Bizarre Change in Filesystem Type after Testdisk repair Topic is solved

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
stevesr0
Posts: 12
Joined: 01 Mar 2012, 12:37

Bizarre Change in Filesystem Type after Testdisk repair

#1 Post by stevesr0 »

Firstly, thanks for the forum.

Second, I wish to report my recent first experience using Testdisk to examine my partition and repair it.

I decided to try Testdisk because my system started to spontaneously freeze and occasionally reboot after shutdown. When this happened, sometimes I was able to switch to a command line and note that a stream of /dev/sda i/o errors sector xxxxxx (mostly one sector with bursts of other sectors). Using Spinrite 6.0 on the disk (level 2 and level 4) has not changed these occurrences.

I went through the analyze, quick search assessments with apparent normal findings (except that the bootable partition switched from one to the other). Then I performed the deeper search and this revealed many duplicate and extra entries.

Testdisk Log, follows. It looks full of redundancies to me, since I went back and forth before finally deciding it was "safe" to write. I think it includes two sessions (second part appended).

"Wed Feb 29 21:25:10 2012
Command line: TestDisk

TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 2.6.32-5-686 (#1 SMP Mon Oct 3 04:15:24 UTC 2011)
Compiler: GCC 4.4 - Sep 5 2010 13:29:23
ext2fs lib: 1.41.12, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 156301488 sectors
/dev/sda: user_max 156301488 sectors
/dev/sda: native_max 156301488 sectors
/dev/sda: dco 156301488 sectors
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - ATA HTS548080M9AT00

Partition table type (auto): Intel
Disk /dev/sda - 80 GB / 74 GiB - ATA HTS548080M9AT00
Partition table type: Intel

Analyse Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 3206 109 40 5755 240 53 40957952
3 E extended 7030 227 44 7285 218 37 4096002
5 L Linux Swap 7030 227 46 7285 218 37 4096000
Computes LBA from CHS for Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB

recover_EXT2: s_block_group_nr=0/156, s_mnt_count=1/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 5119744
recover_EXT2: part_size 40957952
Linux 3206 109 40 5755 240 53 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
P Linux 3206 109 40 5755 240 53 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
P Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Directory /

[SNIP]

dir_partition inode=2
P Linux 3206 109 40 5755 240 53 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
Directory /

[SNIP]

interface_write()
1 * HPFS - NTFS 0 1 1 2568 254 63 41270922
2 P Linux 3206 109 40 5755 240 53 40957952
3 P Linux Swap 7030 227 46 7285 218 21 4095984

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
NTFS at 2568/254/63
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS found using backup sector!, 21 GB / 19 GiB
NTFS at 2587/254/63
filesystem size 41576157
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2587 254 63 41576157
NTFS found using backup sector!, 21 GB / 19 GiB

recover_EXT2: s_block_group_nr=0/156, s_mnt_count=1/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 5119744
recover_EXT2: part_size 40957952
Linux 3206 109 40 5755 240 53 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
FAT32 at 3429/198/34
FAT1 : 32-2075
FAT2 : 2076-4119
start_rootdir : 4120 root cluster : 2
Data : 4120-1048575
sectors : 1048576
cluster_size : 4
no_of_cluster : 261114 (2 - 261115)
fat_length 2044 calculated 2040
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3429/198/34
FAT32 LBA 3429 198 34 3495 12 37 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT32 at 3429/198/40
FAT1 : 32-2075
FAT2 : 2076-4119
start_rootdir : 4120 root cluster : 2
Data : 4120-1048575
sectors : 1048576
cluster_size : 4
no_of_cluster : 261114 (2 - 261115)
fat_length 2044 calculated 2040
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3429/198/40
FAT32 LBA 3429 198 34 3495 12 37 1048576 [SDCARD]
FAT found using backup sector!, 536 MB / 512 MiB
FAT32 at 3708/50/55
FAT1 : 32-1619
FAT2 : 1620-3207
start_rootdir : 3208 root cluster : 2
Data : 3208-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 201592 (2 - 201593)
fat_length 1588 calculated 1575
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3708/50/55
FAT32 LBA 3708 50 55 3720 241 41 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
FAT32 at 3708/50/61
FAT1 : 32-1619
FAT2 : 1620-3207
start_rootdir : 3208 root cluster : 2
Data : 3208-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 201592 (2 - 201593)
fat_length 1588 calculated 1575
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3708/50/61
FAT32 LBA 3708 50 55 3720 241 41 204800 [SDCARD]
FAT found using backup sector!, 104 MB / 100 MiB

recover_EXT2: s_block_group_nr=0/156, s_mnt_count=23/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 5119744
recover_EXT2: part_size 40957952
Linux 4268 155 48 6818 31 61 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
FAT32 at 5544/245/14
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5544/245/14
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 at 5544/245/20
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5544/245/20
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT found using backup sector!, 314 MB / 300 MiB
FAT32 at 5600/8/41
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5600/8/41
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 at 5600/8/47
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5600/8/47
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT found using backup sector!, 524 MB / 500 MiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
NTFS at 9728/254/63
filesystem size 156296322
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 9768520
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=3
get_geometry_from_list_part_aux head=16 nbr=3
get_geometry_from_list_part_aux head=32 nbr=3
get_geometry_from_list_part_aux head=64 nbr=3
get_geometry_from_list_part_aux head=128 nbr=3
get_geometry_from_list_part_aux head=240 nbr=3
get_geometry_from_list_part_aux head=255 nbr=6

