Damaged filesystem on a system disk

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Ranger99
Posts: 2
Joined: 21 Apr 2020, 17:58

Damaged filesystem on a system disk

#1 Post by Ranger99 »

Laptop: ASUS X552W
Hard drive: single Toshiba 1TB disk split into two logical disks C (system) and D.
OS: Windows 8.1

Recently Task Manager showed 100% Disk utilization several times a day and at these moments all applications froze for several minutes.
So, I ran "CHKDSK /f /r C:" to check the disk after the next reboot. Apparently, it was my mistake.
For the next 24 hours laptop desperately tried many times to repair itself.
Messages kept switching between "Diagnosing your PC" and "Repairing your PC, it might take an hour to complete".

I stopped this hopeless process at the diagnosing stage, booted from Win8.1 USB flash and ran "CHKDSK C:"
It said: "Critical master file table (MFT) files are corrupt".

OK, I thought and ran "CHKDSK /F C:". This time it said:
Fixing critical master file table (MFT) files with MFT mirror.

Stage 1: Examining basic file system structure...
An unexpected error occured(6e74667363686b2e 7ac).
Failed to transfer logged messages to the event log with status 50.


OK, I
- downloaded testdisk-7.1-64 package,
- recovered all from disk C: to disk D: using QPHOTOREC_WIN and then to an external hard disk
- started TESTDISK_WIN -> Analyze -> Quick Search -> Deep Search
The last search took about 24 hours to complete.
Unfortunately, my knowledge is not enough to interpret the result, so I need your help :(

Code: Select all



Tue Apr 21 10:40:35 2020
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=31457280000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=31457280000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=400079978496
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=582823706624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=31456231424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105217024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\X:)=3162112
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MQ01ABD100, S/N:35MLTM6QT, FW:AX0R2J
Disk /dev/sdb - 31 GB / 29 GiB - CHS 3824 255 63, sector size=512 - VendorCo ProductCode, S/N:8304011044083280130, FW:2.00
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Seagate FreeAgent Go, S/N:2GE22JCG, FW:102D
Drive X: - 3162 KB / 3088 KiB - CHS 193 16 2, sector size=512 - Microsoft Corporation RamDisk

Partition table type (auto): EFI GPT
Disk /dev/sda - 1000 GB / 931 GiB - TOSHIBA MQ01ABD100
Partition table type: EFI GPT

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 3 P MS Reserved              2050048    2312191     262144 [Microsoft reserved partition]
Current partition structure:
 1 P EFI System                  2048     206847     204800 [EFI system partition]
 2 P Windows Recovery Env      206848    2050047    1843200 [Basic data partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 3 P MS Reserved              2050048    2312191     262144 [Microsoft reserved partition]
 3 P MS Reserved              2050048    2312191     262144 [Microsoft reserved partition]
 4 P MS Data                  2312192  783718399  781406208 [Basic data partition] [OS]
 5 P MS Data                783718400 1922045951 1138327552 [Basic data partition] [Data]
 6 P Windows Recovery Env  1922045952 1953523711   31477760 [Basic data partition]

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769

FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
     EFI System                  2048     206847     204800 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=105906176, part_size=943718400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/20
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   206848    2050047    1843200 [Recovery]
     NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 143/236/30
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=1183842304, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 143/236/30
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,16,buffer,8603654(535/140/60)) ReadFile Data error (cyclic redundancy check).

     MS Data                  2312192  783718399  781406208 [OS]
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 48784/54/39
filesystem size           1138327552
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=401263820800, part_size=582823706624, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 48784/54/39
filesystem size           1138327552
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                783718400 1922045951 1138327552 [Data]
     NTFS, blocksize=4096, 582 GB / 542 GiB
NTFS at 119641/210/58
filesystem size           31477760
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1890568193 1922045952   31477760
     NTFS found using backup sector, blocksize=4096, 16 GB / 15 GiB
NTFS at 119641/210/58
filesystem size           31477760
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1922045952 1953523711   31477760 [Restore]
     NTFS, blocksize=4096, 16 GB / 15 GiB
file_pread(4,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
[skipped 1800 messages like this, all related to 121601]
file_pread(4,1,buffer,1953527215(121601/113/32)) lseek err Invalid argument
file_pread(4,1,buffer,1953525168(121601/81/1)) ReadFile The drive cannot find the sector requested.
...
file_pread(4,1,buffer,1953525304(121601/83/11)) lseek err Invalid argument
file_pread(4,1,buffer,1953527217(121601/113/34)) lseek err Invalid argument

Results
   P EFI System                  2048     206847     204800 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=1024, 104 MB / 100 MiB
   P MS Data                   206848    2050047    1843200 [Recovery]
     NTFS, blocksize=4096, 943 MB / 900 MiB
   P MS Data                  2312192  783718399  781406208 [OS]
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                783718400 1922045951 1138327552 [Data]
     NTFS, blocksize=4096, 582 GB / 542 GiB
     MS Data               1890568193 1922045952   31477760
     NTFS found using backup sector, blocksize=4096, 16 GB / 15 GiB
     MS Data               1922045952 1953523711   31477760 [Restore]
     NTFS, blocksize=4096, 16 GB / 15 GiB
Incomplete multi sector transfer detected in $MFT.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
Incomplete multi sector transfer detected in $MFT.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
file_pread(4,16,buffer,8603648(535/140/54)) ReadFile Data error (cyclic redundancy check).


   P MS Data                  2312192  783718399  781406208 [OS]
     NTFS, blocksize=4096, 400 GB / 372 GiB
Can't open filesystem. Filesystem seems damaged.


dir_partition inode=5
   P MS Data                   206848    2050047    1843200 [Recovery]
     NTFS, blocksize=4096, 943 MB / 900 MiB
Directory /
       5 dr-xr-xr-x     0      0         0 18-Apr-2020 21:41 .
       5 dr-xr-xr-x     0      0         0 18-Apr-2020 21:41 ..
      35 dr-xr-xr-x     0      0         0 24-Nov-2014 23:13 Boot
      39 dr-xr-xr-x     0      0         0 24-Nov-2014 23:13 EFI
     152 dr-xr-xr-x     0      0         0 28-Jun-2015 17:34 FACLog
     144 dr-xr-xr-x     0      0         0 10-Aug-2015 00:03 Recovery
      48 dr-xr-xr-x     0      0         0 29-Jun-2015 09:11 Sources
     142 dr-xr-xr-x     0      0         0 18-Apr-2020 10:09 System Volume Information
     [skipped]
      50 -r--r--r--     0      0    427680 22-Aug-2013 02:31 bootmgr
      55 -r--r--r--     0      0   1613656 20-Feb-2014 08:06 bootmgr.efi


dir_partition inode=0
   P EFI System                  2048     206847     204800 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=1024, 104 MB / 100 MiB
FAT: cluster=2(0x2), pos=10240
Directory /
       3 drwxr-xr-x     0      0         0 29-Jun-2015 04:13 EFI
   27424 -r-xr-xr-x     0      0       512 10-Aug-2015 02:20 BOOTSECT.BAK
    3319 drwxr-xr-x     0      0         0 11-Aug-2016 17:49 System Volume Information


dir_partition inode=5
     MS Data                783718400 1922045951 1138327552 [Data]
     NTFS, blocksize=4096, 582 GB / 542 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 20-Apr-2020 15:20 .
       5 dr-xr-xr-x     0      0         0 20-Apr-2020 15:20 ..
      38 dr-xr-xr-x     0      0         0  9-Jan-2016 14:56 $RECYCLE.BIN
[skipped]
      35 dr-xr-xr-x     0      0         0  5-May-2016 22:29 System Volume Information

     MS Data               1890568193 1922045952   31477760
     NTFS found using backup sector, blocksize=4096, 16 GB / 15 GiB
Can't open filesystem. Filesystem seems damaged.


dir_partition inode=5
     MS Data               1922045952 1953523711   31477760 [Restore]
     NTFS, blocksize=4096, 16 GB / 15 GiB
Directory /
       5 dr-xr-xr-x     0      0         0  8-Sep-2015 10:05 .
       5 dr-xr-xr-x     0      0         0  8-Sep-2015 10:05 ..
      38 dr-xr-xr-x     0      0         0 29-Jun-2015 09:11 RecoveryBoot
      42 dr-xr-xr-x     0      0         0 10-Aug-2015 07:52 RecoveryImage
      36 dr-xr-xr-x     0      0         0  5-May-2016 22:29 System Volume Information

interface_write()
 1 P EFI System                  2048     206847     204800 [EFI System Partition] [SYSTEM]
 2 P MS Data                   206848    2050047    1843200 [Recovery]
 3 P MS Data                  2312192  783718399  781406208 [OS]

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
FAT32 at 0/32/33
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769

FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
     EFI System                  2048     206847     204800 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=1024, 104 MB / 100 MiB
FAT32 at 0/32/39
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT differs, FAT sectors=752-768/769
set_FAT_info: name from BS used

FAT32 at 0/32/39
FAT: cluster=2(0x2), pos=10240
     EFI System                  2048     206847     204800 [EFI System Partition] [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
FAT32 at 0/32/39
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT differs, FAT sectors=752-768/769
set_FAT_info: name from BS used

FAT32 at 0/32/39
FAT: cluster=2(0x2), pos=10246
FAT: cluster=771(0x303), pos=11784
FAT: cluster=1540(0x604), pos=13322
FAT: cluster=2309(0x905), pos=14860
FAT: cluster=3078(0xc06), pos=16398
FAT: cluster=3847(0xf07), pos=17936
     MS Data                     2054     206853     204800 [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
file_pread(4,16,buffer,18438(1/37/43)) ReadFile Data error (cyclic redundancy check).
file_pread(4,16,buffer,18439(1/37/44)) ReadFile Data error (cyclic redundancy check).
[skipped]
file_pread(4,1,buffer,18446(1/37/51)) ReadFile Data error (cyclic redundancy check).
file_pread(4,6,buffer,18447(1/37/52)) ReadFile Data error (cyclic redundancy check).

FAT32 at 4/13/6
FAT1 : 6654-7422
FAT2 : 7423-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-204799
sectors : 204800
cluster_size : 2
no_of_cluster : 98304 (2 - 98305)
fat_length 769 calculated 769
FAT differs, FAT sectors=0-16/769
set_FAT_info: name from BS used

FAT32 at 4/13/6
FAT: cluster=2(0x2), pos=73276
FAT: cluster=3(0x3), pos=73278
FAT: cluster=4(0x4), pos=73280
[skipped 2000 other messages like these]
FAT: cluster=2048(0x800), pos=77368
FAT: cluster=2049(0x801), pos=77370
     MS Data                    65084     269883     204800 [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
NTFS at 12/223/20
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=105906176, part_size=943718400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 12/223/20
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   206848    2050047    1843200 [Recovery]
     NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 13/104/20
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                   209243     215416       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 13/104/20
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                   215416     221589       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 65/118/30
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1045515    1051688       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 65/118/30
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1051688    1057861       6174
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 66/7/38
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1054595    1060768       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 66/7/38
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1060768    1066941       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 109/189/57
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1756875    1763048       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 109/189/57
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1763048    1769221       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 110/33/12
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1763067    1769240       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 110/33/12
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                  1769240    1775413       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 127/155/28
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   206848    2050047    1843200 [Recovery]
     NTFS found using backup sector, blocksize=4096, 943 MB / 900 MiB
NTFS at 127/155/28
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                  2050047    3893246    1843200
     NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 143/236/30
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=1183842304, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 143/236/30
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,16,buffer,8603654(535/140/60)) ReadFile Data error (cyclic redundancy check).

     MS Data                  2312192  783718399  781406208 [OS]
     NTFS, blocksize=4096, 400 GB / 372 GiB
file_pread(4,16,buffer,8603656(535/140/62)) ReadFile Data error (cyclic redundancy check).
file_pread(4,1,buffer,8603656(535/140/62)) ReadFile Data error (cyclic redundancy check).
[skipped]
file_pread(4,16,buffer,8603658(535/141/1)) ReadFile Data error (cyclic redundancy check).
file_pread(4,1,buffer,8603658(535/141/1)) ReadFile Data error (cyclic redundancy check).

NTFS at 949/137/21
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                 15248163   15254336       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 949/137/21
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                 15254336   15260509       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 949/235/39
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                 15254355   15260528       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 949/235/39
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                 15260528   15266701       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 950/78/57
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                 15260547   15266720       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 950/78/57
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                 15266720   15272893       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB

HFS magic value at 3365/179/34
part_size 849336327
     Mac HFS                 54070035  903406361  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB

HFS magic value at 3365/179/36
FAT12 at 3611/248/50
check_FAT: Unusual media descriptor (0xf8!=0xf0)
FAT1 : 1-8
FAT2 : 9-16
start_rootdir : 17
Data : 49-20736
sectors : 20739
cluster_size : 8
no_of_cluster : 2586 (2 - 2587)
fat_length 8 calculated 8
FAT differs, FAT sectors=0-8/8
heads/cylinder 4 (FAT) != 255 (HD)
sect/track 17 (FAT) != 63 (HD)

