

Mon May 14 10:47:34 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-08T10:52:46
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=400088457728
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=15879634944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=400088457728
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=15879634944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=100164173824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=15874758144
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=400085812224
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-00YZCA0, S/N:2020202057202d44435759414155365830343938, FW:01.03B01
Disk /dev/sdb - 160 GB / 149 GiB - CHS 73444 224 19, sector size=512 - Maxtor 6G160E0, S/N:324734315430474c202020202020202020202020, FW:KA101V00
Disk /dev/sdc - 400 GB / 372 GiB - CHS 48641 255 63, sector size=512 - SAMSUNG HD400LD, FW:WQ10
Disk /dev/sdd - 15 GB / 14 GiB - CHS 1930 255 63, sector size=512 - Kingston DT 100 G2, S/N:0B0B19C1C207, FW:PMAP

Partition table type (auto): Intel
Disk /dev/sda - 320 GB / 298 GiB - WDC WD3200AAJS-00YZCA0
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=4
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160
Change partition type:
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160
New options :
 Dump : No
 Align partition: Yes
 Expert mode : Yes

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=4
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160

Analyse Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=4
Current partition structure:
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160
Ask the user for vista mode
search_vista_part: 1

search_part()
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=4
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160

Analyse Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=4
Current partition structure:
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160
Backup partition structure
partition_save
Ask the user for vista mode
search_vista_part: 1

search_part()
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.
Failed to startup volume: Input/Output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/Output error.

search_part()
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 7649/0/1
filesystem size           365382297
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               22836393
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS           7649   0  1 30392 253 63  365382297 [Disco_E]
     NTFS, blocksize=4096, 187 GB / 174 GiB
NTFS at 38911/254/63
filesystem size           625121217
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               39070076
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   1  1 38911 254 63  625121217
     NTFS found using backup sector, blocksize=4096, 320 GB / 298 GiB
file_pread(4,2,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(4,1,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(4,1,buffer,625143807(38913/102/37)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=3
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=3

Results
     HPFS - NTFS              0   1  1 38911 254 63  625121217
     NTFS found using backup sector, blocksize=4096, 320 GB / 298 GiB
     HPFS - NTFS           7649   0  1 30392 254 63  365382360 [Disco_E]
     NTFS, blocksize=4096, 187 GB / 174 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0   1  1 38911 254 63  625121217
     NTFS found using backup sector, blocksize=4096, 320 GB / 298 GiB
Can't open filesystem. Filesystem seems damaged.


dir_partition inode=5
     HPFS - NTFS           7649   0  1 30392 254 63  365382360 [Disco_E]
     NTFS, blocksize=4096, 187 GB / 174 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 24-Mar-2012 16:17 .
       5 dr-xr-xr-x     0      0         0 24-Mar-2012 16:17 ..
   51352 dr-xr-xr-x     0      0         0 23-Oct-2010 16:43 Backups Primavera
   25821 dr-xr-xr-x     0      0         0 15-Feb-2012 11:59 BackupsBeelogic
     267 dr-xr-xr-x     0      0         0 13-Jan-2010 14:57 Dados
  101566 -r--r--r--     0      0    737280  6-May-2011 10:47 dest.xls
   99374 dr-xr-xr-x     0      0         0  2-May-2011 15:57 FILES
   54874 dr-xr-xr-x     0      0         0  8-Nov-2006 13:22 gs
    9579 -r--r--r--     0      0      2608  5-Aug-2011 14:44 images.jpg
    9096 -r--r--r--     0      0 4278190080 17-Apr-2012 08:05 pagefile.sys
   71379 -r--r--r--     0      0 1420828672 16-Dec-2009 20:59 priv1.edb
   92037 dr-xr-xr-x     0      0         0  4-May-2012 17:52 Profiles
   56166 dr-xr-xr-x     0      0         0  9-Nov-2006 17:04 PROGRAM FILES
    6257 dr-xr-xr-x     0      0         0  9-Feb-2010 11:33 RECYCLER
    6730 dr-xr-xr-x     0      0         0  6-May-2011 12:49 Software
      27 dr-xr-xr-x     0      0         0  5-May-2012 04:15 System Volume Information
    9497 -r--r--r--     0      0   2348032 30-Sep-2011 17:24 Worten 19-Set.xls
interface_load
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63 Mon May 14 11:10:27 2012
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
Not an exFAT boot sector.

   P HPFS - NTFS              0   1  1 38911 254 63  625121217
     NTFS found using backup sector, blocksize=4096, 320 GB / 298 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

   P HPFS - NTFS              0   1  1 38911 254 63  625121217
     NTFS found using backup sector, blocksize=4096, 320 GB / 298 GiB
Can't open filesystem. Filesystem seems damaged.


dir_partition inode=5
     HPFS - NTFS           7649   0  1 30392 254 63  365382360 [Disco_E]
     NTFS, blocksize=4096, 187 GB / 174 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 24-Mar-2012 16:17 .
       5 dr-xr-xr-x     0      0         0 24-Mar-2012 16:17 ..
   51352 dr-xr-xr-x     0      0         0 23-Oct-2010 16:43 Backups Primavera
   25821 dr-xr-xr-x     0      0         0 15-Feb-2012 11:59 BackupsBeelogic
     267 dr-xr-xr-x     0      0         0 13-Jan-2010 14:57 Dados
  101566 -r--r--r--     0      0    737280  6-May-2011 10:47 dest.xls
   99374 dr-xr-xr-x     0      0         0  2-May-2011 15:57 FILES
   54874 dr-xr-xr-x     0      0         0  8-Nov-2006 13:22 gs
    9579 -r--r--r--     0      0      2608  5-Aug-2011 14:44 images.jpg
    9096 -r--r--r--     0      0 4278190080 17-Apr-2012 08:05 pagefile.sys
   71379 -r--r--r--     0      0 1420828672 16-Dec-2009 20:59 priv1.edb
   92037 dr-xr-xr-x     0      0         0  4-May-2012 17:52 Profiles
   56166 dr-xr-xr-x     0      0         0  9-Nov-2006 17:04 PROGRAM FILES
    6257 dr-xr-xr-x     0      0         0  9-Feb-2010 11:33 RECYCLER
    6730 dr-xr-xr-x     0      0         0  6-May-2011 12:49 Software
      27 dr-xr-xr-x     0      0         0  5-May-2012 04:15 System Volume Information
    9497 -r--r--r--     0      0   2348032 30-Sep-2011 17:24 Worten 19-Set.xls
Invalid partition structure.

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=4
 1 * W2K Dynamic/SFS          0   1  1  7648 254 63  122881122
 2 P W2K Dynamic/SFS       7649   0  1 38912 254 63  502256160

TestDisk exited normally.
