Guest User

Untitled

a guest
Nov 5th, 2020
140
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 7.23 KB | None | 0 0
  1.  
  2. Thu Nov 5 21:40:28 2020
  3. Command line: TestDisk
  4.  
  5. TestDisk 7.2-WIP, Data Recovery Utility, October 2020
  6. Christophe GRENIER <grenier@cgsecurity.org>
  7. https://www.cgsecurity.org
  8. OS: Windows 8 (9200)
  9. Compiler: GCC 9.3, Cygwin 3001.4
  10. ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
  11. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
  12. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000170586112
  13. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
  14. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000170586112
  15. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511251054592
  16. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=34359738368
  17. disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=965807702016
  18. Hard disk list
  19. Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - SAMSUNG MZ7LN512HCHP-000L1, S/N:S1ZKNXAGA05232, FW:EMT05L0Q
  20. Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD Elements 25A2, S/N:WXQ1AA844J4X, FW:1021
  21.  
  22. Partition table type (auto): EFI GPT
  23. Disk /dev/sdb - 1000 GB / 931 GiB - WD Elements 25A2
  24. Partition table type: Intel
  25.  
  26. Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
  27. Geometry from i386 MBR: head=255 sector=63
  28. FAT32 at 0/32/33
  29. Info: size boot_sector 67108864, partition 67108864
  30. FAT1 : 8196-16385
  31. FAT2 : 16386-24575
  32. start_rootdir : 24576 root cluster : 2
  33. Data : 24576-67108863
  34. sectors : 67108864
  35. cluster_size : 64
  36. no_of_cluster : 1048192 (2 - 1048193)
  37. fat_length 8190 calculated 8190
  38. NTFS at 4177/117/37
  39. Current partition structure:
  40. 1 * FAT32 LBA 0 32 33 4177 117 36 67108864 [ESD-USB]
  41. 2 P HPFS - NTFS 4177 117 37 121596 227 39 1886343168 [Volume]
  42.  
  43. search_part()
  44. Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
  45. FAT32 at 0/32/33
  46. FAT1 : 8196-16385
  47. FAT2 : 16386-24575
  48. start_rootdir : 24576 root cluster : 2
  49. Data : 24576-67108863
  50. sectors : 67108864
  51. cluster_size : 64
  52. no_of_cluster : 1048192 (2 - 1048193)
  53. fat_length 8190 calculated 8190
  54.  
  55. FAT32 at 0/32/33
  56. FAT: cluster=2(0x2), pos=26624
  57. FAT32 LBA 0 32 33 4177 117 36 67108864 [EFI System Partition] [ESD-USB]
  58. FAT32, blocksize=32768, 34 GB / 32 GiB
  59. NTFS at 4177/117/37
  60. filesystem size 1886343168
  61. sectors_per_cluster 8
  62. mft_lcn 786432
  63. mftmirr_lcn 2
  64. clusters_per_mft_record -10
  65. clusters_per_index_record 1
  66. HPFS - NTFS 4177 117 37 121596 227 39 1886343168 [Volume]
  67. NTFS, blocksize=4096, 965 GB / 899 GiB
  68. NTFS at 121597/5/8
  69. filesystem size 1953454080
  70. sectors_per_cluster 8
  71. mft_lcn 786432
  72. mftmirr_lcn 2
  73. clusters_per_mft_record -10
  74. clusters_per_index_record 1
  75. HPFS - NTFS 0 32 33 121597 5 8 1953454080
  76. NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
  77. NTFS at 121597/5/8
  78. filesystem size 1953454080
  79. sectors_per_cluster 8
  80. mft_lcn 786432
  81. mftmirr_lcn 2
  82. clusters_per_mft_record -10
  83. clusters_per_index_record 1
  84. file_pread(5,2,buffer,1959747589(121988/164/38)) lseek err Invalid argument
  85. file_pread(5,1,buffer,1959747589(121988/164/38)) lseek err Invalid argument
  86. NTFS: Can't read MFT
  87. HPFS - NTFS 121597 5 8 243193 232 46 1953454080
  88. NTFS, blocksize=4096, 1000 GB / 931 GiB
  89. This partition ends after the disk limits. (start=1953456127, size=1953454080, end=3906910206, disk end=1953458176)
  90. file_pread(5,2,buffer,1953458175(121597/37/40)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
  91.  
  92. file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
  93.  
  94. file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
  95. file_pread(5,2,buffer,1953458231(121597/38/33)) lseek err Invalid argument
  96. file_pread(5,1,buffer,1953458231(121597/38/33)) lseek err Invalid argument
  97. file_pread(5,2,buffer,1953458239(121597/38/41)) lseek err Invalid argument
  98. file_pread(5,1,buffer,1953458239(121597/38/41)) lseek err Invalid argument
  99. file_pread(5,2,buffer,1953458294(121597/39/33)) lseek err Invalid argument
  100. file_pread(5,1,buffer,1953458294(121597/39/33)) lseek err Invalid argument
  101. file_pread(5,8,buffer,1953458176(121597/37/41)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
  102.  
  103. file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile Das Laufwerk kann den angeforderten Sektor nicht finden.
  104.  
  105. file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
  106. file_pread(5,14,buffer,1953458178(121597/37/43)) lseek err Invalid argument
  107. file_pread(5,3,buffer,1953458192(121597/37/57)) lseek err Invalid argument
  108. file_pread(5,3,buffer,1953458239(121597/38/41)) lseek err Invalid argument
  109. file_pread(5,8,buffer,1953458255(121597/38/57)) lseek err Invalid argument
  110. file_pread(5,11,buffer,1953458302(121597/39/41)) lseek err Invalid argument
  111. file_pread(5,2,buffer,1953460224(121597/70/10)) lseek err Invalid argument
  112. Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
  113. Check the harddisk size: HD jumper settings, BIOS detection...
  114. The harddisk (1000 GB / 931 GiB) seems too small! (< 2000 GB / 1862 GiB)
  115. The following partition can't be recovered:
  116. HPFS - NTFS 121597 5 8 243193 232 46 1953454080
  117. NTFS, blocksize=4096, 1000 GB / 931 GiB
  118.  
  119. Results
  120. FAT32 LBA 0 32 33 4177 117 36 67108864 [EFI System Partition] [ESD-USB]
  121. FAT32, blocksize=32768, 34 GB / 32 GiB
  122. HPFS - NTFS 0 32 33 121597 5 8 1953454080
  123. NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
  124. HPFS - NTFS 4177 117 37 121596 227 39 1886343168 [Volume]
  125. NTFS, blocksize=4096, 965 GB / 899 GiB
  126. $MFT has invalid magic.
  127. ntfs_mft_load(): Failed.
  128. Failed to load $MFT: Input/output error.
  129. Failed to startup volume: Input/output error.
  130. $MFT has invalid magic.
  131. ntfs_mft_load(): Failed.
  132. Failed to load $MFT: Input/output error.
  133. $MFT has invalid magic.
  134. ntfs_mft_load(): Failed.
  135. Failed to load $MFT: Input/output error.
  136. Failed to startup volume: Input/output error.
  137. $MFT has invalid magic.
  138. ntfs_mft_load(): Failed.
  139. Failed to load $MFT: Input/output error.
  140. Not an exFAT boot sector.
  141.  
  142. HPFS - NTFS 0 32 33 121597 5 8 1953454080
  143. NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
  144. Can't open filesystem. Filesystem seems damaged.
  145. Can't open backup.log file: No such file or directory
  146. interface_load
  147.  
  148. interface_write()
  149.  
  150. No partition found or selected for recovery
  151. add_ext_part_i386: max
  152. add_ext_part_i386: min
  153.  
  154. interface_write()
  155. 1 E extended LBA 0 32 32 121597 5 8 1953454081
  156. 5 L HPFS - NTFS 0 32 33 121597 5 8 1953454080
  157.  
  158. interface_write()
  159.  
  160. No partition found or selected for recovery
  161.  
  162. interface_write()
  163. 1 P HPFS - NTFS 0 32 33 121597 5 8 1953454080
  164.  
  165. interface_write()
  166.  
  167. No partition found or selected for recovery
  168. Change partition type:
  169. HPFS - NTFS 0 32 33 121597 5 8 1953454080
  170. NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
  171.  
  172. interface_write()
  173. 1 P HPFS - NTFS 0 32 33 121597 5 8 1953454080
Add Comment
Please, Sign In to add comment