Sun Jun 21 09:09:30 2020
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=102456360960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=11231297536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=398417985536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=465744953344
Hard disk list
Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 102 GB / 95 GiB - CHS 12456 255 63, sector size=512
Drive D: - 11 GB / 10 GiB - CHS 1365 255 63, sector size=512
Drive E: - 398 GB / 371 GiB - CHS 48438 255 63, sector size=512
Drive F: - 465 GB / 433 GiB - CHS 56623 255 63, sector size=512
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 1/42/24
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
Error: size boot_sector 6174 > partition 6173
check_part_i386 failed for partition type 07
check_part_i386 failed for partition type 07
Current partition structure:
Warning: number of heads/cylinder mismatches 16 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 2 (NTFS) != 63 (HD)
Error: size boot_sector 6174 > partition 6173
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 1 42 24 1 140 22 6173
1 P HPFS - NTFS 1 42 24 1 140 22 6173
Invalid NTFS or EXFAT boot
2 * HPFS - NTFS 4177 182 38 60801 80 15 909658112
2 * HPFS - NTFS 4177 182 38 60801 80 15 909658112
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
FAT32 at 0/32/33
FAT1 : 32-8222
FAT2 : 8223-16413
start_rootdir : 16414 root cluster : 2
Data : 16414-67112925
sectors : 67112959
cluster_size : 64
no_of_cluster : 1048383 (2 - 1048384)
fat_length 8191 calculated 8191
FAT32 at 0/32/33
FAT32 LBA 0 32 33 4177 182 36 67112959 [ESD-USB]
FAT32, blocksize=32768, 34 GB / 32 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,13,buffer,976775170(60801/112/50)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
Results
* FAT32 LBA 0 32 33 4177 182 37 67112960 [ESD-USB]
FAT32, blocksize=32768, 34 GB / 32 GiB
interface_write()
1 * FAT32 LBA 0 32 33 4177 182 37 67112960 [ESD-USB]
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
FAT32 at 0/32/33
FAT1 : 32-8222
FAT2 : 8223-16413
start_rootdir : 16414 root cluster : 2
Data : 16414-67112925
sectors : 67112959
cluster_size : 64
no_of_cluster : 1048383 (2 - 1048384)
fat_length 8191 calculated 8191
FAT32 at 0/32/33
FAT32 LBA 0 32 33 4177 182 36 67112959 [ESD-USB]
FAT32, blocksize=32768, 34 GB / 32 GiB
FAT32 at 0/32/39
FAT1 : 32-8222
FAT2 : 8223-16413
start_rootdir : 16414 root cluster : 2
Data : 16414-67112925
sectors : 67112959
cluster_size : 64
no_of_cluster : 1048383 (2 - 1048384)
fat_length 8191 calculated 8191
set_FAT_info: name from BS used
FAT32 at 0/32/39
FAT32 LBA 0 32 33 4177 182 36 67112959 [NO NAME]
FAT32, blocksize=32768, 34 GB / 32 GiB
NTFS at 1/42/24
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 1 42 24 1 140 23 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,13,buffer,976775170(60801/112/50)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
Results
FAT32 LBA 0 32 33 4177 182 37 67112960 [ESD-USB]
FAT32, blocksize=32768, 34 GB / 32 GiB
HPFS - NTFS 1 42 24 1 140 23 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
dir_partition inode=5
HPFS - NTFS 1 42 24 1 140 23 6174 [Boot]
NTFS, blocksize=512, 3161 KB / 3087 KiB
Directory /
5 dr-xr-xr-x 0 0 0 15-Feb-2005 22:33 .
5 dr-xr-xr-x 0 0 0 15-Feb-2005 22:33 ..
27 dr-xr-xr-x 0 0 0 15-Feb-2005 22:33 System Volume Information
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 1/42/24
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
Error: size boot_sector 6174 > partition 6173
check_part_i386 failed for partition type 07
check_part_i386 failed for partition type 07
Current partition structure:
Warning: number of heads/cylinder mismatches 16 (NTFS) != 255 (HD)
Warning: number of sectors per track mismatches 2 (NTFS) != 63 (HD)
Error: size boot_sector 6174 > partition 6173
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 1 42 24 1 140 22 6173
1 P HPFS - NTFS 1 42 24 1 140 22 6173
Invalid NTFS or EXFAT boot
2 * HPFS - NTFS 4177 182 38 60801 80 15 909658112
2 * HPFS - NTFS 4177 182 38 60801 80 15 909658112