Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Mon Sep 23 07:31:26 2019
- Command line: TestDisk
- TestDisk 7.0, Data Recovery Utility, April 2015
- Christophe GRENIER <grenier@cgsecurity.org>
- http://www.cgsecurity.org
- OS: Linux, kernel 4.15.0-20-generic (#21-Ubuntu SMP Tue Apr 24 06:16:15 UTC 2018) x86_64
- Compiler: GCC 7.2
- ext2fs lib: 1.44.1, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0
- /dev/sda: LBA, LBA48, DCO support
- /dev/sda: size 1953525168 sectors
- /dev/sda: user_max 1953525168 sectors
- /dev/sda: dco 1953525168 sectors
- Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
- Hard disk list
- Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000LM014-1EJ164-SSHD, S/N:W772LLQQ, FW:HKR1
- Disk /dev/sdb - 7864 MB / 7500 MiB - CHS 1023 242 62, sector size=512, FW:8.07
- Partition table type (auto): Intel
- Disk /dev/sda - 1000 GB / 931 GiB - ST1000LM014-1EJ164-SSHD
- Partition table type: Intel
- Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
- Geometry from i386 MBR: head=255 sector=63
- NTFS at 0/32/33
- NTFS at 12/223/20
- Current partition structure:
- 1 * HPFS - NTFS 0 32 33 12 223 19 204800
- 2 P HPFS - NTFS 12 223 20 13054 75 13 209510400
- 3 P Linux 13054 75 14 13054 140 14 4096
- 4 E extended LBA 13054 140 15 121601 90 25 1743804416
- 5 L Linux 16970 139 2 121601 90 25 1680893952
- search_part()
- Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
- NTFS at 0/32/33
- filesystem size 204800
- sectors_per_cluster 8
- mft_lcn 4
- mftmirr_lcn 12799
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 32 33 12 223 19 204800
- NTFS, blocksize=4096, 104 MB / 100 MiB
- NTFS at 12/223/20
- filesystem size 209510400
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 12 223 20 13054 75 13 209510400
- NTFS, blocksize=4096, 107 GB / 99 GiB
- Linux 13054 75 14 13054 140 14 4096
- LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
- recover_EXT2: s_block_group_nr=0/6412, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
- recover_EXT2: s_blocksize=4096
- recover_EXT2: s_blocks_count 210111670
- recover_EXT2: part_size 1680893360
- Linux 16970 139 2 121601 80 63 1680893360
- ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
- Results
- * HPFS - NTFS 0 32 33 12 223 19 204800
- NTFS, blocksize=4096, 104 MB / 100 MiB
- P HPFS - NTFS 12 223 20 13054 75 13 209510400
- NTFS, blocksize=4096, 107 GB / 99 GiB
- P Linux 13054 75 14 13054 140 14 4096
- LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
- L Linux 16970 139 2 121601 90 25 1680893952
- ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
- Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
- echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
- echo "0 209510400 linear /dev/sda 206848" | dmsetup create test1
- echo "0 4096 linear /dev/sda 209717248" | dmsetup create test2
- echo "0 1680893952 linear /dev/sda 272631808" | dmsetup create test3
- Can't open backup.log file: No such file or directory
- interface_load
- dir_partition inode=2
- L Linux 16970 139 2 121601 90 25 1680893952
- ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
- ext2fs_dir_iterate failed with error 2133571402.
- Directory /
- add_ext_part_i386: max
- add_ext_part_i386: max
- interface_write()
- 1 * HPFS - NTFS 0 32 33 12 223 19 204800
- 2 P HPFS - NTFS 12 223 20 13054 75 13 209510400
- 3 P Linux 13054 75 14 13054 140 14 4096
- 4 E extended LBA 13054 140 15 121601 90 25 1743804416
- 5 L Linux 16970 139 2 121601 90 25 1680893952
- search_part()
- Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
- NTFS at 0/32/33
- filesystem size 204800
- sectors_per_cluster 8
- mft_lcn 4
- mftmirr_lcn 12799
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 32 33 12 223 19 204800
- NTFS, blocksize=4096, 104 MB / 100 MiB
- NTFS at 12/223/19
- filesystem size 204800
- sectors_per_cluster 8
- mft_lcn 4
- mftmirr_lcn 12799
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 0 32 33 12 223 19 204800
- NTFS found using backup sector, blocksize=4096, 104 MB / 100 MiB
- NTFS at 12/223/20
- filesystem size 209510400
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 12 223 20 13054 75 13 209510400
- NTFS, blocksize=4096, 107 GB / 99 GiB
- NTFS at 13054/75/13
- filesystem size 209510400
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 12 223 20 13054 75 13 209510400
- NTFS found using backup sector, blocksize=4096, 107 GB / 99 GiB
- Linux 13054 75 14 13054 140 14 4096
- LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
- recover_EXT2: s_block_group_nr=0/6412, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
- recover_EXT2: s_blocksize=4096
- recover_EXT2: s_blocks_count 210111670
- recover_EXT2: part_size 1680893360
- Linux 16970 139 2 121601 80 63 1680893360
- ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
- block_group_nr 1
- recover_EXT2: "e2fsck -b 8193 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=1/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 3
- recover_EXT2: "e2fsck -b 24577 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=3/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 5
- recover_EXT2: "e2fsck -b 40961 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=5/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 7
- recover_EXT2: "e2fsck -b 57345 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=7/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 9
- recover_EXT2: "e2fsck -b 73729 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=9/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 25
- recover_EXT2: "e2fsck -b 204801 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=25/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 27
- recover_EXT2: "e2fsck -b 221185 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=27/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- block_group_nr 3
- recover_EXT2: "e2fsck -b 98304 -B 4096 device" may be needed
- recover_EXT2: s_block_group_nr=3/6412, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
- recover_EXT2: s_blocksize=4096
- recover_EXT2: s_blocks_count 210111670
- recover_EXT2: part_size 1680893360
- Linux 16970 139 2 121601 80 63 1680893360
- ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 860 GB / 801 GiB
- block_group_nr 49
- recover_EXT2: "e2fsck -b 401409 -B 1024 device" may be needed
- recover_EXT2: s_block_group_nr=49/62, s_mnt_count=0/4294967295, s_blocks_per_group=8192, s_inodes_per_group=2032
- recover_EXT2: s_blocksize=1024
- recover_EXT2: s_blocks_count 512000
- recover_EXT2: part_size 1024000
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- Linux 17034 138 1 17034 203 1 4096
- LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
- Linux Swap 120293 33 61 121601 80 47 21015968
- SWAP2 version 1, pagesize=4096, 10 GB / 10 GiB
- NTFS at 121601/25/24
- filesystem size 1433595904
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 32363 224 54 121601 25 24 1433595904
- NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
- NTFS at 121601/57/56
- filesystem size 1953054720
- sectors_per_cluster 8
- mft_lcn 786432
- mftmirr_lcn 2
- clusters_per_mft_record -10
- clusters_per_index_record 1
- HPFS - NTFS 29 49 21 121601 57 56 1953054720
- NTFS found using backup sector, blocksize=4096, 999 GB / 931 GiB
- get_geometry_from_list_part_aux head=8 nbr=1
- get_geometry_from_list_part_aux head=16 nbr=1
- get_geometry_from_list_part_aux head=32 nbr=1
- get_geometry_from_list_part_aux head=64 nbr=1
- get_geometry_from_list_part_aux head=128 nbr=1
- Warning: the current number of heads per cylinder is 255 but the correct value may be 128.
- Results
- * HPFS - NTFS 0 32 33 12 223 19 204800
- NTFS, blocksize=4096, 104 MB / 100 MiB
- HPFS - NTFS 12 223 20 13054 75 13 209510400
- NTFS, blocksize=4096, 107 GB / 99 GiB
- HPFS - NTFS 29 49 21 121601 57 56 1953054720
- NTFS found using backup sector, blocksize=4096, 999 GB / 931 GiB
- Linux 13054 75 14 13054 140 14 4096
- LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
- Linux 16970 139 2 121601 90 25 1680893952
- ext4 blocksize=4096 Large_file Sparse_SB, 860 GB / 801 GiB
- Linux 16970 171 32 17034 105 29 1024000
- ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 524 MB / 500 MiB
- Linux 17034 138 1 17034 203 1 4096
- LUKS 1 (Data size unknown), 2097 KB / 2048 KiB
- HPFS - NTFS 32363 224 54 121601 25 24 1433595904
- NTFS found using backup sector, blocksize=4096, 734 GB / 683 GiB
- Linux Swap 120293 33 61 121601 90 25 21016576
- SWAP2 version 1, pagesize=4096, 10 GB / 10 GiB
- Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
- echo "0 204800 linear /dev/sda 2048" | dmsetup create test0
- echo "0 209510400 linear /dev/sda 206848" | dmsetup create test1
- echo "0 1953054720 linear /dev/sda 468992" | dmsetup create test2
- echo "0 4096 linear /dev/sda 209717248" | dmsetup create test3
- echo "0 1680893952 linear /dev/sda 272631808" | dmsetup create test4
- echo "0 1024000 linear /dev/sda 272633854" | dmsetup create test5
- echo "0 4096 linear /dev/sda 273659904" | dmsetup create test6
- echo "0 1433595904 linear /dev/sda 519925760" | dmsetup create test7
- echo "0 21016576 linear /dev/sda 1932509184" | dmsetup create test8
- interface_write()
- 1 * HPFS - NTFS 0 32 33 12 223 19 204800
- simulate write!
- write_mbr_i386: starting...
- write_all_log_i386: starting...
- No extended partition
- TestDisk exited normally.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement