Sat Feb 13 13:40:05 2016
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107860992
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107860992
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=319546195968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=524288000
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 319 GB / 297 GiB - CHS 38849 255 63, sector size=512
Drive D: - 524 MB / 500 MiB - CHS 63 255 63, sector size=512
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295
Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
file_pread(5,16,buffer,17(0/0/18)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2049(0/32/34)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,32(0/0/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,34(0/0/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,35(0/0/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,35(0/0/36)) ReadFile Data error (cyclic redundancy check).
NTFS at 0/32/33
filesystem size 2048000
sectors_per_cluster 8
mft_lcn 85333
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 127 155 28 2048000
NTFS, blocksize=4096, 1048 MB / 1000 MiB
FAT32 at 127/155/29
FAT1 : 7166-7678
FAT2 : 7679-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-532479
sectors : 532480
cluster_size : 8
no_of_cluster : 65536 (2 - 65537)
fat_length 513 calculated 513
FAT32 at 127/155/29
FAT32 127 155 29 160 192 32 532480 [SYSTEM_DRV]
FAT32, blocksize=4096, 272 MB / 260 MiB
file_pread(5,16,buffer,2582528(160/192/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582530(160/192/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,13,buffer,2582531(160/192/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582544(160/192/49)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582591(160/193/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582607(160/193/49)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582654(160/194/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582559(160/193/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582559(160/193/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582567(160/193/9)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582575(160/193/17)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582622(160/194/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582638(160/194/17)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582685(160/195/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582594(160/193/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582594(160/193/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582599(160/193/41)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582670(160/194/49)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582717(160/195/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582625(160/194/4)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582625(160/194/4)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582630(160/194/9)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582701(160/195/17)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582748(160/196/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582656(160/194/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582656(160/194/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,14,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
Search for partition aborted
Results
* HPFS - NTFS 0 32 33 127 155 28 2048000
NTFS, blocksize=4096, 1048 MB / 1000 MiB
P FAT32 127 155 29 160 192 32 532480 [SYSTEM_DRV]
FAT32, blocksize=4096, 272 MB / 260 MiB
interface_write()
1 * HPFS - NTFS 0 32 33 127 155 28 2048000
2 P FAT32 127 155 29 160 192 32 532480 [SYSTEM_DRV]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295
Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
file_pread(5,16,buffer,17(0/0/18)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2049(0/32/34)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,32(0/0/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,34(0/0/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,35(0/0/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,35(0/0/36)) ReadFile Data error (cyclic redundancy check).
NTFS at 0/32/33
filesystem size 2048000
sectors_per_cluster 8
mft_lcn 85333
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 127 155 28 2048000
NTFS, blocksize=4096, 1048 MB / 1000 MiB
FAT32 at 127/155/29
FAT1 : 7166-7678
FAT2 : 7679-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-532479
sectors : 532480
cluster_size : 8
no_of_cluster : 65536 (2 - 65537)
fat_length 513 calculated 513
FAT32 at 127/155/29
FAT32 127 155 29 160 192 32 532480 [SYSTEM_DRV]
FAT32, blocksize=4096, 272 MB / 260 MiB
file_pread(5,16,buffer,2582528(160/192/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582530(160/192/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,13,buffer,2582531(160/192/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582544(160/192/49)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582591(160/193/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582607(160/193/49)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582654(160/194/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582559(160/193/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582559(160/193/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582567(160/193/9)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582575(160/193/17)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,2582622(160/194/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582638(160/194/17)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582685(160/195/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582594(160/193/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582594(160/193/36)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582599(160/193/41)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582670(160/194/49)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582717(160/195/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582625(160/194/4)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582625(160/194/4)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582630(160/194/9)) ReadFile Data error (cyclic redundancy check).
file_pread(5,8,buffer,2582701(160/195/17)) ReadFile Data error (cyclic redundancy check).
file_pread(5,11,buffer,2582748(160/196/1)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,2582656(160/194/35)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2582656(160/194/35)) ReadFile Data error (cyclic redundancy check).
NTFS at 304/141/30
filesystem size 886695936
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 304 141 30 55498 210 8 886695936
NTFS, blocksize=4096, 453 GB / 422 GiB
NTFS at 55498/210/9
filesystem size 52428800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 55498 210 9 58762 93 19 52428800
NTFS, blocksize=4096, 26 GB / 25 GiB
NTFS at 58762/93/20
filesystem size 32755712
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 58762 93 20 60801 80 15 32755712
NTFS, blocksize=4096, 16 GB / 15 GiB
file_pread(5,16,buffer,976773120(60801/80/16)) ReadFile Data error (cyclic redundancy check).
file_pread(5,16,buffer,976773128(60801/80/24)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,976773128(60801/80/24)) ReadFile Data error (cyclic redundancy check).
file_pread(5,7,buffer,976773129(60801/80/25)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,976773136(60801/80/32)) ReadFile Data error (cyclic redundancy check).
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,16,buffer,976773168(60801/81/1)) lseek err Invalid argument
file_pread(5,1,buffer,976773186(60801/81/19)) lseek err Invalid argument
file_pread(5,3,buffer,976773231(60801/82/1)) lseek err Invalid argument
file_pread(5,11,buffer,976773294(60801/83/1)) lseek err Invalid argument
file_pread(5,2,buffer,976775216(60801/113/33)) lseek err Invalid argument
Results
HPFS - NTFS 0 32 33 127 155 28 2048000
NTFS, blocksize=4096, 1048 MB / 1000 MiB
FAT32 127 155 29 160 192 32 532480 [SYSTEM_DRV]
FAT32, blocksize=4096, 272 MB / 260 MiB
HPFS - NTFS 304 141 30 55498 210 8 886695936
NTFS, blocksize=4096, 453 GB / 422 GiB
HPFS - NTFS 55498 210 9 58762 93 19 52428800
NTFS, blocksize=4096, 26 GB / 25 GiB
HPFS - NTFS 58762 93 20 60801 80 15 32755712
NTFS, blocksize=4096, 16 GB / 15 GiB
interface_write()
1 P HPFS - NTFS 304 141 30 55498 210 8 886695936
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.