Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Thu Nov 5 21:40:28 2020
- Command line: TestDisk
- TestDisk 7.2-WIP, Data Recovery Utility, October 2020
- Christophe GRENIER <grenier@cgsecurity.org>
- https://www.cgsecurity.org
- OS: Windows 8 (9200)
- Compiler: GCC 9.3, Cygwin 3001.4
- ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000170586112
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000170586112
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511251054592
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=34359738368
- disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=965807702016
- Hard disk list
- Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - SAMSUNG MZ7LN512HCHP-000L1, S/N:S1ZKNXAGA05232, FW:EMT05L0Q
- Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD Elements 25A2, S/N:WXQ1AA844J4X, FW:1021
- Partition table type (auto): EFI GPT
- Disk /dev/sdb - 1000 GB / 931 GiB - WD Elements 25A2
- Partition table type: Intel
- Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
- Geometry from i386 MBR: head=255 sector=63
- FAT32 at 0/32/33
- Info: size boot_sector 67108864, partition 67108864
- FAT1 : 8196-16385
- FAT2 : 16386-24575
- start_rootdir : 24576 root cluster : 2
- Data : 24576-67108863
- sectors : 67108864
- cluster_size : 64
- no_of_cluster : 1048192 (2 - 1048193)
- fat_length 8190 calculated 8190
- NTFS at 4177/117/37
- Current partition structure:
- 1 * FAT32 LBA 0 32 33 4177 117 36 67108864 [ESD-USB]
- 2 P HPFS - NTFS 4177 117 37 121596 227 39 1886343168 [Volume]
- search_part()
- Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
- FAT32 at 0/32/33
- FAT1 : 8196-16385
- FAT2 : 16386-24575
- start_rootdir : 24576 root cluster : 2
- Data : 24576-67108863
- sectors : 67108864
- cluster_size : 64
- no_of_cluster : 1048192 (2 - 1048193)
- fat_length 8190 calculated 8190
- FAT32 at 0/32/33
- FAT: cluster=2(0x2), pos=26624
- FAT32 LBA 0 32 33 4177 117 36 67108864 [EFI System Partition] [ESD-USB]
- FAT32, blocksize=32768, 34 GB / 32 GiB
- NTFS at 4177/117/37
- filesystem size 1886343168
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 4177 117 37 121596 227 39 1886343168 [Volume]
- NTFS, blocksize=4096, 965 GB / 899 GiB
- NTFS at 121597/5/8
- filesystem size 1953454080
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 32 33 121597 5 8 1953454080
- NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
- NTFS at 121597/5/8
- filesystem size 1953454080
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- file_pread(5,2,buffer,1959747589(121988/164/38)) lseek err Invalid argument
- file_pread(5,1,buffer,1959747589(121988/164/38)) lseek err Invalid argument
- NTFS: Can't read MFT
- HPFS - NTFS 121597 5 8 243193 232 46 1953454080
- NTFS, blocksize=4096, 1000 GB / 931 GiB
- This partition ends after the disk limits. (start=1953456127, size=1953454080, end=3906910206, disk end=1953458176)
- file_pread(5,2,buffer,1953458175(121597/37/40)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
- file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
- file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
- file_pread(5,2,buffer,1953458231(121597/38/33)) lseek err Invalid argument
- file_pread(5,1,buffer,1953458231(121597/38/33)) lseek err Invalid argument
- file_pread(5,2,buffer,1953458239(121597/38/41)) lseek err Invalid argument
- file_pread(5,1,buffer,1953458239(121597/38/41)) lseek err Invalid argument
- file_pread(5,2,buffer,1953458294(121597/39/33)) lseek err Invalid argument
- file_pread(5,1,buffer,1953458294(121597/39/33)) lseek err Invalid argument
- file_pread(5,8,buffer,1953458176(121597/37/41)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
- file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
- file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
- file_pread(5,14,buffer,1953458178(121597/37/43)) lseek err Invalid argument
- file_pread(5,3,buffer,1953458192(121597/37/57)) lseek err Invalid argument
- file_pread(5,3,buffer,1953458239(121597/38/41)) lseek err Invalid argument
- file_pread(5,8,buffer,1953458255(121597/38/57)) lseek err Invalid argument
- file_pread(5,11,buffer,1953458302(121597/39/41)) lseek err Invalid argument
- file_pread(5,2,buffer,1953460224(121597/70/10)) lseek err Invalid argument
- Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
- Check the harddisk size: HD jumper settings, BIOS detection...
- The harddisk (1000 GB / 931 GiB) seems too small! (< 2000 GB / 1862 GiB)
- The following partition can't be recovered:
- HPFS - NTFS 121597 5 8 243193 232 46 1953454080
- NTFS, blocksize=4096, 1000 GB / 931 GiB
- Results
- FAT32 LBA 0 32 33 4177 117 36 67108864 [EFI System Partition] [ESD-USB]
- FAT32, blocksize=32768, 34 GB / 32 GiB
- HPFS - NTFS 0 32 33 121597 5 8 1953454080
- NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
- HPFS - NTFS 4177 117 37 121596 227 39 1886343168 [Volume]
- NTFS, blocksize=4096, 965 GB / 899 GiB
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Failed to startup volume: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Failed to startup volume: Input/output error.
- $MFT has invalid magic.
- ntfs_mft_load(): Failed.
- Failed to load $MFT: Input/output error.
- Not an exFAT boot sector.
- HPFS - NTFS 0 32 33 121597 5 8 1953454080
- NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
- Can't open filesystem. Filesystem seems damaged.
- Can't open backup.log file: No such file or directory
- interface_load
- interface_write()
- No partition found or selected for recovery
- add_ext_part_i386: max
- add_ext_part_i386: min
- interface_write()
- 1 E extended LBA 0 32 32 121597 5 8 1953454081
- 5 L HPFS - NTFS 0 32 33 121597 5 8 1953454080
- interface_write()
- No partition found or selected for recovery
- interface_write()
- 1 P HPFS - NTFS 0 32 33 121597 5 8 1953454080
- interface_write()
- No partition found or selected for recovery
- Change partition type:
- HPFS - NTFS 0 32 33 121597 5 8 1953454080
- NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
- interface_write()
- 1 P HPFS - NTFS 0 32 33 121597 5 8 1953454080
Add Comment
Please, Sign In to add comment