During RebuildBS the program just shut down. It looks like it generated a stackdump file. I'm trying to attatch the 2 files but don't seem to be able to.
Here's the stackdump
Exception: STATUS_ACCESS_VIOLATION at eip=0043E5A6
eax=00000000 ebx=20104718 ecx=0023ED66 edx=CA11BE9C esi=0037F62A edi=00000000
ebp=20102AB8 esp=0023B210 program=C:\Documents and Settings\Home\My Documents\Downloads\testdisk-7.0.win\testdisk-7.0\testdisk_win.exe, pid 2580, thread main
cs=001B ds=0023 es=0023 fs=003B gs=0000 ss=0023
Stack trace:
Frame Function Args
20102AB8 0043E5A6 (00000000, 00000000, 00000000, 00000000)
End of stack trace
And here's the log
Wed Jan 31 23:23:48 2018
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=209711706624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=110103565824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=107529053184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=213010043904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=254991873024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=63515579904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=46587953152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=85987044864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=90173712384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=108984927744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\P:)=500105740288
filewin32_getfilesize(\\.\Y:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\Y:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\Y:
filewin32_getfilesize(\\.\Z:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\Z:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 209 GB / 195 GiB - CHS 25495 255 63, sector size=512
Drive D: - 104 GB / 97 GiB - CHS 12747 255 63, sector size=512
Drive E: - 110 GB / 102 GiB - CHS 13385 255 63, sector size=512
Drive F: - 107 GB / 100 GiB - CHS 13072 255 63, sector size=512
Drive G: - 213 GB / 198 GiB - CHS 25896 255 63, sector size=512
Drive H: - 254 GB / 237 GiB - CHS 31000 255 63, sector size=512
Drive I: - 63 GB / 59 GiB - CHS 7721 255 63, sector size=512
Drive J: - 46 GB / 43 GiB - CHS 5663 255 63, sector size=512
Drive K: - 85 GB / 80 GiB - CHS 10453 255 63, sector size=512
Drive L: - 90 GB / 83 GiB - CHS 10962 255 63, sector size=512
Drive N: - 108 GB / 101 GiB - CHS 13249 255 63, sector size=512
Drive P: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 7722/1/2
NTFS at 13386/1/1
NTFS at 23840/1/1
NTFS at 34803/1/1
NTFS at 47551/1/1
get_geometry_from_list_part_aux head=255 nbr=18
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=4
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=3
get_geometry_from_list_part_aux head=255 nbr=18
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
2 E extended LBA 7722 0 2 60800 254 63 852714134
5 L HPFS - NTFS 7722 1 2 13385 254 63 90992096
NTFS, blocksize=4096, 46 GB / 43 GiB
X extended 13386 0 1 23839 254 63 167943510
6 L HPFS - NTFS 13386 1 1 23839 254 63 167943447
NTFS, blocksize=4096, 85 GB / 80 GiB
X extended 23840 0 1 34802 254 63 176120595
7 L HPFS - NTFS 23840 1 1 34802 254 63 176120532
NTFS, blocksize=4096, 90 GB / 83 GiB
X extended 34803 0 1 47550 254 63 204796620
8 L HPFS - NTFS 34803 1 1 47550 254 63 204796557
NTFS, blocksize=4096, 104 GB / 97 GiB
X extended 47551 0 1 60800 254 63 212861250
9 L HPFS - NTFS 47551 1 1 60800 254 63 212861187
NTFS, blocksize=4096, 108 GB / 101 GiB
Change partition type:
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
filesystem size 4705734185631875073 15087055580947150938
sectors_per_cluster 8 196
mft_lcn 538985805 2639431764
mftmirr_lcn 540160340 3887858461
clusters_per_mft_record -114 48
clusters_per_index_record 123 -106
Boot sector
Status: Bad
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
3 [main] testdisk_win 2144 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump
Wed Jan 31 23:26:27 2018
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=209711706624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=110103565824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=107529053184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=213010043904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=254991873024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=63515579904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=46587953152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=85987044864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=90173712384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=108984927744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\P:)=500105740288
filewin32_getfilesize(\\.\Y:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\Y:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\Y:
filewin32_getfilesize(\\.\Z:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\Z:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 209 GB / 195 GiB - CHS 25495 255 63, sector size=512
Drive D: - 104 GB / 97 GiB - CHS 12747 255 63, sector size=512
Drive E: - 110 GB / 102 GiB - CHS 13385 255 63, sector size=512
Drive F: - 107 GB / 100 GiB - CHS 13072 255 63, sector size=512
Drive G: - 213 GB / 198 GiB - CHS 25896 255 63, sector size=512
Drive H: - 254 GB / 237 GiB - CHS 31000 255 63, sector size=512
Drive I: - 63 GB / 59 GiB - CHS 7721 255 63, sector size=512
Drive J: - 46 GB / 43 GiB - CHS 5663 255 63, sector size=512
Drive K: - 85 GB / 80 GiB - CHS 10453 255 63, sector size=512
Drive L: - 90 GB / 83 GiB - CHS 10962 255 63, sector size=512
Drive N: - 108 GB / 101 GiB - CHS 13249 255 63, sector size=512
Drive P: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Partition table type (auto): Intel
Disk /dev/sdc - 500 GB / 465 GiB
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
1 P HPFS - NTFS 0 32 33 60801 47 46 976769024
NTFS, blocksize=4096, 500 GB / 465 GiB
ntfs_boot_sector
1 P HPFS - NTFS 0 32 33 60801 47 46 976769024
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 16
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
ntfs_find_mft: index_block_size 4096
Extrapolated boot sector and current boot sector are identical.
