API tools faq
paste
Advertisement
Guest User

testdisk.log

a guest
Jul 19th, 2015
333
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.24 KB | None | 0 0
raw download clone embed print report
  1. Sun Jul 19 12:59:09 2015
  2. Command line: TestDisk
  3.  
  4. TestDisk 7.0, Data Recovery Utility, April 2015
  5. Christophe GRENIER <grenier@cgsecurity.org>
  6. http://www.cgsecurity.org
  7. OS: Linux, kernel 3.14.48-std454-amd64 (#2 SMP Sat Jul 11 08:52:05 UTC 2015) x86_64
  8. Compiler: GCC 4.8
  9. Compilation date: 2015-06-28T08:22:07
  10. ext2fs lib: 1.42.13, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: none, curses lib: ncurses 5.9
  11. /dev/sda: LBA, HPA, LBA48, DCO support
  12. /dev/sda: size 117231408 sectors
  13. /dev/sda: user_max 117231408 sectors
  14. /dev/sda: native_max 117231408 sectors
  15. /dev/sda: dco 117231408 sectors
  16. /dev/sdb: LBA, HPA, LBA48, DCO support
  17. /dev/sdb: size 976773168 sectors
  18. /dev/sdb: user_max 976773168 sectors
  19. /dev/sdb: native_max 976773168 sectors
  20. /dev/sdb: dco 976773168 sectors
  21. /dev/sdc: LBA, HPA, LBA48, DCO support
  22. /dev/sdc: size 3907029168 sectors
  23. /dev/sdc: user_max 3907029168 sectors
  24. /dev/sdc: native_max 3907029168 sectors
  25. /dev/sdc: dco 3907029168 sectors
  26. Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
  27. Warning: can't get size for Disk /dev/md0 - 0 B - CHS 1 2 4, sector size=512
  28. /dev/sr0 is not an ATA disk
  29. Hard disk list
  30. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63, sector size=512 - Corsair Force LS SSD, S/N:150381680001016705EF, FW:S9FM02.0
  31. Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000AAKS-75YGA0, S/N:WD-WCAS85732855, FW:12.01C02
  32. Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM001-9YN164, S/N:W1E0G6XH, FW:CC4H
  33. Disk /dev/sdd - 16 GB / 14 GiB - CHS 15264 64 32, sector size=512 - Corsair Voyager 3.0, FW:1.00
  34. Disk /dev/sr0 - 696 MB / 663 MiB - 339920 sectors (RO), sector size=2048 - Optiarc DVD RW AD-7200S, FW:1.0A
  35.  
  36. Partition table type (auto): Intel
  37. Disk /dev/sda - 60 GB / 55 GiB - Corsair Force LS SSD
  38. Partition table type: Intel
  39.  
  40. Analyse Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  41. Geometry from i386 MBR: head=255 sector=63
  42. NTFS at 0/32/33
  43. Current partition structure:
  44. 1 * HPFS - NTFS 0 32 33 3838 123 61 61663232
  45. 2 E extended 3838 156 29 7297 51 50 55562242
  46. 5 L Linux 3838 156 31 7297 51 50 55562240
  47.  
  48. search_part()
  49. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  50. NTFS at 0/32/33
  51. filesystem size 61663232
  52. sectors_per_cluster 8
  53. mft_lcn 4
  54. mftmirr_lcn 3853951
  55. clusters_per_mft_record -10
  56. clusters_per_index_record 1
  57. HPFS - NTFS 0 32 33 3838 123 61 61663232
  58. NTFS, blocksize=4096, 31 GB / 29 GiB
  59.  
  60. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=265/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  61. recover_EXT2: s_blocksize=4096
  62. recover_EXT2: s_blocks_count 6945280
  63. recover_EXT2: part_size 55562240
  64. Linux 3838 156 31 7297 51 50 55562240
  65. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  66.  
  67. Results
  68. * HPFS - NTFS 0 32 33 3838 123 61 61663232
  69. NTFS, blocksize=4096, 31 GB / 29 GiB
  70. P Linux 3838 156 31 7297 51 50 55562240
  71. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  72.  
  73. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  74. echo "0 61663232 linear /dev/sda 2048" | dmsetup create test0
  75. echo "0 55562240 linear /dev/sda 61667328" | dmsetup create test1
  76.  
  77. interface_write()
  78. 1 * HPFS - NTFS 0 32 33 3838 123 61 61663232
  79. 2 P Linux 3838 156 31 7297 51 50 55562240
  80.  
  81. search_part()
  82. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  83. NTFS at 0/32/33
  84. filesystem size 61663232
  85. sectors_per_cluster 8
  86. mft_lcn 4
  87. mftmirr_lcn 3853951
  88. clusters_per_mft_record -10
  89. clusters_per_index_record 1
  90. HPFS - NTFS 0 32 33 3838 123 61 61663232
  91. NTFS, blocksize=4096, 31 GB / 29 GiB
  92. NTFS at 3838/123/61
  93. filesystem size 61663232
  94. sectors_per_cluster 8
  95. mft_lcn 4
  96. mftmirr_lcn 3853951
  97. clusters_per_mft_record -10
  98. clusters_per_index_record 1
  99. HPFS - NTFS 0 32 33 3838 123 61 61663232
  100. NTFS found using backup sector, blocksize=4096, 31 GB / 29 GiB
  101.  
  102. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=265/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  103. recover_EXT2: s_blocksize=4096
  104. recover_EXT2: s_blocks_count 6945280
  105. recover_EXT2: part_size 55562240
  106. Linux 3838 156 31 7297 51 50 55562240
  107. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  108.  
  109. block_group_nr 1
  110.  
  111. recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
  112. recover_EXT2: s_block_group_nr=1/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  113. recover_EXT2: s_blocksize=4096
  114. recover_EXT2: s_blocks_count 6945280
  115. recover_EXT2: part_size 55562240
  116. Linux 3838 156 31 7297 51 50 55562240
  117. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  118.  
  119. block_group_nr 3
  120.  
  121. recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
  122. recover_EXT2: s_block_group_nr=3/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  123. recover_EXT2: s_blocksize=4096
  124. recover_EXT2: s_blocks_count 6945280
  125. recover_EXT2: part_size 55562240
  126. Linux 3838 156 31 7297 51 50 55562240
  127. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  128.  
  129. block_group_nr 5
  130.  
  131. recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
  132. recover_EXT2: s_block_group_nr=5/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  133. recover_EXT2: s_blocksize=4096
  134. recover_EXT2: s_blocks_count 6945280
  135. recover_EXT2: part_size 55562240
  136. Linux 3838 156 31 7297 51 50 55562240
  137. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  138.  
  139. block_group_nr 7
  140.  
  141. recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
  142. recover_EXT2: s_block_group_nr=7/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  143. recover_EXT2: s_blocksize=4096
  144. recover_EXT2: s_blocks_count 6945280
  145. recover_EXT2: part_size 55562240
  146. Linux 3838 156 31 7297 51 50 55562240
  147. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  148.  
  149. block_group_nr 9
  150.  
  151. recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
  152. recover_EXT2: s_block_group_nr=9/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  153. recover_EXT2: s_blocksize=4096
  154. recover_EXT2: s_blocks_count 6945280
  155. recover_EXT2: part_size 55562240
  156. Linux 3838 156 31 7297 51 50 55562240
  157. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  158.  
  159. block_group_nr 25
  160.  
  161. recover_EXT2: "e2fsck -b 819200 -B 4096 device" may be needed
  162. recover_EXT2: s_block_group_nr=25/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  163. recover_EXT2: s_blocksize=4096
  164. recover_EXT2: s_blocks_count 6945280
  165. recover_EXT2: part_size 55562240
  166. Linux 3838 156 31 7297 51 50 55562240
  167. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  168.  
  169. block_group_nr 27
  170.  
  171. recover_EXT2: "e2fsck -b 884736 -B 4096 device" may be needed
  172. recover_EXT2: s_block_group_nr=27/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  173. recover_EXT2: s_blocksize=4096
  174. recover_EXT2: s_blocks_count 6945280
  175. recover_EXT2: part_size 55562240
  176. Linux 3838 156 31 7297 51 50 55562240
  177. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  178.  
  179. block_group_nr 49
  180.  
  181. recover_EXT2: "e2fsck -b 1605632 -B 4096 device" may be needed
  182. recover_EXT2: s_block_group_nr=49/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  183. recover_EXT2: s_blocksize=4096
  184. recover_EXT2: s_blocks_count 6945280
  185. recover_EXT2: part_size 55562240
  186. Linux 3838 156 31 7297 51 50 55562240
  187. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  188.  
  189. block_group_nr 81
  190.  
  191. recover_EXT2: "e2fsck -b 2654208 -B 4096 device" may be needed
  192. recover_EXT2: s_block_group_nr=81/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  193. recover_EXT2: s_blocksize=4096
  194. recover_EXT2: s_blocks_count 6945280
  195. recover_EXT2: part_size 55562240
  196. Linux 3838 156 31 7297 51 50 55562240
  197. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  198. Linux Swap 5360 61 14 5621 82 13 4194288
  199. SWAP2 version 1, pagesize=4096, 2147 MB / 2047 MiB
  200.  
  201. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=265/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  202. recover_EXT2: s_blocksize=4096
  203. recover_EXT2: s_blocks_count 6945280
  204. recover_EXT2: part_size 55562240
  205. Linux 5423 250 12 8882 145 31 55562240
  206. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  207. This partition ends after the disk limits. (start=87136256, size=55562240, end=142698495, disk end=117231408)
  208.  
  209. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  210. recover_EXT2: s_blocksize=4096
  211. recover_EXT2: s_blocks_count 6945280
  212. recover_EXT2: part_size 55562240
  213. Linux 5432 100 45 8890 251 1 55562240
  214. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  215. This partition ends after the disk limits. (start=87271424, size=55562240, end=142833663, disk end=117231408)
  216.  
  217. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  218. recover_EXT2: s_blocksize=4096
  219. recover_EXT2: s_blocks_count 6945280
  220. recover_EXT2: part_size 55562240
  221. Linux 5433 73 17 8891 223 36 55562240
  222. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  223. This partition ends after the disk limits. (start=87285760, size=55562240, end=142847999, disk end=117231408)
  224.  
  225. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  226. recover_EXT2: s_blocksize=4096
  227. recover_EXT2: s_blocks_count 6945280
  228. recover_EXT2: part_size 55562240
  229. Linux 5434 175 54 8893 71 10 55562240
  230. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  231. This partition ends after the disk limits. (start=87308288, size=55562240, end=142870527, disk end=117231408)
  232.  
  233. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  234. recover_EXT2: s_blocksize=4096
  235. recover_EXT2: s_blocks_count 6945280
  236. recover_EXT2: part_size 55562240
  237. Linux 5434 208 23 8893 103 42 55562240
  238. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  239. This partition ends after the disk limits. (start=87310336, size=55562240, end=142872575, disk end=117231408)
  240.  
  241. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  242. recover_EXT2: s_blocksize=4096
  243. recover_EXT2: s_blocks_count 6945280
  244. recover_EXT2: part_size 55562240
  245. Linux 5435 115 57 8894 11 13 55562240
  246. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  247. This partition ends after the disk limits. (start=87320576, size=55562240, end=142882815, disk end=117231408)
  248.  
  249. block_group_nr 125
  250.  
  251. recover_EXT2: "e2fsck -b 4096000 -B 4096 device" may be needed
  252. recover_EXT2: s_block_group_nr=125/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  253. recover_EXT2: s_blocksize=4096
  254. recover_EXT2: s_blocks_count 6945280
  255. recover_EXT2: part_size 55562240
  256. Linux 3838 156 31 7297 51 50 55562240
  257. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  258. FAT12 at 7142/242/13
  259. FAT1 : 1-9
  260. FAT2 : 10-18
  261. start_rootdir : 19
  262. Data : 33-2879
  263. sectors : 2880
  264. cluster_size : 1
  265. no_of_cluster : 2847 (2 - 2848)
  266. fat_length 9 calculated 9
  267. heads/cylinder 2 (FAT) != 255 (HD)
  268. sect/track 18 (FAT) != 63 (HD)
  269.  
  270. FAT12 at 7142/242/13
  271. FAT12 7142 242 13 7143 32 57 2880
  272. FAT12, blocksize=512, 1474 KB / 1440 KiB
  273. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  274. Check the harddisk size: HD jumpers settings, BIOS detection...
  275. The harddisk (60 GB / 55 GiB) seems too small! (< 73 GB / 68 GiB)
  276. The following partitions can't be recovered:
  277. Linux 5423 250 12 8882 145 31 55562240
  278. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  279. Linux 5432 100 45 8890 251 1 55562240
  280. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  281. Linux 5433 73 17 8891 223 36 55562240
  282. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  283. Linux 5434 175 54 8893 71 10 55562240
  284. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  285. Linux 5434 208 23 8893 103 42 55562240
  286. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  287. Linux 5435 115 57 8894 11 13 55562240
  288. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  289.  
  290. Results
  291. * HPFS - NTFS 0 32 33 3838 123 61 61663232
  292. NTFS, blocksize=4096, 31 GB / 29 GiB
  293. Linux 3838 156 31 7297 51 50 55562240
  294. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  295. Linux Swap 5360 61 14 5621 82 29 4194304
  296. SWAP2 version 1, pagesize=4096, 2147 MB / 2048 MiB
  297. FAT12 7142 242 13 7143 52 13 4096
  298. FAT12, blocksize=512, 2097 KB / 2048 KiB
  299.  
  300. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  301. echo "0 61663232 linear /dev/sda 2048" | dmsetup create test0
  302. echo "0 55562240 linear /dev/sda 61667328" | dmsetup create test1
  303. echo "0 4194304 linear /dev/sda 86112256" | dmsetup create test2
  304. echo "0 4096 linear /dev/sda 114751488" | dmsetup create test3
  305.  
  306. interface_write()
  307. 1 * HPFS - NTFS 0 32 33 3838 123 61 61663232
  308. simulate write!
  309.  
  310. write_mbr_i386: starting...
  311. write_all_log_i386: starting...
  312. No extended partition
  313.  
  314. TestDisk exited normally.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!