ÿØÿà JFIF    ÿÛ C    !"$"$ÿÛ C  ÿ p " ÿÄ     ÿÄ   ÿÚ   ÕÔË® (% aA*‚XYD¡(J„¡E¢RE,P€XYae )(E¤²€B¤R¥ BQ¤¢ X«)X…€¤  @ .............................................................................................................................................................................. ............................................................................. ÿØÿà JFIF    ÿÛ C    !"$"$ÿÛ C  ÿ p " ÿÄ     ÿÄ   ÿÚ   ÕÔË® (% aA*‚XYD¡(J„¡E¢RE,P€XYae )(E¤²€B¤R¥ BQ¤¢ X«)X…€¤  @ .............................................................................................................................................................................. ............................................................................. ELF>P@@@8 @@@@ eReR00000 88800hhhDDStd88800PtdQtdRtd000/lib64/ld-linux-x86-64.so.2 GNUGNU1 R $D$<ȈGNU>>emHUx ME+ 5Fe( 6=, gdzF"_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable__cxa_finalize__libc_start_mainntfs_attr_get_search_ctxntfs_attr_lookupntfs_attr_put_search_ctx__errno_locationntfs_log_redirectmallocAT_UNNAMEDntfs_attr_openntfs_attr_mst_preadntfs_attr_closentfs_log_clear_levelsntfs_ucstombsntfs_attr_preadntfs_mapping_pairs_decompressntfs_log_set_levelsntfs_attr_reinit_search_ctxntfs_calloclocaltimestrftime__stack_chk_failwritestrtollstrchr__snprintf_chkstrlenlstatsnprintfntfs_cluster_readmemsetutime__sprintf_chkftruncateregcompregexecregfreentfs_log_handler_outerrntfs_log_set_handleropterrgetopt_longntfs_log_get_levelsntfs_homeoptoptoptargoptindstrtolstrtoulntfs_log_parse_optionsetlocalentfs_check_if_mountedntfs_mountntfs_umountlibntfs-3g.so.89libc.so.6GLIBC_2.33GLIBC_2.4GLIBC_2.34GLIBC_2.3.4GLIBC_2.2.5-7ii BLti Wui c00A8@@y`~ @`ŠР֠۠ @`  %&*9>< ( 0 8 @HPX`hpx !"#$'()+,-. /(00182@3H4P5X6`7h8p:x;=HHHtH5­%íhhhhhhhhqhah Qh Ah 1h !h hhhhhhhhhhqhahQhAh1h!hhhh h!h"h#h$h%h&h'qh(ah)Qh*Ah+1h,!h-h.h/h0h1%}D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%D%D%D%D%D%ݩD%թD%ͩD%ũD%D%D%D%D%D%D%D%D%}D%uD%mD%eD%]D%UD%MD%ED%=D%5D%-D%%D%D%D% D%DAWAVE1AUL-|bATL%USHHH=dH%(H$x161HD$Xfv1fkHzHH[HD$`D$D$HD$ fE1LLHމt vUHzHcH>@At!u\$ \$== |$HwE1L=wP1H-AtAWL%}HL QcLH_dE1HL xcL1qL-b^E1HLHOdAuL lwSP1;D$(H D :E1H=HtH$xdH+%(FHĈD[]A\A]A^A_HAvmtS"w"H0HtHܦH87HæARE1L CvHctH5 sH=|1qAXAYDAH='| #H=! L _E11A<H5rH=3|=vH=hL _E1AV H=THD$hHԥHH@HD$hHϺ HL$H&HL$HIHL$8"HT$hH|HHT$HT$HD<5+H yHcH>=ߧuӧ=ǧz֧d=OHؤHt$X1HD$XH8XnHD$XH$<%<AH=VHHH?H=:H]L8MLL<*uHuHcHN^.W?AύOIAHcL0oyHcHƀ*uA.*HD$XHH4LMLLD$LD$HAHzLLD$hHcLD$8HHD$(HT$0@HD$HԥHLD$8L;D$(HT$0HD$hDt$8IƉl$DHl$(H\$HDM>HH|$HLDt$0EbLzIt$P1>HHL-SH^afAFIG8AFLIG`H<$1LIW@H|$IGPIG8I?H9HLIT$@H9HLID$@ID$(M|$(IGL8U1E1jE111^_^LuMQh"IH1A~‰P$AF AO(AG,Av @u7IF(IG0IF0IG8IF8IG@IFHIGH fDA~ Aw 1IWLIx AW$L 18E1LH߹1DMLt$(Ld$8HD$(LHD$(p@1HSpHxBNHCpfL 6E1H5"RH=\@Hh|$4?HHL[]A\A]A^A_DMMLd$8Lt$(LL\$(+HD$(PLI\$PSAWE1E1j111]A]lIGH_H)؍PX;SPK[9BLcBt3F,3@@t$%EBDj9xHHt$J|3Dh1HxHPX@p`DHEXHt6HL PE1P^H5P1H=M[(HEXAZA[ID$0LCAW11jE1E11ZYIHH*!NbGHBzՔHLGG8IE0LHJI?HL)LGHE8ILHJI?HL)LGHE@IHw LHJI?HL)HEHHHH2H?HH)HEPAWE1E11j11AXAYu IGHtPHHP(H@0HU HE(ID$Ht$Il$LHuHEH(QE1aH_E11SL 3H5;OH=YH*LE1?XZE1Y1L J3H5NH=Y_LE1E11L 3H5NH=+Y&iE11H5NL 3H==YH4$HH4$E11L 4H=YIE11H58NL 2H=XHt$L{Ht$E1}1L 03H=XdH5MkH5MH2E11L 2H5MH=)XL 1E1RH5MH==XLE1iE1H1L b1H5HMH=X;f.AVAUATUSHHH dH%(HD$1HH)MHH{HHC LK EA A!