WD My Book Essential 2TB corrupted and unreadable

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
benniboi88
Posts: 2
Joined: 15 Feb 2013, 08:13

WD My Book Essential 2TB corrupted and unreadable

#1 Post by benniboi88 »

Hi Guys.
First of all, I like to say I'm pretty much a noob when it comes to fixing computer stuff, so any help will be much appreciated!
I recently bought a 2TB WD My Book Essentials external hard drive a few months ago in September last year. I stored most of my videos, photos as well as documents for work. A few days ago I couldn't access this external hard drive, it said it wanted me to format it as it was corrupted and unreadable, which I didn't click 'yes' as I don't want all my files to be deleted.
So I came across TestDisk, and read the Step by Step on how to recover lost partitions. However the examples given are not similar to what I have at the moment.
I right clicked My Computer -> Manage -> Disk Management, and it says the File System is RAW and its status is Healthy (Active, Primary Partition) and has an assigned letter of (F:), which I'm pretty sure that was the drive letter when it was functioning properly.
So the first thing is, is that I'm not sure if this external hard drive was already formatted as NTFS or FAT.

I ran TestDisk -> Analyze -> Quick Search
And there was no results.

I then did a Deeper Search, and while it was scanning, there was an error of Invalid FAT boot sector (so I'm guessing this external was formatted to FAT and not NTFS?) screenshot below.

As the scanning had finished, I get the message of 'The harddisk <2000GB/1862GiB> seems too small! <<3431GB/3196GiB>
The following partitions can't be recovered:
Fat32 LBA
FAT16 <32M
(screenshot below)

I also tried to press P:list files but it says that the file system seems damaged.
So I don't know what is wrong with it.

Later on I went to Advanced -> Boot
I saw that Boot sector status was OK, but my Backup boot sector was BAD, so I pressed the 'Org. BS' and now they are both OK and identical. Should I have done that? or did that make it worse?

So I really need help. I have lots of data on this hard drive which I want to save.
I've took screenshots of some of the results, and also pasted in the log entry.
Any help would be great!
Thanks.
Ben.

Capture4.PNG
Capture4.PNG (22.84 KiB) Viewed 6630 times
Capture.PNG
Capture.PNG (18.49 KiB) Viewed 6630 times
Capture2.PNG
Capture2.PNG (17.45 KiB) Viewed 6630 times

Fri Feb 15 10:24:51 2013
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, December 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-02-11T11:20:27
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=494723399680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=505373786112
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000364240896
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EALX-009BA0, S/N:2020202057202d44435754413552303236313033, FW:15.01H15
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Book 1140, S/N:WCAZAC551755, FW:1019

Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1862 GiB - WD My Book 1140
Partition table type: Intel

Analyse Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
1 * HPFS - NTFS 0 32 33 243197 57 60 3906961408

search_part()
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63
NTFS at 0/32/33
filesystem size 3906961408
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB
file_pread(5,8,buffer,3906963456(243197/57/61)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,3906963456(243197/57/61)) ReadFile The drive cannot find the sector requested.

file_pread(5,15,buffer,3906963457(243197/57/62)) lseek err Invalid argument
file_pread(5,3,buffer,3906963472(243197/58/14)) lseek err Invalid argument
file_pread(5,3,buffer,3906963519(243197/58/61)) lseek err Invalid argument
file_pread(5,8,buffer,3906963535(243197/59/14)) lseek err Invalid argument
file_pread(5,11,buffer,3906963582(243197/59/61)) lseek err Invalid argument
file_pread(5,2,buffer,3906965504(243197/90/30)) lseek err Invalid argument

Results
* HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 243197 57 60 3906961408

search_part()
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63
NTFS at 0/32/33
filesystem size 3906961408
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB
BAD_RS LBA=2805020684 12138721
check_part_i386 failed for partition type 0C
FAT32 LBA 174604 117 54 417235 242 40 3897874877
This partition ends after the disk limits. (start=2805020684, size=3897874877, end=2407928264, disk end=3906963456)
BAD_RS LBA=3505716288 5974543
check_part_i386 failed for partition type 04
FAT16 <32M 218220 190 19 313266 168 45 1526912631
This partition ends after the disk limits. (start=3505716288, size=1526912631, end=737661622, disk end=3906963456)
file_pread(5,2,buffer,3906963456(243197/57/61)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,3906963456(243197/57/61)) ReadFile The drive cannot find the sector requested.

