Repair Broken Restored Clonezilla Live NTFS Image

[bjohanso]

I used Clonezilla Live to back up my brother's laptop (which has since been destroyed) and am trying to restore the image.  I'm able to get the volume restored (originally the NTFS boot partition of a Vista laptop), but the partition shows up as RAW in Windows and when mounted in Linux I can see the directory and file names of the root directory but get I/O errors trying to do anything else.

I've attached below two log files I got by running the DiskPatch tool off the recovery CD burned from the ISO you provide on the bad restored partition.  Can you please let me know if DiskPatch would be able to recover some/all of the files?  The original drive had about 240GB of stuff on it and the compressed partition image was about 28GB.  I'm separately trying to figure out if there is something about the restore image options I'm using that is corrupting things as I restore to see if I can get a better restore, but since I don't know if that will bear fruit I'm seeing if your tool might also help.

Thanks,

-Brad

---------------------------------

First Log (longer of the two-- second log is further down below three rows of *****):


.../000:06/LOG> ### LOG START ###
.../000:06/LOG> DISKPATCH 3.5.300
.../000:06/LOG> (C) 2000-2009 DIY DataRecovery
.../000:06/LOG> Contact info: http://HTTP://www.DIYDataRecovery.nl
.../000:06/LOG> MemFree: 71Kb
.../000:06/LOG> CommandLineParms:
.../000:06/LOG> LogDate: 04-02-2011
.../000:06/CFG> FilePath="C:DPFILES\"
.../000:06/CFG> ReadRetries="32"
.../000:06/CFG> WriteRetries="32"
.../000:06/CFG> MaxReadErrors="32"
.../000:06/CFG> MaxWriteErrors="1"
.../000:06/CFG> LogEachReadError="1"
.../000:06/CFG> ReadDelay="0"
.../000:06/CFG> VfyFixedBadSect="1"
.../000:06/CFG> CleanAfterDOD="1"
.../000:06/CFG> DiskReset="1"
.../000:06/CFG> SectorSkip="1024"
.../000:06/CFG> AutoSaveState="1"
.../000:06/CFG> DumpFoundSectors="0"
.../000:06/CFG> FixFats="1"
.../000:06/CFG> MaxFatScan="51200"
.../000:06/CFG> MaxDataColEntries="256"
.../000:06/CFG> IgnoreF8FF="0"
.../000:06/CFG> DownSizeExt="1"
.../000:06/CFG> ScanSignature="55AA"
.../000:06/CFG> Rebuild="00"
.../000:06/13H> Ext13H installed test requested
.../000:06/13H> Disk found at 128
.../000:06/13H> Ext13H version: 2.1 / EDD-1.1
.../000:06/13H> Ext13H Support: Extended disk access functions
.../000:06/13H> Ext13H Support: Enhanced disk drive functions
.../000:06/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:06/13H> Drive Interface Info:
.../000:06/13H> Disk 128 X13H data : 16383/16/63 156301488/512
.../000:06/13H> Disk found at 129
.../000:06/13H> Ext13H version: 2.1 / EDD-1.1
.../000:06/13H> Ext13H Support: Extended disk access functions
.../000:06/13H> Ext13H Support: Enhanced disk drive functions
.../000:06/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:06/13H> Drive Interface Info:
.../000:06/13H> Disk 129 X13H data : 1024/255/63 781422768/512
.../000:06/13H> Ext13H tested ok
.../000:06/FDL> DiskList requested
.../000:06/FDL> Disk found at 128
.../000:06/FDL> Disk found at 129
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .156301488 | 255 | 63 | .74 | BIOS
129 | .781422768 | 255 | 63 | 372 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:06/IAS> AdmiSector found on disk 0 (128)
.../000:06/IAS> AdmiSector on disk 1 (129) not free for DP use, dump follows;
.../000:06/LOG> SectorDump requested at 29 (0 0 30)
###
000   54 4F 53 48 49 42 41 30 31 00 76 32 2E 30 31 00  |  TOSHIBA01.v2.01.
016   33 C0 8E D0 BC 00 7C 60 B8 E0 07 8E D8 8E C0 B8  |  3ÀŽÐ¼.|`¸à.ŽØŽÀ¸
032   00 13 BB 07 00 B9 1D 00 BA 00 18 BD 80 00 CD 10  |  ..»..¹..º..½€.Í.
048   B8 00 00 8E D8 8E C0 B9 04 00 BE F2 7D B0 17 38  |  ¸..ŽØŽÀ¹..¾ò}°.8
064   04 74 0D B0 1C 38 04 74 07 83 EE 10 E2 EF 75 2A  |  .t.°.8.t.ƒî.âïu*
080   24 0F 88 04 56 BE BE 7D C6 04 00 C6 44 10 00 C6  |  $.ˆ.V¾¾}Æ..ÆD..Æ
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 7C B9 01 00 BA 80 00 CD 13 61 EA 00 7C 00 00  |  .|¹..º€.Í.aê.|..
128   2A 2A 2A 2A 2A 20 48 44 44 20 52 45 43 4F 56 45  |  ***** HDD RECOVE
144   52 59 20 4D 4F 44 45 20 2A 2A 2A 2A 2A 24 54 44  |  RY MODE *****$TD
160   53 20 00 01 A8 63 FF 00 02 D8 1E B5 E6 2E 7C 73  |  S ..¨c...Ø.µæ.|s
176   13 F2 A3 EF 74 D4 0D B9 43 EA 60 2A 4E 00 00 00  |  .ò£ïtÔ.¹Cê`*N...
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
272   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
288   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A1  |  ...............¡
###
.../000:07/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:07/WAS> AdmiSectors in use : 0+ 1-
.../000:30/KEY> DEMO/1
.../000:31/PFC> PQstuff signature detected on disk 0 (128)
.../000:31/PFC> PQstuff signature not detected on disk 1 (129)
.../000:31/PFC> UDMA driver not loaded
.../000:31/PFC> Disk health 50-100
.../000:33/PFC> Partition State backup not found on disk 0 (128)
.../000:33/PFC> Partition State backup not found on disk 1 (129)
.../000:33/PFC> No Repair date found on disk 0 (128)
.../000:33/PFC> No Repair date found on disk 1 (129)
.../000:39/MNU> - Main, Select Disk
.../000:43/CSD> Start CheckDisk for disk 1 (129)
.../000:43/CSD> CheckDisk complete, ReadErrors 0
.../000:43/USD> Disk 1 (129) selected
.../000:43/GSC> AdmiSector not in use
.../000:43/GSC> AdmiSector not in use
129/000:43/USD> MBR for disk 1 (129)
129/000:43/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00  |  3ÀŽÐ¼.|ŽÀŽØ¾.|¿.
016   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00  |  .¹..üó¤Ph..Ëû¹..
032   BD BE 07 80 7E 00 00 7C 0B 0F 85 10 01 83 C5 10  |  ½¾.€~..|..…..ƒÅ.
048   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00  |  âñÍ.ˆV.UÆF..ÆF..
064   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09  |  ´A»ªUÍ.]r.�ûUªu.
080   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74  |  ÷Á..t.þF.f`€~..t
096   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00  |  &fh....f.v.h..h.
112   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13  |  |h..h..´BŠV.‹ôÍ.
128   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00  |  ŸƒÄ.žë.¸..».|ŠV.
144   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1E FE  |  Šv.ŠN.Šn.Í.fas.þ
160   4E 11 0F 85 0C 00 80 7E 00 80 0F 84 8A 00 B2 80  |  N..…..€~.€.„Š.²€
176   EB 82 55 32 E4 8A 56 00 CD 13 5D EB 9C 81 3E FE  |  ë‚U2äŠV.Í.]ëœ�>þ
192   7D 55 AA 75 6E FF 76 00 E8 8A 00 0F 85 15 00 B0  |  }Uªun.v.èŠ..…..°
208   D1 E6 64 E8 7F 00 B0 DF E6 60 E8 78 00 B0 FF E6  |  Ñædè.°ßæ`èx.°.æ
224   64 E8 71 00 B8 00 BB CD 1A 66 23 C0 75 3B 66 81  |  dèq.¸.»Í.f#Àu;f�
240   FB 54 43 50 41 75 32 81 F9 02 01 72 2C 66 68 07  |  ûTCPAu2�ù..r,fh.
256   BB 00 00 66 68 00 02 00 00 66 68 08 00 00 00 66  |  »..fh....fh....f
272   53 66 53 66 55 66 68 00 00 00 00 66 68 00 7C 00  |  SfSfUfh....fh.|.
288   00 66 61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00  |  .fah...Í.Z2öê.|.
304   00 CD 18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07  |  .Í. ·.ë. ¶.ë. µ.
320   32 E4 05 00 07 8B F0 AC 3C 00 74 FC BB 07 00 B4  |  2ä...‹ð¬<.tü»..´
336   0E CD 10 EB F2 2B C9 E4 64 EB 00 24 02 E0 F8 24  |  .Í.ëò+Éädë.$.àø$
352   02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69 74  |  .ÃInvalid partit
368   69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72 20  |  ion table.Error
384   6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69 6E  |  loading operatin
400   67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E 67  |  g system.Missing
416   20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74 65  |   operating syste
432   6D 00 00 00 00 00 00 00 64 3D 9B F9 00 00 00 4E  |  m.......d=›ù...N
448   15 00 27 59 DA FF 00 08 00 00 00 E0 2E 00 80 59  |  ..'YÚ......à..€Y
464   DA FF 07 59 DA FF 00 E8 2E 00 00 70 ED 1C 00 4B  |  Ú..YÚ..è...pí..K
480   CB FF 0C FE FF FF 00 58 1C 1D 71 11 E8 03 00 00  |  Ë..þ...X..q.è...
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............Uª
###
129/000:44/VEC> Start Verify EPBR Chain for disk 1 (129)
129/000:44/VEC> Listing current partitions on disk:
129/000:44/VEC>  UNKNOWN (P)  TOSHIBA SYS        2048     3072000       (1 Gb)
129/000:44/VEC>     NTFS (P)  SQ004668V05     3074048   485322752     (231 Gb)
129/000:44/VEC>    FAT32 (P)      NO NAME   488396800    65540465      (31 Gb)
129/000:44/VEC> Partition Table info for sector 0 (0 0 1)
129/000:44/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..27 | ....0..78..21 | .1023..89..26 | ......2048 | ...3072000
..2 .128 | ..07 | .1023..89..26 | .1023..89..26 | ...3074048 | .485322752
..3 ...0 | ..0C | .1023..75..11 | .1023.254..63 | .488396800 | ..65540465
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/000:44/VEC> 55AA sig Ok
129/000:44/LOG> Boot sector dump requested at 2048 (0 32 33)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 2048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 3071999
........MFT Location (dec): 128000
.MFT Mirror Location (dec): 191999
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 4EC25B71C25B5C71
........Volume Label (txt): TOSHIBA SYS
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:44/VEC> BS and BBS not equal, dump follows;
129/000:44/LOG> Boot sector dump requested at 3074047 (191 89 26)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 83C404
............OEM Name (txt): ¸‰Cm.ËE
....Bytes per Sector (dec): 4294937356
.Sectors per Cluster (dec): 77
....Reserved Sectors (dec): 25844
..............Unused (hex): 0000000D89
....Media Descriptor (hex): 00
..............Unused (hex): 5E5F
...Sectors per Track (dec): 4294937435
.....Heads per Track (dec): 24037
......Hidden Sectors (dec): 3762654147
..............Unused (hex): F43AE850
.............Unknown (hex): 45890087
.......Total Sectors (dec): 79987468
........MFT Location (dec): 3099116288
.MFT Mirror Location (dec): 1609846155
....Clusters per FRS (dec): 2154549013
.Clusters/Indx Block (dec): 2186179480
...........Volume ID (hex): E956104E57DD9F7D
........Volume Label (txt): (Err)
............Checksum (hex): 5DD69E8B
....Sector Signature (hex): 6F89
129/000:44/LOG> Boot sector dump requested at 3074048 (191 89 27)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 26
.....Heads per Track (dec): 90
......Hidden Sectors (dec): 3074048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 485322751
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 8816895
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): C6848ACA848ABC85
........Volume Label (txt): SQ004668V05
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:44/VEC> BS and BBS equal
129/000:44/LOG> Boot sector dump requested at 488396800 (30401 75 11)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): EB5890
............OEM Name (txt): MSDOS5.0
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 32
....Reserved Sectors (dec): 32
...........FAT count (dec): 2
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): F8
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 488396800
..Total Sectors (32) (dec): 65540465
.......FAT Size (32) (dec): 15994
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 2
.............FS Info (dec): 1
...........Backup BS (dec): 6
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 80
............Reserved (hex): 00
......Boot Signature (hex): 29
...........Volume ID (hex): CC76FAF5
........Volume Label (txt): NO NAME
..Filesystem Type ID (txt): FAT32
....Sector Signature (hex): AA55
..........1st FAT at      : 488396832 (30401 75 43)
..........2nd FAT at      : 488412826 (30402 74 35)
129/000:44/CF8> FAT sectors are equal
129/000:44/LOG> SectorDump requested at 488428820 (30403 73 27)
###
     LOGS        DPFILES     ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
###
129/000:44/VEC> BS and BBS equal
129/000:44/VEC> Verify EPBR Chain completed
129/000:44/USD> Select disk completed
129/000:54/MNU> - Main, Repairs
129/001:01/MNU> - Repair, Rebuild Boot Sectors
129/001:21/UND> New Undo archive created for disk 1 (129)
129/001:21/LOG> Undo settings: GL(+) DE(+) FAT(+)
129/001:31/CBS> Checking validity for NTFS BS at 3074048 (191 89 27)
129/001:31/CBS> E: sectors/track : 26
129/001:31/CBS> E: heads/track : 90
129/001:31/CBS> 1st sector of MFT:
129/001:31/LOG> SectorDump requested at 9365504 (582 248 51)
###
000   46 49 4C 45 30 00 03 00 A5 82 5A 21 0E 00 00 00  |  FILE0...¥‚Z!....
016   01 00 01 00 38 00 01 00 48 02 00 00 00 04 00 00  |  ....8...H.......
032   00 00 00 00 00 00 00 00 07 00 00 00 00 00 00 00  |  ................
048   9F 05 00 00 00 00 00 00 10 00 00 00 60 00 00 00  |  Ÿ...........`...
064   00 00 18 00 00 00 00 00 48 00 00 00 18 00 00 00  |  ........H.......
080   66 9E DB 88 73 53 C8 01 66 9E DB 88 73 53 C8 01  |  fžÛˆsSÈ.fžÛˆsSÈ.
096   66 9E DB 88 73 53 C8 01 66 9E DB 88 73 53 C8 01  |  fžÛˆsSÈ.fžÛˆsSÈ.
112   06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
128   00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00  |  ................
144   00 00 00 00 00 00 00 00 30 00 00 00 68 00 00 00  |  ........0...h...
160   00 00 18 00 00 00 03 00 4A 00 00 00 18 00 01 00  |  ........J.......
176   05 00 00 00 00 00 05 00 66 9E DB 88 73 53 C8 01  |  ........fžÛˆsSÈ.
192   66 9E DB 88 73 53 C8 01 66 9E DB 88 73 53 C8 01  |  fžÛˆsSÈ.fžÛˆsSÈ.
208   66 9E DB 88 73 53 C8 01 00 00 4C 0E 00 00 00 00  |  fžÛˆsSÈ...L.....
224   00 00 4C 0E 00 00 00 00 06 00 00 00 00 00 00 00  |  ..L.............
240   04 03 24 00 4D 00 46 00 54 00 00 00 00 00 00 00  |  ..$.M.F.T.......
256   80 00 00 00 C8 00 00 00 01 00 40 00 00 00 01 00  |  €...È.....@.....
272   00 00 00 00 00 00 00 00 0F F3 00 00 00 00 00 00  |  .........ó......
288   40 00 00 00 00 00 00 00 00 00 31 0F 00 00 00 00  |  @.........1.....
304   00 00 31 0F 00 00 00 00 00 00 31 0F 00 00 00 00  |  ..1.......1.....
320   32 20 53 00 00 0C 42 40 5D 98 7E 00 01 42 D0 0E  |  2 S...B@]˜~..BÐ.
336   8A 93 81 02 42 01 02 61 B1 0E FE 32 1F 05 91 47  |  Š“�.B..a±.þ2..‘G
352   18 42 A0 0E 24 4E 8F 01 42 82 02 12 C8 41 FF 42  |  .B .$N�.B‚..ÈA.B
368   F0 01 D6 A7 F5 FE 42 F0 06 10 31 60 FF 41 40 38  |  ð.Ö§õþBð..1`.A@8
384   A6 07 02 32 30 04 74 4B 75 41 7E FC 84 7F FF 32  |  ¦..20.tKuA~ü„.2
400   C3 00 D9 04 09 31 30 73 25 3F 42 CD 01 A4 DD 93  |  Ã.Ù..10s%?BÍ.¤Ý“
416   FD 41 20 24 C3 69 02 42 10 02 F8 50 B1 FD 42 90  |  ýA $Ãi.B..øP±ýB�
432   07 70 0E 51 02 21 20 90 6B 42 30 01 39 D8 05 FD  |  .p.Q.! �kB0.9Ø.ý
448   00 00 00 00 00 00 00 00 B0 00 00 00 78 00 00 00  |  ........°...x...
464   01 00 40 00 00 00 06 00 00 00 00 00 00 00 00 00  |  ..@.............
480   08 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00  |  ........@.......
496   00 90 00 00 00 00 00 00 60 82 00 00 00 00 9F 05  |  .�......`‚....Ÿ.
###
129/001:31/CBS> I: 1st sector for MFT/MFTmirror equal
129/001:31/CBS> Check completed
129/001:51/AFR> Start FindClusterSize (NTFS), from 3074048 to 9365503 (6291456)
129/316:26/AFR> ClusterSize (found) is 8, based on 10912 items found
129/316:26/AFR> Start FindMFT, from 3074048 to 488396799 (485322752)
129/368:52/AFR> MFT found at 9365504/6291456 (786432)
129/904:16/AFR> Matching MFT(M) found at 73609208/70535160 (8816895)
129/904:16/AFR> FR count: MFT1 12, MFT2 4
129/904:16/AFR> MFT2 designated mirror
129/904:16/RBS> Boot sector built, dump follows;
129/904:16/LOG> Boot sector dump requested at 3074048 (191 89 27)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 3074048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 485322751
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 8816895
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): E6924910DC9C054B
........Volume Label (txt): SQ004668V05
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/904:16/WDS> !- No sector write allowed, Trial mode
129/906:24/UND> Undo archive discarded, no sectors saved
129/906:27/MNU> - Main, Disk Ops
129/906:31/MNU> - Main, MBR ops
129/906:39/MNU> - Main, Utilities
129/906:42/MNU> - Tools, Verify EPBR Chain
129/906:42/VEC> Start Verify EPBR Chain for disk 1 (129)
129/906:42/VEC> Listing current partitions on disk:
129/906:42/VEC>  UNKNOWN (P)  TOSHIBA SYS        2048     3072000       (1 Gb)
129/906:42/VEC>     NTFS (P)  SQ004668V05     3074048   485322752     (231 Gb)
129/906:42/VEC>    FAT32 (P)      NO NAME   488396800    65540465      (31 Gb)
129/906:42/VEC> Partition Table info for sector 0 (0 0 1)
129/906:42/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..27 | ....0..78..21 | .1023..89..26 | ......2048 | ...3072000
..2 .128 | ..07 | .1023..89..26 | .1023..89..26 | ...3074048 | .485322752
..3 ...0 | ..0C | .1023..75..11 | .1023.254..63 | .488396800 | ..65540465
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/906:42/VEC> 55AA sig Ok
129/906:42/LOG> Boot sector dump requested at 2048 (0 32 33)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 2048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 3071999
........MFT Location (dec): 128000
.MFT Mirror Location (dec): 191999
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 4EC25B71C25B5C71
........Volume Label (txt): TOSHIBA SYS
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/906:42/VEC> BS and BBS not equal, dump follows;
129/906:42/LOG> Boot sector dump requested at 3074047 (191 89 26)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 83C404
............OEM Name (txt): ¸‰Cm.ËE
....Bytes per Sector (dec): 4294937356
.Sectors per Cluster (dec): 77
....Reserved Sectors (dec): 25844
..............Unused (hex): 0000000D89
....Media Descriptor (hex): 00
..............Unused (hex): 5E5F
...Sectors per Track (dec): 4294937435
.....Heads per Track (dec): 24037
......Hidden Sectors (dec): 3762654147
