Sat Feb 9 12:00:40 2008
Command line: TestDisk
TestDisk 6.9-WIP, Data Recovery Utility, February 2008
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
Windows version (ext2fs lib: 1.40.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20070512)
file_read(4,1,buffer,1562803199(97279/254/63)) lseek err Invalid argument
file_read(5,1,buffer,241264169(15017/254/63)) lseek err Invalid argument
file_read(6,1,buffer,498014(30/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 800 GB / 745 GiB - CHS 97279 255 63, sector size=512
Disk /dev/sdb - 123 GB / 115 GiB - CHS 15017 255 63, sector size=512
Disk /dev/sdc - 254 MB / 242 MiB - CHS 30 255 63, sector size=512
Drive D: - 593 MB / 565 MiB - CHS 141 64 32, sector size=2048
Disk /dev/sda - 800 GB / 745 GiB
Partition table type: Intel
Analyse Disk /dev/sda - 800 GB / 745 GiB - CHS 97279 255 63
Current partition structure:
Partition sector doesn't have the endmark 0xAA55
Ask the user for vista mode
Computes LBA from CHS for Disk /dev/sda - 800 GB / 745 GiB - CHS 97280 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 800 GB / 745 GiB - CHS 97280 255 63
NTFS at 0/32/33
filesystem size 126976000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 7935999
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 32 33 7904 4 36 126976000 [System]
NTFS, 65 GB / 60 GiB
NTFS at 7904/4/37
filesystem size 1435854848
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 89740927
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 7904 4 37 97281 216 23 1435854848 [RAID]
NTFS, 735 GB / 684 GiB
This partition ends after the disk limits. (start=126978048, size=1435854848, end=1562832895, disk end=1562803200)
Disk /dev/sda - 800 GB / 745 GiB - CHS 97280 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (800 GB / 745 GiB) seems too small! (< 800 GB / 745 GiB)
The following partition can't be recovered:
D HPFS - NTFS 7904 4 37 97281 216 23 1435854848 [RAID]
NTFS, 735 GB / 684 GiB
Results
* HPFS - NTFS 0 32 33 7904 4 36 126976000 [System]
NTFS, 65 GB / 60 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 7904 4 36 126976000 [System]
search_part()
Disk /dev/sda - 800 GB / 745 GiB - CHS 97280 255 63
NTFS at 0/32/33
filesystem size 126976000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 7935999
clusters_per_mft_record -10
clusters_per_index_record 1
D HPFS - NTFS 0 32 33 7904 4 36 126976000 [System]
NTFS, 65 GB / 60 GiB
Search for partition aborted
Results
* HPFS - NTFS 0 32 33 7904 4 36 126976000 [System]
NTFS, 65 GB / 60 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 7904 4 36 126976000 [System]
simulate write!
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sda - 800 GB / 745 GiB - CHS 97280 255 63
Current partition structure:
Partition sector doesn't have the endmark 0xAA55