Code: Select all
Tue Mar 5 22:35:01 2019
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, December 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=126641766400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=977771954176
Hard disk list
Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63, sector size=512 - SAMSUNG MZVLW128HEGR-00000, S/N:0025_38B4_71B5_A6CB., FW:CXB7401Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - HGST HTS541010B7E610, S/N:WX21A77RE52A, FW:01.01A01
Partition table type (auto): EFI GPT
Disk /dev/sda - 128 GB / 119 GiB - SAMSUNG MZVLW128HEGR-00000
Partition table type: EFI GPT
Analyse Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=250069679 (expected 250069679)
hdr_lba_start=34
hdr_lba_end=250069646
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
2 P MS Reserved 616448 878591 262144 [Microsoft reserved partition]
Current partition structure:
1 P EFI System 2048 616447 614400 [EFI system partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Reserved 616448 878591 262144 [Microsoft reserved partition]
2 P MS Reserved 616448 878591 262144 [Microsoft reserved partition]
3 P MS Data 878592 248225791 247347200 [Basic data partition] [Windows]
4 P Windows Recovery Env 248225792 250068991 1843200 [Basic data partition]
search_part()
Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63
FAT32 at 0/32/33
FAT1 : 7006-7598
FAT2 : 7599-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-614399
sectors : 614400
cluster_size : 8
no_of_cluster : 75776 (2 - 75777)
fat_length 593 calculated 593
FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
EFI System 2048 616447 614400 [EFI System Partition] [SYSTEM]
FAT32, blocksize=4096, 314 MB / 300 MiB
NTFS at 54/175/58
filesystem size 247347200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=449839104, part_size=126641766400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 54/175/58
filesystem size 247347200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 878592 248225791 247347200 [Windows]
NTFS, blocksize=4096, 126 GB / 117 GiB
NTFS at 15451/86/60
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 246382593 248225792 1843200
NTFS found using backup sector, blocksize=4096, 943 MB / 900 MiB
NTFS at 15451/86/60
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76800
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 248225792 250068991 1843200 [WinRE tools]
NTFS, blocksize=4096, 943 MB / 900 MiB
file_pread(4,2,buffer,250071040(15566/51/38)) lseek err Invalid argument
file_pread(4,1,buffer,250071040(15566/51/38)) lseek err Invalid argument
file_pread(4,2,buffer,250071041(15566/51/39)) lseek err Invalid argument
file_pread(4,1,buffer,250071043(15566/51/41)) lseek err Invalid argument
file_pread(4,1,buffer,250071044(15566/51/42)) lseek err Invalid argument
file_pread(4,1,buffer,250071045(15566/51/43)) lseek err Invalid argument
file_pread(4,1,buffer,250071046(15566/51/44)) lseek err Invalid argument
file_pread(4,1,buffer,250071047(15566/51/45)) lseek err Invalid argument
file_pread(4,1,buffer,250071048(15566/51/46)) lseek err Invalid argument
file_pread(4,1,buffer,250071049(15566/51/47)) lseek err Invalid argument
file_pread(4,1,buffer,250071050(15566/51/48)) lseek err Invalid argument
file_pread(4,1,buffer,250071051(15566/51/49)) lseek err Invalid argument
file_pread(4,1,buffer,250071052(15566/51/50)) lseek err Invalid argument
file_pread(4,1,buffer,250071053(15566/51/51)) lseek err Invalid argument
file_pread(4,1,buffer,250071054(15566/51/52)) lseek err Invalid argument
file_pread(4,1,buffer,250071055(15566/51/53)) lseek err Invalid argument
file_pread(4,1,buffer,250071056(15566/51/54)) lseek err Invalid argument
file_pread(4,1,buffer,250071057(15566/51/55)) lseek err Invalid argument
file_pread(4,1,buffer,250071058(15566/51/56)) lseek err Invalid argument
file_pread(4,1,buffer,250071059(15566/51/57)) lseek err Invalid argument
file_pread(4,1,buffer,250071060(15566/51/58)) lseek err Invalid argument
file_pread(4,1,buffer,250071061(15566/51/59)) lseek err Invalid argument
file_pread(4,1,buffer,250071062(15566/51/60)) lseek err Invalid argument
file_pread(4,1,buffer,250071063(15566/51/61)) lseek err Invalid argument
file_pread(4,1,buffer,250071064(15566/51/62)) lseek err Invalid argument
file_pread(4,1,buffer,250071065(15566/51/63)) lseek err Invalid argument
file_pread(4,1,buffer,250071066(15566/52/1)) lseek err Invalid argument
file_pread(4,1,buffer,250071067(15566/52/2)) lseek err Invalid argument
file_pread(4,1,buffer,250071068(15566/52/3)) lseek err Invalid argument
file_pread(4,1,buffer,250071069(15566/52/4)) lseek err Invalid argument
file_pread(4,1,buffer,250071070(15566/52/5)) lseek err Invalid argument
file_pread(4,1,buffer,250071071(15566/52/6)) lseek err Invalid argument
file_pread(4,1,buffer,250071072(15566/52/7)) lseek err Invalid argument
file_pread(4,1,buffer,250071073(15566/52/8)) lseek err Invalid argument
file_pread(4,1,buffer,250071074(15566/52/9)) lseek err Invalid argument
file_pread(4,1,buffer,250071075(15566/52/10)) lseek err Invalid argument
file_pread(4,1,buffer,250071076(15566/52/11)) lseek err Invalid argument
file_pread(4,1,buffer,250071077(15566/52/12)) lseek err Invalid argument
file_pread(4,1,buffer,250071078(15566/52/13)) lseek err Invalid argument
file_pread(4,1,buffer,250071079(15566/52/14)) lseek err Invalid argument
file_pread(4,1,buffer,250071080(15566/52/15)) lseek err Invalid argument
file_pread(4,1,buffer,250071081(15566/52/16)) lseek err Invalid argument
file_pread(4,1,buffer,250071082(15566/52/17)) lseek err Invalid argument
file_pread(4,1,buffer,250071083(15566/52/18)) lseek err Invalid argument
file_pread(4,1,buffer,250071084(15566/52/19)) lseek err Invalid argument
file_pread(4,1,buffer,250071085(15566/52/20)) lseek err Invalid argument
file_pread(4,1,buffer,250071086(15566/52/21)) lseek err Invalid argument
file_pread(4,1,buffer,250071087(15566/52/22)) lseek err Invalid argument
file_pread(4,1,buffer,250071088(15566/52/23)) lseek err Invalid argument
file_pread(4,1,buffer,250071089(15566/52/24)) lseek err Invalid argument
file_pread(4,1,buffer,250071090(15566/52/25)) lseek err Invalid argument
file_pread(4,1,buffer,250071091(15566/52/26)) lseek err Invalid argument
file_pread(4,1,buffer,250071092(15566/52/27)) lseek err Invalid argument
file_pread(4,1,buffer,250071093(15566/52/28)) lseek err Invalid argument
file_pread(4,1,buffer,250071094(15566/52/29)) lseek err Invalid argument
file_pread(4,1,buffer,250071095(15566/52/30)) lseek err Invalid argument
file_pread(4,1,buffer,250071096(15566/52/31)) lseek err Invalid argument
file_pread(4,1,buffer,250071097(15566/52/32)) lseek err Invalid argument
file_pread(4,1,buffer,250071098(15566/52/33)) lseek err Invalid argument
file_pread(4,1,buffer,250069768(15566/31/26)) lseek err Invalid argument
file_pread(4,1,buffer,250071681(15566/61/49)) lseek err Invalid argument
file_pread(4,1,buffer,250069698(15566/30/19)) lseek err Invalid argument
file_pread(4,1,buffer,250069719(15566/30/40)) lseek err Invalid argument
file_pread(4,1,buffer,250069769(15566/31/27)) lseek err Invalid argument
file_pread(4,1,buffer,250071682(15566/61/50)) lseek err Invalid argument
file_pread(4,1,buffer,250069699(15566/30/20)) lseek err Invalid argument
file_pread(4,1,buffer,250069720(15566/30/41)) lseek err Invalid argument
file_pread(4,1,buffer,250069770(15566/31/28)) lseek err Invalid argument
file_pread(4,1,buffer,250071683(15566/61/51)) lseek err Invalid argument
file_pread(4,1,buffer,250069700(15566/30/21)) lseek err Invalid argument
file_pread(4,8,buffer,250069714(15566/30/35)) lseek err Invalid argument
file_pread(4,11,buffer,250069761(15566/31/19)) lseek err Invalid argument
file_pread(4,1,buffer,250071684(15566/61/52)) lseek err Invalid argument
file_pread(4,1,buffer,250069701(15566/30/22)) lseek err Invalid argument
file_pread(4,1,buffer,250069813(15566/32/8)) lseek err Invalid argument
file_pread(4,1,buffer,250071726(15566/62/31)) lseek err Invalid argument
file_pread(4,1,buffer,250069696(15566/30/17)) lseek err Invalid argument
file_pread(4,1,buffer,250069743(15566/31/1)) lseek err Invalid argument
file_pread(4,1,buffer,250069764(15566/31/22)) lseek err Invalid argument
file_pread(4,1,buffer,250069814(15566/32/9)) lseek err Invalid argument
file_pread(4,1,buffer,250071727(15566/62/32)) lseek err Invalid argument
file_pread(4,1,buffer,250069680(15566/30/1)) ReadFile The drive cannot find the sector requested.
file_pread(4,2,buffer,250069693(15566/30/14)) lseek err Invalid argument
file_pread(4,1,buffer,250069697(15566/30/18)) lseek err Invalid argument
file_pread(4,1,buffer,250069744(15566/31/2)) lseek err Invalid argument
file_pread(4,8,buffer,250069758(15566/31/16)) lseek err Invalid argument
file_pread(4,11,buffer,250069805(15566/31/63)) lseek err Invalid argument
file_pread(4,1,buffer,250071728(15566/62/33)) lseek err Invalid argument
file_pread(4,1,buffer,250069681(15566/30/2)) lseek err Invalid argument
file_pread(4,14,buffer,250069682(15566/30/3)) lseek err Invalid argument
file_pread(4,1,buffer,250069698(15566/30/19)) lseek err Invalid argument
file_pread(4,1,buffer,250069745(15566/31/3)) lseek err Invalid argument
file_pread(4,1,buffer,250069766(15566/31/24)) lseek err Invalid argument
file_pread(4,1,buffer,250069816(15566/32/11)) lseek err Invalid argument
file_pread(4,1,buffer,250071729(15566/62/34)) lseek err Invalid argument
Results
P EFI System 2048 616447 614400 [EFI System Partition] [SYSTEM]
FAT32, blocksize=4096, 314 MB / 300 MiB
MS Data 878592 248225791 247347200 [Windows]
NTFS, blocksize=4096, 126 GB / 117 GiB
MS Data 246382593 248225792 1843200
NTFS found using backup sector, blocksize=4096, 943 MB / 900 MiB
MS Data 248225792 250068991 1843200 [WinRE tools]
NTFS, blocksize=4096, 943 MB / 900 MiB