Results
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
HPFS - NTFS 0 1 1 2587 254 63 41576157
NTFS found using backup sector!, 21 GB / 19 GiB
HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
Linux 3206 109 40 5755 240 53 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
FAT32 LBA 3429 198 34 3495 12 37 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT32 LBA 3708 50 55 3720 241 41 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
Linux 4268 155 48 6818 31 61 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Directory /

[SNIP]

5620 dr-xr-xr-x 0 0 ntfs_mapping_pairs_decompress() failed: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
ntfs_mapping_pairs_decompress() failed: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
ntfs_mapping_pairs_decompress() failed: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
ntfs_mapping_pairs_decompress() failed: Input/output error.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
0 7-May-2010 03:46 Documents and Settings

[SNIP]

ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
HPFS - NTFS 0 1 1 2587 254 63 41576157
NTFS found using backup sector!, 21 GB / 19 GiB
Directory /

[SNIP]

ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
HPFS - NTFS 0 1 1 2587 254 63 41576157
NTFS found using backup sector!, 21 GB / 19 GiB
Directory /

[SNIP]

ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Directory /

[SNIP]


dir_partition inode=2
Linux 4268 155 48 6818 31 61 40957952
EXT4 Large file Sparse superblock Recover, 20 GB / 19 GiB
ext2fs_dir_iterate failed with error 2133571402.
Directory /

interface_write()
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 3206 109 40 5755 240 53 40957952
3 E extended LBA 7030 227 1 7285 254 63 4098339
5 L Linux Swap 7030 227 46 7285 218 21 4095984
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 7030/227/1,lba=112951251
You will have to reboot for the change to take effect.

Analyse Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 3206 109 40 5755 240 53 40957952
3 E extended LBA 7030 227 1 7285 254 63 4098339
5 L Linux Swap 7030 227 46 7285 218 21 4095984
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Search for partition aborted
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 2568 254 63 41270922

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Search for partition aborted
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 2568 254 63 41270922
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Partition table type (auto): Intel
Disk /dev/sda - 80 GB / 74 GiB - ATA HTS548080M9AT00
Partition table type: Intel

Analyse Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 3206 109 40 5755 240 53 40957952
3 E extended LBA 7030 227 1 7285 254 63 4098339
5 L Linux Swap 7030 227 46 7285 218 21 4095984
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9730 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Search for partition aborted
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 2568 254 63 41270922
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally."

I was thrilled when the system rebooted apparently normally after exiting testdisk and shutting down.

HOWEVER, I noticed that the swap partition failed to load during the boot.

After boot, the system seems to be functioning normally.

However, the extended partition which contains my swap partition is now listed with a Fat Windows 95 code (I think it is the 0f WIN95: Extended partition, LBA-mapped one). Prior to the testdisk rewrite, it was listed as a code 5 in fdisk -l.

** I think this may be related to the failure of testdisk to detect an extended partition (or my failure to run the specific extended partition analysis, which I now recall was an additional option on the result screen at the end of the "Deeper Search".

I don't know if this is important? I don't know the practical implications of a particular filesystem identification for an extended partition, since these are only containers for the logical partitions within them.

Gparted detects the extended and swap partitions apparently normally, but since the swap "failed" to load at boot, it suggests that the extended partition (and the swap partition inside it) is not being recognized.

So, I wonder whether I should change the extended partition code back to 5, and if so, with which tool, fdisk or Gparted or testdisk or ...?

Thanks again for providing testdisk and for the forum.

Steve

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Bizarre Change in Filesystem Type after Testdisk repair

#2 Post by cgrenier »

The extended partition must be an "Extended LBA" because the ending cylinder is greater than 1023.

Check your /etc/fstab, maybe the swap partition isn't listed as /dev/sda5.

Note that TestDisk 6.14-WIP is better than previous versions when dealing with partitions aligned on cylinder boundaries and aligned on 1MB boundaries.
<pre>
wget -N http://www.cgsecurity.org/testdisk-6.14 ... 26.tar.bz2
tar xjf testdisk-6.14-WIP.linux26.tar.bz2
cd testdisk-6.14-WIP
sudo ./testdisk_static
</pre>

Your hard disk contains bad sectors, you should clone it to a new empty disk as described in http://www.cgsecurity.org/wiki/Damaged_Hard_Disk

stevesr0
Posts: 12
Joined: 01 Mar 2012, 12:37

Re: Bizarre Change in Filesystem Type after Testdisk repair

#3 Post by stevesr0 »

Hi again.

