SHARE
TWEET

Untitled

a guest May 8th, 2019 64 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1.  
  2.  
  3. Wed May  8 12:15:08 2019
  4. Command line: TestDisk
  5.  
  6. TestDisk 7.0, Data Recovery Utility, April 2015
  7. Christophe GRENIER <grenier@cgsecurity.org>
  8. http://www.cgsecurity.org
  9. OS: Linux, kernel 4.15.0-48-generic (#51-Ubuntu SMP Wed Apr 3 08:28:49 UTC 2019) x86_64
  10. Compiler: GCC 7.2
  11. ext2fs lib: 1.44.1, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0
  12. /dev/sda: LBA, HPA, LBA48, DCO support
  13. /dev/sda: size       976773168 sectors
  14. /dev/sda: user_max   976773168 sectors
  15. /dev/sda: native_max 976773168 sectors
  16. /dev/sda: dco        976773168 sectors
  17. Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
  18. Hard disk list
  19. Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - HGST HTS725050A7E630, S/N:RCF50ACF0W31WN, FW:GS2OA3E0
  20. Disk /dev/sdb - 125 GB / 116 GiB - CHS 15205 255 63, sector size=512 - Generic MassStorageClass, FW:1538
  21.  
  22. Partition table type (auto): EFI GPT
  23. Disk /dev/sdb - 125 GB / 116 GiB - Generic MassStorageClass
  24. Partition table type: Intel
  25.  
  26. Analyse Disk /dev/sdb - 125 GB / 116 GiB - CHS 15205 255 63
  27. Geometry from i386 MBR: head=114 sector=36
  28. FAT16 at 0/32/33
  29. Info: size boot_sector 262144, partition 262144
  30. FAT1 : 1-256
  31. FAT2 : 257-512
  32. start_rootdir : 513
  33. Data : 545-262140
  34. sectors : 262144
  35. cluster_size : 4
  36. no_of_cluster : 65399 (2 - 65400)
  37. fat_length 256 calculated 256
  38. heads/cylinder 64 (FAT) != 255 (HD)
  39. sect/track 32 (FAT) != 63 (HD)
  40. BAD_RS LBA=264192 514080
  41. Current partition structure:
  42. Warning: number of heads/cylinder mismatches 64 (FAT) != 255 (HD)
  43. Warning: number of sectors per track mismatches 32 (FAT) != 63 (HD)
  44.  1 P FAT32 LBA                0  32 33    16 113 33     262144 [BOOT]
  45.  2 P Linux                   16 113 34   804  72 36   12656640 [rootfs]
  46.  
  47. Bad relative sector.
  48. No partition is bootable
  49.  
  50. search_part()
  51. Disk /dev/sdb - 125 GB / 116 GiB - CHS 15205 255 63
  52. FAT16 at 0/32/33
  53. FAT1 : 1-256
  54. FAT2 : 257-512
  55. start_rootdir : 513
  56. Data : 545-262140
  57. sectors : 262144
  58. cluster_size : 4
  59. no_of_cluster : 65399 (2 - 65400)
  60. fat_length 256 calculated 256
  61. heads/cylinder 64 (FAT) != 255 (HD)
  62. sect/track 32 (FAT) != 63 (HD)
  63.  
  64. FAT16 at 0/32/33
  65.      FAT16 >32M               0  32 33    16 113 33     262144 [BOOT]
  66.      FAT16, blocksize=2048, 134 MB / 128 MiB
  67.  
  68. recover_EXT2: s_block_group_nr=0/48, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  69. recover_EXT2: s_blocksize=4096
  70. recover_EXT2: s_blocks_count 1582080
  71. recover_EXT2: part_size 12656640
  72.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  73.      ext4 blocksize=4096 Large_file Sparse_SB, 6480 MB / 6180 MiB
  74.  
  75. block_group_nr 243
  76.  
  77. recover_EXT2: "e2fsck -b 7962624 -B 4096 device" may be needed
  78. recover_EXT2: s_block_group_nr=243/931, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  79. recover_EXT2: s_blocksize=4096
  80. recover_EXT2: s_blocks_count 30533120
  81. recover_EXT2: part_size 244264960
  82.      Linux                    0  32 33 15204 234  6  244264960
  83.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  84.  
  85. Results
  86.      FAT16 >32M               0  32 33    16 113 33     262144 [BOOT]
  87.      FAT16, blocksize=2048, 134 MB / 128 MiB
  88.      Linux                    0  32 33 15204 234  6  244264960
  89.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  90.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  91.      ext4 blocksize=4096 Large_file Sparse_SB, 6480 MB / 6180 MiB
  92.  
  93. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  94. echo "0 262144 linear /dev/sdb 2048" | dmsetup create test0
  95. echo "0 244264960 linear /dev/sdb 2048" | dmsetup create test1
  96. echo "0 12656640 linear /dev/sdb 264192" | dmsetup create test2
  97.  
  98. interface_write()
  99.  
  100. No partition found or selected for recovery
  101. simulate write!
  102.  
  103. write_mbr_i386: starting...
  104. write_all_log_i386: starting...
  105. No extended partition
  106.  
  107. Analyse Disk /dev/sdb - 125 GB / 116 GiB - CHS 15205 255 63
  108. Geometry from i386 MBR: head=114 sector=36
  109. FAT16 at 0/32/33
  110. Info: size boot_sector 262144, partition 262144
  111. FAT1 : 1-256
  112. FAT2 : 257-512
  113. start_rootdir : 513
  114. Data : 545-262140
  115. sectors : 262144
  116. cluster_size : 4
  117. no_of_cluster : 65399 (2 - 65400)
  118. fat_length 256 calculated 256
  119. heads/cylinder 64 (FAT) != 255 (HD)
  120. sect/track 32 (FAT) != 63 (HD)
  121. BAD_RS LBA=264192 514080
  122. Current partition structure:
  123. Warning: number of heads/cylinder mismatches 64 (FAT) != 255 (HD)
  124. Warning: number of sectors per track mismatches 32 (FAT) != 63 (HD)
  125.  1 P FAT32 LBA                0  32 33    16 113 33     262144 [BOOT]
  126.  2 P Linux                   16 113 34   804  72 36   12656640 [rootfs]
  127.  
  128. Bad relative sector.
  129. No partition is bootable
  130.  
  131. search_part()
  132. Disk /dev/sdb - 125 GB / 116 GiB - CHS 15205 255 63
  133. FAT16 at 0/32/33
  134. FAT1 : 1-256
  135. FAT2 : 257-512
  136. start_rootdir : 513
  137. Data : 545-262140
  138. sectors : 262144
  139. cluster_size : 4
  140. no_of_cluster : 65399 (2 - 65400)
  141. fat_length 256 calculated 256
  142. heads/cylinder 64 (FAT) != 255 (HD)
  143. sect/track 32 (FAT) != 63 (HD)
  144.  
  145. FAT16 at 0/32/33
  146.      FAT16 >32M               0  32 33    16 113 33     262144 [BOOT]
  147.      FAT16, blocksize=2048, 134 MB / 128 MiB
  148.  
  149. recover_EXT2: s_block_group_nr=0/48, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  150. recover_EXT2: s_blocksize=4096
  151. recover_EXT2: s_blocks_count 1582080
  152. recover_EXT2: part_size 12656640
  153.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  154.      ext4 blocksize=4096 Large_file Sparse_SB, 6480 MB / 6180 MiB
  155.  
  156. block_group_nr 243
  157.  
  158. recover_EXT2: "e2fsck -b 7962624 -B 4096 device" may be needed
  159. recover_EXT2: s_block_group_nr=243/931, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  160. recover_EXT2: s_blocksize=4096
  161. recover_EXT2: s_blocks_count 30533120
  162. recover_EXT2: part_size 244264960
  163.      Linux                    0  32 33 15204 234  6  244264960
  164.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  165.  
  166. Results
  167.      FAT16 >32M               0  32 33    16 113 33     262144 [BOOT]
  168.      FAT16, blocksize=2048, 134 MB / 128 MiB
  169.      Linux                    0  32 33 15204 234  6  244264960
  170.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  171.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  172.      ext4 blocksize=4096 Large_file Sparse_SB, 6480 MB / 6180 MiB
  173.  
  174. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  175. echo "0 262144 linear /dev/sdb 2048" | dmsetup create test0
  176. echo "0 244264960 linear /dev/sdb 2048" | dmsetup create test1
  177. echo "0 12656640 linear /dev/sdb 264192" | dmsetup create test2
  178.  
  179. interface_write()
  180.  
  181. No partition found or selected for recovery
  182.  
  183. search_part()
  184. Disk /dev/sdb - 125 GB / 116 GiB - CHS 15205 255 63
  185. FAT16 at 0/32/33
  186. FAT1 : 1-256
  187. FAT2 : 257-512
  188. start_rootdir : 513
  189. Data : 545-262140
  190. sectors : 262144
  191. cluster_size : 4
  192. no_of_cluster : 65399 (2 - 65400)
  193. fat_length 256 calculated 256
  194. heads/cylinder 64 (FAT) != 255 (HD)
  195. sect/track 32 (FAT) != 63 (HD)
  196.  
  197. FAT16 at 0/32/33
  198.      FAT16 >32M               0  32 33    16 113 33     262144 [BOOT]
  199.      FAT16, blocksize=2048, 134 MB / 128 MiB
  200.  
  201. recover_EXT2: s_block_group_nr=0/8, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  202. recover_EXT2: s_blocksize=4096
  203. recover_EXT2: s_blocks_count 262144
  204. recover_EXT2: part_size 2097152
  205.      Linux                    8  40 33   138 178 40    2097152
  206.      ext4 blocksize=4096 Large_file Sparse_SB Recover, 1073 MB / 1024 MiB
  207.  
  208. recover_EXT2: s_block_group_nr=0/48, s_mnt_count=2/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  209. recover_EXT2: s_blocksize=4096
  210. recover_EXT2: s_blocks_count 1582080
  211. recover_EXT2: part_size 12656640
  212.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  213.      ext4 blocksize=4096 Large_file Sparse_SB, 6480 MB / 6180 MiB
  214.  
  215. block_group_nr 1
  216.  
  217. recover_EXT2: "e2fsck -b 32768 -B 4096 device" may be needed
  218. recover_EXT2: s_block_group_nr=1/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  219. recover_EXT2: s_blocksize=4096
  220. recover_EXT2: s_blocks_count 1582080
  221. recover_EXT2: part_size 12656640
  222.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  223.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  224.  
  225. block_group_nr 3
  226.  
  227. recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
  228. recover_EXT2: s_block_group_nr=3/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  229. recover_EXT2: s_blocksize=4096
  230. recover_EXT2: s_blocks_count 1582080
  231. recover_EXT2: part_size 12656640
  232.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  233.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  234.  
  235. block_group_nr 5
  236.  
  237. recover_EXT2: "e2fsck -b 163840 -B 4096 device" may be needed
  238. recover_EXT2: s_block_group_nr=5/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  239. recover_EXT2: s_blocksize=4096
  240. recover_EXT2: s_blocks_count 1582080
  241. recover_EXT2: part_size 12656640
  242.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  243.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  244.  
  245. block_group_nr 7
  246.  
  247. recover_EXT2: "e2fsck -b 229376 -B 4096 device" may be needed
  248. recover_EXT2: s_block_group_nr=7/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  249. recover_EXT2: s_blocksize=4096
  250. recover_EXT2: s_blocks_count 1582080
  251. recover_EXT2: part_size 12656640
  252.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  253.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  254.  
  255. block_group_nr 9
  256.  
  257. recover_EXT2: "e2fsck -b 294912 -B 4096 device" may be needed
  258. recover_EXT2: s_block_group_nr=9/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  259. recover_EXT2: s_blocksize=4096
  260. recover_EXT2: s_blocks_count 1582080
  261. recover_EXT2: part_size 12656640
  262.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  263.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  264.  
  265. recover_EXT2: s_block_group_nr=0/115, s_mnt_count=9/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  266. recover_EXT2: s_blocksize=4096
  267. recover_EXT2: s_blocks_count 3783680
  268. recover_EXT2: part_size 30269440
  269.      Linux                  221 208 52  2106   1  7   30269440 [rootfs]
  270.      ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
  271.  
  272. recover_EXT2: s_block_group_nr=0/115, s_mnt_count=9/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  273. recover_EXT2: s_blocksize=4096
  274. recover_EXT2: s_blocks_count 3783680
  275. recover_EXT2: part_size 30269440
  276.      Linux                  224 126 31  2108 173 49   30269440 [rootfs]
  277.      ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
  278.  
  279. block_group_nr 25
  280.  
  281. recover_EXT2: "e2fsck -b 819200 -B 4096 device" may be needed
  282. recover_EXT2: s_block_group_nr=25/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  283. recover_EXT2: s_blocksize=4096
  284. recover_EXT2: s_blocks_count 1582080
  285. recover_EXT2: part_size 12656640
  286.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  287.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  288.  
  289. block_group_nr 27
  290.  
  291. recover_EXT2: "e2fsck -b 884736 -B 4096 device" may be needed
  292. recover_EXT2: s_block_group_nr=27/48, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  293. recover_EXT2: s_blocksize=4096
  294. recover_EXT2: s_blocks_count 1582080
  295. recover_EXT2: part_size 12656640
  296.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  297.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 6480 MB / 6180 MiB
  298.  
  299. block_group_nr 243
  300.  
  301. recover_EXT2: "e2fsck -b 7962624 -B 4096 device" may be needed
  302. recover_EXT2: s_block_group_nr=243/931, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  303. recover_EXT2: s_blocksize=4096
  304. recover_EXT2: s_blocks_count 30533120
  305. recover_EXT2: part_size 244264960
  306.      Linux                    0  32 33 15204 234  6  244264960
  307.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  308.  
  309. block_group_nr 343
  310.  
  311. recover_EXT2: "e2fsck -b 11239424 -B 4096 device" may be needed
  312. recover_EXT2: s_block_group_nr=343/931, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  313. recover_EXT2: s_blocksize=4096
  314. recover_EXT2: s_blocks_count 30533120
  315. recover_EXT2: part_size 244264960
  316.      Linux                    0  32 33 15204 234  6  244264960
  317.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  318.  
  319. block_group_nr 625
  320.  
  321. recover_EXT2: "e2fsck -b 20480000 -B 4096 device" may be needed
  322. recover_EXT2: s_block_group_nr=625/931, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  323. recover_EXT2: s_blocksize=4096
  324. recover_EXT2: s_blocks_count 30533120
  325. recover_EXT2: part_size 244264960
  326.      Linux                    0  32 33 15204 234  6  244264960
  327.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  328.  
  329. block_group_nr 729
  330.  
  331. recover_EXT2: "e2fsck -b 23887872 -B 4096 device" may be needed
  332. recover_EXT2: s_block_group_nr=729/931, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  333. recover_EXT2: s_blocksize=4096
  334. recover_EXT2: s_blocks_count 30533120
  335. recover_EXT2: part_size 244264960
  336.      Linux                    0  32 33 15204 234  6  244264960
  337.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  338.  
  339. Results
  340.      FAT16 >32M               0  32 33    16 113 33     262144 [BOOT]
  341.      FAT16, blocksize=2048, 134 MB / 128 MiB
  342.      Linux                    0  32 33 15204 234  6  244264960
  343.      ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 125 GB / 116 GiB
  344.      Linux                    8  40 33   138 178 40    2097152
  345.      ext4 blocksize=4096 Large_file Sparse_SB Recover, 1073 MB / 1024 MiB
  346.      Linux                   16 113 34   804  72 36   12656640 [rootfs]
  347.      ext4 blocksize=4096 Large_file Sparse_SB, 6480 MB / 6180 MiB
  348.      Linux                  221 208 52  2106   1  7   30269440 [rootfs]
  349.      ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
  350.      Linux                  224 126 31  2108 173 49   30269440 [rootfs]
  351.      ext4 blocksize=4096 Large_file Sparse_SB Recover, 15 GB / 14 GiB
  352.  
  353. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  354. echo "0 262144 linear /dev/sdb 2048" | dmsetup create test0
  355. echo "0 244264960 linear /dev/sdb 2048" | dmsetup create test1
  356. echo "0 2097152 linear /dev/sdb 131072" | dmsetup create test2
  357. echo "0 12656640 linear /dev/sdb 264192" | dmsetup create test3
  358. echo "0 30269440 linear /dev/sdb 3563520" | dmsetup create test4
  359. echo "0 30269440 linear /dev/sdb 3606528" | dmsetup create test5
  360.  
  361. interface_write()
  362.  
  363. No partition found or selected for recovery
  364. simulate write!
  365.  
  366. write_mbr_i386: starting...
  367. write_all_log_i386: starting...
  368. No extended partition
  369.  
  370. TestDisk exited normally.
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top