API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Feb 6th, 2020
162
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 9.44 KB | None | 0 0
raw download clone embed print report
  1.  
  2.  
  3. Thu Feb 6 16:53:00 2020
  4. Command line: TestDisk
  5.  
  6. TestDisk 7.1, Data Recovery Utility, July 2019
  7. Christophe GRENIER <grenier@cgsecurity.org>
  8. https://www.cgsecurity.org
  9. OS: Linux, kernel 5.5.1-arch1-1 (#1 SMP PREEMPT Sat, 01 Feb 2020 16:38:40 +0000) x86_64
  10. Compiler: GCC 9.2
  11. ext2fs lib: 1.45.5, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.5, ewf lib: none, curses lib: ncurses 6.1
  12. User is not root!
  13. Hard disk list
  14.  
  15.  
  16. TestDisk exited normally.
  17. Using locale 'en_US.UTF-8'.
  18.  
  19.  
  20. Thu Feb 6 16:53:04 2020
  21. Command line: TestDisk /debug
  22.  
  23. TestDisk 7.1, Data Recovery Utility, July 2019
  24. Christophe GRENIER <grenier@cgsecurity.org>
  25. https://www.cgsecurity.org
  26. OS: Linux, kernel 5.5.1-arch1-1 (#1 SMP PREEMPT Sat, 01 Feb 2020 16:38:40 +0000) x86_64
  27. Compiler: GCC 9.2
  28. ext2fs lib: 1.45.5, ntfs lib: libntfs-3g, reiserfs lib: 0.3.0.5, ewf lib: none, curses lib: ncurses 6.1
  29. Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
  30. Hard disk list
  31. Disk /dev/sda - 31 GB / 28 GiB - CHS 29600 64 32, sector size=512 - ADATA USB Flash Drive, FW:1100
  32. Disk /dev/nvme0n1 - 512 GB / 476 GiB - CHS 488386 64 32, sector size=512
  33.  
  34. Partition table type (auto): EFI GPT
  35. Disk /dev/nvme0n1 - 512 GB / 476 GiB
  36. Partition table type: EFI GPT
  37.  
  38. Analyse Disk /dev/nvme0n1 - 512 GB / 476 GiB - CHS 488386 64 32
  39. hdr_size=92
  40. hdr_lba_self=1
  41. hdr_lba_alt=1000215215 (expected 1000215215)
  42. hdr_lba_start=34
  43. hdr_lba_end=1000215182
  44. hdr_lba_table=2
  45. hdr_entries=128
  46. hdr_entsz=128
  47. check_part_gpt failed for partition
  48. 2 P MS Reserved 1026048 1288191 262144 [Microsoft reserved partition]
  49. Current partition structure:
  50. 1 P EFI System 2048 1026047 1024000 [EFI system partition]
  51. No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
  52. 2 P MS Reserved 1026048 1288191 262144 [Microsoft reserved partition]
  53. 2 P MS Reserved 1026048 1288191 262144 [Microsoft reserved partition]
  54. Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
  55. Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
  56. 3 P MS Data 1288192 368368407 367080216 [Basic data partition] [OS]
  57. 4 P Windows Recovery Env 401928192 403150847 1222656
  58.  
  59. search_part()
  60. Disk /dev/nvme0n1 - 512 GB / 476 GiB - CHS 488386 64 32
  61. FAT32 at 1/0/1
  62. FAT1 : 6206-7198
  63. FAT2 : 7199-8191
  64. start_rootdir : 8192 root cluster : 2
  65. Data : 8192-1023999
  66. sectors : 1024000
  67. cluster_size : 8
  68. no_of_cluster : 126976 (2 - 126977)
  69. fat_length 993 calculated 993
  70. heads/cylinder 255 (FAT) != 64 (HD)
  71. sect/track 63 (FAT) != 32 (HD)
  72.  
  73. FAT32 at 1/0/1
  74. FAT: cluster=2(0x2), pos=10240
  75. EFI System 2048 1026047 1024000 [EFI System Partition] [ESP]
  76. FAT32, blocksize=4096, 524 MB / 500 MiB
  77. NTFS at 629/0/1
  78. heads/cylinder 255 (NTFS) != 64 (HD)
  79. sect/track 63 (NTFS) != 32 (HD)
  80. filesystem size 367080216
  81. sectors_per_cluster 8
  82. mft_lcn 786432
  83. mftmirr_lcn 183663
  84. clusters_per_mft_record -10
  85. clusters_per_index_record 1
  86. NTFS part_offset=659554304, part_size=187945070592, sector_size=512
  87. NTFS partition cannot be added (part_offset<part_size).
  88. NTFS at 629/0/1
  89. heads/cylinder 255 (NTFS) != 64 (HD)
  90. sect/track 63 (NTFS) != 32 (HD)
  91. filesystem size 367080216
  92. sectors_per_cluster 8
  93. mft_lcn 786432
  94. mftmirr_lcn 183663
  95. clusters_per_mft_record -10
  96. clusters_per_index_record 1
  97. MS Data 1288192 368368407 367080216 [OS]
  98. NTFS, blocksize=4096, 187 GB / 175 GiB
  99. FAT12 at 193201/58/1
  100. FAT1 : 1-9
  101. FAT2 : 10-18
  102. start_rootdir : 19
  103. Data : 33-2879
  104. sectors : 2880
  105. cluster_size : 1
  106. no_of_cluster : 2847 (2 - 2848)
  107. fat_length 9 calculated 9
  108. heads/cylinder 2 (FAT) != 64 (HD)
  109. sect/track 18 (FAT) != 32 (HD)
  110.  
  111. FAT12 at 193201/58/1
  112. EFI System 395677504 395680383 2880 [EFI System Partition] [EFISECTOR]
  113. FAT12, blocksize=512, 1474 KB / 1440 KiB
  114. NTFS at 193205/59/17
  115. heads/cylinder 16 (NTFS) != 64 (HD)
  116. sect/track 2 (NTFS) != 32 (HD)
  117. filesystem size 6174
  118. sectors_per_cluster 1
  119. mft_lcn 2058
  120. mftmirr_lcn 5162
  121. clusters_per_mft_record 2
  122. clusters_per_index_record 8
  123. MS Data 395679571 395685744 6174
  124. NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
  125. NTFS at 193205/59/17
  126. heads/cylinder 16 (NTFS) != 64 (HD)
  127. sect/track 2 (NTFS) != 32 (HD)
  128. filesystem size 6174
  129. sectors_per_cluster 1
  130. mft_lcn 2058
  131. mftmirr_lcn 5162
  132. clusters_per_mft_record 2
  133. clusters_per_index_record 8
  134. MS Data 395685744 395691917 6174 [Boot]
  135. NTFS, blocksize=512, 3161 KB / 3087 KiB
  136. FAT12 at 193208/60/17
  137. FAT1 : 1-9
  138. FAT2 : 10-18
  139. start_rootdir : 19
  140. Data : 33-2879
  141. sectors : 2880
  142. cluster_size : 1
  143. no_of_cluster : 2847 (2 - 2848)
  144. fat_length 9 calculated 9
  145. heads/cylinder 2 (FAT) != 64 (HD)
  146. sect/track 18 (FAT) != 32 (HD)
  147.  
  148. FAT12 at 193208/60/17
  149. EFI System 395691920 395694799 2880 [EFI System Partition] [EFISECTOR]
  150. FAT12, blocksize=512, 1474 KB / 1440 KiB
  151. NTFS at 196253/40/30
  152. heads/cylinder 255 (NTFS) != 64 (HD)
  153. sect/track 63 (NTFS) != 32 (HD)
  154. filesystem size 400639262
  155. sectors_per_cluster 8
  156. mft_lcn 786432
  157. mftmirr_lcn 2
  158. clusters_per_mft_record -10
  159. clusters_per_index_record 1
  160. MS Data 1288192 401927453 400639262 [OS]
  161. NTFS found using backup sector, blocksize=4096, 205 GB / 191 GiB
  162. NTFS at 196253/40/30
  163. heads/cylinder 255 (NTFS) != 64 (HD)
  164. sect/track 63 (NTFS) != 32 (HD)
  165. filesystem size 400639262
  166. sectors_per_cluster 8
  167. mft_lcn 786432
  168. mftmirr_lcn 2
  169. clusters_per_mft_record -10
  170. clusters_per_index_record 1
  171. MS Data 401927453 802566714 400639262
  172. NTFS, blocksize=4096, 205 GB / 191 GiB
  173.  
  174. LVM magic value at 392222/35/31
  175.  
  176. LVM magic value at 392480/11/2
  177.  
  178. LVM magic value at 393902/56/2
  179.  
  180. LVM magic value at 394103/33/26
  181.  
  182. LVM magic value at 395695/50/29
  183.  
  184. Linux filesys. data 813695846 2699257288 1885561443
  185. LUKS 37 (Data size unknown), 965 GB / 899 GiB
  186. This partition ends after the disk limits. (start=813695846, size=1885561443, end=2699257288, disk end=1000215216)
  187.  
  188. LVM magic value at 398133/52/5
  189.  
  190. LVM magic value at 398553/38/1
  191.  
  192. HFS magic value at 400041/47/10
  193. part_size 67110914
  194. Mac HFS 819285481 886396394 67110914
  195. HFS blocksize=134217728, 34 GB / 32 GiB
  196.  
  197. block_group_nr 2187
  198.  
  199. recover_EXT2: "e2fsck -b 71663616 -B 4096 device" may be needed
  200. recover_EXT2: s_block_group_nr=2187/2277, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  201. recover_EXT2: s_blocksize=4096
  202. recover_EXT2: s_blocks_count 74632785
  203. recover_EXT2: part_size 597062280
  204. Filesystem created: Fri Jan 5 16:40:33 2018
  205. Linux filesys. data 403152894 1000215173 597062280
  206. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 305 GB / 284 GiB
  207. Disk /dev/nvme0n1 - 512 GB / 476 GiB - CHS 488386 64 32
  208. Check the harddisk size: HD jumper settings, BIOS detection...
  209. The harddisk (512 GB / 476 GiB) seems too small! (< 1382 GB / 1287 GiB)
  210. The following partition can't be recovered:
  211. Linux filesys. data 813695846 2699257288 1885561443
  212. LUKS 37 (Data size unknown), 965 GB / 899 GiB
  213.  
  214. Results
  215. P EFI System 2048 1026047 1024000 [EFI System Partition] [ESP]
  216. FAT32, blocksize=4096, 524 MB / 500 MiB
  217. MS Data 1288192 368368407 367080216 [OS]
  218. NTFS, blocksize=4096, 187 GB / 175 GiB
  219. MS Data 1288192 401927453 400639262 [OS]
  220. NTFS found using backup sector, blocksize=4096, 205 GB / 191 GiB
  221. EFI System 395677504 395680383 2880 [EFI System Partition] [EFISECTOR]
  222. FAT12, blocksize=512, 1474 KB / 1440 KiB
  223. MS Data 395679571 395685744 6174
  224. NTFS found using backup sector, blocksize=512, 3161 KB / 3087 KiB
  225. MS Data 395685744 395691917 6174 [Boot]
  226. NTFS, blocksize=512, 3161 KB / 3087 KiB
  227. EFI System 395691920 395694799 2880 [EFI System Partition] [EFISECTOR]
  228. FAT12, blocksize=512, 1474 KB / 1440 KiB
  229. MS Data 401927453 802566714 400639262
  230. NTFS, blocksize=4096, 205 GB / 191 GiB
  231. Linux filesys. data 403152894 1000215173 597062280
  232. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 305 GB / 284 GiB
  233. Mac HFS 819285481 886396394 67110914
  234. HFS blocksize=134217728, 34 GB / 32 GiB
  235.  
  236. Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
  237. echo "0 1024000 linear /dev/nvme0n1 2048" | dmsetup create test0
  238. echo "0 367080216 linear /dev/nvme0n1 1288192" | dmsetup create test1
  239. echo "0 400639262 linear /dev/nvme0n1 1288192" | dmsetup create test2
  240. echo "0 2880 linear /dev/nvme0n1 395677504" | dmsetup create test3
  241. echo "0 6174 linear /dev/nvme0n1 395679571" | dmsetup create test4
  242. echo "0 6174 linear /dev/nvme0n1 395685744" | dmsetup create test5
  243. echo "0 2880 linear /dev/nvme0n1 395691920" | dmsetup create test6
  244. echo "0 400639262 linear /dev/nvme0n1 401927453" | dmsetup create test7
  245. echo "0 597062280 linear /dev/nvme0n1 403152894" | dmsetup create test8
  246. echo "0 67110914 linear /dev/nvme0n1 819285481" | dmsetup create test9
  247. SIGINT detected! TestDisk has been killed.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!