Mon Nov 7 18:49:28 2005
TestDisk command line :
TestDisk 6.2-WIP, Data Recovery Utility, November 2005
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.38, ntfs lib: avaible, reiserfs lib: 0.3.1-rc8)
Using locale 'C'.
file_read(4,1,buffer,39118274(2434/254/63)) seek err Invalid argument
file_read(5,1,buffer,234452609(14593/254/63)) seek err Invalid argument
file_read(6,1,buffer,240123554(14946/254/63)) seek err Invalid argument
file_read(7,1,buffer,398299544(24792/254/63)) seek err Invalid argument
Hard disk list
Disk /dev/sda - 18 GB - CHS 2434 255 63, sector size=512
Disk /dev/sdb - 111 GB - CHS 14593 255 63, sector size=512
Disk /dev/sdc - 114 GB - CHS 14946 255 63, sector size=512
Disk /dev/sdd - 189 GB - CHS 24792 255 63, sector size=512
Analyse Disk /dev/sdd - 189 GB - CHS 24792 255 63
Current partitions:
Partition sector doesn't have the endmark 0xAA55
search_part()
Disk /dev/sdd - 189 GB - CHS 24792 255 63
HFS magic value at 809/2/1
Results
interface_write()
No partition found or selected for recovery
search_part()
Disk /dev/sdd - 189 GB - CHS 24792 255 63
HFS magic value at 809/2/1
HFS magic value at 7371/254/63
NTFS at 24791/254/63
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 24791 254 63 398283417
NTFS found using backup sector!, 194474 MB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 24791 254 63 398283417
NTFS found using backup sector!, 194474 MB
interface_write()
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417
write!
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417
NTFS found using backup sector!, 194474 MB
NTFS at 0/1/1
sectors_per_cluster 224 8
mft_lcn 262564588 2
mftmirr_lcn 3152422133 48
clusters_per_mft_record -120 -10
clusters_per_index_record 122 1
Boot sector
Bad
Backup boot sector
OK
Sectors are not identical.
copy backup boot sector over boot sector
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417
NTFS found using backup sector!, 194474 MB
NTFS at 0/1/1
NTFS at 0/1/1
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
OK
Backup boot sector
OK
Sectors are identical.
You will have to reboot for the change to take effect.
TestDisk exited normally.
Mon Nov 7 19:38:40 2005
TestDisk command line :
TestDisk 6.2-WIP, Data Recovery Utility, November 2005
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.38, ntfs lib: avaible, reiserfs lib: 0.3.1-rc8)
Using locale 'C'.
file_read(4,1,buffer,39118274(2434/254/63)) seek err Invalid argument
file_read(5,1,buffer,234452609(14593/254/63)) seek err Invalid argument
file_read(6,1,buffer,240123554(14946/254/63)) seek err Invalid argument
file_read(7,1,buffer,398299544(24792/254/63)) seek err Invalid argument
Hard disk list
Disk /dev/sda - 18 GB - CHS 2434 255 63, sector size=512
Disk /dev/sdb - 111 GB - CHS 14593 255 63, sector size=512
Disk /dev/sdc - 114 GB - CHS 14946 255 63, sector size=512
Disk /dev/sdd - 189 GB - CHS 24792 255 63, sector size=512
Analyse Disk /dev/sdd - 189 GB - CHS 24792 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partitions:
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
search_part()
Disk /dev/sdd - 189 GB - CHS 24792 255 63
NTFS at 0/1/1
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
interface_write()
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
NTFS at 0/1/1
NTFS at 0/1/1
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
OK
Backup boot sector
OK
Sectors are identical.
List of partition type
Mon Nov 7 19:39:50 2005
TestDisk command line :
TestDisk 6.2-WIP, Data Recovery Utility, November 2005
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.38, ntfs lib: avaible, reiserfs lib: 0.3.1-rc8)
Using locale 'C'.
file_read(4,1,buffer,39118274(2434/254/63)) seek err Invalid argument
file_read(5,1,buffer,234452609(14593/254/63)) seek err Invalid argument
file_read(6,1,buffer,240123554(14946/254/63)) seek err Invalid argument
file_read(7,1,buffer,398299544(24792/254/63)) seek err Invalid argument
Hard disk list
Disk /dev/sda - 18 GB - CHS 2434 255 63, sector size=512
Disk /dev/sdb - 111 GB - CHS 14593 255 63, sector size=512
Disk /dev/sdc - 114 GB - CHS 14946 255 63, sector size=512
Disk /dev/sdd - 189 GB - CHS 24792 255 63, sector size=512
New options :
Paranoid : No
Dump : No
Cylinder boundary : Yes
Allow partial last cylinder : No
Ask partition order : No
Halt on errors : Yes
Expert mode : No
Partition table type : Intel
Analyse Disk /dev/sdd - 189 GB - CHS 24792 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partitions:
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
search_part()
Disk /dev/sdd - 189 GB - CHS 24792 255 63
NTFS at 0/1/1
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
interface_write()
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
Mon Nov 7 19:57:53 2005
TestDisk command line :
TestDisk 6.2-WIP, Data Recovery Utility, November 2005
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.38, ntfs lib: avaible, reiserfs lib: 0.3.1-rc8)
Using locale 'C'.
file_read(4,1,buffer,39118274(2434/254/63)) seek err Invalid argument
file_read(5,1,buffer,234452609(14593/254/63)) seek err Invalid argument
file_read(6,1,buffer,240123554(14946/254/63)) seek err Invalid argument
file_read(7,1,buffer,398299544(24792/254/63)) seek err Invalid argument
Hard disk list
Disk /dev/sda - 18 GB - CHS 2434 255 63, sector size=512
Disk /dev/sdb - 111 GB - CHS 14593 255 63, sector size=512
Disk /dev/sdc - 114 GB - CHS 14946 255 63, sector size=512
Disk /dev/sdd - 189 GB - CHS 24792 255 63, sector size=512
Analyse Disk /dev/sdd - 189 GB - CHS 24792 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partitions:
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
search_part()
Disk /dev/sdd - 189 GB - CHS 24792 255 63
NTFS at 0/1/1
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
* HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
Can't open NTFS filesystem: Input/Output error
interface_write()
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
Don't write, no confirmation
Analyse Disk /dev/sdd - 189 GB - CHS 24792 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partitions:
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
search_part()
Disk /dev/sdd - 189 GB - CHS 24792 255 63
NTFS at 0/1/1
sectors_per_cluster 8
mft_lcn 2
mftmirr_lcn 48
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]
NTFS, 194474 MB
interface_write()
1 * HPFS - NTFS 0 1 1 24791 254 63 398283417 [Storage_USB]