log

Fri Apr 25 01:55:43 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-04-20T11:44:54
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=399609167872
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=577453948928
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=19121113088
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=500103639552
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - HGST HTS541010A9E680, S/N:JA1000102AVD3P, FW:JA0OA560
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Maxell HDD, S/N:2010081018ED
Drive F: - 19 GB / 17 GiB - CHS 4558 64 32, sector size=2048 - DKZUD L27CX67C, FW:1.04

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - Maxell HDD
Partition table type: Intel

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
 1 * HPFS - NTFS              0  32 40 60800 237 45  976764921
 1 * HPFS - NTFS              0  32 40 60800 237 45  976764921

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/32/33
filesystem size           976764921
sectors_per_cluster       8
mft_lcn                   12
mftmirr_lcn               11
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 60800 237 38  976764921
     NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,8,buffer,976773376(60801/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773504(60801/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773632(60801/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773760(60801/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773888(60801/92/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774016(60801/94/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774144(60801/96/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774272(60801/98/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774400(60801/100/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774528(60801/102/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774656(60801/104/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774784(60801/106/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774912(60801/108/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775040(60801/110/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,13,buffer,976775170(60801/112/50)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 60800 237 45  976764928
     NTFS, blocksize=4096, 500 GB / 465 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 60800 237 45  976764928
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.