>>>sudo testdisk>>> TestDisk 6.11, Data Recovery Utility, April 2009 Christophe GRENIER http://www.cgsecurity.org TestDisk is a free data recovery software designed to help recover lost partitions and/or make non-booting disks bootable again when these symptoms are caused by faulty software, certain types of viruses or human error. It can also be used to repair some filesystem errors. Information gathered during TestDisk use can be recorded for later review. If you choose to create the text file, testdisk.log , it will contain TestDisk options, technical information and various outputs; including any folder/file names TestDisk was used to find and list onscreen. Use arrow keys to select, then press Enter key: [ Create ] Create a new log file [ Append ] Append information to log file [ No Log ] Don't record anything >>>Create>>> (Vorspann zeige ich folgend nicht mehr) Select a media (use Arrow keys, then press Enter): Disk /dev/sda - 320 GB / 298 GiB - ATA ST9320423AS Disk /dev/sdb - 7960 MB / 7592 MiB - Generic STORAGE DEVICE Disk /dev/sdc - 8004 MB / 7633 MiB - SanDisk Cruzer Edge [Proceed ] [ Quit ] Note: Disk capacity must be correctly detected for a successful recovery. If a disk listed above has incorrect size, check HD jumper settings, BIOS detection, and install the latest OS patches and disk drivers. >>>Proceed>>> (sdb=USB-Stick/Live-System, sdc=USB-Stick/Speicher) Disk /dev/sda - 320 GB / 298 GiB - ATA ST9320423AS Hidden sectors are present. size 625142448 sectors user_max 625142448 sectors dco 625142448 sectors Device Configuration Overlay (DCO) present. [ Continue ] Continue even if there are hidden data >>>Continue>>> Disk /dev/sda - 320 GB / 298 GiB - ATA ST9320423AS Please select the partition table type, press Enter when done. [Intel ] Intel/PC partition [EFI GPT] EFI GPT partition map (Mac i386, some x86_64...) [Mac ] Apple partition map [None ] Non partitioned media [Sun ] Sun Solaris partition [XBox ] XBox partition [Return ] Return to disk selection Note: Do NOT select 'None' for media with only a single partition. It's very rare for a drive to be 'Non-partitioned'. >>>Intel>>> ('None' gesonderte Anzeige) Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 [ Analyse ] Analyse current partition structure and search for lost partitions [ Advanced ] Filesystem Utils [ Geometry ] Change disk geometry [ Options ] Modify options [ MBR Code ] Write TestDisk MBR code to first sector [ Delete ] Delete all data in the partition table [ Quit ] Return to disk selection Note: Correct disk geometry is required for a successful recovery. 'Analyse' process may give some warnings if it thinks the logical geometry is mismatched. >>>Analyse>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Current partition structure: Partition Start End Size in sectors 1 * Linux 0 32 33 12188 216 43 195811823 2 E extended 12188 241 20 38913 70 5 429326338 5 L Linux Swap 37508 10 7 38913 70 5 22575104 X extended 37011 0 1 37508 10 6 7984941 6 L Linux Swap 37011 191 45 37508 10 6 7972864 6 L Linux Swap 37011 191 45 37508 10 6 7972864 X extended 18651 0 1 36260 94 58 282894565 7 L Linux 18651 3 41 36260 94 58 282894336 X extended 36260 94 59 37010 251 41 12058624 8 L Linux Swap 36260 127 28 37010 251 41 12056576 X extended 12189 0 1 18650 254 63 103812030 Next *=Primary bootable P=Primary L=Logical E=Extended D=Deleted [Quick Search] [ Backup ] Save current partition list to backup.log file and proceed >>>Backup>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38914 255 63 Partition Start End Size in sectors * Linux 0 32 33 12188 216 36 195811816 P Linux 12286 184 59 37109 102 49 398776320 P Linux Swap 37508 10 7 38913 69 52 22575088 Structure: Ok. Use Up/Down Arrow keys to select partition. Use Left/Right Arrow keys to CHANGE partition characteristics: *=Primary bootable P=Primary L=Logical E=Extended D=Deleted Keys A: add partition, L: load backup, T: change type, P: list files, Enter: to continue EXT4 Large file Sparse superblock, 100 GB / 93 GiB >>>Enter: to continue>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38914 255 63 Partition Start End Size in sectors 1 * Linux 0 32 33 12188 216 36 195811816 2 P Linux 12286 184 59 37109 102 49 398776320 3 P Linux Swap 37508 10 7 38913 69 52 22575088 [ Quit ] [Deeper Search] [ Write ] Try to find more partitions >>>Deeper Search>>> (Laufzeit ca. 4 h)(Terminalgroesse war 80x24, d.h. ich habe die lange Liste reinkopiert) Disk /dev/sda - 320 GB / 298 GiB - CHS 38914 255 63 The harddisk (320 GB / 298 GiB) seems too small! (< 461 GB / 429 GiB) Check the harddisk size: HD jumpers settings, BIOS detection... The following partitions can't be recovered: Partition Start End Size in sectors Linux 18559 187 61 56067 133 2 602562560 Linux 18560 128 1 56068 73 5 602562560 Linux 18562 8 7 56069 208 11 602562560 Linux 18562 170 41 56070 115 45 602562560 Linux 18563 78 12 56071 23 16 602562560 HPFS - NTFS 19737 203 51 55953 173 28 581808128 Linux 24479 191 33 49302 109 23 398776320 Linux 27286 3 46 44895 94 63 282894336 Linux 27287 41 19 44896 132 36 282894336 Linux 27287 138 52 44896 230 6 282894336 Linux 27289 181 29 44899 17 46 282894336 Linux 27291 224 6 44901 60 23 282894336 Linux 27295 49 19 44904 140 36 282894336 Linux 27298 129 32 44907 220 49 282894336 Linux 30605 67 55 43250 185 7 203149312 Linux 30605 100 24 43250 217 39 203149312 Linux 30611 33 15 43256 150 30 203149312 Linux 30614 80 59 43259 198 11 203149312 Linux 32025 138 50 43679 114 19 187219968 Linux 32027 213 59 43681 189 28 187219968 Linux 32027 246 28 43681 221 60 187219968 Linux 32028 23 60 43681 254 29 187219968 Linux 32028 251 32 43682 227 1 187219968 Linux 32286 225 4 44440 196 44 195252224 Linux 32288 0 1 44441 226 41 195252224 Linux 32290 115 18 44444 86 58 195252224 Linux 32298 155 50 44452 127 27 195252224 Linux 32299 30 52 44453 2 29 195252224 [ Continue ] EXT4 Large file Sparse superblock Recover, 308 GB / 287 GiB >>>Continue>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38914 255 63 Warning: the current number of heads per cylinder is 255 but the correct value may be 8. You can use the Geometry menu to change this value. It's something to try if - some partitions are not found by TestDisk - or the partition table can not be written because partitions overlaps. [ Continue ] >>>Hier hoere ich erstmal auf, da unsicher was zu tun ist>>> >>>Folgend Ausgabe >>>None>>> (siehe oben >>>Continue>>> Disk /dev/sda - 320 GB / 298 GiB - ATA ST9320423AS Please select the partition table type, press Enter when done) >>>None>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 [ Analyse ] Analyse current partition structure and search for lost partitions [ Advanced ] Filesystem Utils [ Geometry ] Change disk geometry [ Options ] Modify options [ Quit ] Return to disk selection Note: Correct disk geometry is required for a successful recovery. 'Analyse' process may give some warnings if it thinks the logical geometry is mismatched. >>>Analyse>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Current partition structure: Partition Start End Size in sectors P Unknown 0 0 1 38913 80 63 625142448 [Quick Search] Try to locate partition >>>Quick Search>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Partition Start End Size in sectors P ext4 0 32 33 12188 216 36 195811816 P ext4 12188 241 20 18650 193 37 103809024 P ext4 18651 3 41 36260 94 58 282894336 P Linux SWAP 2 36260 127 28 37010 251 25 12056560 P Linux SWAP 2 37508 10 7 38913 69 52 22575088 Structure: Ok. Keys T: change type, P: list files, Enter: to continue EXT4 Large file Sparse superblock, 100 GB / 93 GiB >>> Enter: to continue>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Partition Start End Size in sectors P ext4 0 32 33 12188 216 36 195811816 P ext4 12188 241 20 18650 193 37 103809024 P ext4 18651 3 41 36260 94 58 282894336 P Linux SWAP 2 36260 127 28 37010 251 25 12056560 P Linux SWAP 2 37508 10 7 38913 69 52 22575088 Write isn't available because the partition table type "None" has been selected. [ Quit ] [Deeper Search] Try to find more partitions >>>Deeper Search>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 The harddisk (320 GB / 298 GiB) seems too small! (< 1371 GB / 1276 GiB) Check the harddisk size: HD jumpers settings, BIOS detection... The following partitions can't be recovered: Partition Start End Size in sectors HFS 84 150 41 130794 151 40 2099856213 [S] HFS 3024 6 18 164800 219 56 2598944898 HFS 4305 94 51 143723 240 44 2239759362 HFS 4767 106 58 135477 107 57 2099856213 [S] HFS 13122 22 3 143832 23 2 2099856213 [S] ext4 18553 92 60 56061 38 1 602562560 ext4 18553 132 44 56061 77 48 602562560 ext4 18553 170 34 56061 115 38 602562560 ext4 18553 174 54 56061 119 58 602562560 ext4 18553 178 50 56061 123 54 602562560 [ Continue ] HFS, 1075 GB / 1001 GiB >>>Continue>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Partition Start End Size in sectors P ext4 0 32 31 12188 216 34 195811816 P ext4 0 32 33 12188 216 36 195811816 P FAT12 8 211 55 9 2 36 2880 [NO NAME] P FAT12 8 219 63 9 10 44 2880 [NO NAME] P NTFS 25 126 38 23493 75 6 377010176 P NTFS 25 126 38 29867 101 58 479410176 P FAT12 300 116 12 300 161 56 2880 [NO NAME] P FAT12 599 125 31 599 138 43 832 P ext4 761 142 14 12950 71 17 195811816 P ext4 761 145 25 12950 74 28 195811816 P ext4 761 147 43 12950 76 46 195811816 P ext4 761 149 5 12950 78 8 195811816 P ext4 761 150 30 12950 79 33 195811816 P ext4 761 152 24 12950 81 27 195811816 P ext4 761 153 33 12950 82 36 195811816 P ext4 761 155 3 12950 84 6 195811816 P ext4 761 158 22 12950 87 25 195811816 P ext4 761 160 56 12950 89 59 195811816 P ext4 761 162 34 12950 91 37 195811816 P ext4 761 166 6 12950 95 9 195811816 P ext4 761 168 48 12950 97 51 195811816 P ext4 761 169 33 12950 98 36 195811816 P ext4 761 172 4 12950 101 7 195811816 P ext4 761 174 62 12950 104 2 195811816 Structure: Ok. Keys T: change type, P: list files, Enter: to continue EXT4 Large file Sparse superblock Backup superblock, 100 GB / 93 GiB >>>Enter: to continue>>> Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Partition Start End Size in sectors P ext4 0 32 31 12188 216 34 195811816 P ext4 0 32 33 12188 216 36 195811816 P FAT12 8 211 55 9 2 36 2880 [NO NAME] P FAT12 8 219 63 9 10 44 2880 [NO NAME] P NTFS 25 126 38 23493 75 6 377010176 P NTFS 25 126 38 29867 101 58 479410176 P FAT12 300 116 12 300 161 56 2880 [NO NAME] P FAT12 599 125 31 599 138 43 832 P ext4 761 142 14 12950 71 17 195811816 P ext4 761 145 25 12950 74 28 195811816 P ext4 761 147 43 12950 76 46 195811816 P ext4 761 149 5 12950 78 8 195811816 P ext4 761 150 30 12950 79 33 195811816 P ext4 761 152 24 12950 81 27 195811816 P ext4 761 153 33 12950 82 36 195811816 P ext4 761 155 3 12950 84 6 195811816 P ext4 761 158 22 12950 87 25 195811816 P ext4 761 160 56 12950 89 59 195811816 P ext4 761 162 34 12950 91 37 195811816 P ext4 761 166 6 12950 95 9 195811816 P ext4 761 168 48 12950 97 51 195811816 P ext4 761 169 33 12950 98 36 195811816 P ext4 761 172 4 12950 101 7 195811816 P ext4 761 174 62 12950 104 2 195811816 Next [ Quit ] Return to main menu >>>Quit>>> (Das fuehrt auf folgende, anfaengliche Seite zurueck) Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 [ Analyse ] Analyse current partition structure and search for lost partitions [ Advanced ] Filesystem Utils [ Geometry ] Change disk geometry [ Options ] Modify options [ Quit ] Return to disk selection Note: Correct disk geometry is required for a successful recovery. 'Analyse' process may give some warnings if it thinks the logical geometry is mismatched.