Ich habenun die Auswertung:
Wed Apr 2 16:52:11 2008
Command line: TestDisk
TestDisk 6.10-WIP, Data Recovery Utility, February 2008
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows Vista (6001) SP1 - Compiler: GCC 4.1, Cygwin 1005.25
ext2fs lib: 1.40.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20070512
filewin32_getfilesize(\\.\D
![Lächeln :) :)](/forum/styles/smilies/smile.gif)
GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\D
![Lächeln :) :)](/forum/styles/smilies/smile.gif)
SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\F
![Lächeln :) :)](/forum/styles/smilies/smile.gif)
GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\F
![Lächeln :) :)](/forum/styles/smilies/smile.gif)
SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\F:
file_read(4,1,buffer,234452609(14593/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - FUJITSU MHV2120BH PL
Disk \\.\PhysicalDrive1 - 1030 MB / 982 MiB - CHS 125 255 63, sector size=512
Disk /dev/sda - 120 GB / 111 GiB - FUJITSU MHV2120BH PL
Partition table type: Intel
Analyse Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 124592113, partition 124592128
check_part_i386 failed for partition type 07
Current partition structure:
1 * HPFS - NTFS 0 32 33 7755 160 21 124592128
Invalid NTFS boot
2 P HPFS - NTFS 7755 160 22 14593 0 63 109842432
2 P HPFS - NTFS 7755 160 22 14593 0 63 109842432
Computes LBA from CHS for Disk /dev/sda - 120 GB / 111 GiB - CHS 14594 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 120 GB / 111 GiB - CHS 14594 255 63
FAT32 at 0/1/1
FAT1 : 32-3839
FAT2 : 3840-7647
start_rootdir : 8208 root cluster : 72
Data : 7648-3903727
sectors : 3903732
cluster_size : 8
no_of_cluster : 487010 (2 - 487011)
fat_length 3808 calculated 3805
FAT differs, FAT sectors=0-8/3808
FAT32 at 0/1/1
set_FAT_info: name from BS used
D FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
FAT32, 1998 MB / 1906 MiB
Search for partition aborted
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
FAT32, 1998 MB / 1906 MiB
dir_partition inode=0
FAT: cluster=72(0x48), pos=8271
P FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
FAT32, 1998 MB / 1906 MiB
Directory /
interface_write()
1 * FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sda - 120 GB / 111 GiB - CHS 14594 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 124592113, partition 124592128
check_part_i386 failed for partition type 07
Current partition structure:
1 * HPFS - NTFS 0 32 33 7755 160 21 124592128
Invalid NTFS boot
2 P HPFS - NTFS 7755 160 22 14593 0 63 109842432
2 P HPFS - NTFS 7755 160 22 14593 0 63 109842432
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 120 GB / 111 GiB - CHS 14594 255 63
FAT32 at 0/1/1
FAT1 : 32-3839
FAT2 : 3840-7647
start_rootdir : 8208 root cluster : 72
Data : 7648-3903727
sectors : 3903732
cluster_size : 8
no_of_cluster : 487010 (2 - 487011)
fat_length 3808 calculated 3805
FAT differs, FAT sectors=0-8/3808
FAT32 at 0/1/1
set_FAT_info: name from BS used
D FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
FAT32, 1998 MB / 1906 MiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
FAT32, 1998 MB / 1906 MiB
interface_write()
1 * FAT32 0 1 1 242 254 63 3903732 [RECOVERY]
Habe nun Deeper Search gestartet. So schauts im Moment aus:
![](/forum/proxy.php?image=http%3A%2F%2Fimg138.imageshack.us%2Fimg138%2F3629%2F15hw9.th.jpg&hash=d95c16af9974697dc60d0c7d5747bec4)