Tue Sep 1 08:13:46 2009 Command line: TestDisk TestDisk 6.9, Data Recovery Utility, February 2008 Christophe GRENIER http://www.cgsecurity.org Linux version (ext2fs lib: 1.41.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none) disk_get_geometry BLKGETSIZE64 /dev/hda number of cylinders 65535 != 77520 (calculated) Geometry from i386 MBR: head=64 sector=32 Geometry from i386 MBR: head=64 sector=32 Hard disk list Disk /dev/hda - 40 GB / 37 GiB - CHS 77520 16 63, sector size=512 - FUJITSU MHV2040AH Disk /dev/hdc - 102 MB / 98 MiB - CHS 25 64 32 (RO), sector size=2048 - SD-R2512 Disk /dev/sdb - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - FUJITSU MHZ2320BH G2 Disk /dev/hda - 40 GB / 37 GiB - FUJITSU MHV2040AH Partition table type: Intel Analyse Disk /dev/hda - 40 GB / 37 GiB - CHS 77520 16 63 Geometry from i386 MBR: head=255 sector=63 NTFS at 0/1/1 heads/cylinder 240 (NTFS) != 16 (HD) Info: size boot_sector 20498865, partition 20498877 NTFS at 55143/13/1 heads/cylinder 240 (NTFS) != 16 (HD) Info: size boot_sector 8001113, partition 8209214 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=13 Current partition structure: Warning: Incorrect number of heads/cylinder 240 (NTFS) != 16 (HD) 1 P HPFS - NTFS 0 1 1 20336 3 63 20498877 [System] Warning: Bad ending head (CHS and LBA don't match) 2 P Linux Swap 20336 4 1 21866 3 63 1542240 Warning: Bad starting head (CHS and LBA don't match) 3 * Linux 21866 4 1 55143 11 63 33543720 Warning: Bad starting head (CHS and LBA don't match) 4 E extended LBA 55143 12 1 77519 15 63 22555260 Warning: Bad starting head (CHS and LBA don't match) Warning: Incorrect number of heads/cylinder 240 (NTFS) != 16 (HD) 5 L HPFS - NTFS 55143 13 1 63287 13 62 8209214 [Files] Warning: Bad starting head (CHS and LBA don't match) X extended 63287 13 1 77519 15 63 14346045 Warning: Bad starting head (CHS and LBA don't match) 6 L Linux 63287 14 1 77519 15 63 14345982 Warning: Bad starting head (CHS and LBA don't match) Ask the user for vista mode Allow partial last cylinder : No search_vista_part: 0 search_part() Disk /dev/hda - 40 GB / 37 GiB - CHS 77520 16 63 NTFS at 0/1/1 heads/cylinder 240 (NTFS) != 16 (HD) filesystem size 20498865 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 1280471 clusters_per_mft_record -10 clusters_per_index_record 1 D HPFS - NTFS 0 1 1 20336 3 51 20498865 [System] NTFS, 10495 MB / 10009 MiB D Linux Swap 20336 4 1 21866 3 47 1542224 SWAP2 version 1, 789 MB / 753 MiB recover_EXT2: s_block_group_nr=0/127, s_mnt_count=912/4294967295, s_blocks_per_group=32768 recover_EXT2: s_blocksize=4096 recover_EXT2: s_blocks_count 4192965 recover_EXT2: part_size 33543720 D Linux 21866 4 1 55143 11 63 33543720 EXT3 Large file Sparse superblock Recover, 17 GB / 15 GiB NTFS at 55143/13/1 heads/cylinder 240 (NTFS) != 16 (HD) filesystem size 8001113 sectors_per_cluster 8 mft_lcn 4 mftmirr_lcn 384612 clusters_per_mft_record -10 clusters_per_index_record 1 D HPFS - NTFS 55143 13 1 63081 6 50 8001113 [Files] NTFS, 4096 MB / 3906 MiB recover_EXT2: s_block_group_nr=0/54, s_mnt_count=19/23, s_blocks_per_group=32768 recover_EXT2: s_blocksize=4096 recover_EXT2: s_blocks_count 1793247 recover_EXT2: part_size 14345976 D Linux 63287 14 1 77519 15 57 14345976 EXT3 Large file Sparse superblock, 7345 MB / 7004 MiB get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=9 Warning: the current number of heads per cylinder is 16 but the correct value may be 255. Results D HPFS - NTFS 0 1 1 20336 15 63 20499633 [System] NTFS, 10495 MB / 10009 MiB D Linux Swap 20336 4 1 21866 15 63 1542996 SWAP2 version 1, 790 MB / 753 MiB D Linux 21866 4 1 55143 15 63 33543972 EXT3 Large file Sparse superblock Recover, 17 GB / 15 GiB D HPFS - NTFS 55143 13 1 63081 15 63 8001693 [Files] NTFS, 4096 MB / 3907 MiB L Linux 63287 14 1 77519 15 63 14345982 EXT3 Large file Sparse superblock, 7345 MB / 7004 MiB interface_write() 1 E extended LBA 63287 13 1 77519 15 63 14346045 5 L Linux 63287 14 1 77519 15 63 14345982 search_part() Disk /dev/hda - 40 GB / 37 GiB - CHS 77520 16 63 NTFS at 0/1/1 heads/cylinder 240 (NTFS) != 16 (HD) filesystem size 20498865 sectors_per_cluster 8 mft_lcn 786432 mftmirr_lcn 1280471 clusters_per_mft_record -10 clusters_per_index_record 1 D HPFS - NTFS 0 1 1 20336 3 51 20498865 [System] NTFS, 10495 MB / 10009 MiB Search for partition aborted get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=8 nbr=1 get_geometry_from_list_part_aux head=16 nbr=1 get_geometry_from_list_part_aux head=32 nbr=1 get_geometry_from_list_part_aux head=64 nbr=1 get_geometry_from_list_part_aux head=128 nbr=1 get_geometry_from_list_part_aux head=240 nbr=1 get_geometry_from_list_part_aux head=255 nbr=2 Warning: the current number of heads per cylinder is 16 but the correct value may be 255. Results * HPFS - NTFS 0 1 1 20336 15 63 20499633 [System] NTFS, 10495 MB / 10009 MiB interface_write() 1 * HPFS - NTFS 0 1 1 20336 15 63 20499633 [System] simulate write! write_mbr_i386: starting... write_all_log_i386: starting... No extended partition TestDisk exited normally.