..............Unused (hex): F43AE850
.............Unknown (hex): 45890087
.......Total Sectors (dec): 79987468
........MFT Location (dec): 3099116288
.MFT Mirror Location (dec): 1609846155
....Clusters per FRS (dec): 2154549013
.Clusters/Indx Block (dec): 2186179480
...........Volume ID (hex): E956104E57DD9F7D
........Volume Label (txt): (Err)
............Checksum (hex): 5DD69E8B
....Sector Signature (hex): 6F89
129/906:42/LOG> Boot sector dump requested at 3074048 (191 89 27)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 26
.....Heads per Track (dec): 90
......Hidden Sectors (dec): 3074048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 485322751
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 8816895
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): C6848ACA848ABC85
........Volume Label (txt): SQ004668V05
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/906:42/VEC> BS and BBS equal
129/906:42/LOG> Boot sector dump requested at 488396800 (30401 75 11)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): EB5890
............OEM Name (txt): MSDOS5.0
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 32
....Reserved Sectors (dec): 32
...........FAT count (dec): 2
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): F8
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 488396800
..Total Sectors (32) (dec): 65540465
.......FAT Size (32) (dec): 15994
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 2
.............FS Info (dec): 1
...........Backup BS (dec): 6
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 80
............Reserved (hex): 00
......Boot Signature (hex): 29
...........Volume ID (hex): CC76FAF5
........Volume Label (txt): NO NAME
..Filesystem Type ID (txt): FAT32
....Sector Signature (hex): AA55
..........1st FAT at      : 488396832 (30401 75 43)
..........2nd FAT at      : 488412826 (30402 74 35)
129/906:42/CF8> FAT sectors are equal
129/906:42/LOG> SectorDump requested at 488428820 (30403 73 27)
###
     LOGS        DPFILES     ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
###
129/906:42/VEC> BS and BBS equal
129/906:56/VEC> Verify EPBR Chain completed
129/906:59/MNU> - Main, Options
129/907:05/MNU> - Support, Analyze Disk (no repair, create log)
129/907:08/SCN> DiskScan requested, ScanType is 3
129/907:08/SCN> from 0 (0 0 1) to 781422767 (48641 80 63), 781422768 sectors
129/907:08/SCN> Starting QuickScan (vista) at 2048 (0 32 33)
129/907:08/SCN> Next QuickScan location at 3074048 (191 89 27)
129/907:09/SCN> Next QuickScan location at 488396800 (30401 75 11)
129/907:09/SCN> Next QuickScan location at 553937265 (34481 0 1)
129/907:10/SCN> Next QuickScan location at 0 (0 0 1)
129/907:10/SCN> QuickScan finished
129/907:10/SCN> Starting SmartScan (vista) at 0 (0 0 1)
129/907:10/RDS> Read past EOD intercept for disk 129 at 4294967295 (267349 89 4)
129/999:71/SCN> SmartScan finished
129/999:71/SCN> DiskScan completed
129/999:71/SCN> ReadErrors for disk 1 (129): 0
129/999:96/LOG> DataCollection items found: 14 / 5
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ...3072000 | PRI | .
002 | 129 | ...3074048 | ...NTFS | ..BS | ...3074048 | .485322752 | PRI | .
003 | 129 | .488396799 | ...NTFS | .BBS | ...3074048 | .485322752 | PRI | .
004 | 129 | .488396806 | ..FAT32 | .BBS | .488396800 | ..65540465 | PRI | .
005 | 129 | .488396800 | ..FAT32 | ..BS | .488396800 | ..65540465 | PRI | .
006 | 129 | .........0 | ...NTFS | PTE2 | ...3074048 | .485322752 | PRI | .
007 | 129 | .........0 | ..FAT32 | PTE3 | .488396800 | ..65540465 | PRI | .
008 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ...3072000 | PRI | I
009 | 129 | ...3074048 | ...NTFS | ..BS | ...3074048 | .485322752 | PRI | I
010 | 129 | .488396799 | ...NTFS | .BBS | ...3074048 | .485322752 | PRI | I
011 | 129 | .488396800 | ..FAT32 | ..BS | .488396800 | ..65540465 | PRI | I
012 | 129 | .488396806 | ..FAT32 | .BBS | .488396800 | ..65540465 | PRI | I
013 | 129 | .552304646 | ..FAT32 | PTE2 | .496391643 | 1222326388 | LOG | .
014 | 129 | .781418495 | ...NTFS | .BBS | ...3074048 | .778344448 | PRI | .
129/999:98/LOG> DataCollection items found: 14 / 5
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ...3072000 | PRI
002 | 129 | ...3074048 | ...NTFS | ..BS | ...3074048 | .485322752 | PRI
003 | 129 | .488396799 | ...NTFS | .BBS | ...3074048 | .485322752 | PRI
004 | 129 | .488396806 | ..FAT32 | .BBS | .488396800 | ..65540465 | PRI
005 | 129 | .488396800 | ..FAT32 | ..BS | .488396800 | ..65540465 | PRI
006 | 129 | .........0 | ...NTFS | PTE2 | ...3074048 | .485322752 | PRI
007 | 129 | .........0 | ..FAT32 | PTE3 | .488396800 | ..65540465 | PRI
013 | 129 | .552304646 | ..FAT32 | PTE2 | .496391643 | 1222326388 | LOG
014 | 129 | .781418495 | ...NTFS | .BBS | ...3074048 | .778344448 | PRI
129/999:98/LOG> PartList items created: 5
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ... | ..1 | ... | ..0 | ..1 | ..1 | ..1 | 1 | ..B
002 | ...NTFS | ..6 | ..2 | ..3 | ..0 | ..6 | ..6 | ..6 | 3 | ..A
003 | ...NTFS | ... | ... | .14 | ..0 | .14 | .14 | .14 | 1 | ..B
004 | ..FAT32 | ..7 | ..5 | ..4 | ... | ..7 | ..7 | ..7 | 3 | ..B
005 | ..FAT32 | .13 | ... | ... | ... | .13 | .13 | .13 | 1 | ...
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ...NTFS | ......2048 | ...3072000 | ...3074047 | PRI | ..B | ..V
002 | ...NTFS | ...3074048 | .485322752 | .488396799 | PRI | ..A | ..V
003 | ...NTFS | ...3074048 | .778344448 | .781418495 | PRI | ..B | ..V
004 | ..FAT32 | .488396800 | ..65540465 | .553937264 | PRI | ..B | ..V
005 | ..FAT32 | .496391643 | 1222326388 | 1718718030 | LOG | ... | ..?
129/999:98/SST> SaveState requested for disk 1 (129)
129/999:98/SST> AdmiSector not in use for disk 1 (129), SaveState aborted
129/999:98/EXE> Analysis complete
129/999:06/MNU> - Main, Quit
129/999:06/LOG> RunTime: 999:06
129/999:06/LOG> ### CLOSE LOG ###




**********************************************
**********************************************
**********************************************

Second, shorter log:



.../000:04/LOG> ### LOG START ###
.../000:04/LOG> DISKPATCH 3.5.300
.../000:04/LOG> (C) 2000-2009 DIY DataRecovery
.../000:04/LOG> Contact info: http://HTTP://www.DIYDataRecovery.nl
.../000:04/LOG> MemFree: 71Kb
.../000:04/LOG> CommandLineParms: /sup
.../000:04/LOG> LogDate: 04-02-2011
.../000:04/CFG> FilePath="C:DPFILES\"
.../000:04/CFG> ReadRetries="32"
.../000:04/CFG> WriteRetries="32"
.../000:04/CFG> MaxReadErrors="32"
.../000:04/CFG> MaxWriteErrors="1"
.../000:04/CFG> LogEachReadError="1"
.../000:04/CFG> ReadDelay="0"
.../000:04/CFG> VfyFixedBadSect="1"
.../000:04/CFG> CleanAfterDOD="1"
.../000:04/CFG> DiskReset="1"
.../000:04/CFG> SectorSkip="1024"
.../000:04/CFG> AutoSaveState="1"
.../000:04/CFG> DumpFoundSectors="0"
.../000:04/CFG> FixFats="1"
.../000:04/CFG> MaxFatScan="51200"
.../000:04/CFG> MaxDataColEntries="256"
.../000:04/CFG> IgnoreF8FF="0"
.../000:04/CFG> DownSizeExt="1"
.../000:04/CFG> ScanSignature="55AA"
.../000:04/CFG> Rebuild="00"
.../000:04/13H> Ext13H installed test requested
.../000:04/13H> Disk found at 128
.../000:04/13H> Ext13H version: 2.1 / EDD-1.1
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Ext13H Support: Enhanced disk drive functions
.../000:04/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 128 X13H data : 16383/16/63 156301488/512
.../000:04/13H> Disk found at 129
.../000:04/13H> Ext13H version: 2.1 / EDD-1.1
.../000:04/13H> Ext13H Support: Extended disk access functions
.../000:04/13H> Ext13H Support: Enhanced disk drive functions
.../000:04/13H> Ext13H Flags: DMA boundary errors handled transparently
.../000:04/13H> Drive Interface Info:
.../000:04/13H> Disk 129 X13H data : 1024/255/63 781422768/512
.../000:04/13H> Ext13H tested ok
.../000:04/FDL> DiskList requested
.../000:04/FDL> Disk found at 128
.../000:04/FDL> Disk found at 129
### DISKLIST.ARRAY ###
__D_|________LBA_|___H_|__S_|__GB_|__GEO
128 | .156301488 | 255 | 63 | .74 | BIOS
129 | .781422768 | 255 | 63 | 372 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
..0 | .........0 | ..0 | .0 | ..0 | BIOS
.../000:04/IAS> AdmiSector found on disk 0 (128)
.../000:04/IAS> AdmiSector on disk 1 (129) not free for DP use, dump follows;
.../000:04/LOG> SectorDump requested at 29 (0 0 30)
###
000   54 4F 53 48 49 42 41 30 31 00 76 32 2E 30 31 00  |  TOSHIBA01.v2.01.
016   33 C0 8E D0 BC 00 7C 60 B8 E0 07 8E D8 8E C0 B8  |  3ÀŽÐ¼.|`¸à.ŽØŽÀ¸
032   00 13 BB 07 00 B9 1D 00 BA 00 18 BD 80 00 CD 10  |  ..»..¹..º..½€.Í.
048   B8 00 00 8E D8 8E C0 B9 04 00 BE F2 7D B0 17 38  |  ¸..ŽØŽÀ¹..¾ò}°.8
064   04 74 0D B0 1C 38 04 74 07 83 EE 10 E2 EF 75 2A  |  .t.°.8.t.ƒî.âïu*
080   24 0F 88 04 56 BE BE 7D C6 04 00 C6 44 10 00 C6  |  $.ˆ.V¾¾}Æ..ÆD..Æ
096   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
112   00 7C B9 01 00 BA 80 00 CD 13 61 EA 00 7C 00 00  |  .|¹..º€.Í.aê.|..
128   2A 2A 2A 2A 2A 20 48 44 44 20 52 45 43 4F 56 45  |  ***** HDD RECOVE
144   52 59 20 4D 4F 44 45 20 2A 2A 2A 2A 2A 24 54 44  |  RY MODE *****$TD
160   53 20 00 01 A8 63 FF 00 02 D8 1E B5 E6 2E 7C 73  |  S ..¨c...Ø.µæ.|s
176   13 F2 A3 EF 74 D4 0D B9 43 EA 60 2A 4E 00 00 00  |  .ò£ïtÔ.¹Cê`*N...
192   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
208   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
224   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
240   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
256   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
272   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
288   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
304   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
320   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
336   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
352   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
368   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
384   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
400   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
416   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
432   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
448   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
464   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
480   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  |  ................
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 A1  |  ...............¡
###
.../000:05/EXE> Read/Write pattern test for disk 0 (128) successful
.../000:05/WAS> AdmiSectors in use : 0+ 1-
.../000:05/KEY> DEMO/1
.../000:05/PFC> PQstuff signature detected on disk 0 (128)
.../000:05/PFC> PQstuff signature not detected on disk 1 (129)
.../000:05/PFC> UDMA driver not loaded
.../000:05/PFC> Disk health 50-100
.../000:06/PFC> Partition State backup not found on disk 0 (128)
.../000:06/PFC> Partition State backup not found on disk 1 (129)
.../000:06/PFC> No Repair date found on disk 0 (128)
.../000:06/PFC> No Repair date found on disk 1 (129)
.../000:22/CSD> Start CheckDisk for disk 1 (129)
.../000:23/CSD> CheckDisk complete, ReadErrors 0
.../000:23/USD> Disk 1 (129) selected
.../000:23/GSC> AdmiSector not in use
.../000:23/GSC> AdmiSector not in use
129/000:23/USD> MBR for disk 1 (129)
129/000:23/LOG> SectorDump requested at 0 (0 0 1)
###
000   33 C0 8E D0 BC 00 7C 8E C0 8E D8 BE 00 7C BF 00  |  3ÀŽÐ¼.|ŽÀŽØ¾.|¿.
016   06 B9 00 02 FC F3 A4 50 68 1C 06 CB FB B9 04 00  |  .¹..üó¤Ph..Ëû¹..
032   BD BE 07 80 7E 00 00 7C 0B 0F 85 10 01 83 C5 10  |  ½¾.€~..|..…..ƒÅ.
048   E2 F1 CD 18 88 56 00 55 C6 46 11 05 C6 46 10 00  |  âñÍ.ˆV.UÆF..ÆF..
064   B4 41 BB AA 55 CD 13 5D 72 0F 81 FB 55 AA 75 09  |  ´A»ªUÍ.]r.�ûUªu.
080   F7 C1 01 00 74 03 FE 46 10 66 60 80 7E 10 00 74  |  ÷Á..t.þF.f`€~..t
096   26 66 68 00 00 00 00 66 FF 76 08 68 00 00 68 00  |  &fh....f.v.h..h.
112   7C 68 01 00 68 10 00 B4 42 8A 56 00 8B F4 CD 13  |  |h..h..´BŠV.‹ôÍ.
128   9F 83 C4 10 9E EB 14 B8 01 02 BB 00 7C 8A 56 00  |  ŸƒÄ.žë.¸..».|ŠV.
144   8A 76 01 8A 4E 02 8A 6E 03 CD 13 66 61 73 1E FE  |  Šv.ŠN.Šn.Í.fas.þ
160   4E 11 0F 85 0C 00 80 7E 00 80 0F 84 8A 00 B2 80  |  N..…..€~.€.„Š.²€
176   EB 82 55 32 E4 8A 56 00 CD 13 5D EB 9C 81 3E FE  |  ë‚U2äŠV.Í.]ëœ�>þ
192   7D 55 AA 75 6E FF 76 00 E8 8A 00 0F 85 15 00 B0  |  }Uªun.v.èŠ..…..°
208   D1 E6 64 E8 7F 00 B0 DF E6 60 E8 78 00 B0 FF E6  |  Ñædè.°ßæ`èx.°.æ
224   64 E8 71 00 B8 00 BB CD 1A 66 23 C0 75 3B 66 81  |  dèq.¸.»Í.f#Àu;f�
240   FB 54 43 50 41 75 32 81 F9 02 01 72 2C 66 68 07  |  ûTCPAu2�ù..r,fh.
256   BB 00 00 66 68 00 02 00 00 66 68 08 00 00 00 66  |  »..fh....fh....f
272   53 66 53 66 55 66 68 00 00 00 00 66 68 00 7C 00  |  SfSfUfh....fh.|.
288   00 66 61 68 00 00 07 CD 1A 5A 32 F6 EA 00 7C 00  |  .fah...Í.Z2öê.|.
304   00 CD 18 A0 B7 07 EB 08 A0 B6 07 EB 03 A0 B5 07  |  .Í. ·.ë. ¶.ë. µ.
320   32 E4 05 00 07 8B F0 AC 3C 00 74 FC BB 07 00 B4  |  2ä...‹ð¬<.tü»..´
336   0E CD 10 EB F2 2B C9 E4 64 EB 00 24 02 E0 F8 24  |  .Í.ëò+Éädë.$.àø$
352   02 C3 49 6E 76 61 6C 69 64 20 70 61 72 74 69 74  |  .ÃInvalid partit
368   69 6F 6E 20 74 61 62 6C 65 00 45 72 72 6F 72 20  |  ion table.Error
384   6C 6F 61 64 69 6E 67 20 6F 70 65 72 61 74 69 6E  |  loading operatin
400   67 20 73 79 73 74 65 6D 00 4D 69 73 73 69 6E 67  |  g system.Missing
416   20 6F 70 65 72 61 74 69 6E 67 20 73 79 73 74 65  |   operating syste
432   6D 00 00 00 00 00 00 00 64 3D 9B F9 00 00 00 4E  |  m.......d=›ù...N
448   15 00 27 59 DA FF 00 08 00 00 00 E0 2E 00 80 59  |  ..'YÚ......à..€Y
464   DA FF 07 59 DA FF 00 E8 2E 00 00 70 ED 1C 00 4B  |  Ú..YÚ..è...pí..K
480   CB FF 0C FE FF FF 00 58 1C 1D 71 11 E8 03 00 00  |  Ë..þ...X..q.è...
496   00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 AA  |  ..............Uª
###
129/000:23/VEC> Start Verify EPBR Chain for disk 1 (129)
129/000:23/VEC> Listing current partitions on disk:
129/000:23/VEC>  UNKNOWN (P)  TOSHIBA SYS        2048     3072000       (1 Gb)
129/000:23/VEC>     NTFS (P)  SQ004668V05     3074048   485322752     (231 Gb)
129/000:23/VEC>    FAT32 (P)      NO NAME   488396800    65540465      (31 Gb)
129/000:23/VEC> Partition Table info for sector 0 (0 0 1)
129/000:23/LOG> PartListDump requested at 0 (0 0 1)
### _ACT_|_TYPE_|__START--C/H/S_|__END----C/H/S_|__LBA-start_|_LBA-length
..1 ...0 | ..27 | ....0..78..21 | .1023..89..26 | ......2048 | ...3072000
..2 .128 | ..07 | .1023..89..26 | .1023..89..26 | ...3074048 | .485322752
..3 ...0 | ..0C | .1023..75..11 | .1023.254..63 | .488396800 | ..65540465
..4 ...0 | ..00 | ....0...0...0 | ....0...0...0 | .........0 | .........0
129/000:23/VEC> 55AA sig Ok
129/000:23/LOG> Boot sector dump requested at 2048 (0 32 33)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 2048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 3071999
........MFT Location (dec): 128000
.MFT Mirror Location (dec): 191999
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): 4EC25B71C25B5C71
........Volume Label (txt): TOSHIBA SYS
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:23/VEC> BS and BBS not equal, dump follows;
129/000:23/LOG> Boot sector dump requested at 3074047 (191 89 26)
### BootSectorDump for BStype NTFS (B)
...........Jump Code (hex): 83C404
............OEM Name (txt): ¸‰Cm.ËE
....Bytes per Sector (dec): 4294937356
.Sectors per Cluster (dec): 77
....Reserved Sectors (dec): 25844
..............Unused (hex): 0000000D89
....Media Descriptor (hex): 00
..............Unused (hex): 5E5F
...Sectors per Track (dec): 4294937435
.....Heads per Track (dec): 24037
......Hidden Sectors (dec): 3762654147
..............Unused (hex): F43AE850
.............Unknown (hex): 45890087
.......Total Sectors (dec): 79987468
........MFT Location (dec): 3099116288
.MFT Mirror Location (dec): 1609846155
....Clusters per FRS (dec): 2154549013
.Clusters/Indx Block (dec): 2186179480
...........Volume ID (hex): E956104E57DD9F7D
........Volume Label (txt): (Err)
............Checksum (hex): 5DD69E8B
....Sector Signature (hex): 6F89
129/000:23/LOG> Boot sector dump requested at 3074048 (191 89 27)
### BootSectorDump for BStype NTFS
...........Jump Code (hex): EB5290
............OEM Name (txt): NTFS
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 8
....Reserved Sectors (dec): 0
..............Unused (hex): 0000000000
....Media Descriptor (hex): F8
..............Unused (hex): 0000
...Sectors per Track (dec): 26
.....Heads per Track (dec): 90
......Hidden Sectors (dec): 3074048
..............Unused (hex): 00000000
.............Unknown (hex): 00800080
.......Total Sectors (dec): 485322751
........MFT Location (dec): 786432
.MFT Mirror Location (dec): 8816895
....Clusters per FRS (dec): 246
.Clusters/Indx Block (dec): 1
...........Volume ID (hex): C6848ACA848ABC85
........Volume Label (txt): SQ004668V05
............Checksum (hex): 00000000
....Sector Signature (hex): AA55
129/000:23/VEC> BS and BBS equal
129/000:23/LOG> Boot sector dump requested at 488396800 (30401 75 11)
### BootSectorDump for BStype FAT32
...........Jump Code (hex): EB5890
............OEM Name (txt): MSDOS5.0
....Bytes per Sector (dec): 512
.Sectors per Cluster (dec): 32
....Reserved Sectors (dec): 32
...........FAT count (dec): 2
....Root Entry Count (dec): 0
..Total Sectors (16) (dec): 0
....Media Descriptor (hex): F8
.......FAT Size (16) (dec): 0
...Sectors per Track (dec): 63
.....Heads per Track (dec): 255
......Hidden Sectors (dec): 488396800
..Total Sectors (32) (dec): 65540465
.......FAT Size (32) (dec): 15994
......Extended Flags (hex): 0000
.............Version (hex): 0000
........Root Cluster (dec): 2
.............FS Info (dec): 1
...........Backup BS (dec): 6
............Reserved (hex): 000000000000000000000000
........Drive Number (hex): 80
............Reserved (hex): 00
......Boot Signature (hex): 29
...........Volume ID (hex): CC76FAF5
........Volume Label (txt): NO NAME
..Filesystem Type ID (txt): FAT32
....Sector Signature (hex): AA55
..........1st FAT at      : 488396832 (30401 75 43)
..........2nd FAT at      : 488412826 (30402 74 35)
129/000:23/CF8> FAT sectors are equal
129/000:23/LOG> SectorDump requested at 488428820 (30403 73 27)
###
     LOGS        DPFILES     ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
     ........... ........... ........... ...........
###
129/000:23/VEC> BS and BBS equal
129/000:23/VEC> Verify EPBR Chain completed
129/000:24/USD> Select disk completed
129/000:31/SCN> DiskScan requested, ScanType is 3
129/000:31/SCN> from 0 (0 0 1) to 781422767 (48641 80 63), 781422768 sectors
129/000:31/SCN> Starting QuickScan (vista) at 2048 (0 32 33)
129/000:31/SCN> Next QuickScan location at 3074048 (191 89 27)
129/000:32/SCN> Next QuickScan location at 488396800 (30401 75 11)
129/000:32/SCN> Next QuickScan location at 553937265 (34481 0 1)
129/000:33/SCN> Next QuickScan location at 0 (0 0 1)
129/000:33/SCN> QuickScan finished
129/000:33/SCN> Starting SmartScan (vista) at 0 (0 0 1)
129/000:33/RDS> Read past EOD intercept for disk 129 at 4294967295 (267349 89 4)
129/135:14/SCN> SmartScan finished
129/135:14/SCN> DiskScan completed
129/135:14/SCN> ReadErrors for disk 1 (129): 0
129/781:21/LOG> DataCollection items found: 14 / 5
### DATACOLLECTION.ARRAY, FULL ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL_|_F
001 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ...3072000 | PRI | .
002 | 129 | ...3074048 | ...NTFS | ..BS | ...3074048 | .485322752 | PRI | .
003 | 129 | .488396799 | ...NTFS | .BBS | ...3074048 | .485322752 | PRI | .
004 | 129 | .488396806 | ..FAT32 | .BBS | .488396800 | ..65540465 | PRI | .
005 | 129 | .488396800 | ..FAT32 | ..BS | .488396800 | ..65540465 | PRI | .
006 | 129 | .........0 | ...NTFS | PTE2 | ...3074048 | .485322752 | PRI | .
007 | 129 | .........0 | ..FAT32 | PTE3 | .488396800 | ..65540465 | PRI | .
008 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ...3072000 | PRI | I
009 | 129 | ...3074048 | ...NTFS | ..BS | ...3074048 | .485322752 | PRI | I
010 | 129 | .488396799 | ...NTFS | .BBS | ...3074048 | .485322752 | PRI | I
011 | 129 | .488396800 | ..FAT32 | ..BS | .488396800 | ..65540465 | PRI | I
012 | 129 | .488396806 | ..FAT32 | .BBS | .488396800 | ..65540465 | PRI | I
013 | 129 | .552304646 | ..FAT32 | PTE2 | .496391643 | 1222326388 | LOG | .
014 | 129 | .781418495 | ...NTFS | .BBS | ...3074048 | .778344448 | PRI | .
129/781:23/LOG> DataCollection items found: 14 / 5
### DATACOLLECTION.ARRAY, CLEANED ###
SEQ_|___D_|________LOC_|____TYPE_|__COM_|______START_|_____LENGTH_|__PL
001 | 129 | ......2048 | ...NTFS | ..BS | ......2048 | ...3072000 | PRI
002 | 129 | ...3074048 | ...NTFS | ..BS | ...3074048 | .485322752 | PRI
003 | 129 | .488396799 | ...NTFS | .BBS | ...3074048 | .485322752 | PRI
004 | 129 | .488396806 | ..FAT32 | .BBS | .488396800 | ..65540465 | PRI
005 | 129 | .488396800 | ..FAT32 | ..BS | .488396800 | ..65540465 | PRI
006 | 129 | .........0 | ...NTFS | PTE2 | ...3074048 | .485322752 | PRI
007 | 129 | .........0 | ..FAT32 | PTE3 | .488396800 | ..65540465 | PRI
013 | 129 | .552304646 | ..FAT32 | PTE2 | .496391643 | 1222326388 | LOG
014 | 129 | .781418495 | ...NTFS | .BBS | ...3074048 | .778344448 | PRI
129/781:23/LOG> PartList items created: 5
### PARTLIST.ARRAY ###
SEQ_|____TYPE_|_PTE_|__BS_|_BBS_|F8FF_|___S_|___L_|__PL_|_C_|___R
001 | ...NTFS | ... | ..1 | ... | ..0 | ..1 | ..1 | ..1 | 1 | ..B
002 | ...NTFS | ..6 | ..2 | ..3 | ..0 | ..6 | ..6 | ..6 | 3 | ..A
003 | ...NTFS | ... | ... | .14 | ..0 | .14 | .14 | .14 | 1 | ..B
004 | ..FAT32 | ..7 | ..5 | ..4 | ... | ..7 | ..7 | ..7 | 3 | ..B
005 | ..FAT32 | .13 | ... | ... | ... | .13 | .13 | .13 | 1 | ...
### PARTLIST.ARRAY.INTERPRETED ###
SEQ_|____TYPE_|______START_|_____LENGTH_|________END_|__PL_|___R_|___A
001 | ...NTFS | ......2048 | ...3072000 | ...3074047 | PRI | ..B | ..V
002 | ...NTFS | ...3074048 | .485322752 | .488396799 | PRI | ..A | ..V
003 | ...NTFS | ...3074048 | .778344448 | .781418495 | PRI | ..B | ..V
004 | ..FAT32 | .488396800 | ..65540465 | .553937264 | PRI | ..B | ..V
005 | ..FAT32 | .496391643 | 1222326388 | 1718718030 | LOG | ... | ..?
129/781:23/SST> SaveState requested for disk 1 (129)
129/781:23/SST> AdmiSector not in use for disk 1 (129), SaveState aborted
129/781:27/EXE> Analysis complete
129/781:39/LOG> RunTime: 781:39
129/781:39/LOG> ### CLOSE LOG ###

[Joep]

Hello,

There is a valid entry for the partition in the MBR. The boot sector does contain some weird/illegal/unexpected values (for sectors per track and heads per track) but it shouldn't prevent Windows from accessing the volume. They're legacy values, I think Windows ignores them. Main thing is that the boot sector points to a valid MFT, and that if you ask DiskPatch to rebuild the bootsector it comes up with the same values for clustersize and MFT location. So, I don't think rebuilding the boot sector with DiskPatch will make a difference.

There's a slight chance iUndelete may help you recover the files using the Long scan. It depends on how much file system damage there is. And if not then iRecover should be able to recover your data unless the image restore made a real mess.

[bjohanso]

Thanks for your quick response.  To be clear, it sounds like you are saying any repairs that DiskPatch might make are unlikely to help, but that iUndelete and/or iRecover should be able to at least recover most of the files?  Are there similar test modes for those so that I can see what they would be able to do before buying them?

-Brad

[Tom]

Yes, both are available as Trial versions that allow you to analyze the disk. iUndelete actually allows you to recover files with the Trial, but only one at a time. Use the Trial versions to find out if files can be recovered.

[bjohanso]

iRecover found a little less than 1000 files, but less than 20 were a "PASS", with the rest split between "UNKN" and "FAIL".  All of them seem to be small files, so I'm wondering if the only thing that is surviving the restore right now is something that fits in a single sector/cluster/node (not sure of the terminology).

I tried iUndelete, but the drive shows up as 0 bytes and it won't even attempt a scan.  Presumably whatever is preventing Windows from identifying the drive as NTFS is preventing iUndelete from even being able to attempt to find files?

It seems like my best course of action to actually get anything back will be to see if I can somehow fix the image restore process to create a NTFS partition that is in better shape.

Thanks for your help!

-Brad

[Joep]

Hello,

Yes, I doubt if that image restore even restored anything valid then. One can wonder if the image itself contains anything useful?