Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Mon Feb 11 11:35:05 2013
- Command line: TestDisk
- TestDisk 6.11, Data Recovery Utility, April 2009
- Christophe GRENIER <grenier@cgsecurity.org>
- http://www.cgsecurity.org
- OS: Linux, kernel 2.6.32-38-generic (#83-Ubuntu SMP Wed Jan 4 11:12:07 UTC 2012)
- Compiler: GCC 4.4 - Jun 23 2009 17:48:38
- ext2fs lib: 1.41.11, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
- /dev/sda: LBA, HPA, LBA48, DCO support
- /dev/sda: size 312581808 sectors
- /dev/sda: user_max 312581808 sectors
- /dev/sda: native_max 312581808 sectors
- /dev/sda: dco 312581808 sectors
- /dev/sdb: LBA, HPA, LBA48, DCO support
- /dev/sdb: size 312581808 sectors
- /dev/sdb: user_max 312581808 sectors
- /dev/sdb: native_max 312581808 sectors
- /dev/sdb: dco 312581808 sectors
- /dev/sdc: LBA, HPA, LBA48, DCO support
- /dev/sdc: size 3907029168 sectors
- /dev/sdc: user_max 3907029168 sectors
- /dev/sdc: native_max 18446744073321613488 sectors
- /dev/sdc: dco 18446744073321613488 sectors
- Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
- Hard disk list
- Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ATA SAMSUNG HD160JJ
- Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ATA SAMSUNG HD160JJ
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ATA ST2000DM001-9YN1
- Partition table type (auto): Intel
- /dev/sdc: Host Protected Area (HPA) present.
- Disk /dev/sdc - 2000 GB / 1863 GiB - ATA ST2000DM001-9YN1
- Partition table type: Intel
- Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Current partition structure:
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- No partition is bootable
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Ask the user for vista mode
- Computes LBA from CHS for Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- Allow partial last cylinder : Yes
- search_vista_part: 1
- search_part()
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Search for partition aborted
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Results
- * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Can't open filesystem. Filesystem seems damaged.
- interface_write()
- 1 * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- simulate write!
- write_mbr_i386: starting...
- write_all_log_i386: starting...
- No extended partition
- Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Current partition structure:
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- No partition is bootable
- Ask the user for vista mode
- Allow partial last cylinder : Yes
- search_vista_part: 1
- search_part()
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Results
- * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- interface_write()
- 1 * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- simulate write!
- write_mbr_i386: starting...
- write_all_log_i386: starting...
- No extended partition
- Interface Advanced
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- filesystem size 1465144002 4241120732162497590
- sectors_per_cluster 8 155
- mft_lcn 786432 191778405012692608
- mftmirr_lcn 91571500 5364165126302471253
- clusters_per_mft_record -10 -4
- clusters_per_index_record 1 -59
- Boot sector
- Status: OK
- Backup boot sector
- Status: Bad
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Can't open filesystem. Filesystem seems damaged.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- filesystem size 1465144002 4241120732162497590
- sectors_per_cluster 8 155
- mft_lcn 786432 191778405012692608
- mftmirr_lcn 91571500 5364165126302471253
- clusters_per_mft_record -10 -4
- clusters_per_index_record 1 -59
- Boot sector
- Status: OK
- Backup boot sector
- Status: Bad
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Interface Advanced
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- filesystem size 1465144002 4241120732162497590
- sectors_per_cluster 8 155
- mft_lcn 786432 191778405012692608
- mftmirr_lcn 91571500 5364165126302471253
- clusters_per_mft_record -10 -4
- clusters_per_index_record 1 -59
- Boot sector
- Status: OK
- Backup boot sector
- Status: Bad
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Current partition structure:
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- No partition is bootable
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Ask the user for vista mode
- Allow partial last cylinder : Yes
- search_vista_part: 1
- search_part()
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Search for partition aborted
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Results
- * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Can't open filesystem. Filesystem seems damaged.
- SIGHUP detected! TestDisk has been killed.
- Mon Feb 11 15:36:00 2013
- Command line: TestDisk
- TestDisk 6.11, Data Recovery Utility, April 2009
- Christophe GRENIER <grenier@cgsecurity.org>
- http://www.cgsecurity.org
- OS: Linux, kernel 2.6.32-38-generic (#83-Ubuntu SMP Wed Jan 4 11:12:07 UTC 2012)
- Compiler: GCC 4.4 - Jun 23 2009 17:48:38
- ext2fs lib: 1.41.11, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
- /dev/sda: LBA, HPA, LBA48, DCO support
- /dev/sda: size 312581808 sectors
- /dev/sda: user_max 312581808 sectors
- /dev/sda: native_max 312581808 sectors
- /dev/sda: dco 312581808 sectors
- /dev/sdb: LBA, HPA, LBA48, DCO support
- /dev/sdb: size 312581808 sectors
- /dev/sdb: user_max 312581808 sectors
- /dev/sdb: native_max 312581808 sectors
- /dev/sdb: dco 312581808 sectors
- /dev/sdc: LBA, HPA, LBA48, DCO support
- /dev/sdc: size 3907029168 sectors
- /dev/sdc: user_max 3907029168 sectors
- /dev/sdc: native_max 18446744073321613488 sectors
- /dev/sdc: dco 18446744073321613488 sectors
- Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
- Hard disk list
- Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ATA SAMSUNG HD160JJ
- Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ATA SAMSUNG HD160JJ
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ATA ST2000DM001-9YN1
- Partition table type (auto): Intel
- /dev/sdc: Host Protected Area (HPA) present.
- Disk /dev/sdc - 2000 GB / 1863 GiB - ATA ST2000DM001-9YN1
- Partition table type: Intel
- Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Current partition structure:
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- No partition is bootable
- Ask the user for vista mode
- Computes LBA from CHS for Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- Allow partial last cylinder : Yes
- search_vista_part: 1
- search_part()
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Search for partition aborted
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Results
- * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- interface_write()
- 1 * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- simulate write!
- write_mbr_i386: starting...
- write_all_log_i386: starting...
- No extended partition
- Interface Advanced
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- filesystem size 1465144002 4241120732162497590
- sectors_per_cluster 8 155
- mft_lcn 786432 191778405012692608
- mftmirr_lcn 91571500 5364165126302471253
- clusters_per_mft_record -10 -4
- clusters_per_index_record 1 -59
- Boot sector
- Status: OK
- Backup boot sector
- Status: Bad
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- copy original boot sector over backup boot
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Can't open filesystem. Filesystem seems damaged.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Failed to startup volume: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- repair_MFT
- NTFS at 0/1/1
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- MFT and MFT mirror are bad. Failed to repair them.
- MFT and MFT mirror are bad. Failed to repair them.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Failed to startup volume: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- repair_MFT
- NTFS at 0/1/1
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- MFT and MFT mirror are bad. Failed to repair them.
- MFT and MFT mirror are bad. Failed to repair them.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 0/1/1
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- TestDisk exited normally.
- Mon Feb 11 17:32:03 2013
- Command line: TestDisk
- TestDisk 6.11, Data Recovery Utility, April 2009
- Christophe GRENIER <grenier@cgsecurity.org>
- http://www.cgsecurity.org
- OS: Linux, kernel 2.6.32-38-generic (#83-Ubuntu SMP Wed Jan 4 11:12:07 UTC 2012)
- Compiler: GCC 4.4 - Jun 23 2009 17:48:38
- ext2fs lib: 1.41.11, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
- /dev/sda: LBA, HPA, LBA48, DCO support
- /dev/sda: size 312581808 sectors
- /dev/sda: user_max 312581808 sectors
- /dev/sda: native_max 312581808 sectors
- /dev/sda: dco 312581808 sectors
- /dev/sdb: LBA, HPA, LBA48, DCO support
- /dev/sdb: size 312581808 sectors
- /dev/sdb: user_max 312581808 sectors
- /dev/sdb: native_max 312581808 sectors
- /dev/sdb: dco 312581808 sectors
- /dev/sdc: LBA, HPA, LBA48, DCO support
- /dev/sdc: size 3907029168 sectors
- /dev/sdc: user_max 3907029168 sectors
- /dev/sdc: native_max 18446744073321613488 sectors
- /dev/sdc: dco 18446744073321613488 sectors
- Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
- Hard disk list
- Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ATA SAMSUNG HD160JJ
- Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ATA SAMSUNG HD160JJ
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ATA ST2000DM001-9YN1
- Partition table type (auto): Intel
- /dev/sdc: Host Protected Area (HPA) present.
