Advertisement
Guest User

Untitled

a guest
Dec 26th, 2016
158
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 15.51 KB | None | 0 0
  1. Sun Dec 25 17:58:30 2016
  2. Command line: TestDisk
  3.  
  4. TestDisk 7.0, Data Recovery Utility, April 2015
  5. Christophe GRENIER <grenier@cgsecurity.org>
  6. http://www.cgsecurity.org
  7. OS: Windows 8 (9200)
  8. Compiler: GCC 4.9, MinGW 3.11
  9. Compilation date: Apr 18 2015 13:02:07
  10. ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
  11. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=240057409536
  12. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=480103981056
  13. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592982016
  14. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=239215837184
  15. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=479967838208
  16. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=3000457232384
  17. Hard disk list
  18. Disk \\.\PhysicalDrive0 - 240 GB / 223 GiB - CHS 29185 255 63, sector size=512
  19. Disk \\.\PhysicalDrive1 - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512
  20. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512
  21. Drive C: - 239 GB / 222 GiB - CHS 29083 255 63, sector size=512
  22. Drive D: - 479 GB / 447 GiB - CHS 58352 255 63, sector size=512
  23. Drive F: - 3000 GB / 2794 GiB - CHS 364784 255 63, sector size=512
  24.  
  25. Partition table type (auto): None
  26. Partition table type (auto): EFI GPT
  27. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB
  28. Partition table type: EFI GPT
  29.  
  30. Analyse Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  31. hdr_size=92
  32. hdr_lba_self=1
  33. hdr_lba_alt=5860533167 (expected 5860533167)
  34. hdr_lba_start=34
  35. hdr_lba_end=5860533134
  36. hdr_lba_table=2
  37. hdr_entries=128
  38. hdr_entsz=128
  39. check_part_gpt failed for partition
  40. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  41. Current partition structure:
  42. 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
  43. No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
  44. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  45. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  46. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  47.  
  48. search_part()
  49. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  50. Search for partition aborted
  51.  
  52. Results
  53.  
  54. interface_write()
  55.  
  56. No partition found or selected for recovery
  57. simulate write!
  58. Partition table type (auto): EFI GPT
  59. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB
  60. Partition table type: EFI GPT
  61.  
  62. Interface Advanced
  63. hdr_size=92
  64. hdr_lba_self=1
  65. hdr_lba_alt=5860533167 (expected 5860533167)
  66. hdr_lba_start=34
  67. hdr_lba_end=5860533134
  68. hdr_lba_table=2
  69. hdr_entries=128
  70. hdr_entsz=128
  71. check_part_gpt failed for partition
  72. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  73. 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
  74. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  75. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  76.  
  77. Interface Advanced
  78. hdr_size=92
  79. hdr_lba_self=1
  80. hdr_lba_alt=5860533167 (expected 5860533167)
  81. hdr_lba_start=34
  82. hdr_lba_end=5860533134
  83. hdr_lba_table=2
  84. hdr_entries=128
  85. hdr_entsz=128
  86. check_part_gpt failed for partition
  87. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  88. 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
  89. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  90. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  91. gpt_change_part_type
  92. Change partition type:
  93. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  94. Change partition type:
  95. 3 P NTFS 262178 5860533134 5860270957 [LDM data partition]
  96.  
  97. ntfs_boot_sector
  98. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  99. filesystem size 1
  100. sectors_per_cluster 0
  101. mft_lcn 0
  102. mftmirr_lcn 0
  103. clusters_per_mft_record 0
  104. clusters_per_index_record 0
  105. Boot sector
  106. Status: Bad
  107.  
  108. Backup boot sector
  109. Status: Bad
  110.  
  111. Sectors are identical.
  112.  
  113. A valid NTFS Boot sector must be present in order to access
  114. any data; even if the partition is not bootable.
  115. rebuild_NTFS_BS
  116. mft at 307529606
  117. read_mft_info failed
  118. ntfs_find_mft: sectors_per_cluster invalid
  119. ntfs_find_mft: mft_lcn 786432
  120. ntfs_find_mft: mftmirr_lcn 2
  121. ntfs_find_mft: mft_record_size 1024
  122.  
  123. mft at 307661046
  124. read_mft_info failed
  125. ntfs_find_mft: sectors_per_cluster invalid
  126. ntfs_find_mft: mft_lcn 786432
  127. ntfs_find_mft: mftmirr_lcn 2
  128. ntfs_find_mft: mft_record_size 1024
  129.  