{LEAADL9A..E11ACAEHP8Hp@HH9HLH9HLL9t2Hxuۃx$P(p,RҋPXEEƅEEA9DL뱐@HC0HeLL 2H50LHHDHP1QUARATAPE1WH=hVAS3oHPHD$dH+%(u(H []A\A]A^fD.A.E11wff.AWE1$AVL=KIL KAUL-TLATL%KUSH@dH%(HD$017LHl$ A~LLHKHpKL KLHDE1%H$1I~LHHE1LL _KL1H,$'FEVHAXAYE%I^IFH9Lt$I{@ N/L ME1LLD1DɀEtGE1LLp1CXHyE1L +LLP1HXZL9lHCH5ELL {F_HHDHE1LP1E1L`L EL1cK$XZubC('L 5FE1LLb1.C,L FE1LLc1DL EE1LLa1xfAf.pLIRE1sL1HCPY^LIHPH@L EE1LLe1_rf.E11L *L}L/HD$(dH+%(u5H8[]A\A]A^A_L )E1LL*1DAVAUATUSHt[AAAHL/HI9t/Hx*DHtD)HH[]A\A]A^@[]A\A]A^D[]A\A]A^ff.@UE1HqH5B1L {DHWH=M='yXHZ1]BgATUSHH\vHH9HL%wvH9nHxHu1ɾHHL%Hv@H޺HLHHH5uLHHaHx,HH؉ٺH%A![]A\E11L CH5AH=|JH3E11L /CH5NAH=2JfDAWHW AVIAUATUSH(HG H|$HT$H$D$H92H$X,H$DX(EH$h$H$LhPMI]HM}E1IIIt_ILL9,@IAL9tLLuIL9uI]IH~SM}IuHE1H={I1SIL 'H5 @wEeI]_AXHAEkdH $AT$9‰AXM‰D$H$HH$H9D$HE1D$L AH5?H=HP1XZD$H([]A\A]A^A_@E11L %H5@?H=HifE11L %H5?H=\Hw9fE11L :&H5>H=,HG fE11L %H5>H=GH$D$d@XdHL &E11SH5j>H=GI](AYEeAZH_M} IHE1HD$ H5>L %H=dG01{Y^;E11L %H5=H=0GK E11L ?H5=H=G)ATUSHdH%(HD$1H$Hu+&1HT$dH+%(H[]A\ÐI1HHPHHxh8"t^H$Ht;-HiHiHiHiI,$cHL >E1ScH5<H=iE1X1Z+fHL $E1RyDE1h1L z$H5H<H= E1Kff.AUATUSH(dH%(HD$1HI-HI*HH9t"Ht$HEtqHuHD$H fHD${uYHHD$I$IUHT$dH+%(uKH([]A\A]f.+1̐1@Ht$H{tHD$HT$UDAWAVAUATIUSHdH%(H$1HHS=HDHIHRL:=VL1H"XZLILLHgÅuZAL=<A)HcMcLLH1AMHLLu~H$dH+%(ucHĨ[]A\A]A^A_fHLz<V2HtHILT<RHH<L16ff.AWIAVAUATUSHHdH%(H$1QHD$HHxPf=oAG(HHD$ IHH HD$H@P@H=9HD$(H\BHD$0HD$@LD$L?H|$L*HL$H$HT$8HT$pHA HI HT$XHD$PHL$H91H5(oHH\$HL$8H=oHSeDc$EHD$HXPHH{H|$8AƅH{LcMHC1HD$@LIHL$@HHHHHcHD$H9O@HHL赿HDHDnA9IHH9\$HL7t51nu5ZnHT$ HDHDA9vL D:E1Z=fHV7L 9E1HD$(HHc@HD$0H1藾mD$LUHt$(H|$0E11L {9`HD$@LD$LHt$(H|$0E11L v'D$LHH|$D-mH|$E+Ht$(H|$0E11L 89G軽HT$ 1H謾HL$@AG(HAH~91DHDA9HL$@AG(H\$ HAH9|HD$@HD$@H@HLHt$(H|$0E11L %9m ltYHD$xXdu)HP0Hp8H9|HAG(H)H9 HH9Ht$(H|$0E11L 轼DŽHt$(H|$0E11L 7舼pfDH|$8&AąHt$(H|$0E11L 7FH\$DHs`S8RH;C8D.HD$H|$8Ht$`H@HD$`HD$hĻHD$HL$H@HQ0HHL .E1t$@P1RHt$HH|$P袻H HD$HHD$H9D$PGD$LZfHD$Hp0H/H\$XL1L6H b6!HH@HL 5E11SH53H=<A^A_D$LH$dH+%(D$LHĸ[]A\A]A^A_ÐfDL 86E1`H|$0Ht$(1苺D蓻_fDL 5E1efHt$(H|$0E11L *;fDHH|$+ft$8L E11RHt$8H|$@XZAHL eE11ATHt$8&H|$@譹HT$05hH虺LcAG(AYAZIH1EI fDHKAG(Ll$ HI9rDHDhA9vL 4E1,f.Ht$(H|$0E11L p4HE17PHt$8L 1H|$@̸HT$05hH踹HL$PAG(_AXHAH>1DHDA9THL$@AG(IH\$ HAH9|Ht$(E11L H=9=LHt$(H|$0E11L pHt$(H|$0E11L XEIHL 2E1t$@ Ht$81H|$@謷A[[1XL 2E1KH|$0Ht$(E11L 2 _Dg3HL o2E1t$@tL 2E1=|賷DFHt$(H|$0E11L 2޶D$Lff.AWAVAUATUSHdH%(H$1HHbI1ɾH薸HD$(HHD$(IO H@@HD$8XHD$0HH5+eHt!='eH|$P҃EIAO5E1L /H5x.H=8H@@HHD$1̵E11L 3H5<.H=x8裵H|$8HD$HLd$PD$$L|$H\$HHT$8 Lt$0H|$(H)HH9LHONHH LLt$H $HD$@HD$(H$HXfDH;\$D$ ~H|$H)IHPHcH~I;G}KH=c-MoMwM9t0IuXHtE111Lȶ8MmM9uѐL(HH9$XHD$HD$H$H9D$@'HD$H HD$HH9D$8@L|$H E1D$,L GH5,H=6P1XZH=bt H|$PcH|$0ɳIgH|$(WH$dH+%(=D$$HĨ[]A\A]A^A_f.HbHt I;G@HbHt I;G@EWLEuHt$LD$  b;D$ ~ D :bLEt6=at6aumL$ D$$wK=auI7H|$E1 1L .H5=+H=y5褲f;D$  ASL LE11SH5*H=65aA]A^E11L *H5*H=4/E11L $H5*H=4D$$VE1H=4A7L  H5[*ɱ_AXD$$D$$L XE1H5*H=U4耱D$$L GE1H5)H=4GD$$CHHCouldn't create a search context. ERROR: Couldn't allocate memory in read_record() ERROR: Couldn't open $MFT/$DATAERROR: Couldn't read MFT Record %lld. ERROR: Couldn't allocate memory in get_filenames(). ERROR: Couldn't allocate memory in get_parent_name() ERROR: Couldn't create a search context. ERROR: Couldn't get filenames. ERROR: Couldn't allocate memory in get_data(). ERROR: Cannot translate name into current locale. ERROR: Couldn't get data streams. %-8lld %c%c%c%c %3d%% %s %9lld %s Metadata may span more than one MFT record ________________________________________ Amount potentially recoverable %d%% File is encrypted, recovery is impossible. File is compressed, recovery not yet implemented. File is resident, therefore recoverable. File has no runlist, hence no data. File has an empty runlist, hence no data. Missing segment at beginning, %lld clusters Missing segment at end, %lld clusters ERROR: Unexpected error whilst calculating percentage for inode %lld Internal error, strtoll didn't return a suffix. Invalid size suffix '%s'. Use T, G, M, or K. Can't read info from mft record %lld. File has no recoverable data. File has no data. There is nothing to recover. Missing segment at beginning, %lld clusters. Missing segment at end, %lld clusters. Truncation not performed because file has an inconsistent $MFT record. ERROR: Couldn't set the file's date and time Undeleted '%s:%s' successfully to %s. Undeleted '%s' successfully to %s. ERROR: Couldn't open $MFT/$BITMAPERROR: Couldn't allocate memory in scan_disk() ERROR: Couldn't create a regex. Inode Flags %%age Date Time Size Filename ----------------------------------------------------------------------- Couldn't read MFT Record %lld. Couldn't compare filename with regexERROR: Failed to undelete inode %lli ! Files with potentially recoverable content: %d ERROR: Couldn't alloc mem for parsing inodes! ERROR: Missing new value at end of input! Pattern to transform is empty Couldn't allocate memory in transform() Invalid time suffix '%s'. Use Y, M, W, D or H. Option '%s' requires an argument. -b:Cc:d:fh?i:m:o:OPp:sS:t:TuqvVYou must specify exactly one device. Scan can only be used with --percent, --match, --ignore-case, --size and --time. The --case option doesn't make sense without the --match option Copy can only be used with --output and --destination. You can only select one of Scan, Undelete or Copy. Percentage value must be in the range 0 - 100. You may not use --quiet and --verbose at the same time. You may not use --quiet when scanning a volume. To use --parent, you must also use --verbose. %s v%s (libntfs-3g) - Recover deleted files from an NTFS Volume. Copyright (c) 2002-2005 Richard Russon Copyright (c) 2004-2005 Holger Ohmacht Copyright (c) 2005 Anton Altaparmakov Copyright (c) 2007 Yura Pakhuchiy Copyright (c) 2013-2018 Jean-Pierre Andre Developers' email address: ntfs-3g-devel@lists.sf.net This program is free software, released under the GNU General Public License and you are welcome to redistribute it under certain conditions. It comes with ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be found in the file "COPYING" distributed with this program, or online at: http://www.gnu.org/copyleft/gpl.html Usage: %s [options] device -s, --scan Scan for files (default) -p, --percentage NUM Minimum percentage recoverable -m, --match PATTERN Only work on files with matching names -C, --case Case sensitive matching -S, --size RANGE Match files of this size -t, --time SINCE Last referenced since this time -u, --undelete Undelete mode -i, --inodes RANGE Recover these inodes -o, --output FILE Save with this filename -O, --optimistic Undelete in-use clusters as well -d, --destination DIR Destination directory -b, --byte NUM Fill missing parts with this byte -T, --truncate Truncate 100%% recoverable file to exact size. -P, --parent Show parent directory -c, --copy RANGE Write a range of MFT records to a file -f, --force Use less caution -q, --quiet Less output -v, --verbose More output -V, --version Display version information -h, --help Display this help Failed to set locale, using default '%s'. Error getting information about %sFailed to determine whether %s is mountedUse the force option to ignore this error. Access is denied because the NTFS volume is already exclusively opened. The volume may be already mounted, or another software may use it which could be identified for example by the help of the 'fuser' command. You can use force option to avoid this check, but this is not recommended and may lead to data corruption. The device '%s' doesn't have a valid NTFS. Maybe you selected the wrong device? Or the whole disk instead of a partition (e.g. /dev/hda, not /dev/hda1)? Or the other way around? NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE! The usage of the /f parameter is very IMPORTANT! No modification was made to NTFS by this software. The NTFS partition is hibernated. Please resume Windows and turned it off properly, so mounting could be done safely. Access is denied because the NTFS journal file is unclean. Choices are: A) Shutdown Windows properly. B) Click the 'Safely Remove Hardware' icon in the Windows taskbar notification area before disconnecting the device. C) Use 'Eject' from Windows Explorer to safely remove the device. D) If you ran chkdsk previously then boot Windows again which will automatically initialize the journal. E) Submit 'force' option (WARNING: This solution it not recommended). F) ntfsmount: Mount the volume read-only by using the 'ro' mount option. You seem to have a SoftRAID/FakeRAID hardware and must use an activated, different device under /dev/mapper, (e.g. /dev/mapper/nvidia_eahaabcc1) to mount NTFS. Please see the 'dmraid' documentation for help. Volume is scheduled for check. Please boot into Windows TWICE, or use the 'force' option. NOTE: If you had not scheduled check and last time accessed this volume using ntfsmount and shutdown system properly, then init scripts in your distribution are broken. Please report to your distribution developers (NOT to us!) that init scripts kill ntfsmount or mount.ntfs-fuse during shutdown instead of proper umount. WARNING: Dirty volume mount was forced by the 'force' mount option. ERROR: Failed to scan device '%s'. ERROR: NO inode(s) AND NO match-regex specified! Inode Flags %%age Date Size Filename Couldn't allocate memory in copy_mft() Couldn't create output file '%s'ERROR: Failed to read MFT blocks %lld-%lld. utils.cntfsundelete.cRecovered file name %s %F %RDirectoryFileMFT Record %lld Type: %s Date: %s Data Streams: Filename: (%d) %s File Flags: System Directory Sparse Reparse Compressed Encrypted Parent: %s Size alloc: %lld Size data: %lld Date C: %s Date A: %s Date M: %s Date R: %s Name: %s Resident Compressed Encrypted Size init: %lld Size vcn: %lld Data runs: None %lld @ %lld Creating file: %s Couldn't open $BitmapCouldn't read $BitmapFile has no data streams. File is %d%% recoverable Invalid size '%s'. unknown%s/%s:%s%s/%s.%dRecord is in use by the mft Forced to continue. %s%lldCouldn't create file %sFile has resident data. Write failedClose failedFile has a sparse section. Read failedTruncation failedmftUnknown option '%s'. ERROR: Invalid Number: %s ERROR: Missing range end! Invalid time '%s'. 2021.8.22ntfsundelete %s %s%s The device %s doesn't exist Failed to mount '%s'Range to copy is backwards. Couldn't open $MFT/$DATACouldn't read MFT Record %lldRead %lld MFT Records MFT extracted to file %s bytecasecopydestinationforcehelpinodesmatchoptimisticoutputparentpercentagequietscansizetimetruncateverboseversionA,:3%,:3%{!k(͌zى&b݋Njutils_parse_sizeutils_cluster_in_usefind_first_attributeset_dateundelete_filedump_recordcalc_percentageparse_inode_argtransformparse_timeversionusageparse_optionsutils_set_localeutils_valid_deviceutils_mount_volumehandle_undeletecopy_mftmainname_matchscan_diskopen_filelist_recordverify_parentget_parent_namerescue_nameget_filenamesget_dataread_record;4yd|t|pdT,4hıTT|,xd(zRx &D$4Xx0FJ w?:*3$"\`{tX{ 8 KFD A(D0(D ABB@ęBAD X(I0N(A T DBG R DBH 0 BBB B(A0A8D IPAXGBmLMAPhJBLMA{ 8D0A(B BBBF wHQBP`BOFSAJPBZKsAhXrBBB A(A0KPXF`ChFpBxBBDIBIPT 0A(A BBBG pl;BOS L(H0A8DxRxBpxGIxBpDxCbxC)xBpLx_lxApxbHxApxCbxCcxCcxCHxBpzx[KxApsxGlxApxLWxAp~ 8A0A(B BBBA \TȭBBB A(A0D (A BBBE C (A BBBF Q(A BBB$YAdA TFN,0:BAA  ABA | @BFE B(A0A8D`hMpjhB`MhgpHhA`H 8A0A(B BBBE hMpchF`ZhipHhA`H`eBAA D0B  AABB 8P@[8C0R 8P@L 8BBA A(DP (A ABBK p8dBBB B(D0A8GwH\A 8A0A(B BBBC D HL I KE 4t BEB B(A0A8J\SACXzM_Bj 8A0A(B BBBB MZAPNwBNvBSXA[ SJ LBBB B(A0A8GgHAR 8A0A(B BBBK M_BjRYBXxFBE I(H0C8J(KI^HAO{ 8D0A(B BBBA I[WB<_WAIJHKPCHKCLVBuU`BTQ\AmHI~U_AFQ]G_\IbA]NdIIOANI[AM IG B [E G LL LWAjIrA[ IH vP[BLQqAEI[BM IJ BMrBIZAGNQBTIZAMKXANIUB0A@yb~CcdfhimOoPŠpРq֠s۠StTuvV- Xr08o  o XH oo oo0 o0 @ P ` p !! !0!@!P!`!p!!!!!!!!!"" "0"@"P"`"p"""""""""## #0#@#/usr/lib/debug/.dwz/x86_64-linux-gnu/ntfs-3g.debug3Ԡ|=4o310cee521da00d0724bf44a0243cc88807bb97.debug.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.gnu_debugaltlink.gnu_debuglink 880&hh$9 Go$Q Y oao0 0 ~no `}HBXX  0P#P#`#`# &&KXrXr &, 0088@@    G `4/