Hier ist mal der LOG von Testdisk.
Was meint ihr?
Fri Jan 13 23:52:38 2012
Command line: TestDisk
TestDisk 6.13, Data Recovery Utility, November 2011
Christophe GRENIER <grenier@cgsecurity.org>
Main Page - CGSecurity
OS: Windows 7 (7600)
Compiler: GCC 4.3, Cygwin 1007.7
Compilation date: 2011-11-15T08:36:54
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=200 0398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250 059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500 107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C

=250057064448
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D

=2000396289024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E

=500104691712
filewin32_getfilesize(\\.\G

GetFileSize err Unzulässige Funktion.
filewin32_setfilepointer(\\.\G

SetFilePointer err Unzulässige Funktion.
Warning: can't get size for \\.\G:
file_pread(4,1,buffer,3907040129(243201/254/63)) lseek err Invalid argument
file_pread(5,1,buffer,488408129(30401/254/63)) lseek err Invalid argument
file_pread(6,1,buffer,976784129(60801/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EARX-00PASB0, S/N:2020202057202d4443575a413841373532373535, FW:51.0AB51
Disk /dev/sdb - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - SAMSUNG HD250HJ, S/N:30535255394a5030314337383233202020202020, FW:FH100-06
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Seagate Portable, S/N:2GH2YK6B, FW:0130
Partition table type (auto): Intel
Disk /dev/sda - 2000 GB / 1863 GiB - WDC WD20EARX-00PASB0
Partition table type: Intel
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002
Ask the user for vista mode
Computes LBA from CHS for Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
NTFS at 0/1/1
filesystem size 3907024002
sectors_per_cluster 8
mft_lcn 4
mftmirr_lcn 244189000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
file_pread(4,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907029183(243201/81/16)) lseek err Invalid argument
file_pread(4,8,buffer,3907029311(243201/83/18)) lseek err Invalid argument
file_pread(4,8,buffer,3907029439(243201/85/20)) lseek err Invalid argument
file_pread(4,8,buffer,3907029567(243201/87/22)) lseek err Invalid argument
file_pread(4,8,buffer,3907029695(243201/89/24)) lseek err Invalid argument
file_pread(4,8,buffer,3907029823(243201/91/26)) lseek err Invalid argument
file_pread(4,8,buffer,3907029951(243201/93/28)) lseek err Invalid argument
file_pread(4,8,buffer,3907030079(243201/95/30)) lseek err Invalid argument
file_pread(4,8,buffer,3907030207(243201/97/32)) lseek err Invalid argument
file_pread(4,8,buffer,3907030335(243201/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,3907030463(243201/101/36)) lseek err Invalid argument
file_pread(4,8,buffer,3907030591(243201/103/38)) lseek err Invalid argument
file_pread(4,8,buffer,3907030719(243201/105/40)) lseek err Invalid argument
file_pread(4,8,buffer,3907030847(243201/107/42)) lseek err Invalid argument
file_pread(4,8,buffer,3907030975(243201/109/44)) lseek err Invalid argument
file_pread(4,7,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(4,8,buffer,3907031048(243201/110/54)) lseek err Invalid argument
file_pread(4,3,buffer,3907031056(243201/110/62)) lseek err Invalid argument
file_pread(4,3,buffer,3907031103(243201/111/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907031119(243201/111/62)) lseek err Invalid argument
file_pread(4,11,buffer,3907031166(243201/112/46)) lseek err Invalid argument
file_pread(4,2,buffer,3907033088(243201/143/15)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002
Backup partition structure
partition_save
Ask the user for vista mode
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
NTFS at 0/1/1
filesystem size 3907024002
sectors_per_cluster 8
mft_lcn 4
mftmirr_lcn 244189000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
file_pread(4,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907029183(243201/81/16)) lseek err Invalid argument
file_pread(4,8,buffer,3907029311(243201/83/18)) lseek err Invalid argument
file_pread(4,8,buffer,3907029439(243201/85/20)) lseek err Invalid argument
file_pread(4,8,buffer,3907029567(243201/87/22)) lseek err Invalid argument
file_pread(4,8,buffer,3907029695(243201/89/24)) lseek err Invalid argument
file_pread(4,8,buffer,3907029823(243201/91/26)) lseek err Invalid argument
file_pread(4,8,buffer,3907029951(243201/93/28)) lseek err Invalid argument
file_pread(4,8,buffer,3907030079(243201/95/30)) lseek err Invalid argument
file_pread(4,8,buffer,3907030207(243201/97/32)) lseek err Invalid argument
file_pread(4,8,buffer,3907030335(243201/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,3907030463(243201/101/36)) lseek err Invalid argument
file_pread(4,8,buffer,3907030591(243201/103/38)) lseek err Invalid argument
file_pread(4,8,buffer,3907030719(243201/105/40)) lseek err Invalid argument
file_pread(4,8,buffer,3907030847(243201/107/42)) lseek err Invalid argument
file_pread(4,8,buffer,3907030975(243201/109/44)) lseek err Invalid argument
file_pread(4,7,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(4,8,buffer,3907031048(243201/110/54)) lseek err Invalid argument
file_pread(4,3,buffer,3907031056(243201/110/62)) lseek err Invalid argument
file_pread(4,3,buffer,3907031103(243201/111/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907031119(243201/111/62)) lseek err Invalid argument
file_pread(4,11,buffer,3907031166(243201/112/46)) lseek err Invalid argument
file_pread(4,2,buffer,3907033088(243201/143/15)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002
Don't write, no confirmation
Analyse Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002
Ask the user for vista mode
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
NTFS at 0/1/1
filesystem size 3907024002
sectors_per_cluster 8
mft_lcn 4
mftmirr_lcn 244189000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
file_pread(4,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907029183(243201/81/16)) lseek err Invalid argument
file_pread(4,8,buffer,3907029311(243201/83/18)) lseek err Invalid argument
file_pread(4,8,buffer,3907029439(243201/85/20)) lseek err Invalid argument
file_pread(4,8,buffer,3907029567(243201/87/22)) lseek err Invalid argument
file_pread(4,8,buffer,3907029695(243201/89/24)) lseek err Invalid argument
file_pread(4,8,buffer,3907029823(243201/91/26)) lseek err Invalid argument
file_pread(4,8,buffer,3907029951(243201/93/28)) lseek err Invalid argument
file_pread(4,8,buffer,3907030079(243201/95/30)) lseek err Invalid argument
file_pread(4,8,buffer,3907030207(243201/97/32)) lseek err Invalid argument
file_pread(4,8,buffer,3907030335(243201/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,3907030463(243201/101/36)) lseek err Invalid argument
file_pread(4,8,buffer,3907030591(243201/103/38)) lseek err Invalid argument
file_pread(4,8,buffer,3907030719(243201/105/40)) lseek err Invalid argument
file_pread(4,8,buffer,3907030847(243201/107/42)) lseek err Invalid argument
file_pread(4,8,buffer,3907030975(243201/109/44)) lseek err Invalid argument
file_pread(4,7,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(4,8,buffer,3907031048(243201/110/54)) lseek err Invalid argument
file_pread(4,3,buffer,3907031056(243201/110/62)) lseek err Invalid argument
file_pread(4,3,buffer,3907031103(243201/111/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907031119(243201/111/62)) lseek err Invalid argument
file_pread(4,11,buffer,3907031166(243201/112/46)) lseek err Invalid argument
file_pread(4,2,buffer,3907033088(243201/143/15)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002
search_part()
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243202 255 63
NTFS at 0/1/1
filesystem size 3907024002
sectors_per_cluster 8
mft_lcn 4
mftmirr_lcn 244189000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
NTFS at 243200/254/63
filesystem size 3907024002
sectors_per_cluster 8
mft_lcn 4
mftmirr_lcn 244189000
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS found using backup sector!, 2000 GB / 1863 GiB
file_pread(4,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(4,8,buffer,3907029183(243201/81/16)) lseek err Invalid argument
file_pread(4,8,buffer,3907029311(243201/83/18)) lseek err Invalid argument
file_pread(4,8,buffer,3907029439(243201/85/20)) lseek err Invalid argument
file_pread(4,8,buffer,3907029567(243201/87/22)) lseek err Invalid argument
file_pread(4,8,buffer,3907029695(243201/89/24)) lseek err Invalid argument
file_pread(4,8,buffer,3907029823(243201/91/26)) lseek err Invalid argument
file_pread(4,8,buffer,3907029951(243201/93/28)) lseek err Invalid argument
file_pread(4,8,buffer,3907030079(243201/95/30)) lseek err Invalid argument
file_pread(4,8,buffer,3907030207(243201/97/32)) lseek err Invalid argument
file_pread(4,8,buffer,3907030335(243201/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,3907030463(243201/101/36)) lseek err Invalid argument
file_pread(4,8,buffer,3907030591(243201/103/38)) lseek err Invalid argument
file_pread(4,8,buffer,3907030719(243201/105/40)) lseek err Invalid argument
file_pread(4,8,buffer,3907030847(243201/107/42)) lseek err Invalid argument
file_pread(4,8,buffer,3907030975(243201/109/44)) lseek err Invalid argument
file_pread(4,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(4,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Results
* HPFS - NTFS 0 1 1 243200 254 63 3907024002
NTFS, 2000 GB / 1863 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 243200 254 63 3907024002