He podido conseguir el log:
Wed Jan 18 19:43:49 2012
Command line: TestDisk
TestDisk 6.11.3, Data Recovery Utility, May 2009
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.orgOS: Windows Server 2007 (7600)
Compiler: GCC 4.3, Cygwin 1005.25 - May 6 2009 20:35:43
ext2fs lib: 1.41.4, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20080501
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000203804160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=203927027200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=8011120640
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000203804160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=203927027200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=8011120640
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=203819057152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=580772602368
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419430187008
filewin32_getfilesize(\\.\F:) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\F:
filewin32_getfilesize(\\.\G:) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\G:) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=8006991872
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=0
Warning: can't get size for \\.\L:
file_pread(4,1,buffer,1953523151(1938018/15/63)) lseek err Invalid argument
file_pread(5,1,buffer,398306159(26342/239/63)) lseek err Invalid argument
file_pread(6,1,buffer,15647309(973/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938018 16 63, sector size=512 - WDC WD10EARS-003BB1
Disk /dev/sdb - 203 GB / 189 GiB - CHS 26342 240 63, sector size=512 - Maxtor 6B200M0
Disk /dev/sdc - 8011 MB / 7640 MiB - CHS 973 255 63, sector size=512 - Kingston DT 101 G2
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - WDC WD10EARS-003BB1
Partition table type: Intel
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938018 16 63
Geometry from i386 MBR: head=16 sector=63
NTFS at 0/1/1
NTFS at 1125319/0/1
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
2 P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
No partition is bootable
Ask the user for vista mode
Computes LBA from CHS for Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938019 16 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938019 16 63
NTFS at 0/1/1
filesystem size 1134321489
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 70895093
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS, 580 GB / 540 GiB
NTFS at 1125319/0/1
filesystem size 819199584
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 51199973
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS, 419 GB / 390 GiB
file_pread(4,8,buffer,1953523088(1938018/14/63)) lseek err Invalid argument
file_pread(4,1,buffer,1953523088(1938018/14/63)) lseek err Invalid argument
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS, 580 GB / 540 GiB
P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS, 419 GB / 390 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
2 P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
Wed Jan 18 21:25:15 2012
Command line: TestDisk
TestDisk 6.11.3, Data Recovery Utility, May 2009
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.orgOS: Windows Server 2007 (7600)
Compiler: GCC 4.3, Cygwin 1005.25 - May 6 2009 20:35:43
ext2fs lib: 1.41.4, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20080501
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000203804160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=203927027200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=8011120640
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000203804160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=203927027200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=8011120640
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=203819057152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=580772602368
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=419430187008
filewin32_getfilesize(\\.\F:) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\F:
filewin32_getfilesize(\\.\G:) GetFileSize err Función incorrecta.
filewin32_setfilepointer(\\.\G:) SetFilePointer err Función incorrecta.
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=8006991872
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=0
Warning: can't get size for \\.\L:
file_pread(4,1,buffer,1953523151(1938018/15/63)) lseek err Invalid argument
file_pread(5,1,buffer,398306159(26342/239/63)) lseek err Invalid argument
file_pread(6,1,buffer,15647309(973/254/63)) lseek err Invalid argument
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938018 16 63, sector size=512 - WDC WD10EARS-003BB1
Disk /dev/sdb - 203 GB / 189 GiB - CHS 26342 240 63, sector size=512 - Maxtor 6B200M0
Disk /dev/sdc - 8011 MB / 7640 MiB - CHS 973 255 63, sector size=512 - Kingston DT 101 G2
Partition table type (auto): Intel
Disk /dev/sda - 1000 GB / 931 GiB - WDC WD10EARS-003BB1
Partition table type: Intel
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938018 16 63
Geometry from i386 MBR: head=16 sector=63
NTFS at 0/1/1
NTFS at 1125319/0/1
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
2 P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
No partition is bootable
Ask the user for vista mode
Computes LBA from CHS for Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938019 16 63
Allow partial last cylinder : Yes
search_vista_part: 1
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938019 16 63
NTFS at 0/1/1
filesystem size 1134321489
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 70895093
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS, 580 GB / 540 GiB
NTFS at 1125319/0/1
filesystem size 819199584
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 51199973
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS, 419 GB / 390 GiB
file_pread(4,8,buffer,1953523088(1938018/14/63)) lseek err Invalid argument
file_pread(4,1,buffer,1953523088(1938018/14/63)) lseek err Invalid argument
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS, 580 GB / 540 GiB
P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS, 419 GB / 390 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
2 P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938019 16 63
NTFS at 0/1/1
filesystem size 1134321489
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 70895093
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS, 580 GB / 540 GiB
file_pread(4,16,buffer,105701148(104862/4/1)) read err: Invalid argument
file_pread(4,1,buffer,105701152(104862/4/5)) read err: Invalid argument
file_pread(4,16,buffer,471817409(468072/13/15)) read err: Invalid argument
file_pread(4,1,buffer,471817409(468072/13/15)) read err: Invalid argument
file_pread(4,16,buffer,471979053(468233/3/1)) read err: Invalid argument
file_pread(4,1,buffer,471979056(468233/3/4)) read err: Invalid argument
file_pread(4,16,buffer,471979057(468233/3/5)) read err: Invalid argument
file_pread(4,16,buffer,472348879(468600/1/17)) read err: Invalid argument
file_pread(4,16,buffer,482462206(478633/2/17)) read err: Invalid argument
file_pread(4,1,buffer,482462208(478633/2/19)) read err: Invalid argument
file_pread(4,16,buffer,682577422(677160/2/17)) read err: Invalid argument
NTFS at 1125318/15/63
filesystem size 1134321489
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 70895093
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS found using backup sector!, 580 GB / 540 GiB
NTFS at 1125319/0/1
filesystem size 819199584
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 51199973
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS, 419 GB / 390 GiB
file_pread(4,16,buffer,1224590157(1214871/3/1)) read err: Invalid argument
file_pread(4,1,buffer,1224590160(1214871/3/4)) read err: Invalid argument
file_pread(4,16,buffer,1224590173(1214871/3/17)) read err: Invalid argument
file_pread(4,1,buffer,1224590176(1214871/3/20)) read err: Invalid argument
file_pread(4,16,buffer,1224590161(1214871/3/5)) read err: Invalid argument
file_pread(4,16,buffer,1224617373(1214898/3/1)) read err: Invalid argument
file_pread(4,1,buffer,1224617376(1214898/3/4)) read err: Invalid argument
file_pread(4,16,buffer,1224617377(1214898/3/5)) read err: Invalid argument
file_pread(4,16,buffer,1224621215(1214901/15/63)) read err: Invalid argument
file_pread(4,16,buffer,1224625311(1214906/1/1)) read err: Invalid argument
file_pread(4,1,buffer,1224625312(1214906/1/2)) read err: Invalid argument
file_pread(4,16,buffer,1224625313(1214906/1/3)) read err: Invalid argument
file_pread(4,1,buffer,1224625313(1214906/1/3)) read err: Invalid argument
file_pread(4,5,buffer,1224625314(1214906/1/4)) read err: Invalid argument
file_pread(4,8,buffer,1224625319(1214906/1/9)) read err: Invalid argument
file_pread(4,16,buffer,1224635517(1214916/3/1)) read err: Invalid argument
file_pread(4,1,buffer,1224635517(1214916/3/1)) read err: Invalid argument
file_pread(4,16,buffer,1224635518(1214916/3/2)) read err: Invalid argument
file_pread(4,1,buffer,1224635518(1214916/3/2)) read err: Invalid argument
file_pread(4,8,buffer,1224635533(1214916/3/17)) read err: Invalid argument
file_pread(4,16,buffer,1224635502(1214916/2/49)) read err: Invalid argument
file_pread(4,16,buffer,1224635520(1214916/3/4)) read err: Invalid argument
file_pread(4,16,buffer,1224682909(1214963/3/17)) read err: Invalid argument
file_pread(4,1,buffer,1224682912(1214963/3/20)) read err: Invalid argument
file_pread(4,16,buffer,1275876111(1265750/1/49)) read err: Invalid argument
file_pread(4,1,buffer,1275876112(1265750/1/50)) read err: Invalid argument
file_pread(4,16,buffer,1327744974(1317207/5/4)) read err: Invalid argument
file_pread(4,1,buffer,1327744974(1317207/5/4)) read err: Invalid argument
file_pread(4,16,buffer,1327748877(1317211/3/1)) read err: Invalid argument
file_pread(4,1,buffer,1327748877(1317211/3/1)) read err: Invalid argument
file_pread(4,16,buffer,1327748878(1317211/3/2)) read err: Invalid argument
file_pread(4,1,buffer,1327748878(1317211/3/2)) read err: Invalid argument
file_pread(4,16,buffer,1327748940(1317211/4/1)) read err: Invalid argument
file_pread(4,1,buffer,1327748940(1317211/4/1)) read err: Invalid argument
file_pread(4,2,buffer,1327748862(1317211/2/49)) read err: Invalid argument
file_pread(4,2,buffer,1327748880(1317211/3/4)) read err: Invalid argument
file_pread(4,2,buffer,1327748943(1317211/4/4)) read err: Invalid argument
file_pread(4,2,buffer,1327749006(1317211/5/4)) read err: Invalid argument
file_pread(4,16,buffer,1327749120(1317211/6/55)) read err: Invalid argument
file_pread(4,3,buffer,1327749136(1317211/7/8)) read err: Invalid argument
file_pread(4,3,buffer,1327749183(1317211/7/55)) read err: Invalid argument
file_pread(4,8,buffer,1327749199(1317211/8/8)) read err: Invalid argument
file_pread(4,16,buffer,1327750529(1317212/13/15)) read err: Invalid argument
NTFS at 1938016/15/63
filesystem size 819199584
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 51199973
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS found using backup sector!, 419 GB / 390 GiB
file_pread(4,8,buffer,1953523088(1938018/14/63)) lseek err Invalid argument
file_pread(4,1,buffer,1953523088(1938018/14/63)) lseek err Invalid argument
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Results
* HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
NTFS, 580 GB / 540 GiB
P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
NTFS, 419 GB / 390 GiB
interface_write()
1 * HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
2 P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 1938019 16 63
Geometry from i386 MBR: head=16 sector=63
NTFS at 0/1/1
NTFS at 1125319/0/1
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P HPFS - NTFS 0 1 1 1125318 15 63 1134321489 [Backup]
2 P HPFS - NTFS 1125319 0 1 1938016 15 63 819199584 [Multimedia]
No partition is bootable