This is the log after deeper scan
Wed Jun 4 08:11:47 2014
Command line: TestDisk
TestDisk 7.0-WIP, Data Recovery Utility, June 2014
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-06-01T10:13:39
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=32395755520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=32395755520
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=316934193152
filewin32_getfilesize(\\.\D:) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419429351424
filewin32_getfilesize(\\.\F:) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=20971520000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=32391561216
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=299098963968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Y:)=513802240
Hard disk list
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - WDC WD7500BPVX-75JC3T0, S/N:WX61A2316479, FW:01.01A01
Disk /dev/sdb - 32 GB / 30 GiB - CHS 3938 255 63, sector size=512 - Generic- xD/SD/M.S., FW:1.00
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - TOSHIBA MK3252GSX, S/N:152D20337A0C
Partition table type (auto): Intel
Disk /dev/sdc - 320 GB / 298 GiB - TOSHIBA MK3252GSX
Partition table type: Intel
Analyse Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 2549/196/16
Current partition structure:
1 * HPFS - NTFS 0 32 33 2549 196 15 40960000
2 P HPFS - NTFS 2549 196 16 38913 37 36 584177664
search_part()
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 0/32/33
filesystem size 40960000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2559999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 2549 196 15 40960000
NTFS, blocksize=4096, 20 GB / 19 GiB
NTFS at 2549/196/16
filesystem size 584177664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 36511103
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
file_pread(6,2,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(6,1,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(6,8,buffer,625142528(38913/82/18)) lseek err Invalid argument
file_pread(6,1,buffer,625142528(38913/82/18)) lseek err Invalid argument
file_pread(6,8,buffer,625142656(38913/84/20)) lseek err Invalid argument
file_pread(6,8,buffer,625142784(38913/86/22)) lseek err Invalid argument
file_pread(6,8,buffer,625142912(38913/88/24)) lseek err Invalid argument
file_pread(6,8,buffer,625143040(38913/90/26)) lseek err Invalid argument
file_pread(6,8,buffer,625143168(38913/92/28)) lseek err Invalid argument
file_pread(6,8,buffer,625143296(38913/94/30)) lseek err Invalid argument
file_pread(6,8,buffer,625143424(38913/96/32)) lseek err Invalid argument
file_pread(6,8,buffer,625143552(38913/98/34)) lseek err Invalid argument
file_pread(6,8,buffer,625143680(38913/100/36)) lseek err Invalid argument
file_pread(6,1,buffer,625143807(38913/102/37)) lseek err Invalid argument
file_pread(6,1,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(6,14,buffer,625143809(38913/102/39)) lseek err Invalid argument
file_pread(6,3,buffer,625143823(38913/102/53)) lseek err Invalid argument
file_pread(6,3,buffer,625143870(38913/103/37)) lseek err Invalid argument
file_pread(6,8,buffer,625143886(38913/103/53)) lseek err Invalid argument
file_pread(6,11,buffer,625143933(38913/104/37)) lseek err Invalid argument
file_pread(6,2,buffer,625145855(38913/135/6)) lseek err Invalid argument
Results
* HPFS - NTFS 0 32 33 2549 196 15 40960000
NTFS, blocksize=4096, 20 GB / 19 GiB
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
dir_partition inode=5
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
dir_partition inode=35
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
dir_partition inode=45
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN/S-1-5-21-1438214324-4001780036-2444811649-1000
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 .
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 ..
46 -r--r--r-- 0 0 129 4-Jun-2013 09:39 desktop.ini
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
dir_partition inode=40
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN/S-1-5-21-1505416850-2722177934-1438711192-1001
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 .
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 ..
43 -r--r--r-- 0 0 129 2-Feb-2011 17:30 desktop.ini
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
dir_partition inode=36
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN/S-1-5-21-2918889525-4052927893-2995645375-1000
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 .
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 ..
