External turned dark (Raw and missing partition )

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
prosaic
Posts: 3
Joined: 31 Aug 2021, 01:07

External turned dark (Raw and missing partition )

#1 Post by prosaic »

Hi everyone,

I've run a test on an external 1tb, chkdsk says its a RAW drive. TestDisk with quick and deeper came up with no results.
This is chat log:

Code: Select all


Tue Aug 31 00:07:08 2021
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, May 2021
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 9.3, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=480103981056
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=217281724416
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=262144000000
Hard disk list
Disk \\.\PhysicalDrive0 - 480 GB / 447 GiB - CHS 58369 255 63, sector size=512 - CT480BX500SSD1, S/N:2015E3F60E06, FW:M6CR022
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - PHD 3.0 Silicon-Power, S/N:FE10#902001033420041

Partition table type (auto): Intel
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - PHD 3.0 Silicon-Power
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
file_win32_pread(612,1,buffer,2050(0/32/35)) read err: read after end of file
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
Current partition structure:
check_FAT: can't read FAT boot sector
Invalid FAT boot sector
 1 * FAT32 LBA                0  32 33 121601  25 24 1953519616
 1 * FAT32 LBA                0  32 33 121601  25 24 1953519616

search_part()
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63
file_win32_pread(612,16,buffer,2080(0/33/2)) read err: read after end of file
file_win32_pread(612,1,buffer,2080(0/33/2)) read err: read after end of file
file_win32_pread(612,2,buffer,2082(0/33/4)) read err: read after end of file
file_win32_pread(612,16,buffer,2048(0/32/33)) read err: read after end of file
file_win32_pread(612,1,buffer,2048(0/32/33)) read err: read after end of file
file_win32_pread(612,16,buffer,479232(29/211/55)) read err: read after end of file
file_win32_pread(612,1,buffer,479232(29/211/55)) read err: read after end of file
file_win32_pread(612,1,buffer,479233(29/211/56)) read err: read after end of file
file_win32_pread(612,14,buffer,479234(29/211/57)) read err: read after end of file
file_win32_pread(612,3,buffer,479248(29/212/8)) read err: read after end of file
file_win32_pread(612,16,buffer,481280(29/244/24)) read err: read after end of file
file_win32_pread(612,1,buffer,481280(29/244/24)) read err: read after end of file
file_win32_pread(612,1,buffer,481281(29/244/25)) read err: read after end of file
file_win32_pread(612,14,buffer,481282(29/244/26)) read err: read after end of file
file_win32_pread(612,3,buffer,481296(29/244/40)) read err: read after end of file
file_win32_pread(612,3,buffer,481343(29/245/24)) read err: read after end of file
file_win32_pread(612,8,buffer,481359(29/245/40)) read err: read after end of file
file_win32_pread(612,11,buffer,481406(29/246/24)) read err: read after end of file

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63
file_win32_pread(612,16,buffer,2080(0/33/2)) read err: read after end of file
file_win32_pread(612,1,buffer,2080(0/33/2)) read err: read after end of file
file_win32_pread(612,2,buffer,2082(0/33/4)) read err: read after end of file
file_win32_pread(612,16,buffer,2047(0/32/32)) read err: read after end of file
file_win32_pread(612,16,buffer,2048(0/32/33)) read err: read after end of file
file_win32_pread(612,1,buffer,2048(0/32/33)) read err: read after end of file
file_win32_pread(612,15,buffer,2049(0/32/34)) read err: read after end of file
file_win32_pread(612,16,buffer,479232(29/211/55)) read err: read after end of file
file_win32_pread(612,1,buffer,479232(29/211/55)) read err: read after end of file
file_win32_pread(612,1,buffer,479231(29/211/54)) read err: read after end of file
file_win32_pread(612,1,buffer,479233(29/211/56)) read err: read after end of file
file_win32_pread(612,14,buffer,479234(29/211/57)) read err: read after end of file
file_win32_pread(612,3,buffer,479248(29/212/8)) read err: read after end of file
file_win32_pread(612,16,buffer,481280(29/244/24)) read err: read after end of file
file_win32_pread(612,1,buffer,481280(29/244/24)) read err: read after end of file
file_win32_pread(612,1,buffer,481279(29/244/23)) read err: read after end of file
file_win32_pread(612,1,buffer,481281(29/244/25)) read err: read after end of file
file_win32_pread(612,14,buffer,481282(29/244/26)) read err: read after end of file
file_win32_pread(612,3,buffer,481296(29/244/40)) read err: read after end of file
file_win32_pread(612,3,buffer,481343(29/245/24)) read err: read after end of file
file_win32_pread(612,8,buffer,481359(29/245/40)) read err: read after end of file
file_win32_pread(612,11,buffer,481406(29/246/24)) read err: read after end of file

Results
Can't open backup.log file: No such file or directory
interface_load

interface_write()
 
No partition found or selected for recovery

interface_write()
 
No partition found or selected for recovery

Any assistance would be appreciated - trying to recover the partition or slowly take some important files.
Thanks!

EDIT: I'm trying to rebuild the boot sector with "RebuildBS" - Status: Searching for FAT Table 6%. (Stuck at 6 for awhile now)

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: External turned dark (Raw and missing partition )

#2 Post by recuperation »

What is "external 1TB", please?!

prosaic
Posts: 3
Joined: 31 Aug 2021, 01:07

Re: External turned dark (Raw and missing partition )

#3 Post by prosaic »

External 1TB is:
Disk \\.\PhysicalDrive2 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - PHD 3.0 Silicon-Power, S/N:FE10#902001033420041

Currently picked up as FAT32 / with a table of "Intel" detected.

Snapshot of it with crystaldiskinfo:
DiskInfo64_5HnUD0ZTKB.jpg
DiskInfo64_5HnUD0ZTKB.jpg (73.39 KiB) Viewed 1957 times

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: External turned dark (Raw and missing partition )

#4 Post by recuperation »

Your drive is about to die already having 280 pending sectors.
Duplicate it as described in the manual.
Run Photorec and/or any other commercial recovery software solution.

prosaic
Posts: 3
Joined: 31 Aug 2021, 01:07

Re: External turned dark (Raw and missing partition )

#5 Post by prosaic »

"Duplicate it as described in the manual."
I don't have a manual I'm afraid.

Would something like DDresuce work, running it off a LINUX distro via usb to clone the RAW Hardrive?
I've run Photorec previously but the filenames are not restored, and wondering if this hard drive will not recover its file structure??

Or is Photorec the only option?
Thanks!

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: External turned dark (Raw and missing partition )

#6 Post by recuperation »

1. Not two seconds left over for a google search?
2. Never looked into the unpacked downloaded Testdisk archive?
3. Did you ever notice that this forum is a subdomain of cgsecurity.org? Have you ever looked there?

Maybe I expect too much from users of this forum.

Now, please enter the stroller and let me drive you around:

1. Use Google to locate the manual.
2. The manual comes with the Testdisk download. In today's world software typically comes with digital manuals and not printed ones. So does Testdisk.
3. cgsecurity.org contains lots of information worth reading.

Locked