O..W'o.
00E8 2481f902 01721e16   $....r..  37ce1867 667b46ab   7..gf{F.
00F0 6807bb16 68700e16   h...hp..  0710cf02 86b55ca4   ......\.
00F8 68090066 53665366   h..fSfSf  db5c5801 d845ebb0   .\X..E..
0100 55161616 68b80166   U...h..f  fbf21736 944dc9cd   ...6.M..
0108 610e07cd 1a33c0bf   a....3..  95c5831d 8d73fc54   .....s.T
0110 2810b9d8 0ffcf3aa   (.......  6c50b2f2 aa7cef96   lP...|..
0118 e95f0190 9066601e   ._...f`.  ffcbfc7b 9f629347   ...{.b.G
0120 0666a111 00660306   .f...f..  a2469043 f30f3ce0   .F.C..<.
0128 1c001e66 68000000   ...fh...  171816ee 6603cf16   ....f...
0130 00665006 53680100   .fP.Sh..  febf5d07 23bdf1a6   ..].#...
0138 681000b4 428a160e   h...B...  e70f6d31 0981aab4   ..m1....
0140 00161f8b f4cd1366   .......f  e6aa5af0 b7d35f38   ..Z..._8
0148 595b5a66 5966591f   Y[ZfYfY.  5f815fda 34f4e7ab   _._.4...
0150 0f821600 66ff0611   ....f...  b02ec7ae 1eda0375   .......u
0158 0003160f 008ec2ff   ........  0cc5f296 23a067cf   ....#.g.
0160 0e160075 bc071f66   ...u...f  e9d02557 1d12a28d   ..%W....
0168 61c3a0f8 01e80900   a.......  346b4c84 5f9725c1   4kL._.%.
0170 a0fb01e8 0300f4eb   ........  b2f1723a 7ec75022   ..r:~.P"
0178 fdb4018b f0ac3c00   ......<.  05dcfeeb d141cfc1   .....A..
0180 7409b40e bb0700cd   t.......  5eaffd93 337f10ff   ^...3...
0188 10ebf2c3 0d0a5363   ......Sc  0fcf1ddc ef665bd4   .....f[.
0190 68696a66 666f7574   hijffout  10ac2fed eaa6e63e   ../....>
0198 000d0a62 6f6f746d   ...bootm  0bb7ced3 4ca6da2e   ....L...
01A0 6772206f 6e746272   gr ontbr  a6275634 291b1ca1   .'V4)...
01A8 65656b74 000d0a62   eekt...b  38af7b5e a5190fe9   8.{^....
01B0 6f6f746d 67722067   ootmgr g  ebd1c8de 97f7df65   .......e
01B8 65636f6d 7072696d   ecomprim  2566c904 59e987d1   %f..Y...
01C0 65657264 000d0a44   eerd...D  d0f6489d a63f817d   ..H..?.}
01C8 72756b20 4374726c   ruk Ctrl  b9589221 00be2743   .X.!..'C
01D0 2b416c74 2b44656c   +Alt+Del  58db1f6c bcdadfad   X..l....
01D8 65746520 6f6d206f   ete om o  ec16ddeb 65062a9e   ....e.*.
01E0 706e6965 75772074   pnieuw t  643b9f6b eb1066ea   d;.k..f.
01E8 65207374 61727465   e starte  2c5608f3 5ddb288e   ,V..].(.
01F0 6e0d0a00 740d0a00   n...t...  a3705e56 18b77114   .p^V..q.
01F8 8c99adc5 000055aa   ......U.  0ae03fd6 01be2167   ..?...!g

ntfs_boot_sector
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
filesystem size           3665620985 2325405121387731523
sectors_per_cluster       8 103
mft_lcn                   409496459 665850398
mftmirr_lcn               408741328 3733735780
clusters_per_mft_record   -10 -30
clusters_per_index_record 1 -48
Boot sector
Error: size boot_sector 3665620985 > partition 1565558777
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Error reading $MFT: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
Error reading $MFT: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
file_pread(4,2,buffer,3275971671(471269/39/26)) lseek err Invalid argument
file_pread(4,1,buffer,3275971671(471269/39/26)) lseek err Invalid argument
file_pread(4,1,buffer,3275971672(471269/39/27)) lseek err Invalid argument
Not an exFAT boot sector.

 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
filesystem size           3665620985 2325405121387731523
sectors_per_cluster       8 103
mft_lcn                   409496459 665850398
mftmirr_lcn               408741328 3733735780
clusters_per_mft_record   -10 -30
clusters_per_index_record 1 -48
Boot sector
Error: size boot_sector 3665620985 > partition 1565558777
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Change partition type:
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
check_part_i386 failed for partition type 07
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777

Analyse Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 204793, partition 204800
NTFS at 12/223/20
Info: size boot_sector 209713145, partition 209713152
NTFS at 13066/233/32
Info: size boot_sector 419426297, partition 419426304
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
check_part_i386 failed for partition type 07
Current partition structure:
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
Error: size boot_sector 3665620985 > partition 1565558777
Invalid NTFS or exFAT boot
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
 4 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
Backup partition structure
partition_save

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 12     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 13066 233 24  209713145 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 32 39174 253 48  419426297 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 56 267349  88 60 3665620985 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,3275971677(471269/39/32)) lseek err Invalid argument
file_pread(4,1,buffer,3275971677(471269/39/32)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          267349  89  4 495523 179  8 3665620985
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
This partition ends after the disk limits. (start=4294967295, size=3665620985, end=7960588279, disk end=5860533168)
BAD_RS LBA=6144 2048
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 38 364801  65 57 1565558777 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
file_pread(4,2,buffer,1565566969(364801/98/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565566969(364801/98/27)) lseek err Invalid argument
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1571677525(365181/191/24)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB
This partition ends after the disk limits. (start=5860532223, size=1565558777, end=7426090999, disk end=5860533168)
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1565565959(364801/82/25)) lseek err Invalid argument
file_pread(4,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(4,7,buffer,1565566088(364801/84/28)) lseek err Invalid argument
file_pread(4,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(4,7,buffer,1565566216(364801/86/30)) lseek err Invalid argument
file_pread(4,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(4,7,buffer,1565566344(364801/88/32)) lseek err Invalid argument
file_pread(4,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(4,7,buffer,1565566472(364801/90/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(4,7,buffer,1565566600(364801/92/36)) lseek err Invalid argument
file_pread(4,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(4,7,buffer,1565566728(364801/94/38)) lseek err Invalid argument
file_pread(4,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(4,7,buffer,1565566856(364801/96/40)) lseek err Invalid argument
file_pread(4,8,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566984(364801/98/42)) lseek err Invalid argument
file_pread(4,3,buffer,1565566992(364801/98/50)) lseek err Invalid argument
file_pread(4,3,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565567055(364801/99/50)) lseek err Invalid argument
file_pread(4,11,buffer,1565567102(364801/100/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565569024(364801/131/3)) lseek err Invalid argument
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4075 GB / 3795 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          267349  89  4 495523 179  8 3665620985
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB

Results
   * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
   P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
   P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
 4 P HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 12     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/19
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 40    12 223 19     204793
     NTFS found using backup sector, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 13066 233 24  209713145 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/31
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 27 13066 233 31  209713145
     NTFS found using backup sector, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 32 39174 253 48  419426297 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/55
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 39 39174 253 55  419426297
     NTFS found using backup sector, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 56 267349  88 60 3665620985 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,3275971677(471269/39/32)) lseek err Invalid argument
file_pread(4,1,buffer,3275971677(471269/39/32)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          267349  89  4 495523 179  8 3665620985
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
This partition ends after the disk limits. (start=4294967295, size=3665620985, end=7960588279, disk end=5860533168)
BAD_RS LBA=6144 2048
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 38 364801  65 57 1565558777 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
file_pread(4,2,buffer,1565566969(364801/98/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565566969(364801/98/27)) lseek err Invalid argument
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1571677525(365181/191/24)) lseek err Invalid argument
file_pread(4,1,buffer,1571677525(365181/191/24)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB
This partition ends after the disk limits. (start=5860532223, size=1565558777, end=7426090999, disk end=5860533168)
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1565565959(364801/82/25)) lseek err Invalid argument
file_pread(4,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(4,7,buffer,1565566088(364801/84/28)) lseek err Invalid argument
file_pread(4,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(4,7,buffer,1565566216(364801/86/30)) lseek err Invalid argument
file_pread(4,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(4,7,buffer,1565566344(364801/88/32)) lseek err Invalid argument
file_pread(4,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(4,7,buffer,1565566472(364801/90/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(4,7,buffer,1565566600(364801/92/36)) lseek err Invalid argument
file_pread(4,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(4,7,buffer,1565566728(364801/94/38)) lseek err Invalid argument
file_pread(4,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(4,7,buffer,1565566856(364801/96/40)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 12/223/12
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 12/223/19
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 13066/233/24
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 13066/233/31
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 39174/253/48
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 39174/253/55
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4075 GB / 3795 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          267349  89  4 495523 179  8 3665620985
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB

Results
     HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
     HPFS - NTFS              0  32 40    12 223 19     204793
     NTFS found using backup sector, blocksize=4096, 104 MB / 99 MiB
     HPFS - NTFS             12 223 12    25 158 54     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
     HPFS - NTFS             12 223 19    25 158 61     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
     HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS             12 223 27 13066 233 31  209713145
     NTFS found using backup sector, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 24 26120 243 28  209713145
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 31 26120 243 35  209713145
     NTFS, blocksize=4096, 107 GB / 99 GiB
     HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          13066 233 39 39174 253 55  419426297
     NTFS found using backup sector, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 48 65283  19  1  419426297
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 55 65283  19  8  419426297
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB

interface_write()
 1 P HPFS - NTFS          267349 186 45 364801  66  1 1565558777
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

ntfs_boot_sector
 1 P HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 267349/186/45
NTFS at 267349/186/45
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

 1 P HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 267349/186/45
NTFS at 267349/186/45
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
You will have to reboot for the change to take effect.

TestDisk exited normally.



Tue Feb 18 19:14:24 2020
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511433506816
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=214746267648
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=4000768327680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=107373133824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=801566093824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=2000395723264
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-1CH166, S/N:W1F4K0KL, FW:CC27
Disk /dev/sdb - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - WDC WD40EZRZ-00GXCB0, S/N:WD-WCC7K0XDEV0C, FW:80.00A80
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - SAMSUNG HD204UI, S/N:S2H7JD2ZC00621, FW:1AQ10001
Disk /dev/sdd - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - ST4000VN008-2DR166, S/N:WDH1VE0S, FW:SC60
Disk /dev/sde - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - ADATA SX6000PNP, S/N:0000_0000_0100_0000_4CE0_0018_DD8C_9084., FW:V9001c27
Disk /dev/sdf - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST320005 42AS, S/N:801130168383

Partition table type (auto): Intel
Disk /dev/sda - 3000 GB / 2794 GiB - ST3000DM001-1CH166
Partition table type: Intel

Analyse Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 267349/89/4
Error: size boot_sector 3665620985 > partition 1565558777
check_part_i386 failed for partition type 07
Current partition structure:
Error: size boot_sector 3665620985 > partition 1565558777
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
 1 P HPFS - NTFS          267349  89  4 364800 223 23 1565558777
No partition is bootable

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size           204793
sectors_per_cluster       8
mft_lcn                   5872
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33    12 223 12     204793
     NTFS, blocksize=4096, 104 MB / 99 MiB
NTFS at 12/223/20
filesystem size           209713145
sectors_per_cluster       8
mft_lcn                   738390
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS             12 223 20 13066 233 24  209713145 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
NTFS at 13066/233/32
filesystem size           419426297
sectors_per_cluster       8
mft_lcn                   768875
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          13066 233 32 39174 253 48  419426297 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
NTFS at 39174/253/56
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 56 267349  88 60 3665620985 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
NTFS at 267349/89/4
filesystem size           3665620985
sectors_per_cluster       8
mft_lcn                   409496459
mftmirr_lcn               408741328
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,3275971677(471269/39/32)) lseek err Invalid argument
file_pread(4,1,buffer,3275971677(471269/39/32)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          267349  89  4 495523 179  8 3665620985
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
This partition ends after the disk limits. (start=4294967295, size=3665620985, end=7960588279, disk end=5860533168)
BAD_RS LBA=6144 2048
NTFS at 267349/186/38
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 38 364801  65 57 1565558777 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
file_pread(4,2,buffer,1565566969(364801/98/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565566969(364801/98/27)) lseek err Invalid argument
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
NTFS at 364801/66/1
filesystem size           1565558777
sectors_per_cluster       8
mft_lcn                   764074
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1571677525(365181/191/24)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB
This partition ends after the disk limits. (start=5860532223, size=1565558777, end=7426090999, disk end=5860533168)
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,1,buffer,1565567032(364801/99/27)) lseek err Invalid argument
file_pread(4,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1565565959(364801/82/25)) lseek err Invalid argument
file_pread(4,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(4,7,buffer,1565566088(364801/84/28)) lseek err Invalid argument
file_pread(4,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(4,7,buffer,1565566216(364801/86/30)) lseek err Invalid argument
file_pread(4,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(4,7,buffer,1565566344(364801/88/32)) lseek err Invalid argument
file_pread(4,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(4,7,buffer,1565566472(364801/90/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(4,7,buffer,1565566600(364801/92/36)) lseek err Invalid argument
file_pread(4,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(4,7,buffer,1565566728(364801/94/38)) lseek err Invalid argument
file_pread(4,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(4,7,buffer,1565566856(364801/96/40)) lseek err Invalid argument
file_pread(4,8,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565566984(364801/98/42)) lseek err Invalid argument
file_pread(4,3,buffer,1565566992(364801/98/50)) lseek err Invalid argument
file_pread(4,3,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565567055(364801/99/50)) lseek err Invalid argument
file_pread(4,11,buffer,1565567102(364801/100/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565569024(364801/131/3)) lseek err Invalid argument
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 4075 GB / 3795 GiB)
The following partitions can't be recovered:
     HPFS - NTFS          267349  89  4 495523 179  8 3665620985
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          364801  66  1 462252 200 20 1565558777
     NTFS, blocksize=4096, 801 GB / 746 GiB

Results
   * HPFS - NTFS              0  32 33    12 223 19     204800
     NTFS, blocksize=4096, 104 MB / 100 MiB
   P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
     NTFS, blocksize=4096, 107 GB / 99 GiB
   P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
     NTFS, blocksize=4096, 214 GB / 199 GiB
     HPFS - NTFS          39174 253 56 267349  89  4 3665620992 [Media1]
     NTFS, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          39174 253 63 267349  89  4 3665620985
     NTFS found using backup sector, blocksize=4096, 1876 GB / 1747 GiB
     HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
     NTFS, blocksize=4096, 801 GB / 746 GiB
     HPFS - NTFS          267349 186 45 364801  66  1 1565558777
     NTFS found using backup sector, blocksize=4096, 801 GB / 746 GiB
add_ext_part_i386: max
add_ext_part_i386: max

interface_write()
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
 4 E extended LBA         39174 253 56 364801  66  1 5231185920
 5 L HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
add_ext_part_i386: max
add_ext_part_i386: max

interface_write()
 1 * HPFS - NTFS              0  32 33    12 223 19     204800
 2 P HPFS - NTFS             12 223 20 13066 233 31  209713152 [Win&Progs]
 3 P HPFS - NTFS          13066 233 32 39174 253 55  419426304 [Data]
 4 E extended LBA         39174 253 56 364801  66  1 5231185920
 5 L HPFS - NTFS          267349 186 38 364801  66  1 1565558784 [Media3]
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 39174/253/56,lba=629346304
You will have to reboot for the change to take effect.

TestDisk exited normally.
All times are UTC+01:00
Page 1 of 1

Powered by phpBB® Forum Software © phpBB Limited