Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Sun Dec 25 17:58:30 2016
- Command line: TestDisk
- TestDisk 7.0, Data Recovery Utility, April 2015
- Christophe GRENIER <grenier@cgsecurity.org>
- http://www.cgsecurity.org
- OS: Windows 8 (9200)
- Compiler: GCC 4.9, MinGW 3.11
- Compilation date: Apr 18 2015 13:02:07
- ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=240057409536
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=480103981056
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592982016
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=239215837184
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=479967838208
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=3000457232384
- Hard disk list
- Disk \\.\PhysicalDrive0 - 240 GB / 223 GiB - CHS 29185 255 63, sector size=512
- Disk \\.\PhysicalDrive1 - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
- Drive C: - 239 GB / 222 GiB - CHS 29083 255 63, sector size=512
- Drive D: - 479 GB / 447 GiB - CHS 58352 255 63, sector size=512
- Drive F: - 3000 GB / 2794 GiB - CHS 364784 255 63, sector size=512
- Partition table type (auto): None
- Partition table type (auto): EFI GPT
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB
- Partition table type: EFI GPT
- Analyse Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- hdr_size=92
- hdr_lba_self=1
- hdr_lba_alt=5860533167 (expected 5860533167)
- hdr_lba_start=34
- hdr_lba_end=5860533134
- hdr_lba_table=2
- hdr_entries=128
- hdr_entsz=128
- check_part_gpt failed for partition
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- Current partition structure:
- 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
- No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- search_part()
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- Search for partition aborted
- Results
- interface_write()
- No partition found or selected for recovery
- simulate write!
- Partition table type (auto): EFI GPT
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB
- Partition table type: EFI GPT
- Interface Advanced
- hdr_size=92
- hdr_lba_self=1
- hdr_lba_alt=5860533167 (expected 5860533167)
- hdr_lba_start=34
- hdr_lba_end=5860533134
- hdr_lba_table=2
- hdr_entries=128
- hdr_entsz=128
- check_part_gpt failed for partition
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Interface Advanced
- hdr_size=92
- hdr_lba_self=1
- hdr_lba_alt=5860533167 (expected 5860533167)
- hdr_lba_start=34
- hdr_lba_end=5860533134
- hdr_lba_table=2
- hdr_entries=128
- hdr_entsz=128
- check_part_gpt failed for partition
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- gpt_change_part_type
- Change partition type:
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Change partition type:
- 3 P NTFS 262178 5860533134 5860270957 [LDM data partition]
- ntfs_boot_sector
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- filesystem size 1
- sectors_per_cluster 0
- mft_lcn 0
- mftmirr_lcn 0
- clusters_per_mft_record 0
- clusters_per_index_record 0
- Boot sector
- Status: Bad
- Backup boot sector
- Status: Bad
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- rebuild_NTFS_BS
- mft at 307529606
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 786432
- ntfs_find_mft: mftmirr_lcn 2
- ntfs_find_mft: mft_record_size 1024
- mft at 307661046
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 786432
- ntfs_find_mft: mftmirr_lcn 2
- ntfs_find_mft: mft_record_size 1024
- mft at 39021120
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39023344
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39025568
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39030720
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39034768
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39036896
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 42943104
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 42946848
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 743463816
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 743466920
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- Failed to rebuild NTFS boot sector.
- ntfs_boot_sector
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- filesystem size 1
- sectors_per_cluster 0
- mft_lcn 0
- mftmirr_lcn 0
- clusters_per_mft_record 0
- clusters_per_index_record 0
- Boot sector
- Status: Bad
- Backup boot sector
- Status: Bad
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- rebuild_NTFS_BS
- mft at 307529606
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 786432
- ntfs_find_mft: mftmirr_lcn 2
- ntfs_find_mft: mft_record_size 1024
- mft at 307661046
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 786432
- ntfs_find_mft: mftmirr_lcn 2
- ntfs_find_mft: mft_record_size 1024
- mft at 39021120
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39023344
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39025568
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39030720
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39034768
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 39036896
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 42943104
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 42946848
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 743463816
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- mft at 743466920
- read_mft_info failed
- ntfs_find_mft: sectors_per_cluster invalid
- ntfs_find_mft: mft_lcn 2058
- ntfs_find_mft: mftmirr_lcn 5162
- ntfs_find_mft: mft_record_size 1024
- Failed to rebuild NTFS boot sector.
- ntfs_boot_sector
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- filesystem size 1
- sectors_per_cluster 0
- mft_lcn 0
- mftmirr_lcn 0
- clusters_per_mft_record 0
- clusters_per_index_record 0
- Boot sector
- Status: Bad
- Backup boot sector
- Status: Bad
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to startup volume: Invalid argument.
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Can't open filesystem. Filesystem seems damaged.
- ntfs_boot_sector
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- filesystem size 1
- sectors_per_cluster 0
- mft_lcn 0
- mftmirr_lcn 0
- clusters_per_mft_record 0
- clusters_per_index_record 0
- Boot sector
- Status: Bad
- Backup boot sector
- Status: Bad
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to startup volume: Invalid argument.
- Failed to startup volume: Invalid argument.
- gpt_change_part_type
- Change partition type:
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Change partition type:
- 3 P NTFS 262178 5860533134 5860270957 [LDM data partition]
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Can't open filesystem. Filesystem seems damaged.
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Can't open filesystem. Filesystem seems damaged.
- ntfs_boot_sector
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- filesystem size 1
- sectors_per_cluster 0
- mft_lcn 0
- mftmirr_lcn 0
- clusters_per_mft_record 0
- clusters_per_index_record 0
- Boot sector
- Status: Bad
- Backup boot sector
- Status: Bad
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- gpt_change_part_type
- Change partition type:
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- Change partition type:
- 3 P NTFS 262178 5860533134 5860270957 [LDM data partition]
- Analyse Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- hdr_size=92
- hdr_lba_self=1
- hdr_lba_alt=5860533167 (expected 5860533167)
- hdr_lba_start=34
- hdr_lba_end=5860533134
- hdr_lba_table=2
- hdr_entries=128
- hdr_entsz=128
- check_part_gpt failed for partition
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- Current partition structure:
- 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
- No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
- 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
- search_part()
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- Search for partition aborted
- Results
- interface_write()
- No partition found or selected for recovery
- search_part()
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- Search for partition aborted
- Results
- interface_write()
- No partition found or selected for recovery
- simulate write!
- Partition table type (auto): None
- Drive F: - 3000 GB / 2794 GiB
- Partition table type: Intel
- Interface Advanced
- Partition table type (auto): EFI GPT
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB
- Partition table type: Intel
- Interface Advanced
- Geometry from i386 MBR: head=256 sector=63
- check_part_i386 1 type EE: no test
- 1 P EFI GPT 0 0 2 267349 89 4 4294967295
- Change partition type:
- 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
- filesystem size 35 5010337540809105556
- sectors_per_cluster 0 165
- mft_lcn 1565565838 230319449
- mftmirr_lcn 284160130 254363537
- clusters_per_mft_record -112 -35
- clusters_per_index_record -114 -15
- Boot sector
- Status: Bad
- Backup boot sector
- Status: Bad
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to startup volume: Invalid argument.
- Not an exFAT boot sector.
- 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
- Can't open filesystem. Filesystem seems damaged.
- Change partition type:
- 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
- New options :
- Dump : No
- Align partition: Yes
- Expert mode : Yes
- Interface Advanced
- Geometry from i386 MBR: head=256 sector=63
- check_part_i386 1 type EE: no test
- 1 P EFI GPT 0 0 2 267349 89 4 4294967295
- Interface Advanced
- Geometry from i386 MBR: head=256 sector=63
- check_part_i386 1 type EE: no test
- 1 P EFI GPT 0 0 2 267349 89 4 4294967295
- Analyse Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- Geometry from i386 MBR: head=256 sector=63
- check_part_i386 1 type EE: no test
- Current partition structure:
- 1 P EFI GPT 0 0 2 267349 89 4 4294967295
- Warning: Bad ending head (CHS and LBA don't match)
- No partition is bootable
- search_part()
- Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
- Search for partition aborted
- Results
- interface_write()
- No partition found or selected for recovery
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement