Code: Select all
Mon Apr 10 15:52:12 2017
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=126035288064
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=31331450880
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=367001600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=31330402304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=124826933760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=837812224
filewin32_getfilesize(\\.\H:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\H:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\X:)=3162112
Hard disk list
Disk \\.\PhysicalDrive0 - 126 GB / 117 GiB - CHS 15322 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 31 GB / 29 GiB - CHS 3809 255 63, sector size=512
Drive C: - 367 MB / 350 MiB - CHS 44 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512
Drive E: - 31 GB / 29 GiB - CHS 3809 255 63, sector size=512
Drive F: - 124 GB / 116 GiB - CHS 15176 255 63, sector size=512
Drive G: - 837 MB / 799 MiB - CHS 101 255 63, sector size=512
Drive X: - 3162 KB / 3088 KiB - CHS 193 16 2, sector size=512
Partition table type (auto): Intel
Disk \\.\PhysicalDrive0 - 126 GB / 117 GiB
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive0 - 126 GB / 117 GiB - CHS 15322 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 44/190/19
check_part_i386 3 type 27: no test
Current partition structure:
1 * HPFS - NTFS 0 32 33 44 190 18 716800
2 P HPFS - NTFS 44 190 19 15220 192 57 243802605
3 P Windows RE(store) 15220 217 38 15322 181 27 1636352
search_part()
Disk \\.\PhysicalDrive0 - 126 GB / 117 GiB - CHS 15322 255 63
NTFS at 0/32/33
filesystem size 716800
sectors_per_cluster 8
mft_lcn 29866
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 44 190 18 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
NTFS at 44/190/19
filesystem size 243802605
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 44 190 19 15220 192 57 243802605
NTFS, blocksize=4096, 124 GB / 116 GiB
NTFS at 15220/217/38
filesystem size 1636352
sectors_per_cluster 8
mft_lcn 68181
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 15220 217 38 15322 181 27 1636352
NTFS, blocksize=4096, 837 MB / 799 MiB
Results
* HPFS - NTFS 0 32 33 44 190 18 716800
NTFS, blocksize=4096, 367 MB / 350 MiB
P HPFS - NTFS 44 190 19 15220 217 37 243804160
NTFS, blocksize=4096, 124 GB / 116 GiB
P HPFS - NTFS 15220 217 38 15322 181 27 1636352
NTFS, blocksize=4096, 837 MB / 799 MiB
interface_write()
1 * HPFS - NTFS 0 32 33 44 190 18 716800
2 P HPFS - NTFS 44 190 19 15220 217 37 243804160
3 P HPFS - NTFS 15220 217 38 15322 181 27 1636352
write!
write_mbr_i386: starting...
file_win32_pwrite(180,1,buffer,0(0/0/1)) write err
write_all_log_i386: starting...
No extended partition
Partition: Write error
TestDisk exited normally.