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Directory /
5 dr-xr-xr-x 0 0 0 21-Jan-2018 14:33 .
5 dr-xr-xr-x 0 0 0 21-Jan-2018 14:33 ..
40 dr-xr-xr-x 0 0 0 27-Apr-2015 18:06 $RECYCLE.BIN
65 dr-xr-xr-x 0 0 0 31-Dec-2016 16:01 @sharebin
64 dr-xr-xr-x 0 0 0 11-May-2017 21:44 @tmp
45899 dr-xr-xr-x 0 0 0 31-Jan-2018 20:58 IphotorecBackup
98228 dr-xr-xr-x 0 0 0 31-Jan-2018 21:17 Itestdiskbackup
45835 dr-xr-xr-x 0 0 0 28-Aug-2014 23:12 RECYCLER
37 dr-xr-xr-x 0 0 0 21-Jan-2018 17:45 System Volume Information
98217 dr-xr-xr-x 0 0 0 19-Nov-2009 00:23 transferwizard
53 dr-xr-xr-x 0 0 0 7-Jan-2018 23:08 winxpbackup
56 -r--r--r-- 0 0 36 7-Jan-2018 23:08 .tourocloudbackupid
35 -r--r--r-- 0 0 7539672 13-Oct-2014 00:20 SetupTouro3771.exe
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
ntfs_boot_sector
1 P HPFS - NTFS 0 32 33 60801 47 46 976769024
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 7722/1/2
NTFS at 13386/1/1
NTFS at 23840/1/1
NTFS at 34803/1/1
NTFS at 47551/1/1
get_geometry_from_list_part_aux head=255 nbr=18
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=4
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=3
get_geometry_from_list_part_aux head=255 nbr=18
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
2 E extended LBA 7722 0 2 60800 254 63 852714134
5 L HPFS - NTFS 7722 1 2 13385 254 63 90992096
NTFS, blocksize=4096, 46 GB / 43 GiB
X extended 13386 0 1 23839 254 63 167943510
6 L HPFS - NTFS 13386 1 1 23839 254 63 167943447
NTFS, blocksize=4096, 85 GB / 80 GiB
X extended 23840 0 1 34802 254 63 176120595
7 L HPFS - NTFS 23840 1 1 34802 254 63 176120532
NTFS, blocksize=4096, 90 GB / 83 GiB
X extended 34803 0 1 47550 254 63 204796620
8 L HPFS - NTFS 34803 1 1 47550 254 63 204796557
NTFS, blocksize=4096, 104 GB / 97 GiB
X extended 47551 0 1 60800 254 63 212861250
9 L HPFS - NTFS 47551 1 1 60800 254 63 212861187
NTFS, blocksize=4096, 108 GB / 101 GiB
ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
filesystem size 4705734185631875073 15087055580947150938
sectors_per_cluster 8 196
mft_lcn 538985805 2639431764
mftmirr_lcn 540160340 3887858461
clusters_per_mft_record -114 48
clusters_per_index_record 123 -106
Boot sector
Status: Bad
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
3 [main] testdisk_win 2580 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump