Sat Feb 12 20:47:28 2011 Command line: TestDisk TestDisk 6.11.3, Data Recovery Utility, May 2009 Christophe GRENIER http://www.cgsecurity.org OS: Windows Server 2007 (7600) Compiler: GCC 4.3, Cygwin 1005.25 - May 6 2009 20:35:43 ext2fs lib: 1.41.4, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20080501 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=30005821440 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=320072933376 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=30005821440 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=320072933376 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=159907668480 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000396289024 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=1000202241024 filewin32_getfilesize(\\.\W:) GetFileSize err Incorrect function. filewin32_setfilepointer(\\.\W:) SetFilePointer err Incorrect function. Warning: can't get size for \\.\W: file_pread(4,1,buffer,312592769(19457/254/63)) lseek err Invalid argument file_pread(5,1,buffer,3907040129(243201/254/63)) lseek err Invalid argument file_pread(6,1,buffer,1953536129(121601/254/63)) lseek err Invalid argument file_pread(7,1,buffer,58621184(3648/254/63)) lseek err Invalid argument file_pread(8,1,buffer,625153409(38913/254/63)) lseek err Invalid argument Hard disk list Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - INTEL SSDSA2M160G2GC Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Hitachi HDS722020ALA330 Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WD 10EADS External Disk /dev/sdd - 30 GB / 27 GiB - CHS 3648 255 63, sector size=512 - TOSHIBA MK3021GAS Disk /dev/sde - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - ST3320620AS Partition table type (auto): Intel Disk /dev/sdd - 30 GB / 27 GiB - TOSHIBA MK3021GAS Partition table type: Intel Analyse Disk /dev/sdd - 30 GB / 27 GiB - CHS 3648 255 63 Current partition structure: Partition sector doesn't have the endmark 0xAA55 Ask the user for vista mode Allow partial last cylinder : No search_vista_part: 0 search_part() Disk /dev/sdd - 30 GB / 27 GiB - CHS 3648 255 63 NTFS at 7/0/1 filesystem size 52098795 sectors_per_cluster 8 mft_lcn 806866 mftmirr_lcn 3294329 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 7 0 1 3249 254 63 52098795 NTFS, 26 GB / 24 GiB FAT32 at 3250/0/1 FAT1 : 32-6254 FAT2 : 6255-12477 start_rootdir : 12478 root cluster : 2 Data : 12478-6377797 sectors : 6377805 cluster_size : 8 no_of_cluster : 795665 (2 - 795666) fat_length 6223 calculated 6217 set_FAT_info: name from BS used FAT32 at 3250/0/1 FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] FAT32, 3265 MB / 3114 MiB file_pread(7,2,buffer,58605122(3648/0/3)) lseek err Invalid argument file_pread(7,1,buffer,58605122(3648/0/3)) lseek err Invalid argument file_pread(7,8,buffer,58605128(3648/0/9)) lseek err Invalid argument file_pread(7,3,buffer,58605136(3648/0/17)) lseek err Invalid argument file_pread(7,3,buffer,58605183(3648/1/1)) lseek err Invalid argument file_pread(7,8,buffer,58605199(3648/1/17)) lseek err Invalid argument file_pread(7,11,buffer,58605246(3648/2/1)) lseek err Invalid argument get_geometry_from_list_part_aux head=255 nbr=4 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=255 nbr=4 Results * HPFS - NTFS 7 0 1 3249 254 63 52098795 NTFS, 26 GB / 24 GiB P FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] FAT32, 3265 MB / 3114 MiB interface_write() 1 * HPFS - NTFS 7 0 1 3249 254 63 52098795 2 P FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] search_part() Disk /dev/sdd - 30 GB / 27 GiB - CHS 3648 255 63 NTFS at 7/0/1 filesystem size 52098795 sectors_per_cluster 8 mft_lcn 806866 mftmirr_lcn 3294329 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 7 0 1 3249 254 63 52098795 NTFS, 26 GB / 24 GiB NTFS at 3249/254/63 filesystem size 52098795 sectors_per_cluster 8 mft_lcn 806866 mftmirr_lcn 3294329 clusters_per_mft_record -10 clusters_per_index_record 1 HPFS - NTFS 7 0 1 3249 254 63 52098795 NTFS found using backup sector!, 26 GB / 24 GiB FAT32 at 3250/0/1 FAT1 : 32-6254 FAT2 : 6255-12477 start_rootdir : 12478 root cluster : 2 Data : 12478-6377797 sectors : 6377805 cluster_size : 8 no_of_cluster : 795665 (2 - 795666) fat_length 6223 calculated 6217 set_FAT_info: name from BS used FAT32 at 3250/0/1 FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] FAT32, 3265 MB / 3114 MiB FAT32 at 3250/0/7 FAT1 : 32-6254 FAT2 : 6255-12477 start_rootdir : 12478 root cluster : 2 Data : 12478-6377797 sectors : 6377805 cluster_size : 8 no_of_cluster : 795665 (2 - 795666) fat_length 6223 calculated 6217 set_FAT_info: name from BS used FAT32 at 3250/0/7 FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] FAT found using backup sector!, 3265 MB / 3114 MiB file_pread(7,2,buffer,58605122(3648/0/3)) lseek err Invalid argument file_pread(7,7,buffer,58605121(3648/0/2)) lseek err Invalid argument file_pread(7,8,buffer,58605128(3648/0/9)) lseek err Invalid argument file_pread(7,3,buffer,58605136(3648/0/17)) lseek err Invalid argument file_pread(7,3,buffer,58605183(3648/1/1)) lseek err Invalid argument file_pread(7,8,buffer,58605199(3648/1/17)) lseek err Invalid argument file_pread(7,11,buffer,58605246(3648/2/1)) lseek err Invalid argument get_geometry_from_list_part_aux head=255 nbr=4 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=255 nbr=4 Results * HPFS - NTFS 7 0 1 3249 254 63 52098795 NTFS, 26 GB / 24 GiB P FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] FAT32, 3265 MB / 3114 MiB interface_write() 1 * HPFS - NTFS 7 0 1 3249 254 63 52098795 2 P FAT32 LBA 3250 0 1 3646 254 63 6377805 [DellRestore] write! write_mbr_i386: starting... Store new MBR code write_all_log_i386: starting... No extended partition You will have to reboot for the change to take effect. TestDisk exited normally.