分区变成 RAW,TestDisk 建议

分区变成 RAW,TestDisk 建议

约 3 天前,一个 238.2GB 的 NTFS 分区变成了 RAW,丢失了约 170-180GB 的数据,我尝试解决这个问题大约花了 14 个小时。

分区变为 RAW 状态的可能原因:

  1. 我已经双启动了 Manjaro,虽然不知道为什么这会使我的分区变成 RAW。
  2. 当我使用 Linux 时,我总是必须从文件资源管理器浏览到该分区,然后程序才能识别它/run/media/peruna/Backup for Update,并且从未故意卸载过该驱动器。
  3. 我之前在 Linux KDE 分区管理器中调整了分区大小并移动了分区,但约 1 小时后,它抛出了一些错误并中止了其作业;我再次执行了相同的过程并完成了作业。

发现的症状:

  • Linux:Dolphin 文件资源管理器不显示驱动器
  • 视窗:资源管理器显示驱动器 [ E:],但没有名称或信息,分区显示 0B 的数据和空间
    • 当我尝试打开驱动器时,收到错误:
      You need to format the disk in drive E: before you can use it. Do you want to format it?
      
      取消后,我收到错误:
      E:\ is not accessible. The volume does not contain a recognized file system. 
      Please make sure that all required file system drivers are loaded and that the volume is not corrupted.
      


到目前为止尝试过的所有方法: (双启动前禁用快速启动)

  • iCare数据恢复:效果很好,但我还需要正确的文件结构和文件名,因为分区上的所有数据都依赖于文件名和结构
  • TestDisk我不擅长使用这个程序,教程似乎不适用于我的情况,但我很确定TestDisk这个程序最终会起作用
    1. TestDisk 7.2-WIP, Data Recovery Utility, March 2021
      
      Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
      Current partition structure:
      
        Partition                     Start          End      Size in sectors
      1 P Windows Recovery Env         2048      1085439         1083392 [Basic data partition]
      2 P EFI System                1085440      1290239          204800 [EFI system partition]
          No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
      3 P MS Reserved               1290240      1323007           32768 [Microsoft reserved partition]
      3 P MS Reserved               1290240      1323007           32768 [Microsoft reserved partition]
      4 P MS Data                   1323008   1249179569      1247856562 [Basic data partition]
          No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
      5 P MS Data                1453981696   1953523711       499542016 [Basic data partition]
      5 P MS Data                1453981696   1953523711       499542016 [Basic data partition]
      6 P Linux filesys. data    1249179570   1451933695       202754126
      

    2. 快速搜索在约 2 秒内快速跳升至 74% [ 90300 / 121600 cylinders],找到四个分区,收到错误“两个分区无法恢复”(不包括所需分区)
      The harddisk (1000 GB / 931 GiB) seems too small! (< 1667 GB / 1552 GiB)
      Check the harddisk size: HD jumper settings, BIOS detection...
      
      The following partitions can't be recovered:
      
      Partition                       Start          End      Size in sectors
      Mac HFS                    1467399855   2308390576       840990722 [$_Func_impl@V<lambda_756265]
      Mac HFS                    1844913792   3255871105      1410957314
      

    3. 分区概览,无需分区,但之前快速搜索我看到了一个分区以及它的副本,其499542016扇区大小与我正在搜索的分区相匹配:
      Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
      
      Partition                       Start          End      Size in sectors
      P MS Data                        2048      1085439         1083392 [Recovery]
      P EFI System                  1085440      1290239          204800 [EFI System Partition] [NO NAME]
      D MS Data                     1323008   1249179569      1247856562
      D Mac HFS                   433956482   1844913795      1410957314
      D Mac HFS                   626409137   1467399858       840990722 [$_Func_impl@V<lambda_756265]
      D Linux filesys. data      1249179570   1451933689       202754120
      D Linux filesys. data      1662878752   1797094431       134215680
      
      • 第四分区返回HFS found using backup sector!,打开后第五分区也返回:
        Support for this filesystem hasn't been implemented.
        
      • 第七分区打开后返回:
        No file found, filesystem may be damaged.
        

    4. 深度搜索导致了很多:
      file_pread(4,1,buffer,1953525169(121601/81/2)) lseek err Invalid argument 
      
      以下内容位于其前面:
      Tue Mar 30 19:45:02 2021
      Command line: TestDisk
      
      TestDisk 7.2-WIP, Data Recovery Utility, March 2021
      
      OS: Windows 8 (9200)
      Compiler:   GCC 9.3, Cygwin 3001.4
      ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
      
        disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
        disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
        filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.
      
        filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.
      
        Warning: can't get size for \\.\PhysicalDrive1
          disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=638902559744
          disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=255765512192
          disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1507262464
          disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
            Warning: can't get size for \\.\G:
      
      Hard disk list
        Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA DT01ACA100, S/N:95J27VBNS, FW:MS2OA7L0
          Drive F: - 1507 MB / 1437 MiB - CHS 359 64 32, sector size=2048 - ASUS SH-224FB, FW:1.00
      
      Partition table type (auto): EFI GPT
        Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
        Partition table type: EFI GPT
      
      Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
        hdr_size=92
        hdr_lba_self=1
        hdr_lba_alt=1953525167 (expected 1953525167)
        hdr_lba_start=34
        hdr_lba_end=1953525134
        hdr_lba_table=2
        hdr_entries=128
        hdr_entsz=128
      
        check_part_gpt failed for partition
          3 P MS Reserved              1290240    1323007        32768 [Microsoft reserved partition]
        check_part_gpt failed for partition
          5 P MS Data               1453981696  1953523711   499542016 [Basic data partition]
      
        Current partition structure:
          1 P Windows Recovery Env        2048     1085439     1083392 [Basic data partition]
          2 P EFI System               1085440     1290239      204800 [EFI system partition]
            No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
          3 P MS Reserved              1290240     1323007       32768 [Microsoft reserved partition]
          3 P MS Reserved              1290240     1323007       32768 [Microsoft reserved partition]
          4 P MS Data                  1323008  1249179569  1247856562 [Basic data partition]
            No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
          5 P MS Data               1453981696  1953523711   499542016 [Basic data partition]
          5 P MS Data               1453981696  1953523711   499542016 [Basic data partition]
          6 P Linux filesys. data   1249179570  1451933695   202754126
      
      search_part()
        Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
        NTFS at 0/32/33
          filesystem size           1083392
          sectors_per_cluster       8
          mft_lcn                   45141
          mftmirr_lcn               2
          clusters_per_mft_record   -10
          clusters_per_index_record 1
          NTFS part_offset=1048576, part_size=554696704, sector_size=512
          NTFS partition cannot be added (part_offset<part_size).
        NTFS at 0/32/33
          filesystem size           1083392
          sectors_per_cluster       8
          mft_lcn                   45141
          mftmirr_lcn               2
          clusters_per_mft_record   -10
          clusters_per_index_record 1
              MS Data                     2048    1085439    1083392 [Recovery]
              NTFS, blocksize=4096, 554 MB / 529 MiB
      
        FAT32 at 67/144/14
          FAT1 : 6654-7422
          FAT2 : 7423-8191
          start_rootdir : 8192 root cluster : 2
          Data : 8192-204799
          sectors : 204800
          cluster_size : 2
          no_of_cluster : 98304 (2 - 98305)
          fat_length 769 calculated 769
          set_FAT_info: name from BS used
      
      FAT32 at 67/144/14
        FAT: cluster=2(0x2), pos=1093632
            EFI System               1085440    1290239     204800 [EFI System Partition] [NO NAME]
            FAT32, blocksize=1024, 104 MB / 100 MiB
      
      NTFS at 82/90/9
        filesystem size           1247856562
        sectors_per_cluster       8
        mft_lcn                   49133508
        mftmirr_lcn               16
        clusters_per_mft_record   -10
        clusters_per_index_record 1
        NTFS part_offset=677380096, part_size=638902559744, sector_size=512
        NTFS partition cannot be added (part_offset<part_size).
      
      NTFS at 82/90/9
        filesystem size           1247856562
        sectors_per_cluster       8
        mft_lcn                   49133508
        mftmirr_lcn               16
        clusters_per_mft_record   -10
        clusters_per_index_record 1
            MS Data                  1323008 1249179569 1247856562
            NTFS, blocksize=4096, 638 GB / 595 GiB
      
      recover_EXT2: s_block_group_nr=0/773, s_mnt_count=28/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
      recover_EXT2: s_blocksize=4096
      recover_EXT2: s_blocks_count 25344265
      recover_EXT2: part_size 202754120
      Filesystem created: Mon Mar 22 17:25:30 2021
      Last mount time:    Sat Mar 27 20:49:09 2021
          Linux filesys. data   1249179570 1451933689  202754120
          ext4 blocksize=4096 Large_file Sparse_SB, 103 GB / 96 GiB
      
      HFS magic value at 91341/106/13
        part_size 840990722
            Mac HFS               1467399855 2308390576  840990722 [$_Func_impl@V<lambda_756265]
            HFS blocksize=16777216, 430 GB / 401 GiB
        This partition ends after the disk limits. (start=1467399855, size=840990722, end=2308390576, disk end=1953525168)
      
      HFS magic value at 91341/106/15
        part_size 840990722
            Mac HFS                626409137 1467399858  840990722 [$_Func_impl@V<lambda_756265]
            HFS found using backup sector!, 430 GB / 401 GiB
              0 0000 0000 00 00 00 00 00 00 00 00
            Unknown               1575737412 5781186085 4205448674
            FATX, 2153 GB / 2005 GiB
              0 0000 0000 00 00 00 00 00 00 00 00
        Partition not added.
      
      recover_EXT2: s_block_group_nr=0/511, s_mnt_count=15/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
      recover_EXT2: s_blocksize=4096
      recover_EXT2: s_blocks_count 16776960
      recover_EXT2: part_size 134215680
        Filesystem created: Mon Dec 23 14:02:17 2019
        Last mount time:    Wed Nov 18 17:29:59 2020
            Linux filesys. data   1662878752 1797094431  134215680
            ext4 blocksize=4096 Large_file Sparse_SB Recover, 68 GB / 63 GiB
      
      HFS magic value at 114840/145/58
        part_size 1410957314
            Mac HFS               1844913792 3255871105 1410957314
            HFS blocksize=16777216, 722 GB / 672 GiB
        This partition ends after the disk limits. (start=1844913792, size=1410957314, end=3255871105, disk end=1953525168)
      
      HFS magic value at 114840/145/60
        part_size 1410957314
            Mac HFS                433956482 1844913795 1410957314
            HFS found using backup sector!, 722 GB / 672 GiB
        file_pread(4,1,buffer,1953525168(121601/81/1)) ReadFile The drive cannot find the sector requested.
      
      它还返回了一长串不适合 PasteBin 粘贴的分区列表,所以我把它上传到了Google 云端硬盘
      • 在第 44 行和第 53-54 行,我现在确定这些是我正在搜索的分区,因为虽然大小差不多并且位置恰好位于磁盘末尾,但是当我搜索日志时,499542016在前 60 行之后的任何地方都找不到大小为的分区:
        Tue Mar 30 19:45:02 2021
        Command line: TestDisk
        
        TestDisk 7.2-WIP, Data Recovery Utility, March 2021
        
        OS: Windows 8 (9200)
        Compiler: GCC 9.3, Cygwin 3001.4
        ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
        
          disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
          disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
          filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.
        
          filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.
        
          Warning: can't get size for \\.\PhysicalDrive1
            disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=638902559744
            disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=255765512192
            disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1507262464
            disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
              Warning: can't get size for \\.\G:
        
          Hard disk list
            Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA DT01ACA100, S/N:95J27VBNS, FW:MS2OA7L0
              Drive F: - 1507 MB / 1437 MiB - CHS 359 64 32, sector size=2048 - ASUS SH-224FB, FW:1.00
        
          Partition table type (auto): EFI GPT
            Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
            Partition table type: EFI GPT
        
          Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
            hdr_size=92
            hdr_lba_self=1
            hdr_lba_alt=1953525167 (expected 1953525167)
            hdr_lba_start=34
            hdr_lba_end=1953525134
            hdr_lba_table=2
            hdr_entries=128
            hdr_entsz=128
        
            check_part_gpt failed for partition
              3 P MS Reserved              1290240    1323007      32768 [Microsoft reserved partition]
            check_part_gpt failed for partition
              5 P MS Data               1453981696 1953523711  499542016 [Basic data partition]
            Current partition structure:
              1 P Windows Recovery Env        2048    1085439    1083392 [Basic data partition]
              2 P EFI System               1085440    1290239     204800 [EFI system partition]
                No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
              3 P MS Reserved              1290240    1323007      32768 [Microsoft reserved partition]
              3 P MS Reserved              1290240    1323007      32768 [Microsoft reserved partition]
              4 P MS Data                  1323008 1249179569 1247856562 [Basic data partition]
                No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
              5 P MS Data               1453981696 1953523711  499542016 [Basic data partition]
              5 P MS Data               1453981696 1953523711  499542016 [Basic data partition]
              6 P Linux filesys. data   1249179570 1451933695  202754126
        
          search_part()
        

    5. 我在深度扫描,所以这些可能是我正在寻找的;但是,它们太多了,我无法查看文件,因为Support for this filesystem hasn't been implemented.
      HFS found using backup sector!, 268GB / 250GiB"
      
      我在第 43-44 行找到了这个,这是我正在搜索的分区:
      check_part_gpt failed for partition 5 P MS Data 1453981696 1953523711 499542016 [Basic data partition]
      
      这个错误信息意味着什么大事吗?

我该如何继续?

相关内容