Advertisement
Guest User

testdisk.log

a guest
Jul 19th, 2015
304
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 14.24 KB | None | 0 0
  1. Sun Jul 19 12:59:09 2015
  2. Command line: TestDisk
  3.  
  4. TestDisk 7.0, Data Recovery Utility, April 2015
  5. Christophe GRENIER <grenier@cgsecurity.org>
  6. http://www.cgsecurity.org
  7. OS: Linux, kernel 3.14.48-std454-amd64 (#2 SMP Sat Jul 11 08:52:05 UTC 2015) x86_64
  8. Compiler: GCC 4.8
  9. Compilation date: 2015-06-28T08:22:07
  10. ext2fs lib: 1.42.13, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: none, curses lib: ncurses 5.9
  11. /dev/sda: LBA, HPA, LBA48, DCO support
  12. /dev/sda: size 117231408 sectors
  13. /dev/sda: user_max 117231408 sectors
  14. /dev/sda: native_max 117231408 sectors
  15. /dev/sda: dco 117231408 sectors
  16. /dev/sdb: LBA, HPA, LBA48, DCO support
  17. /dev/sdb: size 976773168 sectors
  18. /dev/sdb: user_max 976773168 sectors
  19. /dev/sdb: native_max 976773168 sectors
  20. /dev/sdb: dco 976773168 sectors
  21. /dev/sdc: LBA, HPA, LBA48, DCO support
  22. /dev/sdc: size 3907029168 sectors
  23. /dev/sdc: user_max 3907029168 sectors
  24. /dev/sdc: native_max 3907029168 sectors
  25. /dev/sdc: dco 3907029168 sectors
  26. Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
  27. Warning: can't get size for Disk /dev/md0 - 0 B - CHS 1 2 4, sector size=512
  28. /dev/sr0 is not an ATA disk
  29. Hard disk list
  30. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63, sector size=512 - Corsair Force LS SSD, S/N:150381680001016705EF, FW:S9FM02.0
  31. Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000AAKS-75YGA0, S/N:WD-WCAS85732855, FW:12.01C02
  32. Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM001-9YN164, S/N:W1E0G6XH, FW:CC4H
  33. Disk /dev/sdd - 16 GB / 14 GiB - CHS 15264 64 32, sector size=512 - Corsair Voyager 3.0, FW:1.00
  34. Disk /dev/sr0 - 696 MB / 663 MiB - 339920 sectors (RO), sector size=2048 - Optiarc DVD RW AD-7200S, FW:1.0A
  35.  
  36. Partition table type (auto): Intel
  37. Disk /dev/sda - 60 GB / 55 GiB - Corsair Force LS SSD
  38. Partition table type: Intel
  39.  
  40. Analyse Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  41. Geometry from i386 MBR: head=255 sector=63
  42. NTFS at 0/32/33
  43. Current partition structure:
  44. 1 * HPFS - NTFS 0 32 33 3838 123 61 61663232
  45. 2 E extended 3838 156 29 7297 51 50 55562242
  46. 5 L Linux 3838 156 31 7297 51 50 55562240
  47.  
  48. search_part()
  49. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  50. NTFS at 0/32/33
  51. filesystem size 61663232
  52. sectors_per_cluster 8
  53. mft_lcn 4
  54. mftmirr_lcn 3853951
  55. clusters_per_mft_record -10
  56. clusters_per_index_record 1
  57. HPFS - NTFS 0 32 33 3838 123 61 61663232
  58. NTFS, blocksize=4096, 31 GB / 29 GiB
  59.  
  60. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=265/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  61. recover_EXT2: s_blocksize=4096
  62. recover_EXT2: s_blocks_count 6945280
  63. recover_EXT2: part_size 55562240
  64. Linux 3838 156 31 7297 51 50 55562240
  65. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  66.  
  67. Results
  68. * HPFS - NTFS 0 32 33 3838 123 61 61663232
  69. NTFS, blocksize=4096, 31 GB / 29 GiB
  70. P Linux 3838 156 31 7297 51 50 55562240
  71. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  72.  
  73. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  74. echo "0 61663232 linear /dev/sda 2048" | dmsetup create test0
  75. echo "0 55562240 linear /dev/sda 61667328" | dmsetup create test1
  76.  
  77. interface_write()
  78. 1 * HPFS - NTFS 0 32 33 3838 123 61 61663232
  79. 2 P Linux 3838 156 31 7297 51 50 55562240
  80.  
  81. search_part()
  82. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  83. NTFS at 0/32/33
  84. filesystem size 61663232
  85. sectors_per_cluster 8
  86. mft_lcn 4
  87. mftmirr_lcn 3853951
  88. clusters_per_mft_record -10
  89. clusters_per_index_record 1
  90. HPFS - NTFS 0 32 33 3838 123 61 61663232
  91. NTFS, blocksize=4096, 31 GB / 29 GiB
  92. NTFS at 3838/123/61
  93. filesystem size 61663232
  94. sectors_per_cluster 8
  95. mft_lcn 4
  96. mftmirr_lcn 3853951
  97. clusters_per_mft_record -10
  98. clusters_per_index_record 1
  99. HPFS - NTFS 0 32 33 3838 123 61 61663232
  100. NTFS found using backup sector, blocksize=4096, 31 GB / 29 GiB
  101.  
  102. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=265/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  103. recover_EXT2: s_blocksize=4096
  104. recover_EXT2: s_blocks_count 6945280
  105. recover_EXT2: part_size 55562240
  106. Linux 3838 156 31 7297 51 50 55562240
  107. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  108.  
  109. block_group_nr 1
  110.  
  111. recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
  112. recover_EXT2: s_block_group_nr=1/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  113. recover_EXT2: s_blocksize=4096
  114. recover_EXT2: s_blocks_count 6945280
  115. recover_EXT2: part_size 55562240
  116. Linux 3838 156 31 7297 51 50 55562240
  117. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  118.  
  119. block_group_nr 3
  120.  
  121. recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
  122. recover_EXT2: s_block_group_nr=3/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  123. recover_EXT2: s_blocksize=4096
  124. recover_EXT2: s_blocks_count 6945280
  125. recover_EXT2: part_size 55562240
  126. Linux 3838 156 31 7297 51 50 55562240
  127. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  128.  
  129. block_group_nr 5
  130.  
  131. recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
  132. recover_EXT2: s_block_group_nr=5/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  133. recover_EXT2: s_blocksize=4096
  134. recover_EXT2: s_blocks_count 6945280
  135. recover_EXT2: part_size 55562240
  136. Linux 3838 156 31 7297 51 50 55562240
  137. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  138.  
  139. block_group_nr 7
  140.  
  141. recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
  142. recover_EXT2: s_block_group_nr=7/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  143. recover_EXT2: s_blocksize=4096
  144. recover_EXT2: s_blocks_count 6945280
  145. recover_EXT2: part_size 55562240
  146. Linux 3838 156 31 7297 51 50 55562240
  147. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  148.  
  149. block_group_nr 9
  150.  
  151. recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
  152. recover_EXT2: s_block_group_nr=9/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  153. recover_EXT2: s_blocksize=4096
  154. recover_EXT2: s_blocks_count 6945280
  155. recover_EXT2: part_size 55562240
  156. Linux 3838 156 31 7297 51 50 55562240
  157. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  158.  
  159. block_group_nr 25
  160.  
  161. recover_EXT2: "e2fsck -b 819200 -B 4096 device" may be needed
  162. recover_EXT2: s_block_group_nr=25/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  163. recover_EXT2: s_blocksize=4096
  164. recover_EXT2: s_blocks_count 6945280
  165. recover_EXT2: part_size 55562240
  166. Linux 3838 156 31 7297 51 50 55562240
  167. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  168.  
  169. block_group_nr 27
  170.  
  171. recover_EXT2: "e2fsck -b 884736 -B 4096 device" may be needed
  172. recover_EXT2: s_block_group_nr=27/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  173. recover_EXT2: s_blocksize=4096
  174. recover_EXT2: s_blocks_count 6945280
  175. recover_EXT2: part_size 55562240
  176. Linux 3838 156 31 7297 51 50 55562240
  177. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  178.  
  179. block_group_nr 49
  180.  
  181. recover_EXT2: "e2fsck -b 1605632 -B 4096 device" may be needed
  182. recover_EXT2: s_block_group_nr=49/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  183. recover_EXT2: s_blocksize=4096
  184. recover_EXT2: s_blocks_count 6945280
  185. recover_EXT2: part_size 55562240
  186. Linux 3838 156 31 7297 51 50 55562240
  187. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  188.  
  189. block_group_nr 81
  190.  
  191. recover_EXT2: "e2fsck -b 2654208 -B 4096 device" may be needed
  192. recover_EXT2: s_block_group_nr=81/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  193. recover_EXT2: s_blocksize=4096
  194. recover_EXT2: s_blocks_count 6945280
  195. recover_EXT2: part_size 55562240
  196. Linux 3838 156 31 7297 51 50 55562240
  197. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  198. Linux Swap 5360 61 14 5621 82 13 4194288
  199. SWAP2 version 1, pagesize=4096, 2147 MB / 2047 MiB
  200.  
  201. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=265/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  202. recover_EXT2: s_blocksize=4096
  203. recover_EXT2: s_blocks_count 6945280
  204. recover_EXT2: part_size 55562240
  205. Linux 5423 250 12 8882 145 31 55562240
  206. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  207. This partition ends after the disk limits. (start=87136256, size=55562240, end=142698495, disk end=117231408)
  208.  
  209. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  210. recover_EXT2: s_blocksize=4096
  211. recover_EXT2: s_blocks_count 6945280
  212. recover_EXT2: part_size 55562240
  213. Linux 5432 100 45 8890 251 1 55562240
  214. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  215. This partition ends after the disk limits. (start=87271424, size=55562240, end=142833663, disk end=117231408)
  216.  
  217. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  218. recover_EXT2: s_blocksize=4096
  219. recover_EXT2: s_blocks_count 6945280
  220. recover_EXT2: part_size 55562240
  221. Linux 5433 73 17 8891 223 36 55562240
  222. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  223. This partition ends after the disk limits. (start=87285760, size=55562240, end=142847999, disk end=117231408)
  224.  
  225. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  226. recover_EXT2: s_blocksize=4096
  227. recover_EXT2: s_blocks_count 6945280
  228. recover_EXT2: part_size 55562240
  229. Linux 5434 175 54 8893 71 10 55562240
  230. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  231. This partition ends after the disk limits. (start=87308288, size=55562240, end=142870527, disk end=117231408)
  232.  
  233. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  234. recover_EXT2: s_blocksize=4096
  235. recover_EXT2: s_blocks_count 6945280
  236. recover_EXT2: part_size 55562240
  237. Linux 5434 208 23 8893 103 42 55562240
  238. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  239. This partition ends after the disk limits. (start=87310336, size=55562240, end=142872575, disk end=117231408)
  240.  
  241. recover_EXT2: s_block_group_nr=0/211, s_mnt_count=251/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  242. recover_EXT2: s_blocksize=4096
  243. recover_EXT2: s_blocks_count 6945280
  244. recover_EXT2: part_size 55562240
  245. Linux 5435 115 57 8894 11 13 55562240
  246. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  247. This partition ends after the disk limits. (start=87320576, size=55562240, end=142882815, disk end=117231408)
  248.  
  249. block_group_nr 125
  250.  
  251. recover_EXT2: "e2fsck -b 4096000 -B 4096 device" may be needed
  252. recover_EXT2: s_block_group_nr=125/211, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  253. recover_EXT2: s_blocksize=4096
  254. recover_EXT2: s_blocks_count 6945280
  255. recover_EXT2: part_size 55562240
  256. Linux 3838 156 31 7297 51 50 55562240
  257. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 28 GB / 26 GiB
  258. FAT12 at 7142/242/13
  259. FAT1 : 1-9
  260. FAT2 : 10-18
  261. start_rootdir : 19
  262. Data : 33-2879
  263. sectors : 2880
  264. cluster_size : 1
  265. no_of_cluster : 2847 (2 - 2848)
  266. fat_length 9 calculated 9
  267. heads/cylinder 2 (FAT) != 255 (HD)
  268. sect/track 18 (FAT) != 63 (HD)
  269.  
  270. FAT12 at 7142/242/13
  271. FAT12 7142 242 13 7143 32 57 2880
  272. FAT12, blocksize=512, 1474 KB / 1440 KiB
  273. Disk /dev/sda - 60 GB / 55 GiB - CHS 7297 255 63
  274. Check the harddisk size: HD jumpers settings, BIOS detection...
  275. The harddisk (60 GB / 55 GiB) seems too small! (< 73 GB / 68 GiB)
  276. The following partitions can't be recovered:
  277. Linux 5423 250 12 8882 145 31 55562240
  278. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  279. Linux 5432 100 45 8890 251 1 55562240
  280. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  281. Linux 5433 73 17 8891 223 36 55562240
  282. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  283. Linux 5434 175 54 8893 71 10 55562240
  284. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  285. Linux 5434 208 23 8893 103 42 55562240
  286. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  287. Linux 5435 115 57 8894 11 13 55562240
  288. ext4 blocksize=4096 Large_file Sparse_SB Recover, 28 GB / 26 GiB
  289.  
  290. Results
  291. * HPFS - NTFS 0 32 33 3838 123 61 61663232
  292. NTFS, blocksize=4096, 31 GB / 29 GiB
  293. Linux 3838 156 31 7297 51 50 55562240
  294. ext4 blocksize=4096 Large_file Sparse_SB, 28 GB / 26 GiB
  295. Linux Swap 5360 61 14 5621 82 29 4194304
  296. SWAP2 version 1, pagesize=4096, 2147 MB / 2048 MiB
  297. FAT12 7142 242 13 7143 52 13 4096
  298. FAT12, blocksize=512, 2097 KB / 2048 KiB
  299.  
  300. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  301. echo "0 61663232 linear /dev/sda 2048" | dmsetup create test0
  302. echo "0 55562240 linear /dev/sda 61667328" | dmsetup create test1
  303. echo "0 4194304 linear /dev/sda 86112256" | dmsetup create test2
  304. echo "0 4096 linear /dev/sda 114751488" | dmsetup create test3
  305.  
  306. interface_write()
  307. 1 * HPFS - NTFS 0 32 33 3838 123 61 61663232
  308. simulate write!
  309.  
  310. write_mbr_i386: starting...
  311. write_all_log_i386: starting...
  312. No extended partition
  313.  
  314. TestDisk exited normally.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement