Page 1 of 1

I'm lost. Did a full format but canceled at 30%.

Posted: 01 May 2014, 22:35
by koreninja
I screwed up and accidentally formatted my external hard drive instead of my other drive. Instead of doing a quick format I did a full format but noticed what I did and hit cancel at about 30-40%, but by that time it was too late. Now the drive is asking to be formatted fully.

Anyways, is it possible to recover with a partial full format? I have no clue how to use this software but I tried and got the error "The harddisk seems too small!" which brought up quite a bit of google hits but I couldn't seem to find a solution I understood. When I hit P it gives me "Can't open filesystem. Filesystem seems damaged."

I did both a quick scan and a deep scan. Here are the results along with the log.

I have no real clue what I am doing but I followed the tutorial as best as I could and ended up with problems that it did not really explain.

Can someone please help or atleast let me know if this is a waste of time and not fixable?

The HD is a Samsung 1TB.

Thank you,
KN

Image
Image
Image

Code: Select all

Thu May  1 12:26:29 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-04-28T11:22:53
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=107374182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=196574445568
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1000169537536
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - ST9320325AS, S/N:20202020202020202020202032534a575947354a, FW:0003SDM1
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD My Passport 0730, S/N:WX91AB0J0338, FW:1012

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB - WD My Passport 0730
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size           1953456128
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,8,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,14,buffer,1953458178(121597/37/43)) lseek err Invalid argument
file_pread(5,3,buffer,1953458192(121597/37/57)) lseek err Invalid argument
file_pread(5,3,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,8,buffer,1953458255(121597/38/57)) lseek err Invalid argument
file_pread(5,11,buffer,1953458302(121597/39/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953460224(121597/70/10)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size           1953456128
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,8,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,14,buffer,1953458178(121597/37/43)) lseek err Invalid argument
file_pread(5,3,buffer,1953458192(121597/37/57)) lseek err Invalid argument
file_pread(5,3,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,8,buffer,1953458255(121597/38/57)) lseek err Invalid argument
file_pread(5,11,buffer,1953458302(121597/39/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953460224(121597/70/10)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size           1953456128
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
BAD_RS LBA=3863446393 12655609
file_pread(5,3,buffer,3863446393(240488/105/59)) lseek err Invalid argument
file_pread(5,1,buffer,3863446393(240488/105/59)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0E
     FAT16 LBA            240488 105 59 371129  74 47 2098745701
This partition ends after the disk limits. (start=3863446393, size=2098745701, end=1667224797, disk end=1953458176)
BAD_RS LBA=76421472 5032428
file_pread(5,3,buffer,76421472(272106/93/20)) lseek err Invalid argument
file_pread(5,1,buffer,76421472(272106/93/20)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           272106  93 20 277601  70  1   88275708
This partition ends after the disk limits. (start=76421472, size=88275708, end=164697179, disk end=1953458176)
file_pread(5,2,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

NTFS at 121597/37/40
filesystem size           1953456128
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,14,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,8,buffer,1953458183(121597/37/48)) lseek err Invalid argument
file_pread(5,3,buffer,1953458191(121597/37/56)) lseek err Invalid argument
file_pread(5,3,buffer,1953458238(121597/38/40)) lseek err Invalid argument
file_pread(5,8,buffer,1953458254(121597/38/56)) lseek err Invalid argument
file_pread(5,11,buffer,1953458301(121597/39/40)) lseek err Invalid argument
file_pread(5,2,buffer,1953460223(121597/70/9)) lseek err Invalid argument
file_pread(5,6,buffer,1953458178(121597/37/43)) lseek err Invalid argument
file_pread(5,1,buffer,1953458194(121597/37/59)) lseek err Invalid argument
file_pread(5,1,buffer,1953458241(121597/38/43)) lseek err Invalid argument
file_pread(5,1,buffer,1953458262(121597/39/1)) lseek err Invalid argument
file_pread(5,1,buffer,1953458312(121597/39/51)) lseek err Invalid argument
file_pread(5,1,buffer,1953460225(121597/70/11)) lseek err Invalid argument
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 3052 GB / 2842 GiB)
The following partitions can't be recovered:
     FAT16 LBA            240488 105 59 371129  74 47 2098745701
     FAT16 >32M           272106  93 20 277601  70  1   88275708

Results
   * HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size           1953456128
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,8,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(5,14,buffer,1953458178(121597/37/43)) lseek err Invalid argument
file_pread(5,3,buffer,1953458192(121597/37/57)) lseek err Invalid argument
file_pread(5,3,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(5,8,buffer,1953458255(121597/38/57)) lseek err Invalid argument
file_pread(5,11,buffer,1953458302(121597/39/41)) lseek err Invalid argument
file_pread(5,2,buffer,1953460224(121597/70/10)) lseek err Invalid argument

Results
   * HPFS - NTFS              0  32 33 121597  37 40 1953456128
     NTFS, blocksize=4096, 1000 GB / 931 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 121597  37 40 1953456128
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

Re: I'm lost. Did a full format but canceled at 30%.

Posted: 02 May 2014, 09:08
by cgrenier
Run TestDisk, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write and confirm.
If it doesn't work, you can always use PhotoRec but it won't recover the original filenames.

Re: I'm lost. Did a full format but canceled at 30%.

Posted: 02 May 2014, 11:43
by koreninja
I've had PhotoRec running for about an hour now, with 8 hours left to do and it hasn't found 1 file yet.

Is that normal?

Re: I'm lost. Did a full format but canceled at 30%.

Posted: 03 May 2014, 09:50
by cgrenier
If you are running PhotoRec on the free space of the partition, no file will be recovered
- if the format process has wipped the disk
- or if the filesystem blocksize is larger than the previous one or the alignement of the blocks is different