FAT12 at 3611/248/50
     MS Data                 58026388   58047126      20739 [NO NAME]
     FAT12, blocksize=4096, 10 MB / 10 MiB
check_FAT: Unusual, only one FAT
FAT32 at 3611/248/51
check_FAT: Bad number of entries in root dir
file_pread(4,16,buffer,60220672(3748/143/44)) ReadFile Data error (cyclic redundancy check).
file_pread(4,1,buffer,60220672(3748/143/44)) ReadFile Data error (cyclic redundancy check).
[skipped]
file_pread(4,6,buffer,60220673(3748/143/45)) ReadFile Data error (cyclic redundancy check).
file_pread(4,3,buffer,60220679(3748/143/51)) ReadFile Data error (cyclic redundancy check).
LVM magic value at 3996/105/14
LVM magic value at 3996/105/16
LVM magic value at 3996/105/17
LVM magic value at 3996/105/38
file_pread(4,16,buffer,65419863(4072/50/34)) ReadFile Data error (cyclic redundancy check).
file_pread(4,16,buffer,65419864(4072/50/35)) ReadFile Data error (cyclic redundancy check).
[skipped]
file_pread(4,16,buffer,65419903(4072/51/11)) ReadFile Data error (cyclic redundancy check).
file_pread(4,1,buffer,65419903(4072/51/11)) ReadFile Data error (cyclic redundancy check).

HFS magic value at 4110/77/59
part_size 849336327
     Mac HFS                 66032059  915368385  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB

HFS magic value at 4110/77/61
HFS magic value at 4111/79/20
part_size 849336327
     Mac HFS                 66048211  915384537  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB

HFS magic value at 4111/79/22
LVM magic value at 4454/193/2
HFS magic value at 5408/83/50
part_size 3422552322
     Mac HFS                 86884798 3509437119 3422552322
     HFS blocksize=67108864, 1752 GB / 1632 GiB
This partition ends after the disk limits. (start=86884798, size=3422552322, end=3509437119, disk end=1953525168)

HFS magic value at 5408/83/52
file_pread(4,16,buffer,113862112(7087/150/8)) ReadFile Data error (cyclic redundancy check).
file_pread(4,16,buffer,113862113(7087/150/9)) ReadFile Data error (cyclic redundancy check).
[skipped]
file_pread(4,6,buffer,113862121(7087/150/17)) ReadFile Data error (cyclic redundancy check).
file_pread(4,3,buffer,113862127(7087/150/23)) ReadFile Data error (cyclic redundancy check).
LVM magic value at 9186/198/41
LVM magic value at 10056/201/27
LVM magic value at 11032/156/24
LVM magic value at 12382/224/40

HFS magic value at 13210/189/23
part_size 1458361323
     Mac HFS                212230579 1670591901 1458361323
     HFS blocksize=16777216, 746 GB / 695 GiB

HFS magic value at 13210/189/25

HFS magic value at 15851/77/60
part_size 1963465262
     Mac HFS                254651225 2218116486 1963465262
     HFS blocksize=33554432, 1005 GB / 936 GiB
This partition ends after the disk limits. (start=254651225, size=1963465262, end=2218116486, disk end=1953525168)

HFS magic value at 15851/77/62

HFS magic value at 15851/79/32
part_size 1980242478
     Mac HFS                254651323 2234893800 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=254651323, size=1980242478, end=2234893800, disk end=1953525168)

HFS magic value at 15851/79/34

HFS magic value at 15851/79/54
part_size 1980242478
     Mac HFS                254651345 2234893822 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=254651345, size=1980242478, end=2234893822, disk end=1953525168)

HFS magic value at 15851/79/56

HFS magic value at 15851/80/23
part_size 1980242478
     Mac HFS                254651377 2234893854 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=254651377, size=1980242478, end=2234893854, disk end=1953525168)

HFS magic value at 15851/80/25

HFS magic value at 15851/81/8
part_size 1980242734
     Mac HFS                254651425 2234894158 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=254651425, size=1980242734, end=2234894158, disk end=1953525168)

HFS magic value at 15851/81/10

HFS magic value at 15851/81/24
part_size 1980242734
     Mac HFS                254651441 2234894174 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=254651441, size=1980242734, end=2234894174, disk end=1953525168)

HFS magic value at 15851/81/26

HFS magic value at 15851/82/9
part_size 1997019950
     Mac HFS                254651489 2251671438 1997019950
     HFS blocksize=33554432, 1022 GB / 952 GiB
This partition ends after the disk limits. (start=254651489, size=1997019950, end=2251671438, disk end=1953525168)

