Failed to set locale, using default 'C'.


Mon Apr 22 23:50:42 2013
Command line: TestDisk /log f771616896.vhd

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 2.6.32.12-0.7.1.xs6.0.2.542.170665xen (#1 SMP Tue Jan 17 15:14:24 EST 2012) i686
Compiler: GCC 4.4
Compilation date: 2013-04-14T19:49:13
ext2fs lib: 1.41.12, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
Hard disk list
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63, sector size=512

Partition table type default to Intel
Disk f771616896.vhd - 1686 MB / 1607 MiB
Partition table type: Intel

Interface Advanced

Analyse Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
Can't open backup.log file: No such file or directory
interface_load

interface_write()
 
No partition found or selected for recovery

search_part()
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63

interface_write()
 
No partition found or selected for recovery
simulate write!
No extended partition
Partition table type default to Intel
Disk f771616896.vhd - 1686 MB / 1607 MiB
Partition table type: None

Interface Advanced
   P Unknown                  0   0  1   204 252 47    3293183
Image created successfully.

Analyse Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
Current partition structure:
   P Unknown                  0   0  1   204 252 47    3293183

search_part()
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB
This partition ends after the disk limits.
NTFS: Can't read MFT
     NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
This partition ends after the disk limits.
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
This partition ends after the disk limits.
NTFS: Can't read MFT
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
This partition ends after the disk limits.
     HFS                    204 126 45 112949 170 49 1811251202 [D]
     HFS blocksize=16777216, 927 GB / 863 GiB
This partition ends after the disk limits.
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1686 MB / 1607 MiB) seems too small! (< 929 GB / 865 GiB)
The following partitions can't be recovered:
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB
     NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     HFS                    204 126 45 112949 170 49 1811251202 [D]
     HFS blocksize=16777216, 927 GB / 863 GiB

interface_write()
 
No partition found or selected for recovery

search_part()
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB
This partition ends after the disk limits.
NTFS part_offset=5378048, part_size=10734272512, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS: Can't read MFT
     NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
This partition ends after the disk limits.
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
This partition ends after the disk limits.
NTFS part_offset=8527360, part_size=10734272512, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS: Can't read MFT
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
This partition ends after the disk limits.
     HFS                    204 126 45 112949 170 49 1811251202 [D]
     HFS blocksize=16777216, 927 GB / 863 GiB
This partition ends after the disk limits.
Disk f771616896.vhd - 1686 MB / 1607 MiB - CHS 205 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1686 MB / 1607 MiB) seems too small! (< 929 GB / 865 GiB)
The following partitions can't be recovered:
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB
     NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     HFS                    204 126 45 112949 170 49 1811251202 [D]
     HFS blocksize=16777216, 927 GB / 863 GiB

interface_write()
 
No partition found or selected for recovery

Interface Advanced
   P Unknown                  0   0  1   204 252 47    3293183
Change partition type:
   P NTFS                     0   0  1   204 252 47    3293183

ntfs_boot_sector
   P NTFS                     0   0  1   204 252 47    3293183
filesystem size           549789368321 1
sectors_per_cluster       1 0
mft_lcn                   33554432 0
mftmirr_lcn               1058030929 0
clusters_per_mft_record   -1 0
clusters_per_index_record 36 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 10520, seq=1, main=0 res=1
mft at 18712, seq=1, main=0 res=1
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
   P NTFS                     0   0  1   204 252 47    3293183
filesystem size           549789368321 1
sectors_per_cluster       1 0
mft_lcn                   33554432 0
mftmirr_lcn               1058030929 0
clusters_per_mft_record   -1 0
clusters_per_index_record 36 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
NTFS signature is missing.
NTFS signature is missing.

   P NTFS                     0   0  1   204 252 47    3293183
Can't open filesystem. Filesystem seems damaged.
Partition table type default to Intel
Disk f771616896.vhd - 1686 MB / 1607 MiB
Partition table type: None
New geometry
Disk f771616896.vhd - 10733 MB / 10236 MiB - CHS 1305 255 63 sector_size=512

Analyse Disk f771616896.vhd - 10733 MB / 10236 MiB - CHS 1305 255 63
Current partition structure:
   P Unknown                  0   0  1  1304 254 63   20964825

search_part()
Disk f771616896.vhd - 10733 MB / 10236 MiB - CHS 1305 255 63
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB

ext2fs_dir_iterate failed with error 2133571402.
Directory /

interface_write()
   P ext3                     0 134 15  1305 240 31   20971520 [root]
 
Write isn't available because the partition table type "None" has been selected.
Error reading $MFT: Input/output error
Failed to load $MFT: Input/output error
Error reading $MFT: Input/output error
Failed to load $MFT: Input/output error

search_part()
Disk f771616896.vhd - 10733 MB / 10236 MiB - CHS 1305 255 63
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB
NTFS part_offset=5378048, part_size=10734272512, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS: Can't read MFT
     NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
This partition ends after the disk limits.
NTFS part_offset=8527360, part_size=10734272512, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS: Can't read MFT
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
This partition ends after the disk limits.
Search for partition aborted
Disk f771616896.vhd - 10733 MB / 10236 MiB - CHS 1305 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (10733 MB / 10236 MiB) seems too small! (< 10 GB / 10 GiB)
The following partitions can't be recovered:
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

   P NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
   P ext3                     0 134 15  1305 240 31   20971520 [root]
   P NTFS                     0 166 47  1305 175 30   20965376
 
Write isn't available because the partition table type "None" has been selected.
New geometry
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63 sector_size=512

Analyse Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
Current partition structure:
   P Unknown                  0   0  1  1305 254 63   20980890

search_part()
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB

interface_write()
   P ext3                     0 134 15  1305 240 31   20971520 [root]
 
Write isn't available because the partition table type "None" has been selected.
Error reading $MFT: Input/output error
Failed to load $MFT: Input/output error
Error reading $MFT: Input/output error
Failed to load $MFT: Input/output error
Error reading $MFT: Input/output error
Failed to load $MFT: Input/output error
Error reading $MFT: Input/output error
Failed to load $MFT: Input/output error

search_part()
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
     ext3                     0 134 15  1305 240 31   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB
NTFS part_offset=5378048, part_size=10734272512, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS: Can't read MFT
     NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     ext3                     0 202 35  1306  53 51   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock Recover, 10 GB / 10 GiB
NTFS part_offset=8527360, part_size=10734272512, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS: Can't read MFT
     NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
     HFS                    204 126 45 112949 170 49 1811251202 [D]
     HFS blocksize=16777216, 927 GB / 863 GiB
This partition ends after the disk limits.
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (10 GB / 10 GiB) seems too small! (< 929 GB / 865 GiB)
The following partition can't be recovered:
     HFS                    204 126 45 112949 170 49 1811251202 [D]
     HFS blocksize=16777216, 927 GB / 863 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

   P NTFS                     0 166 47  1305 175 30   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

   P NTFS                     1   9 24  1306  18  7   20965376
     NTFS, blocksize=4096, 10734 MB / 10237 MiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
   P ext3                     0 134 15  1305 240 31   20971520 [root]
   P NTFS                     0 166 47  1305 175 30   20965376
   P ext3                     0 202 35  1306  53 51   20971520 [root]
   P NTFS                     1   9 24  1306  18  7   20965376
 
Write isn't available because the partition table type "None" has been selected.
Partition table type default to Intel
Disk f771616896.vhd - 10 GB / 10 GiB
Partition table type: Intel

Analyse Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63

interface_write()
 
No partition found or selected for recovery

search_part()
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63

interface_write()
 
No partition found or selected for recovery
simulate write!
No extended partition
Partition table type default to Intel
Disk f771616896.vhd - 10 GB / 10 GiB
Partition table type: EFI GPT

Analyse Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT

search_part()
Disk f771616896.vhd - 10 GB / 10 GiB - CHS 1306 255 63
     MS Data                     8456   20979975   20971520 [root]
     ext3 blocksize=4096 Large file Sparse superblock, 10 GB / 10 GiB

ext2fs_dir_iterate failed with error 2133571402.
Directory /

interface_write()
 1 P MS Data                     8456   20979975   20971520 [root]
simulate write!

TestDisk exited normally.
