Thu Jun 7 16:43:24 2012
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-21T08:46:51
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=157181542400
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=162783035392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105217024
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-60Z0A0, S/N:2020202057202d444d5756414132344339393038, FW:03.03E03
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ADATA HDD SH93
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - ADATA HDD SH93
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
Ask the user for vista mode
search_vista_part: 1
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,8,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775176(60801/112/56)) lseek err Invalid argument
file_pread(5,3,buffer,976775184(60801/113/1)) lseek err Invalid argument
file_pread(5,3,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775247(60801/114/1)) lseek err Invalid argument
file_pread(5,11,buffer,976775294(60801/114/48)) lseek err Invalid argument
file_pread(5,2,buffer,976777216(60801/145/17)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 51721/199/62
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 51721 101 63 51721 199 62 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 60800/254/63
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
HPFS - NTFS 51721 101 63 51721 199 62 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
Invalid partition structure.
New geometry
Disk /dev/sdb - 500 GB / 465 GiB - CHS 30524162 16 2 sector_size=512
New options :
Dump : No
Align partition: Yes
Expert mode : No
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 30524162 16 2
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=63 2
NTFS at 1/15/2
heads/cylinder 255 (NTFS) != 16 (HD)
sect/track 63 (NTFS) != 2 (HD)
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 16 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 2 (HD)
1 * HPFS - NTFS 1 15 2 30524002 0 1 976768002
Warning: Bad ending sector (CHS and LBA don't match)
Thu Jun 7 19:27:48 2012
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-21T08:46:51
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=157181542400
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=162783035392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105217024
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-60Z0A0, S/N:2020202057202d444d5756414132344339393038, FW:03.03E03
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ADATA HDD SH93
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - ADATA HDD SH93
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
Ask the user for vista mode
search_vista_part: 1
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,8,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775176(60801/112/56)) lseek err Invalid argument
file_pread(5,3,buffer,976775184(60801/113/1)) lseek err Invalid argument
file_pread(5,3,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775247(60801/114/1)) lseek err Invalid argument
file_pread(5,11,buffer,976775294(60801/114/48)) lseek err Invalid argument
file_pread(5,2,buffer,976777216(60801/145/17)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
Search for partition aborted
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
Fri Jun 8 13:42:57 2012
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-21T08:46:51
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=157181542400
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=162783035392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105217024
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-60Z0A0, S/N:2020202057202d444d5756414132344339393038, FW:03.03E03
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ADATA HDD SH93
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - ADATA HDD SH93
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
Ask the user for vista mode
search_vista_part: 1
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,8,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775176(60801/112/56)) lseek err Invalid argument
file_pread(5,3,buffer,976775184(60801/113/1)) lseek err Invalid argument
file_pread(5,3,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775247(60801/114/1)) lseek err Invalid argument
file_pread(5,11,buffer,976775294(60801/114/48)) lseek err Invalid argument
file_pread(5,2,buffer,976777216(60801/145/17)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
Failed to startup volume: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
Failed to startup volume: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 51721/199/62
heads/cylinder 16 (NTFS) != 255 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
HPFS - NTFS 51721 101 63 51721 199 62 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
NTFS at 60800/254/63
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
HPFS - NTFS 51721 101 63 51721 199 62 6174
NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
Not an exFAT boot sector.
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
Wed Jun 13 14:21:38 2012
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-21T08:46:51
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=157181542400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=162783035392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500105217024
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - WDC WD3200AAJS-60Z0A0, S/N:2020202057202d444d5756414132344339393038, FW:03.03E03
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ADATA HDD SH93
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - ADATA HDD SH93
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
Ask the user for vista mode
search_vista_part: 0
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,8,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,8,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775359(60801/115/50)) lseek err Invalid argument
file_pread(5,8,buffer,976775487(60801/117/52)) lseek err Invalid argument
file_pread(5,8,buffer,976775615(60801/119/54)) lseek err Invalid argument
file_pread(5,8,buffer,976775743(60801/121/56)) lseek err Invalid argument
file_pread(5,8,buffer,976775871(60801/123/58)) lseek err Invalid argument
file_pread(5,8,buffer,976775999(60801/125/60)) lseek err Invalid argument
file_pread(5,8,buffer,976776127(60801/127/62)) lseek err Invalid argument
file_pread(5,8,buffer,976776255(60801/130/1)) lseek err Invalid argument
file_pread(5,8,buffer,976776383(60801/132/3)) lseek err Invalid argument
file_pread(5,8,buffer,976776511(60801/134/5)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - ADATA HDD SH93
Partition table type: Intel
Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
Ask the user for vista mode
search_vista_part: 1
search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size 976768002
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,8,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775176(60801/112/56)) lseek err Invalid argument
file_pread(5,3,buffer,976775184(60801/113/1)) lseek err Invalid argument
file_pread(5,3,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(5,8,buffer,976775247(60801/114/1)) lseek err Invalid argument
file_pread(5,11,buffer,976775294(60801/114/48)) lseek err Invalid argument
file_pread(5,2,buffer,976777216(60801/145/17)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 60800 254 63 976768002
NTFS, blocksize=4096, 500 GB / 465 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 60800 254 63 976768002
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
Failed to startup volume: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
Failed to startup volume: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
Failed to startup volume: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.
Failed to startup volume: Input/Output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/Output error.