The following partition can't be recovered

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
karmapala
Posts: 5
Joined: 13 Nov 2020, 14:44

The following partition can't be recovered

#1 Post by karmapala »

Hi dear experts,
I have a 5 month old USB hard-drive which suddenly yesterday became raw.
Image

I didn't do anything, I didn't format it, I didn't run chkdsk,
I didn't even try to double click the drive to see if it still can be explored.
The hard disk contains only HD movie mkv files.

So today I use TestDisk, follow the instruction from this site "
Image
Image
Image
Image
Image
Image

Until that I don't know what to do,
should I continue or just close the window ?

Here is the log:

Code: Select all

Fri Nov 13 20:37:39 2020
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 9.3, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119356260352
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=392365604864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=107374182400
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2000398932480
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=367001600
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - ADATA SU650, S/N:2J1020071968, FW:V8X01c62
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST500DM002-1ER14C, S/N:Z4X0CMMH, FW:CC45
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate BUP Slim, S/N:00000000NABDHZHP, FW:1707

Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - Seagate BUP Slim
Partition table type: Intel

Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 16450559
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   0  3 243201  80 62 3907029165
 1 P HPFS - NTFS              0   0  3 243201  80 62 3907029165

Bad relative sector.
No partition is bootable
What should I do now ?
Any kind of help would be greatly appreciated.
Thank you in advanced.
Last edited by karmapala on 14 Nov 2020, 06:31, edited 3 times in total.

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: The following partition can't be recovered

#2 Post by recuperation »

karmapala wrote: 13 Nov 2020, 15:05 Hi dear experts,
I have a 5 month old USB hard-drive which suddenly yesterday became raw.
Image.

I didn't do anything, I didn't format it, I didn't run chkdsk,
I didn't even try to double click the drive to see if it still can be explored.
That is the best reaction possible!


What should I do now ?
Run quick search and have a look at the partitions found trying to explore them using the "p"-key (list files).
If the content cannot be displayed or does not match your expectations continue with deep search.

If succesful you can either copy the files inside to another drive or write the partition info found.

karmapala
Posts: 5
Joined: 13 Nov 2020, 14:44

Re: The following partition can't be recovered

#3 Post by karmapala »

Thank you for your quick respond, recuperation.

Because yesterday after the Quick Search the result is :
"The following partition can't be recovered"
(btw, I don't know why the pictures are not shown in the desktop Chrome browser
but in my android cellphone Chrome browser I can see all the pictures I inserted)

And I didn't dare enough to hit Enter on my keyboard to [continue],
so yesterday I just closed the cmd window.

Today I run TestDisk again, and at this time the Quick Search show 95%.
if the result of the Quick Search is the same like yesterday "The following partition can't be recovered",
I will hit Enter on my keyboard to [continue] and I will do the Deep Search.
And then I will report to you the result of the Deep Search here.

---------------------------

Anyway, the result of the Quick Search today is the same like yesterday.
So I hit Enter on the keyboard to [continue], below is the result :
08.png
08.png (23.38 KiB) Viewed 1903 times
There is no "P: List Files" option there.
So I hit Enter on my keyboard to continue, it show like below :
09.png
09.png (19.7 KiB) Viewed 1903 times
Again I hit Enter on my keyboard to do the [Deeper Search].
Now it's analyzing the cylinder and after 03% it show like below :
11.png
11.png (18.4 KiB) Viewed 1898 times
After I get the result, I will report it here.
Thank you once again, recuperation.

karmapala
Posts: 5
Joined: 13 Nov 2020, 14:44

Re: The following partition can't be recovered

#4 Post by karmapala »

The Analyze Cylinder in [Deeper Search] now is 37%.
When I touch my hard disk, it's very very hot which my finger can't stand the hot if I touch it more than 1 minute.

Is this normal ?
Should I better stop the process ?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: The following partition can't be recovered

#5 Post by cgrenier »

Your partition may be listed as Raw
- because the partition location listed in the partition table is wrong. As the current partition location is unusual, searching the partition using Quick Search and Deeper Search is a good idea. If your disk is really getting too hot, you can stop TestDisk but it will not be able to resume the partition search, you will have to restart from the beginning.
- or because the NTFS boot sector is corrupted. In this case, run TestDisk, Advanced, Boot, if BackupBS is listed, choose it, confirm, Quit and restart your computer

It may be a good idea to check the second hypothesis and if it works, stop the other TestDisk running Deeper Search.

karmapala
Posts: 5
Joined: 13 Nov 2020, 14:44

Re: The following partition can't be recovered

#6 Post by karmapala »

Your partition may be listed as Raw
Yes you are correct.
Too bad, my picture is not appearing in Desktop Browser (it appear in my cellphone browser though).

Anyway :
01.png
01.png (3.65 KiB) Viewed 1880 times
If your disk is really getting too hot, you can stop TestDisk
Done just now.
but it will not be able to resume the partition search, you will have to restart from the beginning
I think I won't do the [Deeper Search] anymore because I'm too coward if the hard disk getting very hot again ;) .
or because the NTFS boot sector is corrupted
This is what I got just before I perform the [Quick Search] :
05.png
05.png (22.59 KiB) Viewed 1880 times
run TestDisk, Advanced, Boot, if BackupBS is listed, choose it, confirm, Quit and restart your computer
Ok... I will try this, cgrenier.

Thank you for the quick reply, , cgrenier.

Below is the log after I stop the [Deeper Search] because the hard disk too hot :

Code: Select all


Sat Nov 14 12:58:22 2020
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 9.3, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119356260352
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=392365604864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=107374182400
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2000398932480
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=367001600
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - ADATA SU650, S/N:2J1020071968, FW:V8X01c62
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST500DM002-1ER14C, S/N:Z4X0CMMH, FW:CC45
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate BUP Slim, S/N:00000000NABDHZHP, FW:1707

Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - Seagate BUP Slim
Partition table type: Intel

Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 16450559
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   0  3 243201  80 62 3907029165
 1 P HPFS - NTFS              0   0  3 243201  80 62 3907029165

Bad relative sector.
No partition is bootable

search_part()
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
BAD_RS LBA=1616642733 16248234
check_part_i386 failed for partition type 06
     FAT16 >32M           100631  90 49 224640  81 37 1992204007
BAD_RS LBA=1670796474 14100972
file_pread(6,3,buffer,1670796474(371351/158/2)) lseek err Invalid argument
file_pread(6,1,buffer,1670796474(371351/158/2)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
     FAT12                371351 158  2 499971 159 10 2066280372
This partition ends after the disk limits. (start=5965763770, size=2066280372, end=8032044141, disk end=3907029167)
file_pread(6,2,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(6,14,buffer,3907031042(243201/110/48)) lseek err Invalid argument
file_pread(6,3,buffer,3907031056(243201/110/62)) lseek err Invalid argument
file_pread(6,3,buffer,3907031103(243201/111/46)) lseek err Invalid argument
file_pread(6,8,buffer,3907031119(243201/111/62)) lseek err Invalid argument
file_pread(6,11,buffer,3907031166(243201/112/46)) lseek err Invalid argument
file_pread(6,2,buffer,3907033088(243201/143/15)) lseek err Invalid argument
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 4112 GB / 3829 GiB)
The following partition can't be recovered:
     FAT12                371351 158  2 499971 159 10 2066280372

Results
   L FAT16 >32M           100631  90 49 224640  81 37 1992204007
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
 1 E extended LBA         100631   0  1 224640 254 63 1992220650
 5 L FAT16 >32M           100631  90 49 224640  81 37 1992204007

search_part()
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
BAD_RS LBA=1616642733 16248234
check_part_i386 failed for partition type 06
     FAT16 >32M           100631  90 49 224640  81 37 1992204007
file_pread(6,2,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
Search for partition aborted

Results
   L FAT16 >32M           100631  90 49 224640  81 37 1992204007

karmapala
Posts: 5
Joined: 13 Nov 2020, 14:44

Re: The following partition can't be recovered

#7 Post by karmapala »

run TestDisk, Advanced, Boot, if BackupBS is listed, choose it, confirm, Quit and restart your computer
12.png
12.png (22.28 KiB) Viewed 1878 times
Too bad, there is no [BackupBS] listed, but [Rebuild BS], cgrenier.
I hope there is something else that you can suggest me to do.

Thank you once again, cgrenier.

Below is the log after I try the [Advance] then enter the [Boot]:

Code: Select all

Sat Nov 14 17:16:53 2020
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, Novembre 2020
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 9.3, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119356260352
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=392365604864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=107374182400
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=2000398932480
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=367001600
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - ADATA SU650, S/N:2J1020071968, FW:V8X01c62
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST500DM002-1ER14C, S/N:Z4X0CMMH, FW:CC45
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate BUP Slim, S/N:00000000NABDHZHP, FW:1707

Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - Seagate BUP Slim
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 16450559
check_part_i386 failed for partition type 07
 1 P HPFS - NTFS              0   0  3 243201  80 62 3907029165

ntfs_boot_sector
 1 P HPFS - NTFS              0   0  3 243201  80 62 3907029165
filesystem size           5184059791298460365 1
sectors_per_cluster       2 0
mft_lcn                   2412677071 0
mftmirr_lcn               3899778265 0
clusters_per_mft_record   -103 0
clusters_per_index_record -30 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Locked