- Disk /dev/sdc - 2000 GB / 1863 GiB - ATA ST2000DM001-9YN1
- Partition table type: Intel
- Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/1/1
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Current partition structure:
- 1 P HPFS - NTFS 0 1 1 91200 254 63 1465144002
- No partition is bootable
- Ask the user for vista mode
- Computes LBA from CHS for Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- Allow partial last cylinder : Yes
- search_vista_part: 1
- search_part()
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- Search for partition aborted
- get_geometry_from_list_part_aux head=255 nbr=2
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- get_geometry_from_list_part_aux head=240 nbr=1
- get_geometry_from_list_part_aux head=255 nbr=2
- Results
- * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- interface_write()
- 1 * HPFS - NTFS 0 1 1 91200 254 63 1465144002
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Failed to startup volume: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Failed to startup volume: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- search_part()
- Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243202 255 63
- NTFS at 0/1/1
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- NTFS at 91200/254/63
- filesystem size 1465144002
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 91571500
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS found using backup sector!, 750 GB / 698 GiB
- NTFS at 243200/254/63
- filesystem size 3907024002
- sectors_per_cluster 8
- mft_lcn 4
- mftmirr_lcn 244189000
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- get_geometry_from_list_part_aux head=255 nbr=4
- get_geometry_from_list_part_aux head=8 nbr=2
- get_geometry_from_list_part_aux head=16 nbr=2
- get_geometry_from_list_part_aux head=32 nbr=2
- get_geometry_from_list_part_aux head=64 nbr=2
- get_geometry_from_list_part_aux head=128 nbr=2
- get_geometry_from_list_part_aux head=240 nbr=2
- get_geometry_from_list_part_aux head=255 nbr=4
- Results
- HPFS - NTFS 0 1 1 91200 254 63 1465144002
- NTFS, 750 GB / 698 GiB
- HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- Can't open filesystem. Filesystem seems damaged.
- interface_write()
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- write!
- write_mbr_i386: starting...
- write_all_log_i386: starting...
- No extended partition
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- NTFS at 0/1/1
- Info: size boot_sector 1465144002, partition 3907024002
- NTFS at 0/1/1
- filesystem size 1465144002 3907024002
- sectors_per_cluster 8 8
- mft_lcn 786432 4
- mftmirr_lcn 91571500 244189000
- clusters_per_mft_record -10 -10
- clusters_per_index_record 1 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- Can't open filesystem. Filesystem seems damaged.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- NTFS at 0/1/1
- Info: size boot_sector 1465144002, partition 3907024002
- NTFS at 0/1/1
- filesystem size 1465144002 3907024002
- sectors_per_cluster 8 8
- mft_lcn 786432 4
- mftmirr_lcn 91571500 244189000
- clusters_per_mft_record -10 -10
- clusters_per_index_record 1 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Boot sector Backup boot sector
- 0000 eb52904e 54465320 .R.NTFS eb52904e 54465320 .R.NTFS
- 0008 20202000 02080000 ..... 20202000 02080000 .....
- 0010 00000000 00f80000 ........ 00000000 00f80000 ........
- 0018 3f00ff00 3f000000 ?...?... 3f00ff00 3f000000 ?...?...
- 0020 00000000 80008000 ........ 00000000 80008000 ........
- 0028 c1525457 00000000 .RTW.... 8174e0e8 00000000 .t......
- 0030 00000c00 00000000 ........ 04000000 00000000 ........
- 0038 2c457505 00000000 ,Eu..... 48078e0e 00000000 H.......
- 0040 f6000000 01000000 ........ f6000000 01000000 ........
- 0048 232626c0 3326c04a #&&.3&.J 41c34b1d f3840c18 A.K.....
- 0050 00000000 fa33c08e .....3.. 00000000 fa33c08e .....3..
- 0058 d0bc007c fbb8c007 ...|.... d0bc007c fb68c007 ...|.h..
- 0060 8ed8e816 00b8000d ........ 1f1e6866 00cb8816 ..hf....
- 0068 8ec033db c6060e00 ..3..... 0e006681 3e03004e ..f.>..N
- 0070 10e85300 68000d68 ..S.h..h 54465375 15b441bb TFSu..A.
- 0078 6a02cb8a 162400b4 j....$.. aa55cd13 720c81fb .U..r...
- 0080 08cd1373 05b9ffff ...s.... 55aa7506 f7c10100 U.u.....
- 0088 8af1660f b6c64066 ..f...@f 7503e9d2 001e83ec u.......
- 0090 0fb6d180 e23ff7e2 .....?.. 18681a00 b4488a16 .h...H..
- 0098 86cdc0ed 0641660f .....Af. 0e008bf4 161fcd13 ........
- 00A0 b7c966f7 e166a320 ..f..f. 9f83c418 9e581f72 .....X.r
- 00A8 00c3b441 bbaa558a ...A..U. e13b060b 0075dba3 .;...u..
- 00B0 162400cd 13720f81 .$...r.. 0f00c12e 0f00041e ........
- 00B8 fb55aa75 09f6c101 .U.u.... 5a33dbb9 00202bc8 Z3... +.
- 00C0 7404fe06 1400c366 t......f 66ff0611 0003160f f.......
- 00C8 601e0666 a1100066 `..f...f 008ec2ff 061600e8 ........
- 00D0 03061c00 663b0620 ....f;. 40002bc8 77efb800 @.+.w...
- 00D8 000f823a 001e666a ...:..fj bbcd1a66 23c0752d ...f#.u-
- 00E0 00665006 53666810 .fP.Sfh. 6681fb54 43504175 f..TCPAu
- 00E8 00010080 3e140000 ....>... 2481f902 01721e16 $....r..
- 00F0 0f850c00 e8b3ff80 ........ 6807bb16 68700e16 h...hp..
- 00F8 3e140000 0f846100 >.....a. 68090066 53665366 h..fSfSf
- 0100 b4428a16 2400161f .B..$... 55161616 68b80166 U...h..f
- 0108 8bf4cd13 66585b07 ....fX[. 610e07cd 1ae96a01 a.....j.
- 0110 66586658 1feb2d66 fXfX..-f 90906660 1e0666a1 ..f`..f.
- 0118 33d2660f b70e1800 3.f..... 11006603 061c001e ..f.....
- 0120 66f7f1fe c28aca66 f......f 66680000 00006650 fh....fP
- 0128 8bd066c1 ea10f736 ..f....6 06536801 00681000 .Sh..h..
- 0130 1a0086d6 8a162400 ......$. b4428a16 0e00161f .B......
- 0138 8ae8c0e4 060accb8 ........ 8bf4cd13 66595b5a ....fY[Z
- 0140 0102cd13 0f821900 ........ 66596659 1f0f8216 fYfY....
- 0148 8cc00520 008ec066 ... ...f 0066ff06 11000316 .f......
- 0150 ff061000 ff0e0e00 ........ 0f008ec2 ff0e1600 ........
- 0158 0f856fff 071f6661 ..o...fa 75bc071f 6661c3a0 u...fa..
- 0160 c3a0f801 e80900a0 ........ f801e808 00a0fb01 ........
- 0168 fb01e803 00fbebfe ........ e80200eb feb4018b ........
- 0170 b4018bf0 ac3c0074 .....<.t f0ac3c00 7409b40e ..<.t...
- 0178 09b40ebb 0700cd10 ........ bb0700cd 10ebf2c3 ........
- 0180 ebf2c30d 0a412064 .....A d 0d0a4120 6469736b ..A disk
- 0188 69736b20 72656164 isk read 20726561 64206572 read er
- 0190 20657272 6f72206f error o 726f7220 6f636375 ror occu
- 0198 63637572 72656400 ccurred. 72726564 000d0a42 rred...B
- 01A0 0d0a4e54 4c445220 ..NTLDR 4f4f544d 47522069 OOTMGR i
- 01A8 6973206d 69737369 is missi 73206d69 7373696e s missin
- 01B0 6e67000d 0a4e544c ng...NTL 67000d0a 424f4f54 g...BOOT
- 01B8 44522069 7320636f DR is co 4d475220 69732063 MGR is c
- 01C0 6d707265 73736564 mpressed 6f6d7072 65737365 ompresse
- 01C8 000d0a50 72657373 ...Press 64000d0a 50726573 d...Pres
- 01D0 20437472 6c2b416c Ctrl+Al 73204374 726c2b41 s Ctrl+A
- 01D8 742b4465 6c20746f t+Del to 6c742b44 656c2074 lt+Del t
- 01E0 20726573 74617274 restart 6f207265 73746172 o restar
- 01E8 0d0a0000 00000000 ........ 740d0a00 00000000 t.......
- 01F0 00000000 00000000 ........ 00000000 00000000 ........
- 01F8 83a0b3c9 000055aa ......U. 809db2ca 000055aa ......U.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- NTFS at 0/1/1
- Info: size boot_sector 1465144002, partition 3907024002
- NTFS at 0/1/1
- filesystem size 1465144002 3907024002
- sectors_per_cluster 8 8
- mft_lcn 786432 4
- mftmirr_lcn 91571500 244189000
- clusters_per_mft_record -10 -10
- clusters_per_index_record 1 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- Failed to startup volume: No such file or directory.
- Failed to open $MFT/$BITMAP: No such file or directory.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: No such file or directory.
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- ntfs_device_testdisk_io_ioctl() unimplemented
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- Can't open filesystem. Filesystem seems damaged.
- ntfs_boot_sector
- 1 P HPFS - NTFS 0 1 1 243200 254 63 3907024002
- NTFS found using backup sector!, 2000 GB / 1863 GiB
- NTFS at 0/1/1
- Info: size boot_sector 1465144002, partition 3907024002
- NTFS at 0/1/1
- filesystem size 1465144002 3907024002
- sectors_per_cluster 8 8
- mft_lcn 786432 4
- mftmirr_lcn 91571500 244189000
- clusters_per_mft_record -10 -10
- clusters_per_index_record 1 1
- Boot sector
- Status: OK
- Backup boot sector
- Status: OK
- Sectors are not identical.
- A valid NTFS Boot sector must be present in order to access
- any data; even if the partition is not bootable.
- You will have to reboot for the change to take effect.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement