All pastes #990032 Raw Edit

Someone

public text v1 · immutable
#990032 ·published 2008-04-19 22:56 UTC
rendered paste body
Command line: TestDisk

TestDisk 6.6, Data Recovery Utility, February 2007
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Linux version (ext2fs lib: 1.40.2, ntfs lib: available, reiserfs lib: none, ewf lib: none)
Using locale 'en_US.UTF-8'.
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512

Disk /dev/sda - 160 GB / 149 GiB
Partition table type: Intel
New options :
 Dump : No
 Cylinder boundary : Yes
 Allow partial last cylinder : No
 Expert mode : No

Analyse Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
heads/cylinder 16 (NTFS) != 255 (HD)
BAD_RS LBA=281555190 12724110

BSD offset 281555190, nbr_part 8, CHS=(30774,16,63) CRC Ok
BSD a: 4.2BSD fast filesystem, offset         0, size  29971978 0/0/1 -> 1865/170/43
BSD b: swap, offset  29971978, size   1048576 1865/170/44 -> 1930/239/47
NTFS at 2585/1/1
get_geometry_from_list_part_aux head=255 nbr=10
get_geometry_from_list_part_aux head=8 nbr=3
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=10
Current partition structure:
Warning: Incorrect number of heads/cylinder 16 (NTFS) != 255 (HD)
 1 P HPFS - NTFS              0   1  1  2584 247 63   41527521
 2 E extended LBA          2585   0 63 10516 254 63  127427518
 3 P Linux                10517   0  1 17525 254 63  112599585
 4 * FreeBSD              17526   0  1 19456 239 63   31020570

Bad relative sector.
 5 L HPFS - NTFS           2585   1  1 10404 254 63  125628237
   X extended             10405   0  1 10516 254 63    1799280
 6 L Linux Swap           10405   1  1 10516 254 63    1799217

search_part()
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63
NTFS at 0/1/1
heads/cylinder 16 (NTFS) != 255 (HD)
filesystem size           41527521
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               2595470
clusters_per_mft_record   -10
clusters_per_index_record 1
   D HPFS - NTFS              0   1  1  2584 247 63   41527521
     NTFS, 21 GB / 19 GiB
NTFS at 2585/1/1
filesystem size           125628237
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               14418337
clusters_per_mft_record   -10
clusters_per_index_record 1
   D HPFS - NTFS           2585   1  1 10404 254 63  125628237
     NTFS, 64 GB / 59 GiB
   D Linux Swap           10405   1  1 10516 254 46    1799200
     SWAP2 version 1, 921 MB / 878 MiB

recover_EXT2: s_block_group_nr=0/429, s_mnt_count=6/32, s_blocks_per_group=32768
recover_EXT2: boot_sector=0, s_blocksize=4096
recover_EXT2: s_blocks_count 14074948
recover_EXT2: part_size 112599584
   D Linux                10517   0  1 17525 254 62  112599584
     EXT3 Large file Sparse superblock Recover, 57 GB / 53 GiB

BSD offset 281555190, nbr_part 8, CHS=(30774,16,63) CRC Ok
BSD a: 4.2BSD fast filesystem, offset         0, size  29971978 0/0/1 -> 1865/170/43
BSD b: swap, offset  29971978, size   1048576 1865/170/44 -> 1930/239/47
   D FreeBSD              17526   0  1  1930 239 46 4044432659
   D empty                17526   0  1 19391 170 41   29971976 [/mnt]
     UFS2, 15 GB / 14 GiB
Partition not added.
get_geometry_from_list_part_aux head=255 nbr=8
get_geometry_from_list_part_aux head=8 nbr=3
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=8

Results
   * HPFS - NTFS              0   1  1  2584 254 63   41527962
     NTFS, 21 GB / 19 GiB
   L HPFS - NTFS           2585   1  1 10404 254 63  125628237
     NTFS, 64 GB / 59 GiB
   L Linux Swap           10405   1  1 10516 254 63    1799217
     SWAP2 version 1, 921 MB / 878 MiB
   P Linux                10517   0  1 17525 254 63  112599585
     EXT3 Large file Sparse superblock Recover, 57 GB / 53 GiB
   P FreeBSD              17526   0  1  1930 254 63 4044433621

interface_write()
 1 * HPFS - NTFS              0   1  1  2584 254 63   41527962
 2 E extended LBA          2585   0  1 10516 254 63  127427580
 3 P Linux                10517   0  1 17525 254 63  112599585
 4 P FreeBSD              17526   0  1  1930 254 63 4044433621
 5 L HPFS - NTFS           2585   1  1 10404 254 63  125628237
 6 L Linux Swap           10405   1  1 10516 254 63    1799217
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 2585/0/1,lba=41528025
write_all_log_i386: CHS: 10405/0/1,lba=167156325

TestDisk exited normally.