Bonsoir ci dessous le resultat d analyse
Est il possible de charger le fichier log afin de ne pas devoir tout analyser pour l application des modif.
Merci par avance
Wed Mar 21 19:23:36 2012
Command line: TestDisk
TestDisk 6.12, Data Recovery Utility, May 2011
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.0.4-pmagic (#1 SMP Sat Sep 3 17:11:11 CDT 2011) i686
Compiler: GCC 4.5
Compilation date: 2011-05-15T12:36:01
ext2fs lib: 1.41.14, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 1953525168 sectors
/dev/sda: user_max 1953525168 sectors
/dev/sda: native_max 1953525168 sectors
/dev/sda: dco 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ATA WDC WD10EALS-00Z
Disk /dev/sdb - 4047 MB / 3859 MiB - CHS 1020 125 62, sector size=512 - SanDisk Cruzer
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - ATA WDC WD10EALS-00Z
Partition table type: Intel
New geometry
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63 sector_size=512
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P W2K Dynamic/SFS 0 1 1 2 0 32 1985
2 * W2K Dynamic/SFS 2 0 33 205 3 19 204800
3 P W2K Dynamic/SFS 205 3 20 101792 8 8 102400000
4 P Linux Swap 101792 8 9 1938018 15 31 1850916272
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63
NTFS at 2/0/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 205/3/20
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS, 52 GB / 48 GiB
Linux Swap 101792 8 9 1938018 15 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
Warning: the current number of heads per cylinder is 16 but the correct value may be 255.
Results
* HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
P HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS, 52 GB / 48 GiB
P Linux Swap 101792 8 9 1938018 15 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
interface_write()
1 * HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
2 P HPFS - NTFS 205 3 20 101792 8 8 102400000
3 P Linux Swap 101792 8 9 1938018 15 15 1850916256
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63
NTFS at 2/0/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 205/3/19
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS found using backup sector!, 104 MB / 100 MiB
NTFS at 205/3/20
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS, 52 GB / 48 GiB
NTFS at 101792/8/8
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS found using backup sector!, 52 GB / 48 GiB
Linux Swap 101792 8 9 1938018 15 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
BAD_RS LBA=181490026 10709
check_part_i386 failed for partition type 0C
FAT32 LBA 180049 10 5 2380234 15 47 2217786838
This partition ends after the disk limits. (start=181490026, size=2217786838, end=2399276863, disk end=1953525168)
NTFS at 549792/8/8
filesystem size 451584000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 101792 8 9 549792 8 8 451584000 [Mes documents]
NTFS found using backup sector!, 231 GB / 215 GiB
NTFS at 549792/8/9
filesystem size 451584000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 549792 8 9 997792 8 8 451584000
NTFS, 231 GB / 215 GiB
NTFS at 997792/8/8
filesystem size 451584000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 549792 8 9 997792 8 8 451584000
NTFS found using backup sector!, 231 GB / 215 GiB
NTFS at 997792/8/9
filesystem size 471037952
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 997792 8 9 1465092 1 1 471037952 [Films]
NTFS, 241 GB / 224 GiB
NTFS at 1465092/1/1
filesystem size 471037952
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 997792 8 9 1465092 1 1 471037952 [Films]
NTFS found using backup sector!, 241 GB / 224 GiB
NTFS at 1465092/1/1
filesystem size 471037952
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1465092 1 1 1932391 9 56 471037952
NTFS, 241 GB / 224 GiB
NTFS at 1465092/1/2
filesystem size 394786816
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1465092 1 2 1856745 10 26 394786816 [Nouveau nom]
NTFS, 202 GB / 188 GiB
NTFS at 1465094/1/33
filesystem size 471040000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 997792 8 9 1465094 1 33 471040000 [Films]
NTFS found using backup sector!, 241 GB / 224 GiB
NTFS at 1465094/1/34
filesystem size 476704768
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1465094 1 34 1938015 7 55 476704768 [Films]
NTFS, 244 GB / 227 GiB
NTFS at 1856745/10/26
filesystem size 394786816
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1465092 1 2 1856745 10 26 394786816 [Nouveau nom]
NTFS found using backup sector!, 202 GB / 188 GiB
NTFS at 1938015/7/55
filesystem size 476706816
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1465092 1 2 1938015 7 55 476706816 [Nouveau nom]
NTFS found using backup sector!, 244 GB / 227 GiB
NTFS at 101792/8/8
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS at 997792/8/8
filesystem size 451584000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS at 1465092/1/1
filesystem size 471037952
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 1228 GB / 1144 GiB)
The following partition can't be recovered:
FAT32 LBA 180049 10 5 2380234 15 47 2217786838
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
Warning: the current number of heads per cylinder is 16 but the correct value may be 64.
Results
* HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS, 52 GB / 48 GiB
HPFS - NTFS 101792 8 8 203379 12 59 102400000
NTFS, 52 GB / 48 GiB
HPFS - NTFS 101792 8 9 549792 8 8 451584000 [Mes documents]
NTFS found using backup sector!, 231 GB / 215 GiB
Linux Swap 101792 8 9 1938018 15 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
HPFS - NTFS 549792 8 9 997792 8 8 451584000
NTFS, 231 GB / 215 GiB
HPFS - NTFS 997792 8 8 1445792 8 7 451584000
NTFS, 231 GB / 215 GiB
HPFS - NTFS 997792 8 9 1465092 1 1 471037952 [Films]
NTFS, 241 GB / 224 GiB
HPFS - NTFS 997792 8 9 1465094 1 33 471040000 [Films]
NTFS found using backup sector!, 241 GB / 224 GiB
HPFS - NTFS 1465092 1 1 1932391 9 56 471037952
NTFS, 241 GB / 224 GiB
HPFS - NTFS 1465092 1 2 1856745 10 26 394786816 [Nouveau nom]
NTFS, 202 GB / 188 GiB
HPFS - NTFS 1465092 1 2 1938015 7 55 476706816 [Nouveau nom]
NTFS found using backup sector!, 244 GB / 227 GiB
HPFS - NTFS 1465094 1 34 1938015 7 55 476704768 [Films]
NTFS, 244 GB / 227 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
dir_partition inode=5
HPFS - NTFS 1465094 1 34 1938015 7 55 476704768 [Films]
NTFS, 244 GB / 227 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-Mar-2012 15:41 .
5 dr-xr-xr-x 0 0 0 18-Mar-2012 15:41 ..
35 dr-xr-xr-x 0 0 0 2-Nov-2010 06:16 $RECYCLE.BIN
708 dr-xr-xr-x 0 0 0 18-Mar-2012 01:12 msdownld.tmp
38 dr-xr-xr-x 0 0 0 17-Mar-2012 16:09 System Volume Information
interface_write()
1 * HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P W2K Dynamic/SFS 0 1 1 2 0 32 1985
2 * W2K Dynamic/SFS 2 0 33 205 3 19 204800
3 P W2K Dynamic/SFS 205 3 20 101792 8 8 102400000
4 P Linux Swap 101792 8 9 1938018 15 31 1850916272
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938021 16 63
NTFS at 2/0/33
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 205/3/20
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS, 52 GB / 48 GiB
Linux Swap 101792 8 9 1938018 15 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
Warning: the current number of heads per cylinder is 16 but the correct value may be 255.
Results
* HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
P HPFS - NTFS 205 3 20 101792 8 8 102400000
NTFS, 52 GB / 48 GiB
P Linux Swap 101792 8 9 1938018 15 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
interface_write()
1 * HPFS - NTFS 2 0 33 205 3 19 204800 [Réservé au système]
2 P HPFS - NTFS 205 3 20 101792 8 8 102400000
3 P Linux Swap 101792 8 9 1938018 15 15 1850916256
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
New options :
Dump : No
Cylinder boundary : Yes
Allow partial last cylinder : Yes
Expert mode : No
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - ATA WDC WD10EALS-00Z
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
check_part_i386 2 type 42: no test
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
1 P W2K Dynamic/SFS 0 1 1 2 0 32 1985
2 * W2K Dynamic/SFS 2 0 33 205 3 19 204800
3 P W2K Dynamic/SFS 205 3 20 101792 8 8 102400000
4 P Linux Swap 101792 8 9 1938018 15 31 1850916272
SWAP2 version 1, 947 GB / 882 GiB
SIGHUP detected! TestDisk has been killed.
