Advertisement
joeybuddy96

broken drive scan

May 27th, 2013
191
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.00 KB | None | 0 0
  1.  
  2.  
  3. Mon May 27 15:13:58 2013
  4. Command line: TestDisk
  5.  
  6. TestDisk 6.14-WIP, Data Recovery Utility, May 2013
  7. Christophe GRENIER <[email protected]>
  8. http://www.cgsecurity.org
  9. OS: Windows 7 (7601) SP1
  10. Compiler: GCC 4.7, Cygwin 1007.17
  11. Compilation date: 2013-05-25T13:15:04
  12. ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
  13. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
  14. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
  15. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016
  16. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
  17. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
  18. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
  19. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=750153367552
  20. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=103809024
  21. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=499999834112
  22. filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.
  23.  
  24. filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.
  25.  
  26. Warning: can't get size for \\.\F:
  27. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1000202043392
  28. Hard disk list
  29. Disk /dev/sda - 500 GB / 465 GiB - CHS 2009821 27 18, sector size=512 - ST3500418AS, S/N:2020202020202020202020205635374d56464d4a, FW:CC38
  30. Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - ST3750330AS, S/N:2020202020202020202020205139304b5438504d, FW:SD1A
  31. Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD1001FALS-00J7B0, S/N:2020202057202d444d5754413856373530393738, FW:05.00K05
  32.  
  33. Partition table type (auto): Intel
  34. Disk /dev/sda - 500 GB / 465 GiB - ST3500418AS
  35. Partition table type: Intel
  36.  
  37. Analyse Disk /dev/sda - 500 GB / 465 GiB - CHS 2009821 27 18
  38. Geometry from i386 MBR: head=224 sector=19
  39. BAD_RS LBA=2048 1941
  40. NTFS at 4/5/15
  41. heads/cylinder 224 (NTFS) != 27 (HD)
  42. sect/track 19 (NTFS) != 18 (HD)
  43. BAD_RS LBA=206848 25754
  44. NTFS at 425/16/11
  45. heads/cylinder 224 (NTFS) != 27 (HD)
  46. sect/track 19 (NTFS) != 18 (HD)
  47. Current partition structure:
  48. Warning: number of heads/cylinder mismatches 224 (NTFS) != 27 (HD)
  49. Warning: number of sectors per track mismatches 19 (NTFS) != 18 (HD)
  50. 1 * HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  51.  
  52. Warning: Bad starting head (CHS and LBA don't match)
  53. Warning: number of heads/cylinder mismatches 224 (NTFS) != 27 (HD)
  54. Warning: number of sectors per track mismatches 19 (NTFS) != 18 (HD)
  55. 2 P HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  56.  
  57. Warning: Bad ending sector (CHS and LBA don't match)
  58.  
  59. search_part()
  60. Disk /dev/sda - 500 GB / 465 GiB - CHS 2009821 27 18
  61. NTFS at 4/5/15
  62. heads/cylinder 224 (NTFS) != 27 (HD)
  63. sect/track 19 (NTFS) != 18 (HD)
  64. filesystem size 202752
  65. sectors_per_cluster 8
  66. mft_lcn 8448
  67. mftmirr_lcn 2
  68. clusters_per_mft_record -10
  69. clusters_per_index_record 1
  70. HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  71. NTFS, blocksize=4096, 103 MB / 99 MiB
  72. NTFS at 425/16/11
  73. heads/cylinder 224 (NTFS) != 27 (HD)
  74. sect/track 19 (NTFS) != 18 (HD)
  75. filesystem size 976562176
  76. sectors_per_cluster 8
  77. mft_lcn 786432
  78. mftmirr_lcn 2
  79. clusters_per_mft_record -10
  80. clusters_per_index_record 1
  81. HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  82. NTFS, blocksize=4096, 499 GB / 465 GiB
  83. file_pread(4,2,buffer,976773596(2009822/5/15)) lseek err Invalid argument
  84. file_pread(4,1,buffer,976773596(2009822/5/15)) lseek err Invalid argument