37 -r--r--r-- 0 0 129 24-Jan-2011 01:24 desktop.ini
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
dir_partition inode=39
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /myfolder
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
interface_write()
1 * HPFS - NTFS 0 32 33 2549 196 15 40960000
2 P HPFS - NTFS 2549 196 16 38913 37 36 584177664
search_part()
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63
NTFS at 0/32/33
filesystem size 40960000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2559999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 2549 196 15 40960000
NTFS, blocksize=4096, 20 GB / 19 GiB
NTFS at 2549/196/15
filesystem size 40960000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2559999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 2549 196 15 40960000
NTFS found using backup sector, blocksize=4096, 20 GB / 19 GiB
NTFS at 2549/196/16
filesystem size 584177664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 36511103
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
NTFS at 38913/37/36
filesystem size 584177664
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 36511103
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS found using backup sector, blocksize=4096, 299 GB / 278 GiB
file_pread(6,2,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(6,1,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(6,8,buffer,625142528(38913/82/18)) lseek err Invalid argument
file_pread(6,1,buffer,625142528(38913/82/18)) lseek err Invalid argument
file_pread(6,8,buffer,625142656(38913/84/20)) lseek err Invalid argument
file_pread(6,8,buffer,625142784(38913/86/22)) lseek err Invalid argument
file_pread(6,8,buffer,625142912(38913/88/24)) lseek err Invalid argument
file_pread(6,8,buffer,625143040(38913/90/26)) lseek err Invalid argument
file_pread(6,8,buffer,625143168(38913/92/28)) lseek err Invalid argument
file_pread(6,8,buffer,625143296(38913/94/30)) lseek err Invalid argument
file_pread(6,8,buffer,625143424(38913/96/32)) lseek err Invalid argument
file_pread(6,8,buffer,625143552(38913/98/34)) lseek err Invalid argument
file_pread(6,8,buffer,625143680(38913/100/36)) lseek err Invalid argument
file_pread(6,1,buffer,625143807(38913/102/37)) lseek err Invalid argument
file_pread(6,1,buffer,625143808(38913/102/38)) lseek err Invalid argument
file_pread(6,14,buffer,625143809(38913/102/39)) lseek err Invalid argument
file_pread(6,3,buffer,625143823(38913/102/53)) lseek err Invalid argument
file_pread(6,3,buffer,625143870(38913/103/37)) lseek err Invalid argument
file_pread(6,8,buffer,625143886(38913/103/53)) lseek err Invalid argument
file_pread(6,11,buffer,625143933(38913/104/37)) lseek err Invalid argument
file_pread(6,2,buffer,625145855(38913/135/6)) lseek err Invalid argument
Results
* HPFS - NTFS 0 32 33 2549 196 15 40960000
NTFS, blocksize=4096, 20 GB / 19 GiB
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
dir_partition inode=5
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
dir_partition inode=35
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
dir_partition inode=45
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN/S-1-5-21-1438214324-4001780036-2444811649-1000
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 .
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 ..
46 -r--r--r-- 0 0 129 4-Jun-2013 09:39 desktop.ini
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
dir_partition inode=36
P HPFS - NTFS 2549 196 16 38913 37 36 584177664
NTFS, blocksize=4096, 299 GB / 278 GiB
Directory /$RECYCLE.BIN/S-1-5-21-2918889525-4052927893-2995645375-1000
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 .
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 ..
37 -r--r--r-- 0 0 129 24-Jan-2011 01:24 desktop.ini
Directory /$RECYCLE.BIN
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
45 dr-xr-xr-x 0 0 0 4-Jun-2013 09:39 S-1-5-21-1438214324-4001780036-2444811649-1000
40 dr-xr-xr-x 0 0 0 2-Feb-2011 17:30 S-1-5-21-1505416850-2722177934-1438711192-1001
47 dr-xr-xr-x 0 0 0 26-May-2014 08:16 S-1-5-21-253082250-529623626-2700073115-1001
36 dr-xr-xr-x 0 0 0 24-Jan-2011 01:24 S-1-5-21-2918889525-4052927893-2995645375-1000
38 dr-xr-xr-x 0 0 0 7-Mar-2013 10:47 S-1-5-21-946613286-2098783162-2803149262-1000
Directory /
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 .
5 dr-xr-xr-x 0 0 0 10-Jul-2013 14:43 ..
35 dr-xr-xr-x 0 0 0 26-May-2014 08:16 $RECYCLE.BIN
41 dr-xr-xr-x 0 0 0 29-Jan-2011 02:13 System Volume Information
39 dr-xr-xr-x 0 0 0 1-Feb-2011 21:01 myfolder
interface_write()
1 * HPFS - NTFS 0 32 33 2549 196 15 40960000
2 P HPFS - NTFS 2549 196 16 38913 37 36 584177664
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
SIGHUP detected! TestDisk has been killed.