Sun Apr 26 11:51:17 2015
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000202241024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000200176128
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
Drive C: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512
Drive E: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512
Partition table type (auto): EFI GPT
Disk /dev/sdc - 3000 GB / 2794 GiB
Partition table type: EFI GPT
Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
New options :
Dump : No
Align partition: Yes
Expert mode : Yes
Analyse Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
search_part()
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 1/5/5
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size 732563456
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366281727
clusters_per_mft_record 1
clusters_per_index_record 1
NTFS part_offset=8388608, part_size=3000579915776, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 1/5/5
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size 732563456
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366281727
clusters_per_mft_record 1
clusters_per_index_record 1
MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
file_pread(6,1,buffer,1565565872(364801/81/1)) ReadFile Begäran kunde inte utföras på grund av ett fel i en I/O-enhet.
file_pread(6,1,buffer,1565565873(364801/81/2)) lseek err Invalid argument
file_pread(6,1,buffer,1565565874(364801/81/3)) lseek err Invalid argument
file_pread(6,1,buffer,1565565875(364801/81/4)) lseek err Invalid argument
*80 pages of similar errors cut out*
_______________________________________________________________
Results
P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS filesystem need to be repaired.
dir_partition inode=5
P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 8-Apr-2015 00:13 .
5 dr-xr-xr-x 0 0 0 8-Apr-2015 00:13 ..
1701 dr-xr-xr-x 0 0 0 17-Jan-2015 20:43 $RECYCLE.BIN
28436 dr-xr-xr-x 0 0 0 11-Dec-2013 00:32 Bilder
28811 dr-xr-xr-x 0 0 0 13-Aug-2014 01:36 Bilder 2
15637 dr-xr-xr-x 0 0 0 13-Dec-2014 15:40 Projekt
15426 dr-xr-xr-x 0 0 0 15-Jan-2015 04:11 Foton
30417 dr-xr-xr-x 0 0 0 27-Apr-2013 21:28 Foton 2
41692 dr-xr-xr-x 0 0 0 13-Jul-2014 12:43 Program
43529 dr-xr-xr-x 0 0 0 15-Dec-2014 19:11 Webb
44338 dr-xr-xr-x 0 0 0 4-May-2014 18:16 Övrigt
11846 dr-xr-xr-x 0 0 0 19-Apr-2014 02:19 0f0a5875d687d26b5bc2d9689c7b20b9
15195 dr-xr-xr-x 0 0 0 21-Apr-2014 15:23 520dce4480b40d7403d86e
16851 dr-xr-xr-x 0 0 0 18-Sep-2014 17:40 6ac9d3c36a554262e8f29b
15260 dr-xr-xr-x 0 0 0 21-Apr-2014 16:37 6be4cea83ff0e34dda05390c
16685 dr-xr-xr-x 0 0 0 13-Dec-2014 15:04 Jobb
15144 dr-xr-xr-x 0 0 0 12-Feb-2014 11:04 My Online Documents
15415 dr-xr-xr-x 0 0 0 17-Jan-2015 18:50 Ny mapp
27 dr-xr-xr-x 0 0 0 14-Dec-2012 13:32 System Volume Information
15411 dr-xr-xr-x 0 0 0 15-Jan-2015 21:42 UserBenchmark
1594 dr-xr-xr-x 0 0 0 13-May-2014 19:36 d217ad22a89c1b308c3d90
127845 dr-xr-xr-x 0 0 0 8-Apr-2015 00:14 Ö2
26104 dr-xr-xr-x 0 0 0 19-Mar-2015 21:41 öööööTransfere
interface_write()
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
simulate write!
New options :
Dump : No
Align partition: Yes
Expert mode : Yes
Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
ntfs_boot_sector
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS at 1/5/5
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Info: size boot_sector 732563456, partition 1565540352
filesystem size 732563456 1
sectors_per_cluster 1 0
mft_lcn 786432 0
mftmirr_lcn 366281727 0
clusters_per_mft_record 1 0
clusters_per_index_record 1 0
Boot sector
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Status: OK
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
$MFTMirr location mismatch or first 4 records are fragmented. Run chkdsk.
Failed to load $MFTMirr: Input/output error.
rebuild_NTFS_BS
mft at 2930253816
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: mft_record_size 4096
mft at 6291456
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: mft_record_size 4096
ntfs_find_mft: index_block_size 4096
New / Current boot sector
filesystem size 5860507648 732563456
sectors_per_cluster 8 1
mft_lcn 786432 786432
mftmirr_lcn 0 366281727
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
Extrapolated boot sector and current boot sector are different.
filesystem size 5860507648 732563456
sectors_per_cluster 8 1
mft_lcn 786432 786432
mftmirr_lcn 0 366281727
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
Can't open filesystem. Filesystem seems damaged.
filesystem size 5860507648 732563456
sectors_per_cluster 8 1
mft_lcn 786432 786432
mftmirr_lcn 0 366281727
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
ntfs_boot_sector
1 P MS Data 16384 5860524031 5860507648 [Seagate Backup Plus Drive]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS at 1/5/5
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Info: size boot_sector 732563456, partition 1565540352
filesystem size 732563456 1
sectors_per_cluster 1 0
mft_lcn 786432 0
mftmirr_lcn 366281727 0
clusters_per_mft_record 1 0
clusters_per_index_record 1 0
Boot sector
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Status: OK
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.