  85. file_pread(4,2,buffer,976773614(2009822/6/15)) lseek err Invalid argument
  86. file_pread(4,1,buffer,976773614(2009822/6/15)) lseek err Invalid argument
  87. file_pread(4,2,buffer,976773632(2009822/7/15)) lseek err Invalid argument
  88. file_pread(4,1,buffer,976773632(2009822/7/15)) lseek err Invalid argument
  89. file_pread(4,2,buffer,976774082(2009823/5/15)) lseek err Invalid argument
  90. file_pread(4,1,buffer,976774082(2009823/5/15)) lseek err Invalid argument
  91. file_pread(4,2,buffer,976774100(2009823/6/15)) lseek err Invalid argument
  92. file_pread(4,1,buffer,976774100(2009823/6/15)) lseek err Invalid argument
  93. file_pread(4,2,buffer,976774567(2009824/5/14)) lseek err Invalid argument
  94. file_pread(4,1,buffer,976774567(2009824/5/14)) lseek err Invalid argument
  95. file_pread(4,2,buffer,976774568(2009824/5/15)) lseek err Invalid argument
  96. file_pread(4,2,buffer,976774586(2009824/6/15)) lseek err Invalid argument
  97. file_pread(4,1,buffer,976774586(2009824/6/15)) lseek err Invalid argument
  98. file_pread(4,2,buffer,976775053(2009825/5/14)) lseek err Invalid argument
  99. file_pread(4,1,buffer,976775053(2009825/5/14)) lseek err Invalid argument
  100. file_pread(4,2,buffer,976775054(2009825/5/15)) lseek err Invalid argument
  101. file_pread(4,1,buffer,976775054(2009825/5/15)) lseek err Invalid argument
  102. file_pread(4,2,buffer,976775072(2009825/6/15)) lseek err Invalid argument
  103. file_pread(4,1,buffer,976775072(2009825/6/15)) lseek err Invalid argument
  104. file_pread(4,3,buffer,976773183(2009821/9/16)) lseek err Invalid argument
  105. file_pread(4,1,buffer,976773183(2009821/9/16)) lseek err Invalid argument
  106. file_pread(4,8,buffer,976773199(2009821/10/14)) lseek err Invalid argument
  107. file_pread(4,11,buffer,976773246(2009821/13/7)) lseek err Invalid argument
  108. file_pread(4,2,buffer,976775168(2009825/12/3)) lseek err Invalid argument
  109. file_pread(4,8,buffer,976773376(2009821/20/11)) lseek err Invalid argument
  110. Warning: the current number of heads per cylinder is 27 but the correct value may be 255.
  111.  
  112. Results
  113. * HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  114. NTFS, blocksize=4096, 103 MB / 99 MiB
  115. P HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  116. NTFS, blocksize=4096, 499 GB / 465 GiB
  117.  
  118. interface_write()
  119. 1 * HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  120. 2 P HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  121.  
  122. search_part()
  123. Disk /dev/sda - 500 GB / 465 GiB - CHS 2009821 27 18
  124. NTFS at 4/5/15
  125. heads/cylinder 224 (NTFS) != 27 (HD)
  126. sect/track 19 (NTFS) != 18 (HD)
  127. filesystem size 202752
  128. sectors_per_cluster 8
  129. mft_lcn 8448
  130. mftmirr_lcn 2
  131. clusters_per_mft_record -10
  132. clusters_per_index_record 1
  133. HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  134. NTFS, blocksize=4096, 103 MB / 99 MiB
  135. NTFS at 421/10/14
  136. heads/cylinder 224 (NTFS) != 27 (HD)
  137. sect/track 19 (NTFS) != 18 (HD)
  138. filesystem size 202752
  139. sectors_per_cluster 8
  140. mft_lcn 8448
  141. mftmirr_lcn 2
  142. clusters_per_mft_record -10
  143. clusters_per_index_record 1
  144. HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  145. NTFS found using backup sector, blocksize=4096, 103 MB / 99 MiB
  146. NTFS at 425/16/10
  147. heads/cylinder 255 (NTFS) != 27 (HD)
  148. sect/track 63 (NTFS) != 18 (HD)
  149. filesystem size 204800
  150. sectors_per_cluster 8
  151. mft_lcn 8533
  152. mftmirr_lcn 2
  153. clusters_per_mft_record -10
  154. clusters_per_index_record 1
  155. HPFS - NTFS 4 5 15 425 16 10 204800 [System Reserved]
  156. NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
  157. NTFS at 425/16/11
  158. heads/cylinder 224 (NTFS) != 27 (HD)
  159. sect/track 19 (NTFS) != 18 (HD)
  160. filesystem size 976562176
  161. sectors_per_cluster 8
  162. mft_lcn 786432
  163. mftmirr_lcn 2
  164. clusters_per_mft_record -10
  165. clusters_per_index_record 1
  166. HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  167. NTFS, blocksize=4096, 499 GB / 465 GiB
  168. BAD_RS LBA=1631805114 311849
  169. file_pread(4,3,buffer,1631805114(3357623/18/13)) lseek err Invalid argument
  170. file_pread(4,1,buffer,1631805114(3357623/18/13)) lseek err Invalid argument
  171. check_FAT: can't read FAT boot sector
  172. check_part_i386 failed for partition type 0E
  173. FAT16 LBA 3357623 18 13 4208019 23 6 413292540
  174. This partition ends after the disk limits. (start=1631805114, size=413292540, end=2045097653, disk end=976773168)
  175. BAD_RS LBA=187838263 128957
  176. check_part_i386 failed for partition type 01
  177. FAT12 386498 13 2 3355216 7 3 1442796842
  178. This partition ends after the disk limits. (start=187838263, size=1442796842, end=1630635104, disk end=976773168)
  179. BAD_RS LBA=1030749156 334553
  180. file_pread(4,3,buffer,1030749156(2120883/1/1)) lseek err Invalid argument
  181. file_pread(4,1,buffer,1030749156(2120883/1/1)) lseek err Invalid argument
  182. check_FAT: can't read FAT boot sector
  183. check_part_i386 failed for partition type 0C
  184. FAT32 LBA 2120883 1 1 6399266 19 18 2079294480
  185. This partition ends after the disk limits. (start=1030749156, size=2079294480, end=3110043635, disk end=976773168)
  186. BAD_RS LBA=452254114 125984
  187. check_part_i386 failed for partition type 01
  188. FAT12 930564 0 11 3864850 20 14 1426063360
  189. This partition ends after the disk limits. (start=452254114, size=1426063360, end=1878317473, disk end=976773168)
  190. BAD_RS LBA=522825260 4621
  191. check_part_i386 failed for partition type 01
  192. FAT12 1075772 3 15 4011141 10 18 1426589464
  193. This partition ends after the disk limits. (start=522825260, size=1426589464, end=1949414723, disk end=976773168)
  194. BAD_RS LBA=1255888177 16072
  195. file_pread(4,3,buffer,1255888177(2584132/1/8)) lseek err Invalid argument
  196. file_pread(4,1,buffer,1255888177(2584132/1/8)) lseek err Invalid argument
  197. check_FAT: can't read FAT boot sector
  198. check_part_i386 failed for partition type 01
  199. FAT12 2584132 1 8 11421378 12 13 4294901760
  200. This partition ends after the disk limits. (start=1255888177, size=4294901760, end=1255822640, disk end=976773168)
  201. NTFS at 2009812/21/14
  202. heads/cylinder 224 (NTFS) != 27 (HD)
  203. sect/track 19 (NTFS) != 18 (HD)
  204. filesystem size 976562176
  205. sectors_per_cluster 8
  206. mft_lcn 786432
  207. mftmirr_lcn 2
  208. clusters_per_mft_record -10
  209. clusters_per_index_record 1
  210. HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  211. NTFS found using backup sector, blocksize=4096, 499 GB / 465 GiB
  212. NTFS at 2009817/0/10
  213. heads/cylinder 255 (NTFS) != 27 (HD)
  214. sect/track 63 (NTFS) != 18 (HD)
  215. filesystem size 976564224
  216. sectors_per_cluster 8
  217. mft_lcn 786432
  218. mftmirr_lcn 2
  219. clusters_per_mft_record -10
  220. clusters_per_index_record 1
  221. HPFS - NTFS 425 16 11 2009817 0 10 976564224 [DANGER FILE LOSS IF DRIVE USED]
  222. NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
  223. file_pread(4,2,buffer,976773596(2009822/5/15)) lseek err Invalid argument
  224. file_pread(4,1,buffer,976773596(2009822/5/15)) lseek err Invalid argument
  225. file_pread(4,2,buffer,976773614(2009822/6/15)) lseek err Invalid argument
  226. file_pread(4,1,buffer,976773614(2009822/6/15)) lseek err Invalid argument
  227. file_pread(4,2,buffer,976773632(2009822/7/15)) lseek err Invalid argument
  228. file_pread(4,1,buffer,976773632(2009822/7/15)) lseek err Invalid argument
  229. file_pread(4,2,buffer,976774082(2009823/5/15)) lseek err Invalid argument
  230. file_pread(4,1,buffer,976774082(2009823/5/15)) lseek err Invalid argument
  231. file_pread(4,2,buffer,976774100(2009823/6/15)) lseek err Invalid argument
  232. file_pread(4,1,buffer,976774100(2009823/6/15)) lseek err Invalid argument
  233. file_pread(4,2,buffer,976774567(2009824/5/14)) lseek err Invalid argument
  234. file_pread(4,1,buffer,976774567(2009824/5/14)) lseek err Invalid argument
  235. file_pread(4,2,buffer,976774568(2009824/5/15)) lseek err Invalid argument
  236. file_pread(4,2,buffer,976774586(2009824/6/15)) lseek err Invalid argument
  237. file_pread(4,1,buffer,976774586(2009824/6/15)) lseek err Invalid argument
  238. file_pread(4,2,buffer,976775053(2009825/5/14)) lseek err Invalid argument
  239. file_pread(4,1,buffer,976775053(2009825/5/14)) lseek err Invalid argument
  240. file_pread(4,2,buffer,976775054(2009825/5/15)) lseek err Invalid argument
  241. file_pread(4,1,buffer,976775054(2009825/5/15)) lseek err Invalid argument
  242. file_pread(4,2,buffer,976775072(2009825/6/15)) lseek err Invalid argument
  243. file_pread(4,1,buffer,976775072(2009825/6/15)) lseek err Invalid argument
  244. file_pread(4,3,buffer,976773183(2009821/9/16)) lseek err Invalid argument
  245. file_pread(4,1,buffer,976773183(2009821/9/16)) lseek err Invalid argument
  246. file_pread(4,8,buffer,976773199(2009821/10/14)) lseek err Invalid argument
  247. file_pread(4,11,buffer,976773246(2009821/13/7)) lseek err Invalid argument
  248. file_pread(4,2,buffer,976775168(2009825/12/3)) lseek err Invalid argument
  249. file_pread(4,2,buffer,976773270(2009821/14/13)) lseek err Invalid argument
  250. file_pread(4,2,buffer,976773288(2009821/15/13)) lseek err Invalid argument
  251. file_pread(4,2,buffer,976773306(2009821/16/13)) lseek err Invalid argument
  252. file_pread(4,8,buffer,976773376(2009821/20/11)) lseek err Invalid argument
  253. file_pread(4,1,buffer,976773491(2009821/26/18)) lseek err Invalid argument
  254. file_pread(4,1,buffer,976773492(2009822/0/1)) lseek err Invalid argument
  255. NTFS at 425/16/10
  256. heads/cylinder 255 (NTFS) != 27 (HD)
  257. sect/track 63 (NTFS) != 18 (HD)
  258. filesystem size 204800
  259. sectors_per_cluster 8
  260. mft_lcn 8533
  261. mftmirr_lcn 2
  262. clusters_per_mft_record -10
  263. clusters_per_index_record 1
  264. Disk /dev/sda - 500 GB / 465 GiB - CHS 2009821 27 18
  265. Check the harddisk size: HD jumpers settings, BIOS detection...
  266. The harddisk (500 GB / 465 GiB) seems too small! (< 2842 GB / 2646 GiB)
  267. The following partitions can't be recovered:
  268. FAT12 386498 13 2 3355216 7 3 1442796842
  269. FAT12 930564 0 11 3864850 20 14 1426063360
  270. FAT12 1075772 3 15 4011141 10 18 1426589464
  271. FAT32 LBA 2120883 1 1 6399266 19 18 2079294480
  272. FAT12 2584132 1 8 11421378 12 13 4294901760
  273. FAT16 LBA 3357623 18 13 4208019 23 6 413292540
  274. Warning: the current number of heads per cylinder is 27 but the correct value may be 255.
  275.  
  276. Results
  277. HPFS - NTFS 4 5 15 421 10 14 202752 [System Reserved]
  278. NTFS, blocksize=4096, 103 MB / 99 MiB
  279. HPFS - NTFS 4 5 15 425 16 10 204800 [System Reserved]
  280. NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
  281. HPFS - NTFS 425 16 10 847 0 5 204800
  282. NTFS, blocksize=4096, 104 MB / 100 MiB
  283. HPFS - NTFS 425 16 11 2009812 21 14 976562176 [DANGER FILE LOSS IF DRIVE USED]
  284. NTFS, blocksize=4096, 499 GB / 465 GiB
  285. HPFS - NTFS 425 16 11 2009817 0 10 976564224 [DANGER FILE LOSS IF DRIVE USED]
  286. NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
  287.  
  288. interface_write()
  289.  
  290. No partition found or selected for recovery
  291. simulate write!
  292.  
  293. write_mbr_i386: starting...
  294. write_all_log_i386: starting...
  295. No extended partition
  296.  
  297. TestDisk exited normally.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement