Wed Dec 12 15:33:40 2007 Command line: TestDisk TestDisk 6.8, Data Recovery Utility, August 2007 Christophe GRENIER http://www.cgsecurity.org Windows version (ext2fs lib: 1.39, ntfs lib: 9:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20070512) Using locale 'C'. filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Fonction incorrecte. filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Fonction incorrecte. Warning: can't get size for \\.\PhysicalDrive1 filewin32_getfilesize(\\.\E:) GetFileSize err Fonction incorrecte. filewin32_setfilepointer(\\.\E:) SetFilePointer err Fonction incorrecte. Warning: can't get size for \\.\E: filewin32_getfilesize(\\.\F:) GetFileSize err Fonction incorrecte. filewin32_setfilepointer(\\.\F:) SetFilePointer err Fonction incorrecte. Warning: can't get size for \\.\F: file_read(4,1,buffer,156312449(9729/254/63)) lseek err Invalid argument file_read(5,1,buffer,160087724(9964/254/63)) lseek err Invalid argument Hard disk list Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63, sector size=512 Disk /dev/sdc - 81 GB / 76 GiB - CHS 9964 255 63, sector size=512 Disk /dev/sdc - 81 GB / 76 GiB Partition table type: Intel file_read(5,1,buffer,160087724(9964/254/63)) lseek err Invalid argument Analyse Disk /dev/sdc - 81 GB / 76 GiB - CHS 9964 255 63 Geometry from i386 MBR: head=255 sector=63 NTFS at 0/1/1 file_read(5,64,buffer,6291839(391/165/30)) read err: Invalid argument file_read(5,1,buffer,6291869(391/165/60)) read err: Invalid argument file_read(5,64,buffer,6291967(391/167/32)) read err: Invalid argument file_read(5,1,buffer,6291999(391/168/1)) read err: Invalid argument get_geometry_from_list_part_aux head=255 nbr=2 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 Current partition structure: 1 * HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] Ask the user for vista mode Allow partial last cylinder : No search_vista_part: 0 search_part() Disk /dev/sdc - 81 GB / 76 GiB - CHS 9964 255 63 NTFS at 0/1/1 filesystem size 160071597 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 10004474 clusters_per_mft_record -10 clusters_per_index_record 1 file_read(5,64,buffer,6291839(391/165/30)) read err: Invalid argument file_read(5,1,buffer,6291869(391/165/60)) read err: Invalid argument file_read(5,64,buffer,6291967(391/167/32)) read err: Invalid argument file_read(5,1,buffer,6291999(391/168/1)) read err: Invalid argument D HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] NTFS, 81 GB / 76 GiB get_geometry_from_list_part_aux head=255 nbr=2 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 Results * HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] NTFS, 81 GB / 76 GiB interface_write() 1 * HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] search_part() Disk /dev/sdc - 81 GB / 76 GiB - CHS 9964 255 63 NTFS at 0/1/1 filesystem size 160071597 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 10004474 clusters_per_mft_record -10 clusters_per_index_record 1 file_read(5,64,buffer,6291839(391/165/30)) read err: Invalid argument file_read(5,1,buffer,6291869(391/165/60)) read err: Invalid argument file_read(5,64,buffer,6291967(391/167/32)) read err: Invalid argument file_read(5,1,buffer,6291999(391/168/1)) read err: Invalid argument D HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] NTFS, 81 GB / 76 GiB file_read(5,16,buffer,1012300(63/3/17)) read err: Invalid argument file_read(5,16,buffer,7308885(454/244/4)) read err: Invalid argument file_read(5,16,buffer,12161457(757/4/1)) read err: Invalid argument NTFS at 9963/254/63 filesystem size 160071597 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 10004474 clusters_per_mft_record -10 clusters_per_index_record 1 file_read(5,64,buffer,6291839(391/165/30)) read err: Invalid argument file_read(5,1,buffer,6291869(391/165/60)) read err: Invalid argument file_read(5,64,buffer,6291967(391/167/32)) read err: Invalid argument file_read(5,1,buffer,6291999(391/168/1)) read err: Invalid argument file_read(5,64,buffer,6292031(391/168/33)) read err: Invalid argument file_read(5,64,buffer,6294975(391/215/16)) read err: Invalid argument file_read(5,1,buffer,6294998(391/215/39)) read err: Invalid argument file_read(5,64,buffer,6295039(391/216/17)) read err: Invalid argument file_read(5,1,buffer,6295051(391/216/29)) read err: Invalid argument D HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] NTFS found using backup sector!, 81 GB / 76 GiB get_geometry_from_list_part_aux head=255 nbr=2 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 Results * HPFS - NTFS 0 1 1 9963 254 63 160071597 [Eregion] NTFS, 81 GB / 76 GiB dir_partition inode=5 file_read(5,16,buffer,36751(2/73/23)) read err: No such file or directory file_read(5,1,buffer,36754(2/73/26)) read err: No such file or directory file_read(5,1,buffer,36757(2/73/29)) read err: No such file or directory file_read(5,1,buffer,36758(2/73/30)) read err: No such file or directory Can't allocate 360 bytes of memory.