[Soci SLIP] usb scrausa - data recovery

[Iron Bishop]

ok, continua a non funzionare... la parte che ha impiegato 3 ore è quella
che dice "find_cluster_size skip_sectors=196607 (skip_offset=100662784)"
"Can't find cluster size" ...intanto con strings ho recuperato il contenuto
testuale di alcuni file word, ma ho l'impressione che i dati importanti
fossero nei primi 5MB cancellati... 

--------------start log
Wed Jun  4 13:05:17 2008
Command line: TestDisk /debug /log filedd

TestDisk 6.8, Data Recovery Utility, August 2007
Christophe GRENIER <grenier a cgsecurity.org>
http://www.cgsecurity.org
Linux version (ext2fs lib: 1.40.8, ntfs lib: available, reiserfs lib: none,
ewf lib: none)
Using locale 'it_IT.UTF-8'.
Geometry from i386 MBR: head=256 sector=63
Hard disk list
Disk filedd - 126 MB / 120 MiB - CHS 16 255 63, sector size=512

Disk filedd - 126 MB / 120 MiB
Partition table type: Intel
Geometry from i386 MBR: head=256 sector=63

Analyse Disk filedd - 126 MB / 120 MiB - CHS 16 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type FF: no test
check_part_i386 2 type FF: no test
check_part_i386 3 type FF: no test
check_part_i386 4 type FF: no test
Current partition structure:
 1 * Xenix bad block      267349  89  4 534698 178  6 4294967295

Warning: Bad starting head (CHS and LBA don't match)
 2 * Xenix bad block      267349  89  4 534698 178  6 4294967295

Warning: Bad starting head (CHS and LBA don't match)
 3 * Xenix bad block      267349  89  4 534698 178  6 4294967295

Warning: Bad starting head (CHS and LBA don't match)
 4 * Xenix bad block      267349  89  4 534698 178  6 4294967295

Warning: Bad starting head (CHS and LBA don't match)
Backup partition structure
partition_save
Ask the user for vista mode
Geometry from i386 MBR: head=256 sector=63
Allow partial last cylinder : Yes
search_vista_part: 1

search_part()
Disk filedd - 126 MB / 120 MiB - CHS 16 255 63

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type FF: no test
check_part_i386 2 type FF: no test
check_part_i386 3 type FF: no test
check_part_i386 4 type FF: no test
 1 * Xenix bad block      267349  89  4 534698 178  6 4294967295

fat32_boot_sector
 1 * FAT32                267349  89  4 534698 178  6 4294967295
test_FAT : Boot sector doesn't have the endmark 0xAA55
test_FAT : Boot sector doesn't have the endmark 0xAA55
Boot sector
fat32_boot_sector: Can't read boot sector.
test_FAT : Boot sector doesn't have the endmark 0xAA55

Backup boot sector
fat32_boot_sector: Can't read backup boot sector.
test_FAT : Boot sector doesn't have the endmark 0xAA55

Sectors are identical.

A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.

 1 * FAT32                267349  89  4 534698 178  6 4294967295
rebuild_FAT_BS p_fat12 0, p_fat16 0, p_fat32 1
fat_find_type(max_offset=63, p_fat12=0, p_fat16=0, p_fat32=1, debug=1,
dump_ind=0)
No FAT found, reserved=0, fat_length=0
find_cluster_size skip_sectors=196607 (skip_offset=100662784)
Can't find cluster size

check_FAT: Read error
Boot sector not valid, can't check FAT.

TestDisk exited normally.

--------------end log