Code: Select all
Fri Aug 25 11:14:41 2023
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1024209543168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1023430098944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000381018112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000396321280
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000396321280
filewin32_getfilesize(\\.\J:) GetFileSize err ???????? ???????.
filewin32_setfilepointer(\\.\J:) SetFilePointer err ???????? ???????.
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\O:)=59055669248
Hard disk list
Disk \\.\PhysicalDrive0 - 1024 GB / 953 GiB - CHS 124519 255 63, sector size=512 - SAMSUNG MZVL21T0HCLR-00B00, S/N:0025_38B5_21B7_B8AF., FW:GXA7401Q
Disk \\.\PhysicalDrive1 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Samsung SSD 970 EVO Plus 2TB, S/N:0025_3853_3190_3887., FW:2B2QEXM7
Disk \\.\PhysicalDrive2 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Samsung Portable SSD T5, S/N:1D39F7654321
Disk \\.\PhysicalDrive3 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate FA GoFlex Desk, S/N:NA0KBJL2, FW:0D0B
Drive O: - 59 GB / 54 GiB - CHS 115343104 1 1, sector size=512
Partition table type defaults to None
Drive O: - 59 GB / 54 GiB
Partition table type: None
Interface Advanced
P Unknown 0 115343103 115343104
Change partition type:
P NTFS 0 115343103 115343104
ntfs_boot_sector
P NTFS 0 115343103 115343104
filesystem size 8922980849155958266 2712177588380243268
sectors_per_cluster 128 54
mft_lcn 8656922565675998984 14374428631713765566
mftmirr_lcn 17970793733309430699 8450474270428948987
clusters_per_mft_record 94 2
clusters_per_index_record -38 82
Boot sector
Status: Bad
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Failed to rebuild NTFS boot sector.
ntfs_boot_sector
P NTFS 0 115343103 115343104
filesystem size 8922980849155958266 2712177588380243268
sectors_per_cluster 128 54
mft_lcn 8656922565675998984 14374428631713765566
mftmirr_lcn 17970793733309430699 8450474270428948987
clusters_per_mft_record 94 2
clusters_per_index_record -38 82
Boot sector
Status: Bad
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Change partition type:
P FAT32 0 115343103 115343104
fat32_boot_sector
P FAT32 0 115343103 115343104
Boot sector
Bad
Backup boot sector
Bad
First sectors (boot code and partition information) are not identical.
Second sectors (cluster information) are not identical.
Third sectors (second part of boot code) are not identical.
A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.
Change partition type:
P FAT16 0 115343103 115343104
fat1x_boot_sector
P FAT16 0 115343103 115343104
Boot sector
Bad
A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.
Change partition type:
P exFAT 0 115343103 115343104
exFAT_boot_sector
P exFAT 0 115343103 115343104
Boot sector
Bad
Backup boot record
Bad
Sectors are not identical.
Change partition type:
P FAT32 0 115343103 115343104
fat32_boot_sector
P FAT32 0 115343103 115343104
Boot sector
Bad
Backup boot sector
Bad
First sectors (boot code and partition information) are not identical.
Second sectors (cluster information) are not identical.
Third sectors (second part of boot code) are not identical.
A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.
Change partition type:
P FAT16 0 115343103 115343104
Change partition type:
P exFAT 0 115343103 115343104
Change partition type:
P Unknown 0 115343103 115343104
Analyse Drive O: - 59 GB / 54 GiB - CHS 115343104 1 1
Current partition structure:
P Unknown 0 115343103 115343104
search_part()
Drive O: - 59 GB / 54 GiB - CHS 115343104 1 1
file_win32_pread(680,11,buffer,115343096(115343096/0/1)) read err: read after end of file
file_win32_pread(680,11,buffer,115343100(115343100/0/1)) read err: read after end of file
file_win32_pread(680,8,buffer,115343099(115343099/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343092(115343092/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343093(115343093/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343094(115343094/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343095(115343095/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343096(115343096/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343098(115343098/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343100(115343100/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343102(115343102/0/1)) read err: read after end of file
Results
interface_write()
No partition found or selected for recovery
search_part()
Drive O: - 59 GB / 54 GiB - CHS 115343104 1 1
file_win32_pread(680,11,buffer,115343098(115343098/0/1)) read err: read after end of file
file_win32_pread(680,8,buffer,115343101(115343101/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343092(115343092/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343093(115343093/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343094(115343094/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343095(115343095/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343096(115343096/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343098(115343098/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343100(115343100/0/1)) read err: read after end of file
file_win32_pread(680,14,buffer,115343102(115343102/0/1)) read err: read after end of file
Results
interface_write()
No partition found or selected for recovery