Mon Oct 31 22:27:13 2016
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.8.0-22-generic (#24-Ubuntu SMP Sat Oct 8 09:14:42 UTC 2016) i686
Compiler: GCC 4.4
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.7
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
/dev/sda: LBA, LBA48, DCO support
/dev/sda: size 1953525168 sectors
/dev/sda: user_max 1953525168 sectors
/dev/sda: dco 1953525168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
/dev/sr0 is not an ATA disk
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - HGST HTS541010A9E680, S/N:JB1000131TENJR, FW:JA0OA590
Disk /dev/sr0 - 1610 MB / 1536 MiB - 786432 sectors, sector size=2048 - hp DVDRAM GU70N, S/N:M2ND8210504, FW:U703
Partition table type (auto): EFI GPT
Disk /dev/sda - 1000 GB / 931 GiB - HGST HTS541010A9E680
Partition table type: EFI GPT
Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
3 P MS Reserved 1353728 1615871 262144 [Microsoft reserved partition]
1 P Unknown 2048 821247 819200 [Basic data partition]
2 P EFI System 821248 1353727 532480 [EFI system partition]
3 P MS Reserved 1353728 1615871 262144 [Microsoft reserved partition]
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
5 P Unknown 1900789760 1902508031 1718272
6 P Unknown 1902508032 1903429631 921600
7 P MS Data 1903429632 1953523711 50094080 [Basic data partition] [RECOVERY]
NTFS, blocksize=4096, 25 GB / 23 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
NTFS at 100/148/49
NTFS at 100/148/49
filesystem size 1899172460
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
NTFS at 100/148/49
NTFS at 100/148/49
filesystem size 1899172460
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 950327360
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 951370368
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 951447472
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 955379184
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 955379200
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 961704976
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 961704992
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 962822328
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 71594
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 965392560
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 965392576
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
mft at 979370688
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
Failed to rebuild NTFS boot sector.
ntfs_boot_sector
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
NTFS at 100/148/49
NTFS at 100/148/49
filesystem size 1899172460
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
NTFS at 100/148/49
NTFS at 100/148/49
filesystem size 1899172460
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0xe927c7c6 size: 1024 usa_ofs: 63978 usa_count: 51862: Invalid argument
Record 0 has no FILE magic (0xe927c7c6)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0xe927c7c6 size: 1024 usa_ofs: 63978 usa_count: 51862: Invalid argument
Record 0 has no FILE magic (0xe927c7c6)
Failed to load $MFT: Input/output error
repair_MFT
NTFS at 100/148/49
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.
ntfs_boot_sector
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
NTFS at 100/148/49
NTFS at 100/148/49
filesystem size 1899172460
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
NTFS at 100/148/49
NTFS at 100/148/49
filesystem size 1899172460
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_mst_post_read_fixup_warn: magic: 0x6544a6a9 size: 1024 usa_ofs: 2784 usa_count: 34429: Invalid argument
Record 0 has no FILE magic (0x6544a6a9)
Failed to load $MFT: Input/output error
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Can't open filesystem. Filesystem seems damaged.
gpt_change_part_type
Change partition type:
4 P MS Data 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
Change partition type:
4 P NTFS 1615872 1900788331 1899172460 [Basic data partition]
NTFS, blocksize=4096, 972 GB / 905 GiB
TestDisk exited normally.