After using SpinRite, I ran the Hitachi Drive Fitness test on this hard drive. It found no errors with the drive.

I also tested using the smartmontools and again no problem was detected.

Then I backed up the files I care about.

Then, with Gparted (running from a live CD), I deleted the (logical) swap partition and the (win95LBA) extended partition it was in. Then in the same Gparted session, I created a new extended partition (Type 5, according to fdisk) and resized it (and moving it "leftward" by shrinking the preceding partitions) and then creating a new (logical) Linux swap partition within it.

When I ran testdisk after this, it still displayed errors and so, I ended up deleting the swap and extended partitions.

Subsequently, I have run testdisk while booted from a liveCD and while booted from the hard drive itself.

When I attempt to rewrite the partition table using testdisk, it doesn't change anything after the reboot.

Note that the hard disk seems to be functioning ok at this time and I am unaware of missing data.

I am puzzled what I am doing wrong in getting rid of the extra partition entries.

Appreciate comments, advice and explanation.

Thanks again.

Steve Rinsler

P.S. I have attached the log file twice but don't see it in the preview.

Hopefully, it will appear after submission

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Bizarre Change in Filesystem Type after Testdisk repair

#4 Post by cgrenier »

You are right, the "Input/output error" message from the ntfs library doesn't mean there are bad sectors. My mistake.

I still don't understand the problem with the logical partition but if you don't need more than 4 partitions, there is no need to create an extended partition, you can set them as primary.

stevesr0
Posts: 12
Joined: 01 Mar 2012, 12:37

Re: Bizarre Change in Filesystem Type after Testdisk repair

#5 Post by stevesr0 »

Hi again,

I appreciate the advice about not needing to maintain an extended partition. Note that I DON'T have one at this time (nor a swap partition). Both fdisk and gparted report two partitions (an NTFS [Type 7] and a Linux [Tyoe 83]). Only testdisk is detecting problems with these partitions and additional problematic partitions.

Whenever I have tried to attach the log file to a reply, an error message is displayed "The extension log is not allowed." I also tried changing the name to testdisklog.txt and the error message changed to "The extension txt is not allowed.

So, the text of my latest log file follows.

Looking at it, I note the disk geometry for the Linux partition is 207 and 18 rather than 254 and 63. I think this is incorrect.

In addition, the two Linux swap partitions detected on the "Quick Search" don't exist, and on both the "Quick" and "Deeper" searches, the Linux partition is found to have 207/18 rather than 254/63 geometry.

The "Deeper Search" detects many other nonexistent partitions.

I have the following questions:

Since I am not CURRENTLY experiencing problems obvious data corruption problems with this computer and the drive is said to be OK by SpinRite, smartmotools and the Hitachi Fitness Test and neither fdisk nor Gparted is finding errors in the partitions,

Should I not try to fix anything at this time (just continue to use the computer and see what happens),

or

Should I try just modifying the Linux partition geometry (can two partitions on the same drive have different geometries?) reported by testdisk?

or

Should I fix/delete the partitions found with the "Quick Search" (changing geometry of the Linux drive and deleting the two Linux Swap partitions)?

or

Should I try "fixing" everything ("Quick" and "Deeper" search abnormalities?

Rather confused at this point...

Thanks,

Steve
-----------------------------------------------------------------------------------------------

Text of testdisk.log of 5 Mar:

Mon Mar 5 11:01:22 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, January 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 2.6.32-5-686 (#1 SMP Mon Oct 3 04:15:24 UTC 2011) i686
Compiler: GCC 4.4
Compilation date: 2012-02-26T19:42:35
ext2fs lib: 1.41.9, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 156301488 sectors
/dev/sda: user_max 156301488 sectors
/dev/sda: native_max 156301488 sectors
/dev/sda: dco 156301488 sectors
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - HTS548080M9AT00, S/N:MRL442L4GWXKEB, FW:MG4OA53A

Partition table type (auto): Intel
Disk /dev/sda - 80 GB / 74 GiB - HTS548080M9AT00
Partition table type: Intel

Analyse Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 2581 195 47 6461 207 18 62332928
search_vista_part: 1

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB

recover_EXT2: s_block_group_nr=0/237, s_mnt_count=2/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
Linux Swap 6464 92 29 6783 17 2 5119984
SWAP2 version 1, 2621 MB / 2499 MiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
P Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
P Linux Swap 6464 92 29 6783 17 18 5120000
SWAP2 version 1, 2621 MB / 2500 MiB
L Linux Swap 7030 227 46 7285 218 37 4096000
SWAP2 version 1, 2097 MB / 2000 MiB

interface_write()
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 P Linux 2581 195 47 6461 207 18 62332928
3 P Linux Swap 6464 92 29 6783 17 18 5120000

