Weitere Screenshots und Log:
![screen4.JPG](./download/file.php?id=2834&sid=bc3f84299238842253b2ea4d1609a0f5)
- screen4.JPG (56.66 KiB) Viewed 6005 times
Sun Jan 25 00:05:27 2015
Command line: TestDisk
TestDisk 7.0-WIP, Data Recovery Utility, January 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-01-19T21:26:37
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204883968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204883968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=80945872896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=161986117632
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000202788864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1000096367104
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - SanDisk SD6SB1M256G1002, S/N:142624402660, FW:X231600
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA External USB 3.0, S/N:20140814013199F, FW:5438
Partition table type (auto): Intel
Disk /dev/sdc - 1000 GB / 931 GiB - TOSHIBA External USB 3.0
Partition table type: Intel
Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 12 190 51 121600 222 31 1953313217
1 P HPFS - NTFS 12 190 51 121600 222 31 1953313217
No partition is bootable
search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 1953313217
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121588 64 13 1953313217
NTFS, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121600/254/63
filesystem size 1953313217
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 12 223 20 121600 254 63 1953313217
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121600/254/63
filesystem size 1953313217
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(6,1024,buffer,1959814592(121992/208/9)) lseek err Invalid argument
file_pread(6,1,buffer,1959814592(121992/208/9)) lseek err Invalid argument
NTFS: Can't read MFT
HPFS - NTFS 121600 254 63 243189 31 43 1953313217
NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=1953520064, size=1953313217, end=3906833280, disk end=1953525164)
file_pread(6,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(6,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(6,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(6,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(6,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(6,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(6,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(6,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(6,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(6,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(6,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(6,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(6,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(6,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(6,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2000 GB / 1862 GiB)
The following partition can't be recovered:
HPFS - NTFS 121600 254 63 243189 31 43 1953313217
NTFS, blocksize=4096, 1000 GB / 931 GiB
Results
HPFS - NTFS 0 32 33 121588 89 37 1953314816
NTFS, blocksize=4096, 1000 GB / 931 GiB
HPFS - NTFS 12 223 20 121601 25 24 1953314816
NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB