Scribd
Upload
228 views15 pages

GHOSTERR

This document contains error information from an image file backup operation. It lists details about 5 NTFS volumes found on the backup media, including volume size, cluster and block size, MFT and index record sizes, and cluster allocation map details for each volume. The operation encountered an error where the image file contained corrupt data.

Uploaded by

Mijail-v Otarola
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
228 views15 pages

GHOSTERR

This document contains error information from an image file backup operation. It lists details about 5 NTFS volumes found on the backup media, including volume size, cluster and block size, MFT and index record sizes, and cluster allocation map details for each volume. The operation encountered an error where the image file contained corrupt data.

Uploaded by

Mijail-v Otarola
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as TXT, PDF, TXT or read online on Scribd
You are on page 1/ 15

*********************************

Date : Sat Aug 31 20:39:55 2013


Error Number: (27100)
Message: Image file contains corrupt data run
Version: 11.0.0.1502 (Dec 4 2006, Build=1502)
OS Version: Microsoft Windows XP Professional (Build 2600)
Command line arguments:
Active Switches :
AutoName
PathName
: 20699 korwbrkr.lex
DumpFile
: 2.1:\principal.GHO
DumpPos
: 1438928199
Last LFO Buffersize : 0
Last LFO Path
:
Full Path
: 2.1:\principal.GHO
Disk:Partition
: 2:1
Drive Letter
: K:\
Last LFO Filesystem : Native
FlagImplode
: 0
FlagExplode
: 2
Operation Details :
Total size.........12629
MB copied..........2135
MB remaining.......10494
Percent complete...16%
Speed..............2511 MB/min
Time elapsed.......0:51
Time remaining.....4:10
Program Call Stack
AbortLog
Generic_Abort
loadAttributes
loadMFTRec
loadMFT
loadVol
LoadNTFSPartition
ProcessNTFSPartition
CopyPartition
CopyFileToPart
CopyMainline
AttemptOperation
sub_main
main
Call Stack
Address
End Call Stack

Frame

Start heap available: 3128029184


Cur heap available: 3107504128
Total Memory:
3419590656
Allocated
33500 ..\ghost.cpp:1394
Free
Fat details:

Logical Addr

Module

NTFS details:
---------------NTFS Global Flags:
---------------contiguousWrite=1 forceDiskClusterMapping=0
inhibitCHKDSK=1 ignoreBadLog=0 ignoreCHKDSKBit=0
enable_cache=0 xfrbuflen=32768
last_attr_type = 0
loadExact = 0
---------------=======================================================
NTFS volume 0:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............2
version..................0x0400
volsize..................204791807
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....204791807
pagefileSys..............-1
bootIni..................-1
volumeLabel..............[]
sectorsInUse.............40306984
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........782
bitmapUsedBytes..........3199952
estimatedClusters........782
estimatedUsedBytes.......3199952
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........81243
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........63
volsize.................204791807
mftcluster..............786432
mftmirrorcluster........16
clustersPerMFTRecord....246
clustersPerIndexBuffer..1

--------------------------------------------------Cluster Allocation Map


--------------------------------------------------Start: 0 Length: 533266 Next: 533266
Gap: 253166
Start: 786432 Length: 3199875 Next: 3986307
Gap: 21612668
Start: 25598975 Length: 0 Next: 25598975
=======================================================
=======================================================
NTFS volume 1:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............6
version..................0x0400
volsize..................177871616
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....177871616
pagefileSys..............-1
bootIni..................-1
volumeLabel..............[ws2008]
sectorsInUse.............180696
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........679
bitmapUsedBytes..........2779248
estimatedClusters........679
estimatedUsedBytes.......2779248
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........63
volsize.................177871616
mftcluster..............691
mftmirrorcluster........690
clustersPerMFTRecord....246
clustersPerIndexBuffer..1

--------------------------------------------------Cluster Allocation Map


--------------------------------------------------Start: 22233952 Length: 0 Next: 22233952
=======================================================
=======================================================
NTFS volume 2:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............5
version..................0x0400
volsize..................266229116
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....266229116
pagefileSys..............-1
bootIni..................-1
volumeLabel..............[]
sectorsInUse.............5794728
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........1016
bitmapUsedBytes..........4159832
estimatedClusters........1016
estimatedUsedBytes.......4159832
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........63
volsize.................266229116
mftcluster..............786432
mftmirrorcluster........2
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
---------------------------------------------------

Start: 33278639 Length: 0 Next: 33278639


=======================================================
=======================================================
NTFS volume 3:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............4
version..................0x0400
volsize..................61432496
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....61432496
pagefileSys..............-1
bootIni..................-1
volumeLabel..............[alumno]
sectorsInUse.............177144
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........235
bitmapUsedBytes..........959888
estimatedClusters........235
estimatedUsedBytes.......959888
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........63
volsize.................61432496
mftcluster..............247
mftmirrorcluster........246
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
--------------------------------------------------Start: 7679062 Length: 0 Next: 7679062
=======================================================

=======================================================
NTFS volume 4:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............3
version..................0x0400
volsize..................163830800
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....163830800
pagefileSys..............-1
bootIni..................-1
volumeLabel..............[VisualStud]
sectorsInUse.............35222272
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........625
bitmapUsedBytes..........2559864
estimatedClusters........625
estimatedUsedBytes.......2559864
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........63
volsize.................163830800
mftcluster..............637
mftmirrorcluster........636
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
--------------------------------------------------Start: 20478850 Length: 0 Next: 20478850
=======================================================
=======================================================
NTFS volume 5:
---------------initialised..............1

read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00
part order...............1
version..................0x0400
volsize..................102398309
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....102398309
pagefileSys..............-1
bootIni..................3528
volumeLabel..............[]
sectorsInUse.............6792960
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........391
bitmapUsedBytes..........1599976
estimatedClusters........391
estimatedUsedBytes.......1599976
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
]
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........208845
volsize.................102398309
mftcluster..............786432
mftmirrorcluster........6399894
clustersPerMFTRecord....246
clustersPerIndexBuffer..1
--------------------------------------------------Cluster Allocation Map
--------------------------------------------------Start: 12799788 Length: 0 Next: 12799788
=======================================================
=======================================================
NTFS volume 6:
---------------initialised..............1
read cached..............N
Selective caching........N
flags....................Volume OK
drive....................0x00

part order...............0
version..................0x0400
volsize..................204799
blocksize................512
clusterfactor............8
clustersize..............4096
mftrecordsize............1024
indexrecordsize..........4096
indexclustperrecord......1
bootSectorCopyOffset.....204799
pagefileSys..............-1
bootIni..................-1
volumeLabel..............[Reservado ]
sectorsInUse.............49424
totalNonCopiedBytes......0
bytesToCopy..............0
bitmapClusters...........1
bitmapUsedBytes..........3200
estimatedClusters........1
estimatedUsedBytes.......3200
clustersizeShift.........12
blocksizeShift...........9
mftrecordsizeShift.......10
indexrecordsizeShift.....12
totalRootMftRecs.........0
clustermap failover......N
Boot sector details
name....................[NTFS
blocksize...............512
clusterfactor...........8
reservedSectorsUnused...0
mediaType...............0xf8
secPerTrack.............63
numHeads................255
hiddenSectors...........2048
volsize.................204799
mftcluster..............8533
mftmirrorcluster........2
clustersPerMFTRecord....246
clustersPerIndexBuffer..1

--------------------------------------------------Cluster Allocation Map


--------------------------------------------------Start: 25599 Length: 0 Next: 25599
=======================================================
Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......625137030
estimatedUsedCount.....25866185
numPartitions..............1
Version............1100
# Ord Boot Id Ext
First
Num
Last
0 1
0 7 Yes 102398373 204796557 307194930

Used NTFS
40306984 Yes

Disk Info :
remote.............0
drive..............0
sectorsUsedCount.......976758956
estimatedUsedCount.....83606752
numPartitions..............7
Version............0
#
0
1
2
3
4
5
6

Ord Boot Id Ext


2
0 7 Yes
1
1 7 No
0
0 7 No
3
0 7 Yes
4
0 7 Yes
5
0 7 Yes
6
0 7 Yes

First
102608896
208845
2048
307403838
471234708
532667268
798896448

Num
204791808
102398310
204800
163830807
61432497
266229117
177871617

Last
307400704
102607155
206848
471234645
532667205
798896385
976768065

Fixed Drives
Drive 0 ST500DM002-1BD142
WinNT (Active)
Total Sectors
976773168
Bytes per Sector
512
MB
476940
Cylinders
60801
Heads
255
Sectors per Track
63
Successful IO Count
75676

W2A9XA46

Drive 1 WD 5000BMV External 1.75 WD-WXN109SR4054


ASPI
Total Sectors
976773168
Bytes per Sector
512
MB
476940
Successful IO Count
0
WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
Successful IO Count

976773168
512
476940
60801
255
63
11

Remote Drives
AsyncIo : 0
Image Devices
Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.1:
1:1
I:
I:
I: 1.1: [Reservado para el sistema]
NTFS
0
2048

Key[1]
Key[2]

1.2:
1:2

Used NTFS
35389528 Yes
6792960 Yes
49424 Yes
35222272 Yes
177144 Yes
5794728 Yes
180696 Yes

Key[3]
Path
Desc
Type
Disk
Offset

C:
C:
C: 1.2: []
NTFS
0
208845

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.4:
1:4
E:
E:
E: 1.4: [VisualStudio]
NTFS
0
307403838

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.5:
1:5
F:
F:
F: 1.5: [alumno]
NTFS
0
471234708

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.6:
1:6
G:
G:
G: 1.6: []
NTFS
0
532667268

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

1.7:
1:7
H:
H:
H: 1.7: [ws2008]
NTFS
0
798896448

Key[1]
Key[2]
Key[3]
Path
Desc
Type
Disk
Offset

2.1:
2:1
K:
K:
K: 2.1: [cosmosdata]
NTFS
1
63

Key[1]
Path
Desc
Type

B:
B:
B: [RamDrive]
Disk

Key[1]
Path
Desc

J:
J:
J: [HBCD 15.0]

Type

CD

Key[1]
Path
Desc
Type

X:
X:
X: [Mini Xp]
Disk

Key[1]
Path
Desc
Type

@CD-R1
@CD-R1
@CD-R1 HL-DT-STDVDRAM GH22NS50
DVD

DiskManager diagnostic...
=========================
Fixed Drives
Drive 0 ST500DM002-1BD142
WinNT (Active)
Total Sectors
976773168
Bytes per Sector
512
MB
476940
Cylinders
60801
Heads
255
Sectors per Track
63
Successful IO Count
75676

W2A9XA46

Drive 1 WD 5000BMV External 1.75 WD-WXN109SR4054


ASPI
Total Sectors
976773168
Bytes per Sector
512
MB
476940
Successful IO Count
0
WinNT (Active)
Total Sectors
Bytes per Sector
MB
Cylinders
Heads
Sectors per Track
Successful IO Count

976773168
512
476940
60801
255
63
11

FilesystemManager diagnostic...
===============================
Volume 1
VolumePos: 1.1:
DriveLetter: I:
Description:
100MB Primary Disk 0 Offset
42
W2A9XA46
Type:
fsfNtfsWindowsXP
Name:
Reservado para el sistema

1MB

Volume 2
VolumePos: 1.2:
DriveLetter: C:
Description: 48.83GB Primary Disk 0 Offset 101.98MB
42
W2A9XA46

100MB ST500DM002-1BD1

48.83GB ST500DM002-1BD1

Type:
Name:

fsfNtfsWindowsXP

Volume 3
VolumePos: 1.3:
DriveLetter: D:
Description: 97.65GB Logical Disk 0 Offset
42
W2A9XA46
Volume Inaccessible

48.93GB

97.65GB ST500DM002-1BD1

Volume 4
VolumePos: 1.4:
DriveLetter: E:
Description: 78.12GB Logical Disk 0 Offset 146.58GB
42
W2A9XA46
Type:
fsfNtfsWindowsXP
Name:
VisualStudio

78.12GB ST500DM002-1BD1

Volume 5
VolumePos: 1.5:
DriveLetter: F:
Description: 29.29GB Logical Disk 0 Offset 224.70GB
42
W2A9XA46
Type:
fsfNtfsWindowsXP
Name:
alumno

29.29GB ST500DM002-1BD1

Volume 6
VolumePos: 1.6:
DriveLetter: G:
Description: 126.95GB Logical Disk 0 Offset
42
W2A9XA46
Type:
fsfNtfsWindowsXP
Name:

254GB 126.95GB ST500DM002-1BD1

Volume 7
VolumePos: 1.7:
DriveLetter: H:
Description: 84.82GB Logical Disk 0 Offset 380.94GB
42
W2A9XA46
Type:
fsfNtfsWindowsXP
Name:
ws2008
Volume 8
VolumePos: 2.1:
DriveLetter: K:
Description: 465.75GB Primary Disk 1 Offset
rnal 1.75 WD-WXN109SR4054
Type:
fsfNtfsWindowsXP
Name:
cosmosdata
FilesystemMounter diagnostic...
===============================
LfoFilesystemManager diagnostic...
==================================
Filesystem Index: 0
Filesystem Descriptor:

84.82GB ST500DM002-1BD1

31.50KB 465.75GB WD 5000BMV Exte

ID's:
ID Type: 2
ID: B:
DriveType: 4
No FilesystemInfo structure.
Filesystem has no VolumePtr
Filesystem Index: 1
Filesystem Descriptor:
ID's:
ID Type: 2
ID: C:
ID Type: 1
ID: 1.2:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 2
Filesystem Descriptor:
ID's:
ID Type: 2
ID: D:
ID Type: 1
ID: 1.3:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem is inaccessible.
Filesystem Index: 3
Filesystem Descriptor:
ID's:
ID Type: 2
ID: E:
ID Type: 1
ID: 1.4:
ID Type: 4
ID: VISUALSTUDIO:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: VisualStudio
Filesystem Index: 4
Filesystem Descriptor:
ID's:
ID Type: 2
ID: F:
ID Type: 1
ID: 1.5:
ID Type: 4
ID: ALUMNO:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: alumno

Filesystem Index: 5
Filesystem Descriptor:
ID's:
ID Type: 2
ID: G:
ID Type: 1
ID: 1.6:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName:
Filesystem Index: 6
Filesystem Descriptor:
ID's:
ID Type: 2
ID: H:
ID Type: 1
ID: 1.7:
ID Type: 4
ID: WS2008:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: ws2008
Filesystem Index: 7
Filesystem Descriptor:
ID's:
ID Type: 2
ID: I:
ID Type: 1
ID: 1.1:
ID Type: 4
ID: RESERVADO PARA EL SISTEMA:
DriveType: 4
FilesystemInfo:
formatType: 8
volumeName: Reservado para el sistema
Filesystem Index: 8
Filesystem Descriptor:
ID's:
ID Type: 2
ID: J:
DriveType: 8
No FilesystemInfo structure.
Filesystem has no VolumePtr
Filesystem Index: 9
Filesystem Descriptor:
ID's:
ID Type: 2
ID: K:
ID Type: 1
ID: 2.1:
ID Type: 4
ID: COSMOSDATA:
DriveType: 4
FilesystemInfo:

formatType: 8
volumeName: cosmosdata
Filesystem Index: 10
Filesystem Descriptor:
ID's:
ID Type: 2
ID: X:
DriveType: 4
No FilesystemInfo structure.
Filesystem has no VolumePtr
*********************************

You might also like