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
NTFS at 2568/254/63
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS found using backup sector!, 21 GB / 19 GiB

recover_EXT2: s_block_group_nr=0/237, s_mnt_count=2/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
FAT32 at 2805/29/41
FAT1 : 32-2075
FAT2 : 2076-4119
start_rootdir : 4120 root cluster : 2
Data : 4120-1048575
sectors : 1048576
cluster_size : 4
no_of_cluster : 261114 (2 - 261115)
fat_length 2044 calculated 2040
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 2805/29/41
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT32 at 2805/29/47
FAT1 : 32-2075
FAT2 : 2076-4119
start_rootdir : 4120 root cluster : 2
Data : 4120-1048575
sectors : 1048576
cluster_size : 4
no_of_cluster : 261114 (2 - 261115)
fat_length 2044 calculated 2040
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 2805/29/47
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT found using backup sector!, 536 MB / 512 MiB
FAT32 at 3083/136/62
FAT1 : 32-1619
FAT2 : 1620-3207
start_rootdir : 3208 root cluster : 2
Data : 3208-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 201592 (2 - 201593)
fat_length 1588 calculated 1575
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3083/136/62
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
FAT32 at 3083/137/5
FAT1 : 32-1619
FAT2 : 1620-3207
start_rootdir : 3208 root cluster : 2
Data : 3208-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 201592 (2 - 201593)
fat_length 1588 calculated 1575
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3083/137/5
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT found using backup sector!, 104 MB / 100 MiB

recover_EXT2: s_block_group_nr=0/237, s_mnt_count=2/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Linux 3642 236 51 7522 248 22 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
FAT32 at 4920/76/21
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4920/76/21
FAT32 LBA 4920 76 21 4958 138 44 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 at 4920/76/27
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4920/76/27
FAT32 LBA 4920 76 21 4958 138 44 614400 [SDCARD]
FAT found using backup sector!, 314 MB / 300 MiB
FAT32 at 4975/94/48
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4975/94/48
FAT32 LBA 4975 94 48 5039 28 45 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 at 4975/94/54
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4975/94/54
FAT32 LBA 4975 94 48 5039 28 45 1024000 [SDCARD]
FAT found using backup sector!, 524 MB / 500 MiB
FAT32 at 5544/245/14
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5544/245/14
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 at 5544/245/20
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5544/245/20
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT found using backup sector!, 314 MB / 300 MiB
FAT32 at 5600/8/41
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5600/8/41
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 at 5600/8/47
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5600/8/47
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT found using backup sector!, 524 MB / 500 MiB
Linux Swap 6464 92 29 6783 17 2 5119984
SWAP2 version 1, 2621 MB / 2499 MiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
NTFS at 9728/254/63
filesystem size 156296322
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 9768520
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=4

Results
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
Linux 3642 236 51 7522 248 22 62332928
EXT4 Largntfs_mapping_pairs_decompress() failed: Input/output error
Failed to load $MFT: Input/output error
ntfs_mapping_pairs_decompress() failed: Input/output error
Failed to load $MFT: Input/output error
ntfs_mapping_pairs_decompress() failed: Input/output error
Failed to load $MFT: Input/output error
ntfs_mapping_pairs_decompress() failed: Input/output error
Failed to load $MFT: Input/output error
e file Sparse superblock Recover, 31 GB / 29 GiB
FAT32 LBA 4920 76 21 4958 138 44 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 LBA 4975 94 48 5039 28 45 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
Linux Swap 6464 92 29 6783 17 18 5120000
SWAP2 version 1, 2621 MB / 2500 MiB
Linux Swap 7030 227 46 7285 218 37 4096000
SWAP2 version 1, 2097 MB / 2000 MiB
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Directory /
5 dr-xr-xr-x 0 0 0 27-Dec-2011 18:27 .
5 dr-xr-xr-x 0 0 0 27-Dec-2011 18:27 ..
9419 -r--r--r-- 0 0 0 7-May-2010 23:08 CONFIG.SYS
18971 dr-xr-xr-x 0 0 0 9-May-2010 19:43 ATI
9420 -r--r--r-- 0 0 0 7-May-2010 23:08 AUTOEXEC.BAT
5609 -r--r--r-- 0 0 211 7-May-2010 21:37 boot.ini
139 -r--r--r-- 0 0 512 6-May-2010 18:55 BOOTSECT.DOS
5653 -r--r--r-- 0 0 79869 22-Oct-2011 08:41 clamscan-hda1.log
41210 dr-xr-xr-x 0 0 0 27-Dec-2011 18:27 Config.Msi
18712 -r--r--r-- 0 0 401002 22-Oct-2011 16:48 daily.cvd
2467 dr-xr-xr-x 0 0 0 11-Apr-2011 18:19 DiddleBug-2.90.7-BIGICON
25197 -r--r--r-- 0 0 1021803 3-Apr-2011 12:10 diddlebug-2.90.7.rar
5620 dr-xr-xr-x 0 0 0 7-May-2010 23:32 Documents and Settings
1287 dr-xr-xr-x 0 0 0 7-May-2010 23:48 Drivers
3729 dr-xr-xr-x 0 0 0 20-Aug-2010 19:49 faad93aa76e33fe6cc2843
9421 -r--r--r-- 0 0 0 7-May-2010 23:08 IO.SYS
18494 -r--r--r-- 0 0 30750647 22-Oct-2011 16:21 main.cvd
49006 -r--r--r-- 0 0 24454800 2-Nov-2011 21:32 merckmnl19_palmwin.exe
9422 -r--r--r-- 0 0 0 7-May-2010 23:08 MSDOS.SYS
5608 -r--r--r-- 0 0 47564 4-Aug-2004 01:00 NTDETECT.COM
5607 -r--r--r-- 0 0 250048 20-Aug-2010 13:18 ntldr
26 -r--r--r-- 0 0 805306368 13-Feb-2012 17:11 pagefile.sys
6080 dr-xr-xr-x 0 0 0 28-Oct-2011 17:47 Program Files
5718 dr-xr-xr-x 0 0 0 8-May-2010 00:01 RECYCLER
28 dr-xr-xr-x 0 0 0 7-May-2010 23:31 System Volume Information
2430 dr-xr-xr-x 0 0 0 13-Feb-2012 17:11 WINDOWS
22939 -r--r--r-- 0 0 331805736 20-Aug-2010 07:41 WindowsXP-KB936929-SP3-x86-ENU.exe
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
Can't open filesystem. Filesystem seems damaged.