NTFS at 243197/57/60
filesystem size 3906961408
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS found using backup sector, blocksize=4096, 2000 GB / 1862 GiB
file_pread(5,7,buffer,3906963457(243197/57/62)) lseek err Invalid argument
file_pread(5,1,buffer,3906963457(243197/57/62)) lseek err Invalid argument
file_pread(5,14,buffer,3906963458(243197/57/63)) lseek err Invalid argument
file_pread(5,3,buffer,3906963472(243197/58/14)) lseek err Invalid argument
file_pread(5,3,buffer,3906963519(243197/58/61)) lseek err Invalid argument
file_pread(5,8,buffer,3906963535(243197/59/14)) lseek err Invalid argument
file_pread(5,11,buffer,3906963582(243197/59/61)) lseek err Invalid argument
file_pread(5,2,buffer,3906965504(243197/90/30)) lseek err Invalid argument
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1862 GiB) seems too small! (< 3431 GB / 3196 GiB)
The following partitions can't be recovered:
FAT32 LBA 174604 117 54 417235 242 40 3897874877
FAT16 <32M 218220 190 19 313266 168 45 1526912631

Results
* HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
1 * HPFS - NTFS 0 32 33 243197 57 60 3906961408
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
1 * HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB
Not an exFAT boot sector.

1 * HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
1 * HPFS - NTFS 0 32 33 243197 57 60 3906961408
NTFS, blocksize=4096, 2000 GB / 1862 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size 3906961408
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

benniboi88
Posts: 2
Joined: 15 Feb 2013, 08:13

Re: WD My Book Essential 2TB corrupted and unreadable

#2 Post by benniboi88 »

Hey guys.
I still have no luck trying to resolve this issue. Can I have help please?
Any help will be much appreciated.
Thanks

diskdusk
Posts: 1
Joined: 01 Jun 2013, 06:21

Re: WD My Book Essential 2TB corrupted and unreadable

#3 Post by diskdusk »

Exact same problem here.

Anyone? Anything?

polymerase
Posts: 1
Joined: 17 Jun 2013, 10:53

Re: WD My Passport corrupted and unreadable

#4 Post by polymerase »

I have a WD MyPassport
I accidently pulled my WD Mypassport USB cable out of my macbook pro and it seemed to corupt the WD MP disk.
Now it can not be read by my Mac
-----------
I have run testdisk and it gave the following message:
------------------------------------------------

TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/rdisk2 - 499 GB / 465 GiB - 975400960 sectors (RO)
Analyse cylinder 98304/975400959: 00%


check_FAT: Unusual media descriptor (0xf0!=0xf8)
Warning: number of heads/cylinder mismatches 255 (FAT) != 1 (HD)
Warning: number of sectors per track mismatches 32 (FAT) != 1 (HD)
FAT32 LBA 2048 975400959 975398912 [MY PASSPORT]
check_FAT: Unusual media descriptor (0xf0!=0xf8)
Warning: number of sectors per track mismatches 50567 (FAT) != 1 (HD)
FAT32 LBA 2048 2266111 2264064
check_FAT: Unusual media descriptor (0xf0!=0xf8)
Warning: number of heads/cylinder mismatches 255 (FAT) != 1 (HD)
Warning: number of sectors per track mismatches 32 (FAT) != 1 (HD)
FAT32 LBA 2054 975400965 975398912 [MY PASSPORT]



Stop

------------------------------------------------


TestDisk 6.14-WIP, Data Recovery Utility, April 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org

Disk /dev/rdisk2 - 499 GB / 465 GiB - 975400960 sectors (RO)

The harddisk (499 GB / 465 GiB) seems too small! (< 16227472 TB / 14758800 TiB)
Check the harddisk size: HD jumpers settings, BIOS detection...

The following partitions can't be recovered:
Partition Start End Size in sectors
> FAT32 LBA 2054 975400965 975398912 [MY PASSPORT]
Linux 128914245 31694282386660165 31694282257745920
Linux 148219139 31694282405965059 31694282257745920
FAT32 LBA 165544034 3593303227 3427759194
FAT12 209819307 1327824903 1118005597
FAT12 240602621 1985433180 1744830560
FAT16 <32M 244360468 3952141590 3707781123
FAT16 <32M 286295608 4488647464 4202351857
FAT16 LBA 343260827 1417120586 1073859760
FAT32 LBA 370782921 3131162949 2760380029

[ Continue ]
FAT32, blocksize=32768, 499 GB / 465 GiB

------------------------------------------------
I have managed to get some files of the disk. My question is, do i need to alter the disk geometry?
Hope anyone can help.

Best wishes,

Peter

Locked