Mon Mar 26 17:53:21 2007
Command line: TestDisk
TestDisk 6.7-WIP, Data Recovery Utility, February 2007
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.39, ntfs lib: 9:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20070114)
Using locale 'C'.
filewin32_getfilesize(\\.\G:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\G:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\G:
filewin32_getfilesize(\\.\H:) GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\H:) SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\H:
file_read(4,1,buffer,488408129(30401/254/63)) lseek err Invalid argument
file_read(5,1,buffer,625169474(38914/254/63)) lseek err Invalid argument
file_read(6,1,buffer,781433729(48641/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk /dev/sdb - 320 GB / 298 GiB - CHS 38914 255 63, sector size=512
Disk /dev/sdc - 400 GB / 372 GiB - CHS 48641 255 63, sector size=512
Disk /dev/sdc - 400 GB / 372 GiB
Partition table type: Intel
Analyse Disk /dev/sdc - 400 GB / 372 GiB - CHS 48641 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
search_part()
Disk /dev/sdc - 400 GB / 372 GiB - CHS 48641 255 63
NTFS at 0/1/1
filesystem size 781417602
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 48838600
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
NTFS, 400 GB / 372 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
NTFS, 400 GB / 372 GiB
interface_load
Disk /dev/sdc - 400 GB / 372 GiB - CHS 48641 255 63 Mon Mar 26 17:14:06 2007
1 * HPFS - NTFS 0 1 1 48640 254 63 781417602
interface_write()
1 * HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
search_part()
Disk /dev/sdc - 400 GB / 372 GiB - CHS 48641 255 63
NTFS at 0/1/1
filesystem size 781417602
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 48838600
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
NTFS, 400 GB / 372 GiB
NTFS at 48640/254/63
filesystem size 781417602
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 48838600
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
NTFS found using backup sector!, 400 GB / 372 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
NTFS, 400 GB / 372 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 48640 254 63 781417602 [PB]
write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.