API tools faq
paste
Advertisement
Guest User

Untitled

a guest
Sep 24th, 2019
265
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 13.00 KB | None | 0 0
raw download clone embed print report
  1. Mon Sep 23 07:31:26 2019
  2. Command line: TestDisk
  3.  
  4. TestDisk 7.0, Data Recovery Utility, April 2015
  5. Christophe GRENIER <grenier@cgsecurity.org>
  6. http://www.cgsecurity.org
  7. OS: Linux, kernel 4.15.0-20-generic (#21-Ubuntu SMP Tue Apr 24 06:16:15 UTC 2018) x86_64
  8. Compiler: GCC 7.2
  9. ext2fs lib: 1.44.1, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0
  10. /dev/sda: LBA, LBA48, DCO support
  11. /dev/sda: size 1953525168 sectors
  12. /dev/sda: user_max 1953525168 sectors
  13. /dev/sda: dco 1953525168 sectors
  14. Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
  15. Hard disk list
  16. Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000LM014-1EJ164-SSHD, S/N:W772LLQQ, FW:HKR1
  17. Disk /dev/sdb - 7864 MB / 7500 MiB - CHS 1023 242 62, sector size=512, FW:8.07
  18.  
  19. Partition table type (auto): Intel
  20. Disk /dev/sda - 1000 GB / 931 GiB - ST1000LM014-1EJ164-SSHD
  21. Partition table type: Intel
  22.  
  23. Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
  24. Geometry from i386 MBR: head=255 sector=63
  25. NTFS at 0/32/33
  26. NTFS at 12/223/20
  27. Current partition structure:
  28. 1 * HPFS - NTFS 0 32 33 12 223 19 204800
  29. 2 P HPFS - NTFS 12 223 20 13054 75 13 209510400
  30. 3 P Linux 13054 75 14 13054 140 14 4096
  31. 4 E extended LBA 13054 140 15 121601 90 25 1743804416
  32. 5 L Linux 16970 139 2 121601 90 25 1680893952
  33.  
  34. search_part()
  35. Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
  36. NTFS at 0/32/33
  37. filesystem size 204800
  38. sectors_per_cluster 8
  39. mft_lcn 4
  40. mftmirr_lcn 12799
  41. clusters_per_mft_record -10
  42. clusters_per_index_record 1
  43. HPFS - NTFS 0 32 33 12 223 19 204800
  44. NTFS, blocksize=4096, 104 MB / 100 MiB
  45. NTFS at 12/223/20
  46. filesystem size 209510400
  47. sectors_per_cluster 8
  48. mft_lcn 786432
  49. mftmirr_lcn 2
  50. clusters_per_mft_record -10
  51. clusters_per_index_record 1
  52. HPFS - NTFS 12 223 20 13054 75 13 209510400
  53. NTFS, blocksize=4096, 107 GB / 99 GiB
  54.  
  55. Linux 13054 75 14 13054 140 14 4096
  56. LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
  57.  
  58. recover_EXT2: s_block_group_nr=0/6412, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  59. recover_EXT2: s_blocksize=4096
  60. recover_EXT2: s_blocks_count 210111670
  61. recover_EXT2: part_size 1680893360
  62. Linux 16970 139 2 121601 80 63 1680893360
  63. ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
  64.  
  65. Results
  66. * HPFS - NTFS 0 32 33 12 223 19 204800
  67. NTFS, blocksize=4096, 104 MB / 100 MiB
  68. P HPFS - NTFS 12 223 20 13054 75 13 209510400
  69. NTFS, blocksize=4096, 107 GB / 99 GiB
  70. P Linux 13054 75 14 13054 140 14 4096
  71. LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
  72. L Linux 16970 139 2 121601 90 25 1680893952
  73. ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
  74.  
  75. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  76. echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
  77. echo "0 209510400 linear /dev/sda 206848" | dmsetup create test1
  78. echo "0 4096 linear /dev/sda 209717248" | dmsetup create test2
  79. echo "0 1680893952 linear /dev/sda 272631808" | dmsetup create test3
  80. Can't open backup.log file: No such file or directory
  81. interface_load
  82.  
  83.  
  84. dir_partition inode=2
  85. L Linux 16970 139 2 121601 90 25 1680893952
  86. ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
  87. ext2fs_dir_iterate failed with error 2133571402.
  88. Directory /
  89. add_ext_part_i386: max
  90. add_ext_part_i386: max
  91.  
  92. interface_write()
  93. 1 * HPFS - NTFS 0 32 33 12 223 19 204800
  94. 2 P HPFS - NTFS 12 223 20 13054 75 13 209510400
  95. 3 P Linux 13054 75 14 13054 140 14 4096
  96. 4 E extended LBA 13054 140 15 121601 90 25 1743804416
  97. 5 L Linux 16970 139 2 121601 90 25 1680893952
  98.  
  99. search_part()
  100. Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
  101. NTFS at 0/32/33
  102. filesystem size 204800
  103. sectors_per_cluster 8
  104. mft_lcn 4
  105. mftmirr_lcn 12799
  106. clusters_per_mft_record -10
  107. clusters_per_index_record 1
  108. HPFS - NTFS 0 32 33 12 223 19 204800
  109. NTFS, blocksize=4096, 104 MB / 100 MiB
  110. NTFS at 12/223/19
  111. filesystem size 204800
  112. sectors_per_cluster 8
  113. mft_lcn 4
  114. mftmirr_lcn 12799
  115. clusters_per_mft_record -10
  116. clusters_per_index_record 1
  117. HPFS - NTFS 0 32 33 12 223 19 204800
  118. NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
  119. NTFS at 12/223/20
  120. filesystem size 209510400
  121. sectors_per_cluster 8
  122. mft_lcn 786432
  123. mftmirr_lcn 2
  124. clusters_per_mft_record -10
  125. clusters_per_index_record 1
  126. HPFS - NTFS 12 223 20 13054 75 13 209510400
  127. NTFS, blocksize=4096, 107 GB / 99 GiB
  128. NTFS at 13054/75/13
  129. filesystem size 209510400
  130. sectors_per_cluster 8
  131. mft_lcn 786432
  132. mftmirr_lcn 2
  133. clusters_per_mft_record -10
  134. clusters_per_index_record 1
  135. HPFS - NTFS 12 223 20 13054 75 13 209510400
  136. NTFS found using backup sector, blocksize=4096, 107 GB / 99 GiB
  137.  
  138. Linux 13054 75 14 13054 140 14 4096
  139. LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
  140.  
  141. recover_EXT2: s_block_group_nr=0/6412, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  142. recover_EXT2: s_blocksize=4096
  143. recover_EXT2: s_blocks_count 210111670
  144. recover_EXT2: part_size 1680893360
  145. Linux 16970 139 2 121601 80 63 1680893360
  146. ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
  147.  
  148. block_group_nr 1
  149.  
  150. recover_EXT2: "e2fsck -b 8193 -B 1024 device" may be needed
  151. recover_EXT2: s_block_group_nr=1/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  152. recover_EXT2: s_blocksize=1024
  153. recover_EXT2: s_blocks_count 512000
  154. recover_EXT2: part_size 1024000
  155. Linux 16970 171 32 17034 105 29 1024000
  156. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  157.  
  158. block_group_nr 3
  159.  
  160. recover_EXT2: "e2fsck -b 24577 -B 1024 device" may be needed
  161. recover_EXT2: s_block_group_nr=3/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  162. recover_EXT2: s_blocksize=1024
  163. recover_EXT2: s_blocks_count 512000
  164. recover_EXT2: part_size 1024000
  165. Linux 16970 171 32 17034 105 29 1024000
  166. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  167.  
  168. block_group_nr 5
  169.  
  170. recover_EXT2: "e2fsck -b 40961 -B 1024 device" may be needed
  171. recover_EXT2: s_block_group_nr=5/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  172. recover_EXT2: s_blocksize=1024
  173. recover_EXT2: s_blocks_count 512000
  174. recover_EXT2: part_size 1024000
  175. Linux 16970 171 32 17034 105 29 1024000
  176. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  177.  
  178. block_group_nr 7
  179.  
  180. recover_EXT2: "e2fsck -b 57345 -B 1024 device" may be needed
  181. recover_EXT2: s_block_group_nr=7/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  182. recover_EXT2: s_blocksize=1024
  183. recover_EXT2: s_blocks_count 512000
  184. recover_EXT2: part_size 1024000
  185. Linux 16970 171 32 17034 105 29 1024000
  186. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  187.  
  188. block_group_nr 9
  189.  
  190. recover_EXT2: "e2fsck -b 73729 -B 1024 device" may be needed
  191. recover_EXT2: s_block_group_nr=9/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  192. recover_EXT2: s_blocksize=1024
  193. recover_EXT2: s_blocks_count 512000
  194. recover_EXT2: part_size 1024000
  195. Linux 16970 171 32 17034 105 29 1024000
  196. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  197.  
  198. block_group_nr 25
  199.  
  200. recover_EXT2: "e2fsck -b 204801 -B 1024 device" may be needed
  201. recover_EXT2: s_block_group_nr=25/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  202. recover_EXT2: s_blocksize=1024
  203. recover_EXT2: s_blocks_count 512000
  204. recover_EXT2: part_size 1024000
  205. Linux 16970 171 32 17034 105 29 1024000
  206. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  207.  
  208. block_group_nr 27
  209.  
  210. recover_EXT2: "e2fsck -b 221185 -B 1024 device" may be needed
  211. recover_EXT2: s_block_group_nr=27/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  212. recover_EXT2: s_blocksize=1024
  213. recover_EXT2: s_blocks_count 512000
  214. recover_EXT2: part_size 1024000
  215. Linux 16970 171 32 17034 105 29 1024000
  216. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  217.  
  218. block_group_nr 3
  219.  
  220. recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
  221. recover_EXT2: s_block_group_nr=3/6412, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
  222. recover_EXT2: s_blocksize=4096
  223. recover_EXT2: s_blocks_count 210111670
  224. recover_EXT2: part_size 1680893360
  225. Linux 16970 139 2 121601 80 63 1680893360
  226. ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 860 GB / 801 GiB
  227.  
  228. block_group_nr 49
  229.  
  230. recover_EXT2: "e2fsck -b 401409 -B 1024 device" may be needed
  231. recover_EXT2: s_block_group_nr=49/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
  232. recover_EXT2: s_blocksize=1024
  233. recover_EXT2: s_blocks_count 512000
  234. recover_EXT2: part_size 1024000
  235. Linux 16970 171 32 17034 105 29 1024000
  236. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  237.  
  238. Linux 17034 138 1 17034 203 1 4096
  239. LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
  240. Linux Swap 120293 33 61 121601 80 47 21015968
  241. SWAP2 version 1, pagesize=4096, 10 GB / 10 GiB
  242. NTFS at 121601/25/24
  243. filesystem size 1433595904
  244. sectors_per_cluster 8
  245. mft_lcn 786432
  246. mftmirr_lcn 2
  247. clusters_per_mft_record -10
  248. clusters_per_index_record 1
  249. HPFS - NTFS 32363 224 54 121601 25 24 1433595904
  250. NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
  251. NTFS at 121601/57/56
  252. filesystem size 1953054720
  253. sectors_per_cluster 8
  254. mft_lcn 786432
  255. mftmirr_lcn 2
  256. clusters_per_mft_record -10
  257. clusters_per_index_record 1
  258. HPFS - NTFS 29 49 21 121601 57 56 1953054720
  259. NTFS found using backup sector, blocksize=4096, 999 GB / 931 GiB
  260. get_geometry_from_list_part_aux head=8 nbr=1
  261. get_geometry_from_list_part_aux head=16 nbr=1
  262. get_geometry_from_list_part_aux head=32 nbr=1
  263. get_geometry_from_list_part_aux head=64 nbr=1
  264. get_geometry_from_list_part_aux head=128 nbr=1
  265. Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
  266.  
  267. Results
  268. * HPFS - NTFS 0 32 33 12 223 19 204800
  269. NTFS, blocksize=4096, 104 MB / 100 MiB
  270. HPFS - NTFS 12 223 20 13054 75 13 209510400
  271. NTFS, blocksize=4096, 107 GB / 99 GiB
  272. HPFS - NTFS 29 49 21 121601 57 56 1953054720
  273. NTFS found using backup sector, blocksize=4096, 999 GB / 931 GiB
  274. Linux 13054 75 14 13054 140 14 4096
  275. LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
  276. Linux 16970 139 2 121601 90 25 1680893952
  277. ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
  278. Linux 16970 171 32 17034 105 29 1024000
  279. ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
  280. Linux 17034 138 1 17034 203 1 4096
  281. LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
  282. HPFS - NTFS 32363 224 54 121601 25 24 1433595904
  283. NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
  284. Linux Swap 120293 33 61 121601 90 25 21016576
  285. SWAP2 version 1, pagesize=4096, 10 GB / 10 GiB
  286.  
  287. Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
  288. echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
  289. echo "0 209510400 linear /dev/sda 206848" | dmsetup create test1
  290. echo "0 1953054720 linear /dev/sda 468992" | dmsetup create test2
  291. echo "0 4096 linear /dev/sda 209717248" | dmsetup create test3
  292. echo "0 1680893952 linear /dev/sda 272631808" | dmsetup create test4
  293. echo "0 1024000 linear /dev/sda 272633854" | dmsetup create test5
  294. echo "0 4096 linear /dev/sda 273659904" | dmsetup create test6
  295. echo "0 1433595904 linear /dev/sda 519925760" | dmsetup create test7
  296. echo "0 21016576 linear /dev/sda 1932509184" | dmsetup create test8
  297.  
  298. interface_write()
  299. 1 * HPFS - NTFS 0 32 33 12 223 19 204800
  300. simulate write!
  301.  
  302. write_mbr_i386: starting...
  303. write_all_log_i386: starting...
  304. No extended partition
  305.  
  306. TestDisk exited normally.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!