Command line: TestDisk TestDisk 6.6, Data Recovery Utility, February 2007 Christophe GRENIER http://www.cgsecurity.org Linux version (ext2fs lib: 1.40.2, ntfs lib: available, reiserfs lib: none, ewf lib: none) Using locale 'en_US.UTF-8'. Hard disk list Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 Disk /dev/sda - 160 GB / 149 GiB Partition table type: Intel New options : Dump : No Cylinder boundary : Yes Allow partial last cylinder : No Expert mode : No Analyse Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63 Geometry from i386 MBR: head=255 sector=63 NTFS at 0/1/1 heads/cylinder 16 (NTFS) != 255 (HD) BAD_RS LBA=281555190 12724110 BSD offset 281555190, nbr_part 8, CHS=(30774,16,63) CRC Ok BSD a: 4.2BSD fast filesystem, offset 0, size 29971978 0/0/1 -> 1865/170/43 BSD b: swap, offset 29971978, size 1048576 1865/170/44 -> 1930/239/47 NTFS at 2585/1/1 get_geometry_from_list_part_aux head=255 nbr=10 get_geometry_from_list_part_aux head=8 nbr=3 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=10 Current partition structure: Warning: Incorrect number of heads/cylinder 16 (NTFS) != 255 (HD) 1 P HPFS - NTFS 0 1 1 2584 247 63 41527521 2 E extended LBA 2585 0 63 10516 254 63 127427518 3 P Linux 10517 0 1 17525 254 63 112599585 4 * FreeBSD 17526 0 1 19456 239 63 31020570 Bad relative sector. 5 L HPFS - NTFS 2585 1 1 10404 254 63 125628237 X extended 10405 0 1 10516 254 63 1799280 6 L Linux Swap 10405 1 1 10516 254 63 1799217 search_part() Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63 NTFS at 0/1/1 heads/cylinder 16 (NTFS) != 255 (HD) filesystem size 41527521 sectors_per_cluster 8 mft_lcn 4 mftmirr_lcn 2595470 clusters_per_mft_record -10 clusters_per_index_record 1 D HPFS - NTFS 0 1 1 2584 247 63 41527521 NTFS, 21 GB / 19 GiB NTFS at 2585/1/1 filesystem size 125628237 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 14418337 clusters_per_mft_record -10 clusters_per_index_record 1 D HPFS - NTFS 2585 1 1 10404 254 63 125628237 NTFS, 64 GB / 59 GiB D Linux Swap 10405 1 1 10516 254 46 1799200 SWAP2 version 1, 921 MB / 878 MiB recover_EXT2: s_block_group_nr=0/429, s_mnt_count=6/32, s_blocks_per_group=32768 recover_EXT2: boot_sector=0, s_blocksize=4096 recover_EXT2: s_blocks_count 14074948 recover_EXT2: part_size 112599584 D Linux 10517 0 1 17525 254 62 112599584 EXT3 Large file Sparse superblock Recover, 57 GB / 53 GiB BSD offset 281555190, nbr_part 8, CHS=(30774,16,63) CRC Ok BSD a: 4.2BSD fast filesystem, offset 0, size 29971978 0/0/1 -> 1865/170/43 BSD b: swap, offset 29971978, size 1048576 1865/170/44 -> 1930/239/47 D FreeBSD 17526 0 1 1930 239 46 4044432659 D empty 17526 0 1 19391 170 41 29971976 [/mnt] UFS2, 15 GB / 14 GiB Partition not added. get_geometry_from_list_part_aux head=255 nbr=8 get_geometry_from_list_part_aux head=8 nbr=3 get_geometry_from_list_part_aux head=16 nbr=2 get_geometry_from_list_part_aux head=32 nbr=2 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=8 Results * HPFS - NTFS 0 1 1 2584 254 63 41527962 NTFS, 21 GB / 19 GiB L HPFS - NTFS 2585 1 1 10404 254 63 125628237 NTFS, 64 GB / 59 GiB L Linux Swap 10405 1 1 10516 254 63 1799217 SWAP2 version 1, 921 MB / 878 MiB P Linux 10517 0 1 17525 254 63 112599585 EXT3 Large file Sparse superblock Recover, 57 GB / 53 GiB P FreeBSD 17526 0 1 1930 254 63 4044433621 interface_write() 1 * HPFS - NTFS 0 1 1 2584 254 63 41527962 2 E extended LBA 2585 0 1 10516 254 63 127427580 3 P Linux 10517 0 1 17525 254 63 112599585 4 P FreeBSD 17526 0 1 1930 254 63 4044433621 5 L HPFS - NTFS 2585 1 1 10404 254 63 125628237 6 L Linux Swap 10405 1 1 10516 254 63 1799217 simulate write! write_mbr_i386: starting... write_all_log_i386: starting... write_all_log_i386: CHS: 2585/0/1,lba=41528025 write_all_log_i386: CHS: 10405/0/1,lba=167156325 TestDisk exited normally.