Код:
Sat Aug 5 10:54:44 2006
TestDisk command line :
TestDisk 6.4, Data Recovery Utility, June 2006
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.38, ntfs lib: 9:0:0, reiserfs lib: 0.3.1-rc8)
Using locale 'C'.
file_test_availability_win32(\\.\E:) GetFileSize err Incorrect function.
file_test_availability_win32(\\.\E:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\E:
file_read(4,16,buffer,390722975(387621/15/63)) seek err Invalid argument
file_read(4,1,buffer,390722975(387621/15/63)) seek err Invalid argument
file_read(5,16,buffer,80308934(4998/254/63)) seek err Invalid argument
file_read(5,1,buffer,80308934(4998/254/63)) seek err Invalid argument
Hard disk list
Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63, sector size=512
Disk /dev/sdb - 41 GB / 38 GiB - CHS 4998 255 63, sector size=512
Disk /dev/sda - 200 GB / 186 GiB
Partition table type: Intel
file_read(4,16,buffer,390722975(387621/15/63)) seek err Invalid argument
file_read(4,1,buffer,390722975(387621/15/63)) seek err Invalid argument
New options :
Dump : No
Cylinder boundary : Yes
Allow partial last cylinder : No
Expert mode : Yes
New geometry
Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63 sector_size=512
Interface Advanced
Geometry from i386 MBR: head=16 sector=63
NTFS at 266305/1/1
NTFS at 0/1/1
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
2 P HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
1 * HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
Analyse Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63
Geometry from i386 MBR: head=16 sector=63
NTFS at 266305/1/1
NTFS at 0/1/1
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 * HPFS - NTFS 266305 1 1 387620 15 63 122286465
2 P HPFS - NTFS 0 1 1 266304 15 63 268435377
search_part()
Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63
NTFS at 0/1/1
filesystem size 268435377
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16777211
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
NTFS at 266305/1/1
filesystem size 122286465
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 7642904
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
L HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 266304 15 63 268435377
2 E extended LBA 266305 0 1 387620 15 63 122286528
5 L HPFS - NTFS 266305 1 1 387620 15 63 122286465
search_part()
Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63
NTFS at 0/1/1
filesystem size 268435377
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16777211
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT12
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
sect/track 18 (FAT) != 63 (HD)
heads/cylinder 2 (FAT) != 16 (HD)
FAT12 at 3684/1/1
D FAT12 3684 1 1 3686 14 45 2880 [BOOTTEST]
FAT12, 1474 KB / 1440 KiB
HFS+ magic value at 6956/1/1
HFS+ magic value at 11920/0/1
HFS magic value at 13025/15/63
HFS+ magic value at 13403/2/1
HFS+ magic value at 15614/2/1
file_read(4,16,buffer,16094046(15966/5/4)) read err: read after end of file
file_read(4,16,buffer,17011326(16876/5/4)) read err: read after end of file
file_read(4,16,buffer,17173470(17037/2/49)) read err: read after end of file
file_read(4,2,buffer,17173470(17037/2/49)) read err: read after end of file
file_read(4,16,buffer,17174448(17038/2/19)) read err: read after end of file
file_read(4,6,buffer,17174448(17038/2/19)) read err: read after end of file
file_read(4,16,buffer,17175423(17039/1/49)) read err: read after end of file
file_read(4,16,buffer,17177519(17041/3/3)) read err: read after end of file
file_read(4,16,buffer,17177518(17041/3/2)) read err: read after end of file
file_read(4,8,buffer,17177518(17041/3/2)) read err: read after end of file
file_read(4,16,buffer,17177520(17041/3/4)) read err: read after end of file
file_read(4,16,buffer,17179472(17043/2/3)) read err: read after end of file
file_read(4,16,buffer,17179487(17043/2/18)) read err: read after end of file
file_read(4,7,buffer,17179487(17043/2/18)) read err: read after end of file
file_read(4,16,buffer,17180463(17044/1/49)) read err: read after end of file
file_read(4,16,buffer,17181440(17045/1/18)) read err: read after end of file
file_read(4,16,buffer,17182432(17046/1/2)) read err: read after end of file
file_read(4,8,buffer,17182432(17046/1/2)) read err: read after end of file
file_read(4,16,buffer,17182433(17046/1/3)) read err: read after end of file
file_read(4,2,buffer,17182433(17046/1/3)) read err: read after end of file
file_read(4,16,buffer,17182432(17046/1/2)) read err: read after end of file
file_read(4,7,buffer,17182432(17046/1/2)) read err: read after end of file
file_read(4,16,buffer,17182432(17046/1/2)) read err: read after end of file
file_read(4,7,buffer,17182432(17046/1/2)) read err: read after end of file
file_read(4,16,buffer,18997601(18846/13/15)) read err: read after end of file
file_read(4,16,buffer,18999680(18848/14/15)) read err: read after end of file
HFS magic value at 19030/1/1
HFS magic value at 22499/15/63
HFS magic value at 44027/1/1
HFS magic value at 48056/2/1
HFS+ magic value at 57350/1/1
HFS+ magic value at 68512/2/1
HFS magic value at 74780/0/1
HFS+ magic value at 86626/2/1
HFS+ magic value at 94636/15/63
HFS+ magic value at 110021/2/1
HFS magic value at 122606/15/63
HFS magic value at 127688/1/1
HFS magic value at 134544/0/1
HFS magic value at 136632/0/1
HFS magic value at 142635/1/1
HFS magic value at 150471/15/63
HFS+ magic value at 152692/0/1
HFS magic value at 155033/15/63
HFS magic value at 163277/0/1
HFS magic value at 178571/1/1
HFS+ magic value at 185183/1/1
HFS magic value at 195423/0/1
HFS magic value at 203509/2/1
HFS magic value at 203877/0/1
HFS magic value at 217861/0/1
HFS+ magic value at 227932/0/1
HFS+ magic value at 232954/1/1
HFS+ magic value at 233502/1/1
HFS+ magic value at 234632/2/1
HFS magic value at 251688/15/63
HFS magic value at 259692/0/1
HFS magic value at 264046/15/63
NTFS at 266304/15/63
filesystem size 268435377
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16777211
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS found using backup sector!, 137 GB / 127 GiB
NTFS at 266305/1/1
filesystem size 122286465
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 7642904
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
HFS magic value at 269234/0/1
HFS+ magic value at 283892/0/1
HFS magic value at 292646/15/63
HFS magic value at 294455/15/63
HFS magic value at 294458/15/63
HFS+ magic value at 297992/15/63
HFS magic value at 300050/15/63
HFS magic value at 304412/15/63
HFS magic value at 307249/15/63
HFS magic value at 308070/1/1
HFS magic value at 308460/15/63
HFS+ magic value at 308874/2/1
HFS+ magic value at 308938/15/63
HFS magic value at 315490/15/63
HFS magic value at 321640/0/1
HFS+ magic value at 339538/1/1
HFS magic value at 352722/2/1
HFS magic value at 360291/1/1
HFS magic value at 363544/1/1
HFS magic value at 370893/15/63
HFS magic value at 370976/1/1
block_group_nr 66
recover_EXT2: "e2fsck -b 2162688 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=66/117, s_mnt_count=1/20, s_blocks_per_group=32768
recover_EXT2: boot_sector=2162688, s_blocksize=4096
recover_EXT2: s_blocks_count 3840472
recover_EXT2: part_size 30723776
D Linux 357135 1 1 387614 15 62 30723776 [/]
EXT3 Backup superblock, 15 GB / 14 GiB
HFS magic value at 376529/1/1
HFS+ magic value at 382053/2/1
block_group_nr 111
recover_EXT2: "e2fsck -b 3637248 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=111/117, s_mnt_count=1/20, s_blocks_per_group=32768
recover_EXT2: boot_sector=3637248, s_blocksize=4096
recover_EXT2: s_blocks_count 3840472
recover_EXT2: part_size 30723776
D Linux 357135 1 1 387614 15 62 30723776 [/]
EXT3 Backup superblock, 15 GB / 14 GiB
NTFS at 387599/15/63
heads/cylinder 240 (NTFS) != 16 (HD)
filesystem size 390700737
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 24418796
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 387599 15 63 390700737
NTFS found using backup sector!, 200 GB / 186 GiB
NTFS at 387614/15/63
heads/cylinder 240 (NTFS) != 16 (HD)
filesystem size 30723833
sectors_per_cluster 8
mft_lcn 9
mftmirr_lcn 55
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 387614 15 63 418094 15 55 30723833
NTFS, 15 GB / 14 GiB
This partition ends after the disk limits. (start=390715919, size=30723833, end=421439751, disk end=390721968)
NTFS at 387614/15/63
heads/cylinder 240 (NTFS) != 16 (HD)
filesystem size 30723833
sectors_per_cluster 8
mft_lcn 9
mftmirr_lcn 55
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 357135 0 8 387614 15 63 30723833
NTFS found using backup sector!, 15 GB / 14 GiB
NTFS at 387620/15/63
filesystem size 122286465
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 7642904
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS found using backup sector!, 62 GB / 58 GiB
Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (200 GB / 186 GiB) seems too small! (< 215 GB / 200 GiB)
The following partition can't be recovered:
D HPFS - NTFS 387614 15 63 418094 15 55 30723833
NTFS, 15 GB / 14 GiB
get_geometry_from_list_part_aux head=16 nbr=9
get_geometry_from_list_part_aux head=8 nbr=9
get_geometry_from_list_part_aux head=16 nbr=9
get_geometry_from_list_part_aux head=32 nbr=4
get_geometry_from_list_part_aux head=64 nbr=4
get_geometry_from_list_part_aux head=128 nbr=3
get_geometry_from_list_part_aux head=240 nbr=5
get_geometry_from_list_part_aux head=255 nbr=3
Results
D HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
D HPFS - NTFS 0 1 1 387599 15 63 390700737
NTFS found using backup sector!, 200 GB / 186 GiB
D FAT12 3684 1 1 3686 15 63 2961 [BOOTTEST]
FAT12, 1516 KB / 1480 KiB
D HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
D HPFS - NTFS 357135 0 8 387614 15 63 30723833
NTFS found using backup sector!, 15 GB / 14 GiB
D Linux 357135 1 1 387614 15 63 30723777 [/]
EXT3 Backup superblock, 15 GB / 14 GiB
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63
Geometry from i386 MBR: head=16 sector=63
NTFS at 266305/1/1
NTFS at 0/1/1
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 * HPFS - NTFS 266305 1 1 387620 15 63 122286465
2 P HPFS - NTFS 0 1 1 266304 15 63 268435377
search_part()
Disk /dev/sda - 200 GB / 186 GiB - CHS 387621 16 63
NTFS at 0/1/1
filesystem size 268435377
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16777211
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
NTFS at 266305/1/1
filesystem size 122286465
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 7642904
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 266304 15 63 268435377
NTFS, 137 GB / 127 GiB
L HPFS - NTFS 266305 1 1 387620 15 63 122286465
NTFS, 62 GB / 58 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 266304 15 63 268435377
2 E extended LBA 266305 0 1 387620 15 63 122286528
5 L HPFS - NTFS 266305 1 1 387620 15 63 122286465
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 266305/0/1,lba=268435440
TestDisk exited normally.