My log with a quick run through of what I just described is attached with some file names removed for privacy.
Code: Select all
Tue Mar 19 12:32:07 2013
Command line: TestDisk
TestDisk 6.14-WIP, Data Recovery Utility, March 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-03-10T16:32:17
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000097185792
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\S:)=1500299265024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Y:)=1000202043392
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST310005 24AS, S/N:9VPC9CM4, FW:JC45
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10 02FAEX-00Y9A0, S/N:WD-WCAW30516047, FW:05.0
Disk /dev/sdc - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512 - Samsung STORY Station P, S/N:00000011E09310B00B13
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - ST1000DM 003-9YN162, S/N:152D20337A0C
Disk \\.\PhysicalDrive3 - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - ST1000DM 003-9YN162, S/N:152D20337A0C
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - ST1000DM 003-9YN162, S/N:152D20337A0C
Partition table type (auto): Intel
Disk /dev/sdd - 1000 GB / 931 GiB - ST1000DM 003-9YN162
Partition table type: Intel
Analyse Disk /dev/sdd - 1000 GB / 931 GiB - CHS 15200 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
Info: size boot_sector 1953519616, partition 244189952
Current partition structure:
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
1 P HPFS - NTFS 0 4 5 15200 35 3 244189952 [SeagateStorage]
No partition is bootable
search_part()
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 15200 255 63
NTFS at 0/4/5
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1953519616
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 4 5 15200 35 3 244189952 [SeagateStorage]
NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(7,1,buffer,244190720(15200/43/12)) lseek err Invalid argument
file_pread(7,1,buffer,244190656(15200/42/11)) lseek err Invalid argument
file_pread(7,1,buffer,244190672(15200/42/27)) lseek err Invalid argument
file_pread(7,1,buffer,244190688(15200/42/43)) lseek err Invalid argument
file_pread(7,1,buffer,244190704(15200/42/59)) lseek err Invalid argument
file_pread(7,1,buffer,244190720(15200/43/12)) lseek err Invalid argument
file_pread(7,1,buffer,244190721(15200/43/13)) lseek err Invalid argument
file_pread(7,1,buffer,244190722(15200/43/14)) lseek err Invalid argument
file_pread(7,2,buffer,244190727(15200/43/19)) lseek err Invalid argument
file_pread(7,2,buffer,244190729(15200/43/21)) lseek err Invalid argument
file_pread(7,3,buffer,244190735(15200/43/27)) lseek err Invalid argument
file_pread(7,1,buffer,244190976(15200/47/16)) lseek err Invalid argument
Results
* HPFS - NTFS 0 4 5 15200 35 3 244189952 [SeagateStorage]
NTFS, blocksize=4096, 1000 GB / 931 GiB
dir_partition inode=5
P HPFS - NTFS 0 4 5 15200 35 3 244189952 [SeagateStorage]
NTFS, blocksize=4096, 1000 GB / 931 GiB
Directory /
5 dr-xr-xr-x 0 0 0 13-Mar-2013 20:50 .
5 dr-xr-xr-x 0 0 0 13-Mar-2013 20:50 ..
1229 dr-xr-xr-x 0 0 0 17-Nov-2012 18:59 $AVG
37 dr-xr-xr-x 0 0 0 19-Aug-2012 19:55 $RECYCLE.BIN
1278 dr-xr-xr-x 0 0 0 16-Jan-2013 01:20 New folder
2249 dr-xr-xr-x 0 0 0 26-Feb-2013 17:21 OS ISOs
2250 dr-xr-xr-x 0 0 0 28-Feb-2013 02:24 Raspberry PI
254 dr-xr-xr-x 0 0 0 31-Aug-2012 19:45 Slender_v0_9_6
253 -r--r--r-- 0 0 60881354 31-Aug-2012 19:44 Slender_v0_9_6.zip
253 -r--r--r-- 0 0 26 31-Aug-2012 19:44 Slender_v0_9_6.zip:Zone.Identifier
35 dr-xr-xr-x 0 0 0 2-Aug-2012 20:32 System Volume Information
dir_partition inode=1278
P HPFS - NTFS 0 4 5 15200 35 3 244189952 [SeagateStorage]
NTFS, blocksize=4096, 1000 GB / 931 GiB
Directory /New folder
1278 dr-xr-xr-x 0 0 0 16-Jan-2013 01:20 .
5 dr-xr-xr-x 0 0 0 13-Mar-2013 20:50 ..
1592 dr-xr-xr-x 0 0 0 16-Jan-2013 01:19 .fseventsd
1596 dr-xr-xr-x 0 0 0 6-May-2012 11:57 .Trashes
1597 dr-xr-xr-x 0 0 0 16-Jan-2013 01:19 345 Lab
1930 dr-xr-xr-x 0 0 0 16-Jan-2013 01:20 Programs
2032 -r--r--r-- 0 0 13588236 20-Apr-2011 22:15 satellite p300.pdf
2032 -r--r--r-- 0 0 26 20-Apr-2011 22:15 satellite p300.pdf:Zone.Identifier
1989 dr-xr-xr-x 0 0 0 16-Jan-2013 01:20 Slender_v0_9_6
Directory /
5 dr-xr-xr-x 0 0 0 13-Mar-2013 20:50 .
5 dr-xr-xr-x 0 0 0 13-Mar-2013 20:50 ..
1229 dr-xr-xr-x 0 0 0 17-Nov-2012 18:59 $AVG
37 dr-xr-xr-x 0 0 0 19-Aug-2012 19:55 $RECYCLE.BIN
1278 dr-xr-xr-x 0 0 0 16-Jan-2013 01:20 New folder
2249 dr-xr-xr-x 0 0 0 26-Feb-2013 17:21 OS ISOs
2250 dr-xr-xr-x 0 0 0 28-Feb-2013 02:24 Raspberry PI
254 dr-xr-xr-x 0 0 0 31-Aug-2012 19:45 Slender_v0_9_6
253 -r--r--r-- 0 0 60881354 31-Aug-2012 19:44 Slender_v0_9_6.zip
253 -r--r--r-- 0 0 26 31-Aug-2012 19:44 Slender_v0_9_6.zip:Zone.Identifier
35 dr-xr-xr-x 0 0 0 2-Aug-2012 20:32 System Volume Information
1284 dr-xr-xr-x 0 0 0 2-Dec-2012 19:04 Xbox360
interface_write()
1 P HPFS - NTFS 0 4 5 15200 35 3 244189952 [SeagateStorage]