HFS magic value at 15851/82/11

HFS magic value at 15851/86/37
part_size 2030574382
     Mac HFS                254651769 2285226150 2030574382
     HFS blocksize=33554432, 1039 GB / 968 GiB
This partition ends after the disk limits. (start=254651769, size=2030574382, end=2285226150, disk end=1953525168)

HFS magic value at 15851/86/39
NTFS at 24484/76/41
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=201390227456, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 24484/76/41
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                393340288 1174746495  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 24607/162/4
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=202404691968, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 24607/162/4
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                395321664 1176727871  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 24728/126/39
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=203398807552, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 24728/126/39
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                397263296 1178669503  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 24891/163/41
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=204740722688, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 24891/163/41
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                399884224 1181290431  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 25474/143/14
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=209535401984, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 25474/143/14
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                409248832 1190655039  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB

LVM magic value at 25528/180/27

LVM magic value at 25595/158/54
NTFS at 25885/242/22
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=212919189504, part_size=400079978496, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 25885/242/22
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                415857792 1197263999  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
FAT32 at 25964/211/10
Bad root_cluster
FAT12 at 25964/211/11
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
FAT differs, FAT sectors=0-9/9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 25964/211/11
     MS Data                417124963  417127842       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB

LVM magic value at 25967/78/55

LVM magic value at 25968/31/63
FAT32 at 25990/6/43
Bad root_cluster
FAT12 at 25990/6/44
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
FAT differs, FAT sectors=0-9/9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 25990/6/44
     MS Data                417529771  417532650       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT32 at 26334/239/28
Bad root_cluster
FAT12 at 26334/239/29
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
FAT differs, FAT sectors=0-9/9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 26334/239/29
     MS Data                423070795  423073674       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT32 at 26337/18/4
Bad root_cluster
FAT12 at 26337/18/5
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
FAT differs, FAT sectors=0-9/9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 26337/18/5
     MS Data                423105043  423107922       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
FAT32 at 26346/216/1
Bad root_cluster
FAT12 at 26346/216/2
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
FAT differs, FAT sectors=0-9/9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 26346/216/2
     MS Data                423262099  423264978       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
NTFS at 48784/54/38
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,16,buffer,8603654(535/140/60)) ReadFile Data error (cyclic redundancy check).

     MS Data                  2312192  783718399  781406208 [OS]
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
NTFS at 48784/54/38
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                783718399 1565124606  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 48784/54/39
filesystem size           1138327552
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=401263820800, part_size=582823706624, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 48784/54/39
filesystem size           1138327552
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                783718400 1922045951 1138327552 [Data]
     NTFS, blocksize=4096, 582 GB / 542 GiB
NTFS at 49712/140/21
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                798625947  798632120       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 49712/140/21
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data                798632120  798638293       6174
     NTFS, blocksize=512, 3161 KB / 3087 KiB

HFS magic value at 57428/58/26
part_size 849336327
     Mac HFS                922584499 1771920825  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB

HFS magic value at 57428/58/28
part_size 849336327
     Mac HFS                 73248176  922584502  849336327 []
     HFS found using backup sector!, 434 GB / 404 GiB
FAT12 at 57667/47/9
check_FAT: Unusual media descriptor (0xf8!=0xf0)
FAT1 : 1-8
FAT2 : 9-16
start_rootdir : 17
Data : 49-20736
sectors : 20739
cluster_size : 8
no_of_cluster : 2586 (2 - 2587)
fat_length 8 calculated 8
FAT differs, FAT sectors=0-8/8
heads/cylinder 4 (FAT) != 255 (HD)
sect/track 17 (FAT) != 63 (HD)

FAT12 at 57667/47/9
     MS Data                926423324  926444062      20739 [NO NAME]
     FAT12, blocksize=4096, 10 MB / 10 MiB
check_FAT: Unusual, only one FAT
FAT32 at 57667/47/10
check_FAT: Bad number of entries in root dir

LVM magic value at 57972/73/14
LVM magic value at 57972/73/16
LVM magic value at 57972/73/17
LVM magic value at 57972/73/38

HFS magic value at 58063/134/3
part_size 849336327
     Mac HFS                932790539 1782126865  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB

HFS magic value at 58063/134/5
part_size 849336327
     Mac HFS                 83454216  932790542  849336327 []
     HFS found using backup sector!, 434 GB / 404 GiB

HFS magic value at 58064/137/5
part_size 849336327
     Mac HFS                932806795 1782143121  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB

HFS magic value at 58064/137/7
part_size 849336327
     Mac HFS                 83470472  932806798  849336327 []
     HFS found using backup sector!, 434 GB / 404 GiB

LVM magic value at 58304/152/15

HFS magic value at 58874/19/16
part_size 3422552322
     Mac HFS                945812022 4368364343 3422552322
     HFS blocksize=67108864, 1752 GB / 1632 GiB
This partition ends after the disk limits. (start=945812022, size=3422552322, end=4368364343, disk end=1953525168)

HFS magic value at 58874/19/18

LVM magic value at 60986/221/37

HFS magic value at 62263/172/5
part_size 1963465262
     Mac HFS               1000265935 2963731196 1963465262
     HFS blocksize=33554432, 1005 GB / 936 GiB
This partition ends after the disk limits. (start=1000265935, size=1963465262, end=2963731196, disk end=1953525168)

HFS magic value at 62263/172/7

HFS magic value at 62263/173/40
part_size 1980242478
     Mac HFS               1000266033 2980508510 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=1000266033, size=1980242478, end=2980508510, disk end=1953525168)

HFS magic value at 62263/173/42

HFS magic value at 62263/173/62
part_size 1980242478
     Mac HFS               1000266055 2980508532 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=1000266055, size=1980242478, end=2980508532, disk end=1953525168)

HFS magic value at 62263/174/1

HFS magic value at 62263/174/31
part_size 1980242478
     Mac HFS               1000266087 2980508564 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=1000266087, size=1980242478, end=2980508564, disk end=1953525168)

HFS magic value at 62263/174/33

HFS magic value at 62263/175/16
part_size 1980242734
     Mac HFS               1000266135 2980508868 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=1000266135, size=1980242734, end=2980508868, disk end=1953525168)

HFS magic value at 62263/175/18

HFS magic value at 62263/175/32
part_size 1980242734
     Mac HFS               1000266151 2980508884 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
This partition ends after the disk limits. (start=1000266151, size=1980242734, end=2980508884, disk end=1953525168)

HFS magic value at 62263/175/34

HFS magic value at 62263/176/17
part_size 1997019950
     Mac HFS               1000266199 2997286148 1997019950
     HFS blocksize=33554432, 1022 GB / 952 GiB
This partition ends after the disk limits. (start=1000266199, size=1997019950, end=2997286148, disk end=1953525168)

HFS magic value at 62263/176/19

HFS magic value at 62263/180/45
part_size 2030574382
     Mac HFS               1000266479 3030840860 2030574382
     HFS blocksize=33554432, 1039 GB / 968 GiB
This partition ends after the disk limits. (start=1000266479, size=2030574382, end=3030840860, disk end=1953525168)

HFS magic value at 62263/180/47
NTFS at 64114/84/11
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                248590505 1029996712  781406208
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
NTFS at 64114/84/11
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1029996712 1811402919  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 64199/75/29
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                249955481 1031361688  781406208
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
NTFS at 64199/75/29
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1031361688 1812767895  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
NTFS at 64384/155/60
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                252932577 1034338784  781406208
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
NTFS at 64384/155/60
filesystem size           781406208
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1034338784 1815744991  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB

LVM magic value at 64389/12/23
FAT32 at 64634/61/54
Bad root_cluster
FAT12 at 64634/61/55
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
FAT differs, FAT sectors=0-9/9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 64634/61/55
     MS Data               1038349107 1038351986       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB

LVM magic value at 96241/243/21
check_FAT: Bad number of sectors per cluster
NTFS at 119641/210/57
filesystem size           1138327552
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                783718400 1922045951 1138327552 [Data]
     NTFS found using backup sector, blocksize=4096, 582 GB / 542 GiB
NTFS at 119641/210/57
filesystem size           1138327552
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1922045951 3060373502 1138327552
     NTFS, blocksize=4096, 582 GB / 542 GiB
This partition ends after the disk limits. (start=1922045951, size=1138327552, end=3060373502, disk end=1953525168)
NTFS at 119644/232/37
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               1922089339 1922095512       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 119644/232/37
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
     MS Data               1922095512 1922101685       6174
     NTFS, blocksize=512, 3161 KB / 3087 KiB
NTFS at 121601/25/24
filesystem size           1953519616
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048 1953521663 1953519616
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121601/25/24
filesystem size           1953519616
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1959813125(121992/184/54)) lseek err Invalid argument
file_pread(4,1,buffer,1959813125(121992/184/54)) lseek err Invalid argument
NTFS: Can't read MFT
     MS Data               1953521663 3907041278 1953519616
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=1953521663, size=1953519616, end=3907041278, disk end=1953525168)
file_pread(4,1,buffer,1953525168(121601/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(4,1,buffer,1953525169(121601/81/2)) lseek err Invalid argument
file_pread(4,1,buffer,1953525170(121601/81/3)) lseek err Invalid argument
[skipped 600 messages, all related to 121601]
file_pread(4,1,buffer,1953525758(121601/90/24)) lseek err Invalid argument
file_pread(4,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
NTFS at 121601/57/56
filesystem size           31477760
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data               1922045952 1953523711   31477760 [Restore]
     NTFS found using backup sector, blocksize=4096, 16 GB / 15 GiB
NTFS at 121601/57/56
filesystem size           31477760
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(4,2,buffer,1959815173(121992/217/23)) lseek err Invalid argument
file_pread(4,1,buffer,1959815173(121992/217/23)) lseek err Invalid argument
NTFS: Can't read MFT
     MS Data               1953523711 1985001470   31477760
     NTFS, blocksize=4096, 16 GB / 15 GiB
This partition ends after the disk limits. (start=1953523711, size=31477760, end=1985001470, disk end=1953525168)
file_pread(4,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(4,1,buffer,1953525761(121601/90/27)) lseek err Invalid argument
[skipped 1800 messages, all related to 121601]
file_pread(4,14,buffer,1953525166(121601/80/62)) ReadFile The drive cannot find the sector requested.
file_pread(4,1,buffer,1953525168(121601/81/1)) ReadFile The drive cannot find the sector requested.
file_pread(4,1,buffer,1953527215(121601/113/32)) lseek err Invalid argument
file_pread(4,1,buffer,1953525168(121601/81/1)) ReadFile The drive cannot find the sector requested.
file_pread(4,2,buffer,1953525181(121601/81/14)) lseek err Invalid argument
file_pread(4,1,buffer,1953525185(121601/81/18)) lseek err Invalid argument
NTFS at 109/189/57
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
NTFS at 949/137/21
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
NTFS at 949/235/39
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size           6174
sectors_per_cluster       1
mft_lcn                   2058
mftmirr_lcn               5162
clusters_per_mft_record   2
clusters_per_index_record 8
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2236 GB / 2082 GiB)
The following partitions can't be recovered:
     Mac HFS                 86884798 3509437119 3422552322
     HFS blocksize=67108864, 1752 GB / 1632 GiB
     Mac HFS                254651225 2218116486 1963465262
     HFS blocksize=33554432, 1005 GB / 936 GiB
     Mac HFS                254651323 2234893800 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS                254651345 2234893822 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS                254651377 2234893854 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS                254651425 2234894158 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS                254651441 2234894174 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS                254651489 2251671438 1997019950
     HFS blocksize=33554432, 1022 GB / 952 GiB
     Mac HFS                254651769 2285226150 2030574382
     HFS blocksize=33554432, 1039 GB / 968 GiB
     Mac HFS                945812022 4368364343 3422552322
     HFS blocksize=67108864, 1752 GB / 1632 GiB
     Mac HFS               1000265935 2963731196 1963465262
     HFS blocksize=33554432, 1005 GB / 936 GiB
     Mac HFS               1000266033 2980508510 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS               1000266055 2980508532 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS               1000266087 2980508564 1980242478
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS               1000266135 2980508868 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS               1000266151 2980508884 1980242734
     HFS blocksize=33554432, 1013 GB / 944 GiB
     Mac HFS               1000266199 2997286148 1997019950
     HFS blocksize=33554432, 1022 GB / 952 GiB
     Mac HFS               1000266479 3030840860 2030574382
     HFS blocksize=33554432, 1039 GB / 968 GiB
     MS Data               1922045951 3060373502 1138327552
     NTFS, blocksize=4096, 582 GB / 542 GiB
     MS Data               1953521663 3907041278 1953519616
     NTFS, blocksize=4096, 1000 GB / 931 GiB
     MS Data               1953523711 1985001470   31477760
     NTFS, blocksize=4096, 16 GB / 15 GiB

Results
     EFI System                  2048     206847     204800 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=1024, 104 MB / 100 MiB
     MS Data                     2048 1953521663 1953519616
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
     MS Data                     2054     206853     204800 [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
     MS Data                    65084     269883     204800 [NO NAME]
     FAT32, blocksize=1024, 104 MB / 100 MiB
     MS Data                   206848    2050047    1843200 [Recovery]
     NTFS, blocksize=4096, 943 MB / 900 MiB
     MS Data                   209243     215416       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                   215416     221589       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1045515    1051688       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1051688    1057861       6174
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1054595    1060768       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1060768    1066941       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1756875    1763048       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1763048    1769221       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1763067    1769240       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  1769240    1775413       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                  2050047    3893246    1843200
     NTFS, blocksize=4096, 943 MB / 900 MiB
     MS Data                  2312192  783718399  781406208 [OS]
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                 15248163   15254336       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                 15254336   15260509       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                 15254355   15260528       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                 15260528   15266701       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     MS Data                 15260547   15266720       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                 15266720   15272893       6174 [Boot]
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     Mac HFS                 54070035  903406361  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB
     MS Data                 58026388   58047126      20739 [NO NAME]
     FAT12, blocksize=4096, 10 MB / 10 MiB
     Mac HFS                 66032059  915368385  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB
     Mac HFS                 66048211  915384537  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB
     Mac HFS                 73248176  922584502  849336327 []
     HFS found using backup sector!, 434 GB / 404 GiB
     Mac HFS                 83454216  932790542  849336327 []
     HFS found using backup sector!, 434 GB / 404 GiB
     Mac HFS                 83470472  932806798  849336327 []
     HFS found using backup sector!, 434 GB / 404 GiB
     Mac HFS                212230579 1670591901 1458361323
     HFS blocksize=16777216, 746 GB / 695 GiB
     MS Data                248590505 1029996712  781406208
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
     MS Data                249955481 1031361688  781406208
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
     MS Data                252932577 1034338784  781406208
     NTFS found using backup sector, blocksize=4096, 400 GB / 372 GiB
     MS Data                393340288 1174746495  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                395321664 1176727871  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                397263296 1178669503  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                399884224 1181290431  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                409248832 1190655039  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                415857792 1197263999  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                417124963  417127842       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
     MS Data                417529771  417532650       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
     MS Data                423070795  423073674       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
     MS Data                423105043  423107922       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
     MS Data                423262099  423264978       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
     MS Data                783718399 1565124606  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data                783718400 1922045951 1138327552 [Data]
     NTFS, blocksize=4096, 582 GB / 542 GiB
     MS Data                798625947  798632120       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data                798632120  798638293       6174
     NTFS, blocksize=512, 3161 KB / 3087 KiB
     Mac HFS                922584499 1771920825  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB
     MS Data                926423324  926444062      20739 [NO NAME]
     FAT12, blocksize=4096, 10 MB / 10 MiB
     Mac HFS                932790539 1782126865  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB
     Mac HFS                932806795 1782143121  849336327 []
     HFS blocksize=16777216, 434 GB / 404 GiB
     MS Data               1029996712 1811402919  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data               1031361688 1812767895  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data               1034338784 1815744991  781406208
     NTFS, blocksize=4096, 400 GB / 372 GiB
     MS Data               1038349107 1038351986       2880 [NO NAME]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
     MS Data               1890568193 1922045952   31477760
     NTFS found using backup sector, blocksize=4096, 16 GB / 15 GiB
     MS Data               1922045952 1953523711   31477760 [Restore]
     NTFS, blocksize=4096, 16 GB / 15 GiB
     MS Data               1922089339 1922095512       6174
     NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
     MS Data               1922095512 1922101685       6174
     NTFS, blocksize=512, 3161 KB / 3087 KiB

interface_write()
 
No partition found or selected for recovery
simulate write!

TestDisk exited normally.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Damaged filesystem on a system disk

#2 Post by cgrenier »

The log shows CRC error, teher are bad sectors. You need to clone your disk to a new empty disk using ddrescue as described in https://www.cgsecurity.org/testdisk.pdf
Once you have cloned your disk, remove the original disk and try to repair the filesystem from the clone using chkdsk.

Ranger99
Posts: 2
Joined: 21 Apr 2020, 17:58

Re: Damaged filesystem on a system disk

#3 Post by Ranger99 »

Thank you for your advice, Christophe!
Unfortunately, I'm not so skilled to follow it :(
So, I talked to the owner of the laptop, narrowed the scope and found everything in recovered files.

Locked