  130. mft at 39021120
  131. read_mft_info failed
  132. ntfs_find_mft: sectors_per_cluster invalid
  133. ntfs_find_mft: mft_lcn 2058
  134. ntfs_find_mft: mftmirr_lcn 5162
  135. ntfs_find_mft: mft_record_size 1024
  136.  
  137. mft at 39023344
  138. read_mft_info failed
  139. ntfs_find_mft: sectors_per_cluster invalid
  140. ntfs_find_mft: mft_lcn 2058
  141. ntfs_find_mft: mftmirr_lcn 5162
  142. ntfs_find_mft: mft_record_size 1024
  143.  
  144. mft at 39025568
  145. read_mft_info failed
  146. ntfs_find_mft: sectors_per_cluster invalid
  147. ntfs_find_mft: mft_lcn 2058
  148. ntfs_find_mft: mftmirr_lcn 5162
  149. ntfs_find_mft: mft_record_size 1024
  150.  
  151. mft at 39030720
  152. read_mft_info failed
  153. ntfs_find_mft: sectors_per_cluster invalid
  154. ntfs_find_mft: mft_lcn 2058
  155. ntfs_find_mft: mftmirr_lcn 5162
  156. ntfs_find_mft: mft_record_size 1024
  157.  
  158. mft at 39034768
  159. read_mft_info failed
  160. ntfs_find_mft: sectors_per_cluster invalid
  161. ntfs_find_mft: mft_lcn 2058
  162. ntfs_find_mft: mftmirr_lcn 5162
  163. ntfs_find_mft: mft_record_size 1024
  164.  
  165. mft at 39036896
  166. read_mft_info failed
  167. ntfs_find_mft: sectors_per_cluster invalid
  168. ntfs_find_mft: mft_lcn 2058
  169. ntfs_find_mft: mftmirr_lcn 5162
  170. ntfs_find_mft: mft_record_size 1024
  171.  
  172. mft at 42943104
  173. read_mft_info failed
  174. ntfs_find_mft: sectors_per_cluster invalid
  175. ntfs_find_mft: mft_lcn 2058
  176. ntfs_find_mft: mftmirr_lcn 5162
  177. ntfs_find_mft: mft_record_size 1024
  178.  
  179. mft at 42946848
  180. read_mft_info failed
  181. ntfs_find_mft: sectors_per_cluster invalid
  182. ntfs_find_mft: mft_lcn 2058
  183. ntfs_find_mft: mftmirr_lcn 5162
  184. ntfs_find_mft: mft_record_size 1024
  185.  
  186. mft at 743463816
  187. read_mft_info failed
  188. ntfs_find_mft: sectors_per_cluster invalid
  189. ntfs_find_mft: mft_lcn 2058
  190. ntfs_find_mft: mftmirr_lcn 5162
  191. ntfs_find_mft: mft_record_size 1024
  192.  
  193. mft at 743466920
  194. read_mft_info failed
  195. ntfs_find_mft: sectors_per_cluster invalid
  196. ntfs_find_mft: mft_lcn 2058
  197. ntfs_find_mft: mftmirr_lcn 5162
  198. ntfs_find_mft: mft_record_size 1024
  199.  
  200. Failed to rebuild NTFS boot sector.
  201.  
  202. ntfs_boot_sector
  203. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  204. filesystem size 1
  205. sectors_per_cluster 0
  206. mft_lcn 0
  207. mftmirr_lcn 0
  208. clusters_per_mft_record 0
  209. clusters_per_index_record 0
  210. Boot sector
  211. Status: Bad
  212.  
  213. Backup boot sector
  214. Status: Bad
  215.  
  216. Sectors are identical.
  217.  
  218. A valid NTFS Boot sector must be present in order to access
  219. any data; even if the partition is not bootable.
  220. rebuild_NTFS_BS
  221. mft at 307529606
  222. read_mft_info failed
  223. ntfs_find_mft: sectors_per_cluster invalid
  224. ntfs_find_mft: mft_lcn 786432
  225. ntfs_find_mft: mftmirr_lcn 2
  226. ntfs_find_mft: mft_record_size 1024
  227.  
  228. mft at 307661046
  229. read_mft_info failed
  230. ntfs_find_mft: sectors_per_cluster invalid
  231. ntfs_find_mft: mft_lcn 786432
  232. ntfs_find_mft: mftmirr_lcn 2
  233. ntfs_find_mft: mft_record_size 1024
  234.  
  235. mft at 39021120
  236. read_mft_info failed
  237. ntfs_find_mft: sectors_per_cluster invalid
  238. ntfs_find_mft: mft_lcn 2058
  239. ntfs_find_mft: mftmirr_lcn 5162
  240. ntfs_find_mft: mft_record_size 1024
  241.  
  242. mft at 39023344
  243. read_mft_info failed
  244. ntfs_find_mft: sectors_per_cluster invalid
  245. ntfs_find_mft: mft_lcn 2058
  246. ntfs_find_mft: mftmirr_lcn 5162
  247. ntfs_find_mft: mft_record_size 1024
  248.  
  249. mft at 39025568
  250. read_mft_info failed
  251. ntfs_find_mft: sectors_per_cluster invalid
  252. ntfs_find_mft: mft_lcn 2058
  253. ntfs_find_mft: mftmirr_lcn 5162
  254. ntfs_find_mft: mft_record_size 1024
  255.  
  256. mft at 39030720
  257. read_mft_info failed
  258. ntfs_find_mft: sectors_per_cluster invalid
  259. ntfs_find_mft: mft_lcn 2058
  260. ntfs_find_mft: mftmirr_lcn 5162
  261. ntfs_find_mft: mft_record_size 1024
  262.  
  263. mft at 39034768
  264. read_mft_info failed
  265. ntfs_find_mft: sectors_per_cluster invalid
  266. ntfs_find_mft: mft_lcn 2058
  267. ntfs_find_mft: mftmirr_lcn 5162
  268. ntfs_find_mft: mft_record_size 1024
  269.  
  270. mft at 39036896
  271. read_mft_info failed
  272. ntfs_find_mft: sectors_per_cluster invalid
  273. ntfs_find_mft: mft_lcn 2058
  274. ntfs_find_mft: mftmirr_lcn 5162
  275. ntfs_find_mft: mft_record_size 1024
  276.  
  277. mft at 42943104
  278. read_mft_info failed
  279. ntfs_find_mft: sectors_per_cluster invalid
  280. ntfs_find_mft: mft_lcn 2058
  281. ntfs_find_mft: mftmirr_lcn 5162
  282. ntfs_find_mft: mft_record_size 1024
  283.  
  284. mft at 42946848
  285. read_mft_info failed
  286. ntfs_find_mft: sectors_per_cluster invalid
  287. ntfs_find_mft: mft_lcn 2058
  288. ntfs_find_mft: mftmirr_lcn 5162
  289. ntfs_find_mft: mft_record_size 1024
  290.  
  291. mft at 743463816
  292. read_mft_info failed
  293. ntfs_find_mft: sectors_per_cluster invalid
  294. ntfs_find_mft: mft_lcn 2058
  295. ntfs_find_mft: mftmirr_lcn 5162
  296. ntfs_find_mft: mft_record_size 1024
  297.  
  298. mft at 743466920
  299. read_mft_info failed
  300. ntfs_find_mft: sectors_per_cluster invalid
  301. ntfs_find_mft: mft_lcn 2058
  302. ntfs_find_mft: mftmirr_lcn 5162
  303. ntfs_find_mft: mft_record_size 1024
  304.  
  305. Failed to rebuild NTFS boot sector.
  306.  
  307. ntfs_boot_sector
  308. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  309. filesystem size 1
  310. sectors_per_cluster 0
  311. mft_lcn 0
  312. mftmirr_lcn 0
  313. clusters_per_mft_record 0
  314. clusters_per_index_record 0
  315. Boot sector
  316. Status: Bad
  317.  
  318. Backup boot sector
  319. Status: Bad
  320.  
  321. Sectors are identical.
  322.  
  323. A valid NTFS Boot sector must be present in order to access
  324. any data; even if the partition is not bootable.
  325. Failed to startup volume: Invalid argument.
  326.  
  327. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  328. Can't open filesystem. Filesystem seems damaged.
  329.  
  330. ntfs_boot_sector
  331. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  332. filesystem size 1
  333. sectors_per_cluster 0
  334. mft_lcn 0
  335. mftmirr_lcn 0
  336. clusters_per_mft_record 0
  337. clusters_per_index_record 0
  338. Boot sector
  339. Status: Bad
  340.  
  341. Backup boot sector
  342. Status: Bad
  343.  
  344. Sectors are identical.
  345.  
  346. A valid NTFS Boot sector must be present in order to access
  347. any data; even if the partition is not bootable.
  348. Failed to startup volume: Invalid argument.
  349. Failed to startup volume: Invalid argument.
  350. gpt_change_part_type
  351. Change partition type:
  352. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  353. Change partition type:
  354. 3 P NTFS 262178 5860533134 5860270957 [LDM data partition]
  355.  
  356. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  357. Can't open filesystem. Filesystem seems damaged.
  358.  
  359. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  360. Can't open filesystem. Filesystem seems damaged.
  361.  
  362. ntfs_boot_sector
  363. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  364. filesystem size 1
  365. sectors_per_cluster 0
  366. mft_lcn 0
  367. mftmirr_lcn 0
  368. clusters_per_mft_record 0
  369. clusters_per_index_record 0
  370. Boot sector
  371. Status: Bad
  372.  
  373. Backup boot sector
  374. Status: Bad
  375.  
  376. Sectors are identical.
  377.  
  378. A valid NTFS Boot sector must be present in order to access
  379. any data; even if the partition is not bootable.
  380. gpt_change_part_type
  381. Change partition type:
  382. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  383. Change partition type:
  384. 3 P NTFS 262178 5860533134 5860270957 [LDM data partition]
  385.  
  386. Analyse Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  387. hdr_size=92
  388. hdr_lba_self=1
  389. hdr_lba_alt=5860533167 (expected 5860533167)
  390. hdr_lba_start=34
  391. hdr_lba_end=5860533134
  392. hdr_lba_table=2
  393. hdr_entries=128
  394. hdr_entsz=128
  395. check_part_gpt failed for partition
  396. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  397. Current partition structure:
  398. 1 P MS LDM MetaData 34 2081 2048 [LDM metadata partition]
  399. No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
  400. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  401. 2 P MS Reserved 2082 262177 260096 [Microsoft reserved partition]
  402. 3 P MS LDM Data 262178 5860533134 5860270957 [LDM data partition]
  403.  
  404. search_part()
  405. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  406. Search for partition aborted
  407.  
  408. Results
  409.  
  410. interface_write()
  411.  
  412. No partition found or selected for recovery
  413.  
  414. search_part()
  415. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  416. Search for partition aborted
  417.  
  418. Results
  419.  
  420. interface_write()
  421.  
  422. No partition found or selected for recovery
  423. simulate write!
  424. Partition table type (auto): None
  425. Drive F: - 3000 GB / 2794 GiB
  426. Partition table type: Intel
  427.  
  428. Interface Advanced
  429. Partition table type (auto): EFI GPT
  430. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB
  431. Partition table type: Intel
  432.  
  433. Interface Advanced
  434. Geometry from i386 MBR: head=256 sector=63
  435. check_part_i386 1 type EE: no test
  436. 1 P EFI GPT 0 0 2 267349 89 4 4294967295
  437. Change partition type:
  438. 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
  439.  
  440. ntfs_boot_sector
  441. 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
  442. filesystem size 35 5010337540809105556
  443. sectors_per_cluster 0 165
  444. mft_lcn 1565565838 230319449
  445. mftmirr_lcn 284160130 254363537
  446. clusters_per_mft_record -112 -35
  447. clusters_per_index_record -114 -15
  448. Boot sector
  449. Status: Bad
  450.  
  451. Backup boot sector
  452. Status: Bad
  453.  
  454. Sectors are not identical.
  455.  
  456. A valid NTFS Boot sector must be present in order to access
  457. any data; even if the partition is not bootable.
  458. Failed to startup volume: Invalid argument.
  459. Not an exFAT boot sector.
  460.  
  461. 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
  462. Can't open filesystem. Filesystem seems damaged.
  463. Change partition type:
  464. 1 P HPFS - NTFS 0 0 2 267349 89 4 4294967295
  465. New options :
  466. Dump : No
  467. Align partition: Yes
  468. Expert mode : Yes
  469.  
  470. Interface Advanced
  471. Geometry from i386 MBR: head=256 sector=63
  472. check_part_i386 1 type EE: no test
  473. 1 P EFI GPT 0 0 2 267349 89 4 4294967295
  474.  
  475. Interface Advanced
  476. Geometry from i386 MBR: head=256 sector=63
  477. check_part_i386 1 type EE: no test
  478. 1 P EFI GPT 0 0 2 267349 89 4 4294967295
  479.  
  480. Analyse Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  481. Geometry from i386 MBR: head=256 sector=63
  482. check_part_i386 1 type EE: no test
  483. Current partition structure:
  484. 1 P EFI GPT 0 0 2 267349 89 4 4294967295
  485.  
  486. Warning: Bad ending head (CHS and LBA don't match)
  487. No partition is bootable
  488.  
  489. search_part()
  490. Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 364801 255 63
  491. Search for partition aborted
  492.  
  493. Results
  494.  
  495. interface_write()
  496.  
  497. No partition found or selected for recovery
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement