约 3 天前,一个 238.2GB 的 NTFS 分区变成了 RAW,丢失了约 170-180GB 的数据,我尝试解决这个问题大约花了 14 个小时。
分区变为 RAW 状态的可能原因:
- 我已经双启动了 Manjaro,虽然不知道为什么这会使我的分区变成 RAW。
- 当我使用 Linux 时,我总是必须从文件资源管理器浏览到该分区,然后程序才能识别它
/run/media/peruna/Backup for Update
,并且从未故意卸载过该驱动器。 - 我之前在 Linux KDE 分区管理器中调整了分区大小并移动了分区,但约 1 小时后,它抛出了一些错误并中止了其作业;我再次执行了相同的过程并完成了作业。
发现的症状:
- Linux:Dolphin 文件资源管理器不显示驱动器
- 视窗:资源管理器显示驱动器 [
E:
],但没有名称或信息,分区显示 0B 的数据和空间- 当我尝试打开驱动器时,收到错误:
取消后,我收到错误:You need to format the disk in drive E: before you can use it. Do you want to format it?
E:\ is not accessible. The volume does not contain a recognized file system. Please make sure that all required file system drivers are loaded and that the volume is not corrupted.
- 当我尝试打开驱动器时,收到错误:
到目前为止尝试过的所有方法: (双启动前禁用快速启动)
- iCare数据恢复:效果很好,但我还需要正确的文件结构和文件名,因为分区上的所有数据都依赖于文件名和结构
TestDisk
:我不擅长使用这个程序,教程似乎不适用于我的情况,但我很确定TestDisk
这个程序最终会起作用-
TestDisk 7.2-WIP, Data Recovery Utility, March 2021 Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63 Current partition structure: Partition Start End Size in sectors 1 P Windows Recovery Env 2048 1085439 1083392 [Basic data partition] 2 P EFI System 1085440 1290239 204800 [EFI system partition] No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] 4 P MS Data 1323008 1249179569 1247856562 [Basic data partition] No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] 6 P Linux filesys. data 1249179570 1451933695 202754126
- 快速搜索在约 2 秒内快速跳升至 74% [
90300 / 121600 cylinders
],找到四个分区,收到错误“两个分区无法恢复”(不包括所需分区):The harddisk (1000 GB / 931 GiB) seems too small! (< 1667 GB / 1552 GiB) Check the harddisk size: HD jumper settings, BIOS detection... The following partitions can't be recovered: Partition Start End Size in sectors Mac HFS 1467399855 2308390576 840990722 [$_Func_impl@V<lambda_756265] Mac HFS 1844913792 3255871105 1410957314
- 分区概览,无需分区,但之前快速搜索我看到了一个分区以及它的副本,其
499542016
扇区大小与我正在搜索的分区相匹配:Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63 Partition Start End Size in sectors P MS Data 2048 1085439 1083392 [Recovery] P EFI System 1085440 1290239 204800 [EFI System Partition] [NO NAME] D MS Data 1323008 1249179569 1247856562 D Mac HFS 433956482 1844913795 1410957314 D Mac HFS 626409137 1467399858 840990722 [$_Func_impl@V<lambda_756265] D Linux filesys. data 1249179570 1451933689 202754120 D Linux filesys. data 1662878752 1797094431 134215680
- 第四分区返回
HFS found using backup sector!
,打开后第五分区也返回:Support for this filesystem hasn't been implemented.
- 第七分区打开后返回:
No file found, filesystem may be damaged.
- 第四分区返回
- 深度搜索导致了很多:
以下内容位于其前面:file_pread(4,1,buffer,1953525169(121601/81/2)) lseek err Invalid argument
它还返回了一长串不适合 PasteBin 粘贴的分区列表,所以我把它上传到了Google 云端硬盘:Tue Mar 30 19:45:02 2021 Command line: TestDisk TestDisk 7.2-WIP, Data Recovery Utility, March 2021 OS: Windows 8 (9200) Compiler: GCC 9.3, Cygwin 3001.4 ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016 filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function. filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function. Warning: can't get size for \\.\PhysicalDrive1 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=638902559744 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=255765512192 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1507262464 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0 Warning: can't get size for \\.\G: Hard disk list Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA DT01ACA100, S/N:95J27VBNS, FW:MS2OA7L0 Drive F: - 1507 MB / 1437 MiB - CHS 359 64 32, sector size=2048 - ASUS SH-224FB, FW:1.00 Partition table type (auto): EFI GPT Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA DT01ACA100 Partition table type: EFI GPT Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63 hdr_size=92 hdr_lba_self=1 hdr_lba_alt=1953525167 (expected 1953525167) hdr_lba_start=34 hdr_lba_end=1953525134 hdr_lba_table=2 hdr_entries=128 hdr_entsz=128 check_part_gpt failed for partition 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] check_part_gpt failed for partition 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] Current partition structure: 1 P Windows Recovery Env 2048 1085439 1083392 [Basic data partition] 2 P EFI System 1085440 1290239 204800 [EFI system partition] No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] 4 P MS Data 1323008 1249179569 1247856562 [Basic data partition] No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] 6 P Linux filesys. data 1249179570 1451933695 202754126 search_part() Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63 NTFS at 0/32/33 filesystem size 1083392 sectors_per_cluster 8 mft_lcn 45141 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 NTFS part_offset=1048576, part_size=554696704, sector_size=512 NTFS partition cannot be added (part_offset<part_size). NTFS at 0/32/33 filesystem size 1083392 sectors_per_cluster 8 mft_lcn 45141 mftmirr_lcn 2 clusters_per_mft_record -10 clusters_per_index_record 1 MS Data 2048 1085439 1083392 [Recovery] NTFS, blocksize=4096, 554 MB / 529 MiB FAT32 at 67/144/14 FAT1 : 6654-7422 FAT2 : 7423-8191 start_rootdir : 8192 root cluster : 2 Data : 8192-204799 sectors : 204800 cluster_size : 2 no_of_cluster : 98304 (2 - 98305) fat_length 769 calculated 769 set_FAT_info: name from BS used FAT32 at 67/144/14 FAT: cluster=2(0x2), pos=1093632 EFI System 1085440 1290239 204800 [EFI System Partition] [NO NAME] FAT32, blocksize=1024, 104 MB / 100 MiB NTFS at 82/90/9 filesystem size 1247856562 sectors_per_cluster 8 mft_lcn 49133508 mftmirr_lcn 16 clusters_per_mft_record -10 clusters_per_index_record 1 NTFS part_offset=677380096, part_size=638902559744, sector_size=512 NTFS partition cannot be added (part_offset<part_size). NTFS at 82/90/9 filesystem size 1247856562 sectors_per_cluster 8 mft_lcn 49133508 mftmirr_lcn 16 clusters_per_mft_record -10 clusters_per_index_record 1 MS Data 1323008 1249179569 1247856562 NTFS, blocksize=4096, 638 GB / 595 GiB recover_EXT2: s_block_group_nr=0/773, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192 recover_EXT2: s_blocksize=4096 recover_EXT2: s_blocks_count 25344265 recover_EXT2: part_size 202754120 Filesystem created: Mon Mar 22 17:25:30 2021 Last mount time: Sat Mar 27 20:49:09 2021 Linux filesys. data 1249179570 1451933689 202754120 ext4 blocksize=4096 Large_file Sparse_SB, 103 GB / 96 GiB HFS magic value at 91341/106/13 part_size 840990722 Mac HFS 1467399855 2308390576 840990722 [$_Func_impl@V<lambda_756265] HFS blocksize=16777216, 430 GB / 401 GiB This partition ends after the disk limits. (start=1467399855, size=840990722, end=2308390576, disk end=1953525168) HFS magic value at 91341/106/15 part_size 840990722 Mac HFS 626409137 1467399858 840990722 [$_Func_impl@V<lambda_756265] HFS found using backup sector!, 430 GB / 401 GiB 0 0000 0000 00 00 00 00 00 00 00 00 Unknown 1575737412 5781186085 4205448674 FATX, 2153 GB / 2005 GiB 0 0000 0000 00 00 00 00 00 00 00 00 Partition not added. recover_EXT2: s_block_group_nr=0/511, s_mnt_count=15/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192 recover_EXT2: s_blocksize=4096 recover_EXT2: s_blocks_count 16776960 recover_EXT2: part_size 134215680 Filesystem created: Mon Dec 23 14:02:17 2019 Last mount time: Wed Nov 18 17:29:59 2020 Linux filesys. data 1662878752 1797094431 134215680 ext4 blocksize=4096 Large_file Sparse_SB Recover, 68 GB / 63 GiB HFS magic value at 114840/145/58 part_size 1410957314 Mac HFS 1844913792 3255871105 1410957314 HFS blocksize=16777216, 722 GB / 672 GiB This partition ends after the disk limits. (start=1844913792, size=1410957314, end=3255871105, disk end=1953525168) HFS magic value at 114840/145/60 part_size 1410957314 Mac HFS 433956482 1844913795 1410957314 HFS found using backup sector!, 722 GB / 672 GiB file_pread(4,1,buffer,1953525168(121601/81/1)) ReadFile The drive cannot find the sector requested.
- 在第 44 行和第 53-54 行,我现在确定这些是我正在搜索的分区,因为虽然大小差不多并且位置恰好位于磁盘末尾,但是当我搜索日志时,
499542016
在前 60 行之后的任何地方都找不到大小为的分区:Tue Mar 30 19:45:02 2021 Command line: TestDisk TestDisk 7.2-WIP, Data Recovery Utility, March 2021 OS: Windows 8 (9200) Compiler: GCC 9.3, Cygwin 3001.4 ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016 filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function. filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function. Warning: can't get size for \\.\PhysicalDrive1 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=638902559744 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=255765512192 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1507262464 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0 Warning: can't get size for \\.\G: Hard disk list Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA DT01ACA100, S/N:95J27VBNS, FW:MS2OA7L0 Drive F: - 1507 MB / 1437 MiB - CHS 359 64 32, sector size=2048 - ASUS SH-224FB, FW:1.00 Partition table type (auto): EFI GPT Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA DT01ACA100 Partition table type: EFI GPT Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63 hdr_size=92 hdr_lba_self=1 hdr_lba_alt=1953525167 (expected 1953525167) hdr_lba_start=34 hdr_lba_end=1953525134 hdr_lba_table=2 hdr_entries=128 hdr_entsz=128 check_part_gpt failed for partition 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] check_part_gpt failed for partition 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] Current partition structure: 1 P Windows Recovery Env 2048 1085439 1083392 [Basic data partition] 2 P EFI System 1085440 1290239 204800 [EFI system partition] No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] 3 P MS Reserved 1290240 1323007 32768 [Microsoft reserved partition] 4 P MS Data 1323008 1249179569 1247856562 [Basic data partition] No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition] 6 P Linux filesys. data 1249179570 1451933695 202754126 search_part()
- 在第 44 行和第 53-54 行,我现在确定这些是我正在搜索的分区,因为虽然大小差不多并且位置恰好位于磁盘末尾,但是当我搜索日志时,
- 我在深度扫描,所以这些可能是我正在寻找的;但是,它们太多了,我无法查看文件,因为
Support for this filesystem hasn't been implemented.
我在第 43-44 行找到了这个,这是我正在搜索的分区:HFS found using backup sector!, 268GB / 250GiB"
这个错误信息意味着什么大事吗?check_part_gpt failed for partition 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition]
-
我该如何继续?