Mon Jun 23 18:58:07 2014
Command line: TestDisk
TestDisk 7.0-WIP, Data Recovery Utility, June 2014
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-06-21T09:12:27
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=39999988224
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
Hard disk list
Disk /dev/sda - 40 GB / 37 GiB - CHS 5168 240 63, sector size=512 - FUJITSU MHV2040AH, FW:00840096
Partition table type (auto): Intel
Disk /dev/sda - 40 GB / 37 GiB - FUJITSU MHV2040AH
Partition table type: Intel
Analyse Disk /dev/sda - 40 GB / 37 GiB - CHS 5168 240 63
Geometry from i386 MBR: head=240 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 * HPFS - NTFS 0 1 1 5166 239 63 78124977
search_part()
Disk /dev/sda - 40 GB / 37 GiB - CHS 5168 240 63
NTFS at 0/1/1
filesystem size 78124977
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 4882811
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 5166 239 63 78124977
NTFS, blocksize=4096, 39 GB / 37 GiB
file_pread(4,2,buffer,78141440(5168/20/21)) lseek err Invalid argument
file_pread(4,1,buffer,78141440(5168/20/21)) lseek err Invalid argument
file_pread(4,1,buffer,78140160(5168/0/1)) ReadFile The drive cannot find the sector requested.
file_pread(4,14,buffer,78140161(5168/0/2)) lseek err Invalid argument
file_pread(4,3,buffer,78140175(5168/0/16)) lseek err Invalid argument
file_pread(4,3,buffer,78140222(5168/0/63)) lseek err Invalid argument
file_pread(4,8,buffer,78140238(5168/1/16)) lseek err Invalid argument
file_pread(4,11,buffer,78140285(5168/1/63)) lseek err Invalid argument
file_pread(4,2,buffer,78142207(5168/32/32)) lseek err Invalid argument
file_pread(4,1,buffer,78140178(5168/0/19)) lseek err Invalid argument
file_pread(4,1,buffer,78140225(5168/1/3)) lseek err Invalid argument
file_pread(4,1,buffer,78140246(5168/1/24)) lseek err Invalid argument
file_pread(4,1,buffer,78140296(5168/2/11)) lseek err Invalid argument
file_pread(4,1,buffer,78142209(5168/32/34)) lseek err Invalid argument
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 5166 239 63 78124977
NTFS, blocksize=4096, 39 GB / 37 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 5166 239 63 78124977
search_part()
Disk /dev/sda - 40 GB / 37 GiB - CHS 5168 240 63
NTFS at 0/1/1
filesystem size 78124977
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 4882811
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 5166 239 63 78124977
NTFS, blocksize=4096, 39 GB / 37 GiB
NTFS at 5166/239/63
filesystem size 78124977
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 4882811
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 5166 239 63 78124977
NTFS found using backup sector, blocksize=4096, 39 GB / 37 GiB
NTFS at 5166/239/63
filesystem size 78124977
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 4882811
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(4,1024,buffer,84419567(5583/73/9)) lseek err Invalid argument
file_pread(4,1,buffer,84419567(5583/73/9)) lseek err Invalid argument
NTFS: Can't read MFT
HPFS - NTFS 5166 239 63 10333 238 62 78124977
NTFS, blocksize=4096, 39 GB / 37 GiB
This partition ends after the disk limits. (start=78125039, size=78124977, end=156250015, disk end=78140160)
file_pread(4,2,buffer,78141440(5168/20/21)) lseek err Invalid argument
file_pread(4,1,buffer,78141440(5168/20/21)) lseek err Invalid argument
file_pread(4,1,buffer,78140160(5168/0/1)) ReadFile The drive cannot find the sector requested.
file_pread(4,14,buffer,78140161(5168/0/2)) lseek err Invalid argument
file_pread(4,3,buffer,78140175(5168/0/16)) lseek err Invalid argument
file_pread(4,3,buffer,78140222(5168/0/63)) lseek err Invalid argument
file_pread(4,8,buffer,78140238(5168/1/16)) lseek err Invalid argument
file_pread(4,11,buffer,78140285(5168/1/63)) lseek err Invalid argument
file_pread(4,2,buffer,78142207(5168/32/32)) lseek err Invalid argument
file_pread(4,1,buffer,78140178(5168/0/19)) lseek err Invalid argument
file_pread(4,1,buffer,78140225(5168/1/3)) lseek err Invalid argument
file_pread(4,1,buffer,78140246(5168/1/24)) lseek err Invalid argument
file_pread(4,1,buffer,78140296(5168/2/11)) lseek err Invalid argument
file_pread(4,1,buffer,78142209(5168/32/34)) lseek err Invalid argument
Disk /dev/sda - 40 GB / 37 GiB - CHS 5168 240 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (40 GB / 37 GiB) seems too small! (< 80 GB / 74 GiB)
The following partition can't be recovered:
HPFS - NTFS 5166 239 63 10333 238 62 78124977
NTFS, blocksize=4096, 39 GB / 37 GiB
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 5166 239 63 78124977
NTFS, blocksize=4096, 39 GB / 37 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 5166 239 63 78124977