Wed Mar 21 21:21:15 2012
Command line: TestDisk
TestDisk 6.12, Data Recovery Utility, May 2011
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.0.4-pmagic (#1 SMP Sat Sep 3 17:11:11 CDT 2011) i686
Compiler: GCC 4.5
Compilation date: 2011-05-15T12:36:01
ext2fs lib: 1.41.14, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 1953525168 sectors
/dev/sda: user_max 1953525168 sectors
/dev/sda: native_max 1953525168 sectors
/dev/sda: dco 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ATA WDC WD10EALS-00Z
Disk /dev/sdb - 4047 MB / 3859 MiB - CHS 1020 125 62, sector size=512 - SanDisk Cruzer
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - ATA WDC WD10EALS-00Z
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
BAD_RS LBA=2048 32162
check_part_i386 2 type 42: no test
BAD_RS LBA=206848 3293533
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
1 P W2K Dynamic/SFS 0 1 1 0 32 32 1985
2 * W2K Dynamic/SFS 0 32 33 12 223 19 204800
3 P W2K Dynamic/SFS 12 223 20 6386 250 8 102400000
4 P Linux Swap 6386 250 9 121601 48 31 1850916272
SWAP2 version 1, 947 GB / 882 GiB
Can't create file /root/image.dd.
Can't create file!
Interface Advanced
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
BAD_RS LBA=2048 32162
check_part_i386 2 type 42: no test
BAD_RS LBA=206848 3293533
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
1 P W2K Dynamic/SFS 0 1 1 0 32 32 1985
2 * W2K Dynamic/SFS 0 32 33 12 223 19 204800
3 P W2K Dynamic/SFS 12 223 20 6386 250 8 102400000
4 P Linux Swap 6386 250 9 121601 48 31 1850916272
SWAP2 version 1, 947 GB / 882 GiB
New options :
Dump : No
Cylinder boundary : Yes
Allow partial last cylinder : No
Expert mode : No
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
BAD_RS LBA=2048 32162
check_part_i386 2 type 42: no test
BAD_RS LBA=206848 3293533
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P W2K Dynamic/SFS 0 1 1 0 32 32 1985
Bad sector count.
2 * W2K Dynamic/SFS 0 32 33 12 223 19 204800
Bad relative sector.
3 P W2K Dynamic/SFS 12 223 20 6386 250 8 102400000
Bad relative sector.
4 P Linux Swap 6386 250 9 121601 48 31 1850916272
Computes LBA from CHS for Disk /dev/sda - 1000 GB / 931 GiB - CHS 121602 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121602 255 63
NTFS at 0/32/33
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
Linux Swap 6386 250 9 121601 48 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
P Linux Swap 6386 250 9 121601 48 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
2 P HPFS - NTFS 12 223 20 6386 250 8 102400000
3 P Linux Swap 6386 250 9 121601 48 15 1850916256
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121602 255 63
NTFS at 0/32/33
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 12/223/19
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS found using backup sector!, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
Search for partition aborted
Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
2 P HPFS - NTFS 12 223 20 6386 250 8 102400000
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
Wed Mar 21 21:24:43 2012
Command line: TestDisk
TestDisk 6.12, Data Recovery Utility, May 2011
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.0.4-pmagic (#1 SMP Sat Sep 3 17:11:11 CDT 2011) i686
Compiler: GCC 4.5
Compilation date: 2011-05-15T12:36:01
ext2fs lib: 1.41.14, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 1953525168 sectors
/dev/sda: user_max 1953525168 sectors
/dev/sda: native_max 1953525168 sectors
/dev/sda: dco 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ATA WDC WD10EALS-00Z
Disk /dev/sdb - 4047 MB / 3859 MiB - CHS 1020 125 62, sector size=512 - SanDisk Cruzer
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - ATA WDC WD10EALS-00Z
Partition table type: Intel
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
BAD_RS LBA=2048 32162
check_part_i386 2 type 42: no test
BAD_RS LBA=206848 3293533
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P W2K Dynamic/SFS 0 1 1 0 32 32 1985
Bad sector count.
2 * W2K Dynamic/SFS 0 32 33 12 223 19 204800
Bad relative sector.
3 P W2K Dynamic/SFS 12 223 20 6386 250 8 102400000
Bad relative sector.
4 P Linux Swap 6386 250 9 121601 48 31 1850916272
Computes LBA from CHS for Disk /dev/sda - 1000 GB / 931 GiB - CHS 121602 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121602 255 63
NTFS at 0/32/33
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
Linux Swap 6386 250 9 121601 48 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
P Linux Swap 6386 250 9 121601 48 15 1850916256
SWAP2 version 1, 947 GB / 882 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
2 P HPFS - NTFS 12 223 20 6386 250 8 102400000
3 P Linux Swap 6386 250 9 121601 48 15 1850916256
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121602 255 63
NTFS at 0/32/33
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
NTFS at 12/223/19
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 204800
sectors_per_cluster 8
mft_lcn 8533
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS found using backup sector!, 104 MB / 100 MiB
NTFS at 12/223/20
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
Search for partition aborted
Results
* HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
P HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
dir_partition inode=5
* HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
NTFS, 104 MB / 100 MiB
Directory /
5 dr-xr-xr-x 0 0 0 18-Mar-2012 10:39 .
5 dr-xr-xr-x 0 0 0 18-Mar-2012 10:39 ..
35 dr-xr-xr-x 0 0 0 16-Jun-2011 07:01 Boot
85 -r--r--r-- 0 0 383786 20-Nov-2010 12:40 bootmgr
96 -r--r--r-- 0 0 8192 2-Nov-2010 03:38 BOOTSECT.BAK
97 dr-xr-xr-x 0 0 0 2-Nov-2010 03:40 System Volume Information
ntfs_device_testdisk_io_ioctl() unimplemented
dir_partition inode=5
P HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-Mar-2012 16:55 .
5 dr-xr-xr-x 0 0 0 18-Mar-2012 16:55 ..
250 dr-xr-xr-x 0 0 0 17-Mar-2012 17:03 Program Files (x86)
463 dr-xr-xr-x 0 0 0 15-Nov-2010 20:26 Users
57 dr-xr-xr-x 0 0 0 1-Nov-2010 20:48 $Recycle.Bin
369 dr-xr-xr-x 0 0 0 18-Mar-2012 10:01 ProgramData
23587 dr-xr-xr-x 0 0 0 1-Nov-2010 20:47 Recovery
73476 -r--r--r-- 0 0 3292 3-Nov-2010 06:01 RHDSetup.log
47 -r--r--r-- 0 0 229 18-Mar-2012 17:47 service.log
16271 dr-xr-xr-x 0 0 0 18-Mar-2012 17:00 System Volume Information
44136 dr-xr-xr-x 0 0 0 1-Nov-2010 23:38 VritualRoot
625 dr-xr-xr-x 0 0 0 17-Mar-2012 17:08 Windows
108166 dr-xr-xr-x 0 0 0 26-Feb-2012 16:25 ZHP
59863 dr-xr-xr-x 0 0 0 28-Apr-2011 15:09 _ISTMP1.DIR
62839 dr-xr-xr-x 0 0 0 17-Mar-2012 16:56 AMD
73590 -r--r--r-- 0 0 10 3-Nov-2010 06:04 csb.log
14010 dr-xr-xr-x 0 0 0 14-Jul-2009 05:08 Documents and Settings
58632 -r--r--r-- 0 0 3218202624 18-Mar-2012 16:37 hiberfil.sys
73535 -r--r--r-- 0 0 86 3-Nov-2010 06:03 Install.log
22647 dr-xr-xr-x 0 0 0 2-Nov-2010 18:33 MSOCache
58638 -r--r--r-- 0 0 4290936832 18-Mar-2012 16:38 pagefile.sys
58 dr-xr-xr-x 0 0 0 14-Jul-2009 03:20 PerfLogs
108201 -r--r--r-- 0 0 512 26-Feb-2012 16:25 PhysicalDisk0_MBR.bin
60 dr-xr-xr-x 0 0 0 17-Mar-2012 17:03 Program Files
dir_partition inode=250
P HPFS - NTFS 12 223 20 6386 250 8 102400000
NTFS, 52 GB / 48 GiB
Directory /Program Files (x86)
250 dr-xr-xr-x 0 0 0 17-Mar-2012 17:03 .
5 dr-xr-xr-x 0 0 0 18-Mar-2012 16:55 ..
67542 dr-xr-xr-x 0 0 0 6-Feb-2011 13:56 Microsoft Office
290 dr-xr-xr-x 0 0 0 14-Jul-2009 05:32 Reference Assemblies
73593 dr-xr-xr-x 0 0 0 17-Mar-2012 17:18 AMD
59763 dr-xr-xr-x 0 0 0 17-Mar-2012 17:03 AMD APP
59844 dr-xr-xr-x 0 0 0 17-Mar-2012 16:58 AMD AVT
121768 dr-xr-xr-x 0 0 0 9-Oct-2011 15:36 Apple Software Update
58859 dr-xr-xr-x 0 0 0 17-Mar-2012 17:02 ATI Technologies
111657 dr-xr-xr-x 0 0 0 30-May-2011 19:29 b4ficons
120915 dr-xr-xr-x 0 0 0 9-Oct-2011 15:36 Bonjour
75478 dr-xr-xr-x 0 0 0 6-Nov-2010 13:03 Canon
251 dr-xr-xr-x 0 0 0 24-Feb-2012 20:04 Common Files
15481 -r--r--r-- 0 0 174 14-Jul-2009 04:54 desktop.ini
73497 dr-xr-xr-x 0 0 0 3-Nov-2010 06:23 Gigabyte
60791 dr-xr-xr-x 0 0 0 13-Jul-2011 14:47 InstallShield Installation Information
282 dr-xr-xr-x 0 0 0 15-Feb-2012 13:10 Internet Explorer
74119 dr-xr-xr-x 0 0 0 19-Oct-2011 17:39 Java
79660 dr-xr-xr-x 0 0 0 11-Jan-2011 21:44 JRE
84436 dr-xr-xr-x 0 0 0 6-Feb-2011 13:56 Microsoft Analysis Services
73479 dr-xr-xr-x 0 0 0 3-Nov-2010 06:01 Temp
301 dr-xr-xr-x 0 0 0 14-Jul-2009 04:57 Uninstall Information
302 dr-xr-xr-x 0 0 0 14-Jul-2009 15:24 Windows Defender
304 dr-xr-xr-x 0 0 0 16-Jun-2011 06:55 Windows Mail
306 dr-xr-xr-x 0 0 0 16-Jun-2011 06:55 Windows Media Player
313 dr-xr-xr-x 0 0 0 14-Jul-2009 05:32 Windows NT
318 dr-xr-xr-x 0 0 0 16-Jun-2011 06:55 Windows Photo Viewer
320 dr-xr-xr-x 0 0 0 16-Jun-2011 06:55 Windows Portable Devices
321 dr-xr-xr-x 0 0 0 16-Jun-2011 06:55 Windows Sidebar
66406 dr-xr-xr-x 0 0 0 14-Feb-2012 19:28 Microsoft Silverlight
16837 dr-xr-xr-x 0 0 0 6-Feb-2011 19:43 Microsoft SQL Server Compact Edition
86518 dr-xr-xr-x 0 0 0 6-Feb-2011 19:43 Microsoft Synchronization Services
71868 dr-xr-xr-x 0 0 0 2-Nov-2010 18:36 Microsoft Visual Studio
66508 dr-xr-xr-x 0 0 0 2-Nov-2010 18:34 Microsoft Visual Studio 8
72548 dr-xr-xr-x 0 0 0 14-Feb-2011 06:07 Microsoft Works
75249 dr-xr-xr-x 0 0 0 5-Nov-2010 18:02 Microsoft WSE
68836 dr-xr-xr-x 0 0 0 7-Feb-2011 16:42 Microsoft.NET
65897 dr-xr-xr-x 0 0 0 15-Jan-2012 18:17 Mozilla Firefox
285 dr-xr-xr-x 0 0 0 2-Nov-2010 18:36 MSBuild
67126 dr-xr-xr-x 0 0 0 7-Feb-2011 08:14 MSECache
78996 dr-xr-xr-x 0 0 0 9-Apr-2011 15:30 MSXML 4.0
73802 dr-xr-xr-x 0 0 0 3-Nov-2010 06:11 obj
63156 dr-xr-xr-x 0 0 0 6-Mar-2011 22:02 OpenAL
78244 dr-xr-xr-x 0 0 0 11-Jan-2011 21:44 OpenOffice.org 3
117224 dr-xr-xr-x 0 0 0 6-Sep-2011 07:30 Orange
121882 dr-xr-xr-x 0 0 0 9-Oct-2011 15:36 QuickTime
76178 dr-xr-xr-x 0 0 0 24-Jun-2011 14:46 REACTOR
73523 dr-xr-xr-x 0 0 0 3-Nov-2010 06:03 Realtek
Directory /
5 dr-xr-xr-x 0 0 0 18-Mar-2012 16:55 .
5 dr-xr-xr-x 0 0 0 18-Mar-2012 16:55 ..
250 dr-xr-xr-x 0 0 0 17-Mar-2012 17:03 Program Files (x86)
463 dr-xr-xr-x 0 0 0 15-Nov-2010 20:26 Users
57 dr-xr-xr-x 0 0 0 1-Nov-2010 20:48 $Recycle.Bin
369 dr-xr-xr-x 0 0 0 18-Mar-2012 10:01 ProgramData
23587 dr-xr-xr-x 0 0 0 1-Nov-2010 20:47 Recovery
73476 -r--r--r-- 0 0 3292 3-Nov-2010 06:01 RHDSetup.log
47 -r--r--r-- 0 0 229 18-Mar-2012 17:47 service.log
16271 dr-xr-xr-x 0 0 0 18-Mar-2012 17:00 System Volume Information
44136 dr-xr-xr-x 0 0 0 1-Nov-2010 23:38 VritualRoot
625 dr-xr-xr-x 0 0 0 17-Mar-2012 17:08 Windows
108166 dr-xr-xr-x 0 0 0 26-Feb-2012 16:25 ZHP
59863 dr-xr-xr-x 0 0 0 28-Apr-2011 15:09 _ISTMP1.DIR
62839 dr-xr-xr-x 0 0 0 17-Mar-2012 16:56 AMD
73590 -r--r--r-- 0 0 10 3-Nov-2010 06:04 csb.log
14010 dr-xr-xr-x 0 0 0 14-Jul-2009 05:08 Documents and Settings
58632 -r--r--r-- 0 0 3218202624 18-Mar-2012 16:37 hiberfil.sys
73535 -r--r--r-- 0 0 86 3-Nov-2010 06:03 Install.log
22647 dr-xr-xr-x 0 0 0 2-Nov-2010 18:33 MSOCache
58638 -r--r--r-- 0 0 4290936832 18-Mar-2012 16:38 pagefile.sys
58 dr-xr-xr-x 0 0 0 14-Jul-2009 03:20 PerfLogs
108201 -r--r--r-- 0 0 512 26-Feb-2012 16:25 PhysicalDisk0_MBR.bin
60 dr-xr-xr-x 0 0 0 17-Mar-2012 17:03 Program Files
interface_write()
1 * HPFS - NTFS 0 32 33 12 223 19 204800 [Réservé au système]
2 P HPFS - NTFS 12 223 20 6386 250 8 102400000
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
Wed Mar 21 21:27:57 2012
Command line: TestDisk
TestDisk 6.12, Data Recovery Utility, May 2011
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.0.4-pmagic (#1 SMP Sat Sep 3 17:11:11 CDT 2011) i686
Compiler: GCC 4.5
Compilation date: 2011-05-15T12:36:01
ext2fs lib: 1.41.14, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 1953525168 sectors
/dev/sda: user_max 1953525168 sectors
/dev/sda: native_max 1953525168 sectors
/dev/sda: dco 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ATA WDC WD10EALS-00Z
Disk /dev/sdb - 4047 MB / 3859 MiB - CHS 1020 125 62, sector size=512 - SanDisk Cruzer
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - ATA WDC WD10EALS-00Z
Partition table type: Intel
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=16 sector=63
check_part_i386 1 type 42: no test
BAD_RS LBA=2048 32162
check_part_i386 2 type 42: no test
BAD_RS LBA=206848 3293533
check_part_i386 3 type 42: no test
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P W2K Dynamic/SFS 0 1 1 0 32 32 1985
Bad sector count.
2 * W2K Dynamic/SFS 0 32 33 12 223 19 204800
Bad relative sector.
3 P W2K Dynamic/SFS 12 223 20 6386 250 8 102400000
Bad relative sector.
4 P Linux Swap 6386 250 9 121601 48 31 1850916272
SIGHUP detected! TestDisk has been killed.