dir_partition inode=2
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
Directory /
2 drwxr-xr-x 0 0 4096 15-Jan-2012 23:23 .
2 drwxr-xr-x 0 0 4096 15-Jan-2012 23:23 ..
11 drwx------ 0 0 16384 19-Sep-2010 17:07 lost+found
130561 drwxr-xr-x 0 0 4096 20-Sep-2010 15:55 var
783361 drwxr-xr-x 0 0 12288 5-Mar-2012 08:15 etc
913921 drwxr-xr-x 0 0 4096 21-Feb-2012 14:29 media
69 lrwxrwxrwx 0 0 37 14-Nov-2011 14:05 initrd.img
261121 drwxr-xr-x 0 0 4096 21-Feb-2012 11:13 sbin
652801 drwxr-xr-x 0 0 4096 20-Nov-2010 16:29 usr
391681 drwxr-xr-x 0 0 12288 21-Feb-2012 11:13 lib
261123 drwxr-xr-x 0 0 4096 20-Sep-2010 17:02 home
391726 drwxr-xr-x 0 0 4096 20-Sep-2010 15:58 dev
1044483 drwxr-xr-x 0 0 4096 6-Aug-2010 14:08 proc
12 drwxr-xr-x 0 0 4096 21-Feb-2012 11:13 bin
913924 drwxr-xr-x 0 0 4096 21-Feb-2012 11:15 boot
1044484 drwxr-xr-x 0 0 4096 6-Aug-2010 14:08 mnt
261124 drwx------ 0 0 4096 10-Jan-2012 16:24 root
391727 drwxrwxrwt 0 0 4096 5-Mar-2012 11:17 tmp
1044485 drwxr-xr-x 0 0 4096 21-Jul-2010 02:55 selinux
913925 drwxr-xr-x 0 0 4096 15-Aug-2010 14:32 sys
77 drwxr-xr-x 0 0 4096 20-Sep-2010 15:55 srv
522243 drwxr-xr-x 0 0 4096 21-Feb-2012 12:50 opt
68 lrwxrwxrwx 0 0 33 14-Nov-2011 14:05 vmlinuz
522241 drwxr-xr-x 0 0 4096 20-Sep-2010 16:47 .ure
X 67 lrwxrwxrwx 0 0 25 20-Sep-2010 15:59 vmlinuz.4198
67 lrwxrwxrwx 0 0 25 20-Sep-2010 15:59 vmlinuz.old
48 -rw-r--r-- 0 0 1926082 22-Oct-2011 10:05 clamscan-hda2.log
X 66 lrwxrwxrwx 0 0 28 20-Sep-2010 15:59 initrd.img.4198
66 lrwxrwxrwx 0 0 28 20-Sep-2010 15:59 initrd.img.old
X 4413 -rwxr-xr-x 0 0 4168 22-Jan-2012 20:10 .ismount-test-file


dir_partition inode=0
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT: cluster=2(0x2), pos=45068312
Directory /


dir_partition inode=0
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
FAT: cluster=2(0x2), pos=49540232
Directory /
4 drwxr-xr-x 0 0 0 19-Sep-2011 05:33 LOST.DIR
5 drwxr-xr-x 0 0 0 19-Sep-2011 06:23 OverDrive
266 -rwxr-xr-x 0 0 192 19-Sep-2011 06:23 .OverDrive.xml
267 drwxr-xr-x 0 0 0 19-Sep-2011 06:35 tmp
425 drwxr-xr-x 0 0 0 19-Sep-2011 06:38 backups
11596 drwxr-xr-x 0 0 0 19-Sep-2011 06:41 Android
11600 drwxr-xr-x 0 0 0 19-Sep-2011 06:43 dropbox


dir_partition inode=2
Linux 3642 236 51 7522 248 22 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
ext2fs_dir_iterate failed with error 1.
Directory /

interface_write()
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 2581 195 47 6461 207 18 62332928
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.

TestDisk exited normally.


Mon Mar 5 11:51:43 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, January 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 2.6.32-5-686 (#1 SMP Mon Oct 3 04:15:24 UTC 2011) i686
Compiler: GCC 4.4
Compilation date: 2012-02-26T19:42:35
ext2fs lib: 1.41.9, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 156301488 sectors
/dev/sda: user_max 156301488 sectors
/dev/sda: native_max 156301488 sectors
/dev/sda: dco 156301488 sectors
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 - HTS548080M9AT00, S/N:MRL442L4GWXKEB, FW:MG4OA53A

Partition table type (auto): Intel
Disk /dev/sda - 80 GB / 74 GiB - HTS548080M9AT00
Partition table type: Intel

Analyse Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 2581 195 47 6461 207 18 62332928
search_vista_part: 1

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB

recover_EXT2: s_block_group_nr=0/237, s_mnt_count=3/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
Linux Swap 6464 92 29 6783 17 2 5119984
SWAP2 version 1, 2621 MB / 2499 MiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
P Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
P Linux Swap 6464 92 29 6783 17 18 5120000
SWAP2 version 1, 2621 MB / 2500 MiB
L Linux Swap 7030 227 46 7285 218 37 4096000
SWAP2 version 1, 2097 MB / 2000 MiB

interface_write()
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
2 * Linux 2581 195 47 6461 207 18 62332928

search_part()
Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
NTFS at 2568/254/63
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS found using backup sector!, 21 GB / 19 GiB

recover_EXT2: s_block_group_nr=0/237, s_mnt_count=3/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
FAT32 at 2805/29/41
FAT1 : 32-2075
FAT2 : 2076-4119
start_rootdir : 4120 root cluster : 2
Data : 4120-1048575
sectors : 1048576
cluster_size : 4
no_of_cluster : 261114 (2 - 261115)
fat_length 2044 calculated 2040
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 2805/29/41
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT32 at 2805/29/47
FAT1 : 32-2075
FAT2 : 2076-4119
start_rootdir : 4120 root cluster : 2
Data : 4120-1048575
sectors : 1048576
cluster_size : 4
no_of_cluster : 261114 (2 - 261115)
fat_length 2044 calculated 2040
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 2805/29/47
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT found using backup sector!, 536 MB / 512 MiB
FAT32 at 3083/136/62
FAT1 : 32-1619
FAT2 : 1620-3207
start_rootdir : 3208 root cluster : 2
Data : 3208-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 201592 (2 - 201593)
fat_length 1588 calculated 1575
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3083/136/62
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
FAT32 at 3083/137/5
FAT1 : 32-1619
FAT2 : 1620-3207
start_rootdir : 3208 root cluster : 2
Data : 3208-204799
sectors : 204800
cluster_size : 1
no_of_cluster : 201592 (2 - 201593)
fat_length 1588 calculated 1575
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 3083/137/5
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT found using backup sector!, 104 MB / 100 MiB
FAT32 at 4920/76/21
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4920/76/21
FAT32 LBA 4920 76 21 4958 138 44 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 at 4920/76/27
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4920/76/27
FAT32 LBA 4920 76 21 4958 138 44 614400 [SDCARD]
FAT found using backup sector!, 314 MB / 300 MiB
FAT32 at 4975/94/48
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4975/94/48
FAT32 LBA 4975 94 48 5039 28 45 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 at 4975/94/54
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 4975/94/54
FAT32 LBA 4975 94 48 5039 28 45 1024000 [SDCARD]
FAT found using backup sector!, 524 MB / 500 MiB
FAT32 at 5544/245/14
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5544/245/14
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 at 5544/245/20
FAT1 : 32-1229
FAT2 : 1230-2427
start_rootdir : 2428 root cluster : 2
Data : 2428-614399
sectors : 614400
cluster_size : 4
no_of_cluster : 152993 (2 - 152994)
fat_length 1198 calculated 1196
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5544/245/20
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT found using backup sector!, 314 MB / 300 MiB
FAT32 at 5600/8/41
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5600/8/41
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 at 5600/8/47
FAT1 : 32-2028
FAT2 : 2029-4025
start_rootdir : 4026 root cluster : 2
Data : 4026-1023997
sectors : 1024000
cluster_size : 4
no_of_cluster : 254993 (2 - 254994)
fat_length 1997 calculated 1993
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 9 (FAT) != 63 (HD)
set_FAT_info: name from BS used

FAT32 at 5600/8/47
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT found using backup sector!, 524 MB / 500 MiB
Linux Swap 6464 92 29 6783 17 2 5119984
SWAP2 version 1, 2621 MB / 2499 MiB
Linux Swap 7030 227 46 7285 218 21 4095984
SWAP2 version 1, 2097 MB / 1999 MiB
NTFS at 9728/254/63
filesystem size 156296322
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 9768520
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
get_geometry_from_list_part_aux head=255 nbr=4
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=4

Results
HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
HPFS - NTFS 0 1 1 9728 254 63 156296322
NTFS found using backup sector!, 80 GB / 74 GiB
Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
FAT32 LBA 2805 29 41 2870 98 44 1048576 [SDCARD]
FAT32, 536 MB / 512 MiB
FAT32 LBA 3083 136 62 3096 72 48 204800 [SDCARD]
FAT32, 104 MB / 100 MiB
FAT32 LBA 4920 76 21 4958 138 44 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 LBA 4975 94 48 5039 28 45 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
FAT32 LBA 5544 245 14 5583 52 37 614400 [SDCARD]
FAT32, 314 MB / 300 MiB
FAT32 LBA 5600 8 41 5663 197 38 1024000 [SDCARD]
FAT32, 524 MB / 500 MiB
Linux Swap 6464 92 29 6783 17 18 5120000
SWAP2 version 1, 2621 MB / 2500 MiB
Linux Swap 7030 227 46 7285 218 37 4096000
SWAP2 version 1, 2097 MB / 2000 MiB

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
2 * Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
Directory /
5 dr-xr-xr-x 0 0 0 27-Dec-2011 18:27 .
5 dr-xr-xr-x 0 0 0 27-Dec-2011 18:27 ..
9419 -r--r--r-- 0 0 0 7-May-2010 23:08 CONFIG.SYS
18971 dr-xr-xr-x 0 0 0 9-May-2010 19:43 ATI
9420 -r--r--r-- 0 0 0 7-May-2010 23:08 AUTOEXEC.BAT
5609 -r--r--r-- 0 0 211 7-May-2010 21:37 boot.ini
139 -r--r--r-- 0 0 512 6-May-2010 18:55 BOOTSECT.DOS
5653 -r--r--r-- 0 0 79869 22-Oct-2011 08:41 clamscan-hda1.log
41210 dr-xr-xr-x 0 0 0 27-Dec-2011 18:27 Config.Msi
18712 -r--r--r-- 0 0 401002 22-Oct-2011 16:48 daily.cvd
2467 dr-xr-xr-x 0 0 0 11-Apr-2011 18:19 DiddleBug-2.90.7-BIGICON
25197 -r--r--r-- 0 0 1021803 3-Apr-2011 12:10 diddlebug-2.90.7.rar
5620 dr-xr-xr-x 0 0 0 7-May-2010 23:32 Documents and Settings
1287 dr-xr-xr-x 0 0 0 7-May-2010 23:48 Drivers
3729 dr-xr-xr-x 0 0 0 20-Aug-2010 19:49 faad93aa76e33fe6cc2843
9421 -r--r--r-- 0 0 0 7-May-2010 23:08 IO.SYS
18494 -r--r--r-- 0 0 30750647 22-Oct-2011 16:21 main.cvd
49006 -r--r--r-- 0 0 24454800 2-Nov-2011 21:32 merckmnl19_palmwin.exe
9422 -r--r--r-- 0 0 0 7-May-2010 23:08 MSDOS.SYS
5608 -r--r--r-- 0 0 47564 4-Aug-2004 01:00 NTDETECT.COM
5607 -r--r--r-- 0 0 250048 20-Aug-2010 13:18 ntldr
26 -r--r--r-- 0 0 805306368 13-Feb-2012 17:11 pagefile.sys
6080 dr-xr-xr-x 0 0 0 28-Oct-2011 17:47 Program Files
5718 dr-xr-xr-x 0 0 0 8-May-2010 00:01 RECYCLER
28 dr-xr-xr-x 0 0 0 7-May-2010 23:31 System Volume Information
2430 dr-xr-xr-x 0 0 0 13-Feb-2012 17:11 WINDOWS
22939 -r--r--r-- 0 0 331805736 20-Aug-2010 07:41 WindowsXP-KB936929-SP3-x86-ENU.exe

ntfs_boot_sector
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
NTFS at 0/1/1
NTFS at 0/1/1
filesystem size 41270922
sectors_per_cluster 1
mft_lcn 6291456
mftmirr_lcn 9815683
clusters_per_mft_record 2
clusters_per_index_record 8
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
search_superblock

recover_EXT2: s_block_group_nr=0/237, s_mnt_count=3/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 2 (block=0, blocksize=4096)

block_group_nr 1

recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=1/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 262144 (block=32768, blocksize=4096)

block_group_nr 3

recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 786432 (block=98304, blocksize=4096)

block_group_nr 5

recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=5/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 1310720 (block=163840, blocksize=4096)

block_group_nr 7

recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=7/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 1835008 (block=229376, blocksize=4096)

block_group_nr 9

recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=9/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 2359296 (block=294912, blocksize=4096)

block_group_nr 25

recover_EXT2: "e2fsck -b 819200 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=25/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 6553600 (block=819200, blocksize=4096)

block_group_nr 27

recover_EXT2: "e2fsck -b 884736 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=27/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 7077888 (block=884736, blocksize=4096)

block_group_nr 49

recover_EXT2: "e2fsck -b 1605632 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=49/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 12845056 (block=1605632, blocksize=4096)

block_group_nr 81

recover_EXT2: "e2fsck -b 2654208 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=81/237, s_mnt_count=0/23, s_blocks_per_group=32768, s_inodes_per_group=8160
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 7791616
recover_EXT2: part_size 62332928
Ext2 superblock found at sector 21233664 (block=2654208, blocksize=4096)
Linux 2581 195 47 6461 207 18 62332928
superblock 0, blocksize=4096 []
superblock 32768, blocksize=4096 []
superblock 98304, blocksize=4096 []
superblock 163840, blocksize=4096 []
superblock 229376, blocksize=4096 []
superblock 294912, blocksize=4096 []
superblock 819200, blocksize=4096 []
superblock 884736, blocksize=4096 []
superblock 1605632, blocksize=4096 []
superblock 2654208, blocksize=4096 []

To repair the filesystem using alternate superblock, run
fsck.ext4 -p -b superblock -B blocksize device
New options :
Dump : No
Align partition: Yes
Expert mode : No

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
1 P HPFS - NTFS 0 1 1 2568 254 63 41270922
NTFS, 21 GB / 19 GiB
2 * Linux 2581 195 47 6461 207 18 62332928
EXT4 Large file Sparse superblock Recover, 31 GB / 29 GiB

TestDisk exited normally.

stevesr0
Posts: 12
Joined: 01 Mar 2012, 12:37

Re: Bizarre Change in Filesystem Type after Testdisk repair

#6 Post by stevesr0 »

But, why won't test disk delete the damaged partitions when I use the "wire" command?

I have tried this several times and on reboot, test disk again finds the same damaged partitions.

Thanks for comments and assistance.

Steve

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Bizarre Change in Filesystem Type after Testdisk repair

#7 Post by cgrenier »

stevesr0 wrote:But, why won't test disk delete the damaged partitions when I use the "wire" command?

I have tried this several times and on reboot, test disk again finds the same damaged partitions.
As long as some sectors contains the signature specific to filesystem, TestDisk will always find the same partitions. It's why running TestDisk once or ten times should always give the same results.
Writing a new partition table will only change the partition list as seen by your OS or in TestDisk Analyse screen (before choosing Quick Search) or TestDisk Advanced menu.
On your first post you wrote about crc error, they may be due to bad sectors. Bad sectors are a physical problem, they can't be repaired. At best, SMART monitoring is enabled in the BIOS or at the OS level and the disk will replace some bad sectors with spare sectors (limited quantities). If there are bad sectors, the best is to clone the HD to a new empty disk as explained in http://www.cgsecurity.org/wiki/Damaged_Hard_Disk

stevesr0
Posts: 12
Joined: 01 Mar 2012, 12:37

Re: Bizarre Change in Filesystem Type after Testdisk repair

#8 Post by stevesr0 »

Thanks for response.

I am trying to understand test disk better, partly because of my concerns about my hard drive and partly in order to give a presentation about it to our local Linux users group.

After the messages about I/o errors in the initial testdisk runs, I deleted the extended partition and enclosed swap partition and checked the hard drive with the hitachi fitness test and smartmontools which both found no problems.

I then checked with fsck and ext2fsck. When the drive was mounted, these tests showed errors, but when I booted from a Knoppix live cd and checked them unjointed, they were said to be free of errors.

The most recent testdisk runs (Mar 5) don't show I/o errors, so I figure that the remaining problems are software related.

So, if there are sectors (not partitions?) with a filesystem signature that I need to delete/remove/fix, how do I do that?

Is that something I can do with testdisk?

Obviously, I lack understanding of how to use testdisk in my particular situation, in spite of reading through the documentation.

Appreciate any clarification you can offer.

Thanks,

Steve

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Bizarre Change in Filesystem Type after Testdisk repair

#9 Post by cgrenier »

Now TestDisk don't show any error, so what is the remaining problem ?

stevesr0
Posts: 12
Joined: 01 Mar 2012, 12:37

Re: Bizarre Change in Filesystem Type after Testdisk repair

#10 Post by stevesr0 »

On the deeper search, it displays multiple extra partitions (10) and when I mark the 8 damaged ones for deletion and ask the program to write the change to the partition table, hit "Y" to confirm this and then quit test disk. After I reboot and rerun deeper search, the program still reports the same 10 partitions.

Note that all 10 partitions are marked as "D" when deeper search finishes it's analysis. All I do is change the two "correct" partitions to "P" and "*" and then hit/select enter.

Am I supposed to do something after changing the two partitions status, before trying to write to the partition table?

(like rerun analyse, quick search and deeper search again BEFORE selecting "write" and "Y"?)

Steve

Locked