Hard drive stuff up - help appreciated!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Todd91
Posts: 6
Joined: 26 Apr 2015, 05:32

Hard drive stuff up - help appreciated!

#1 Post by Todd91 »

Ok guys, I need some help : (
Have a 2TB HDD (Seagate Barracuda ST2000DM001) acting as D:/ with Win7 installed on SSD (C:/).
Disc mainly contains programs, documents and photos. No backup available (mistake 1).
Was previously working fine, however last week I decided I’d try overclocking my CPU a little using ASRock’s utility. Adjusted the voltages, clicked apply….frozen screen (mistake 2).
Rebooted, turns out my PC can no longer read my D drive. Everything else seems to work fine (albeit any programs dependent on D drive are broken).
Had a look in device mananger -> hard drive shows up as uninitialized. I click yes, of course I want to damn initialise it! (mistake 3).
Computer asks me whether to initialise it was MBR or GPT. I do a bit of googling, find out MBR only supports partitions up to 2TB in size, however GPT is newer and not restricted by this. My HDD is spot on 2tb, and google doesn’t really know whether the ST2000DM001 is MBR or GPT, but I cleverly realise that my HDD is part of a family of disks that include 4tb HDDs, therefore logic and common sense dictate that my HDD must use GPT too, right? I got ahead and initialise my HDD as GPT (mistake 4).

The good news is, I don’t think I’ve made mistake 5 yet.
The bad news is, despite days of tests and data recovery programs I haven’t made a whole lot of progress. Using EaseUS data recovery I’ve managed to get about 75% of the raw data, but much of it has lost its file paths, file names, and is largely useless to me like that. I think the full thing is largely recoverable, but I just need to tread carefully. It seems re-initialising as MBR and trying again would result in complete data loss?

Someone please help.

I have a spare HDD, if someone knows a way to mirror my broken HDD to it and experiement off the clone that would also be appreciated.

My results so far: (I’ll add in screenshots later if necessary, my snip tool seems to be broken).

Disk management
Picks up missing disk as ‘Disk 1, Basic, 1862.89GB, Online, 100% Unallocated)

AOMEI partition assistant
‘Check Bad Sectors’ with AOMEI partition assistant: (see screenshot) – took 80 hours to perform(!)
Checking...
Bad sector at: 1612820176
Bad sector at: 1612820177
Bad sector at: 1612820178
Bad sector at: 1612820179
Bad sector at: 1612820180
Bad sector at: 1612820181
Bad sector at: 1612820182
Bad sector at: 1612820183
Bad sector at: 1612823296
Bad sector at: 1612823297
Bad sector at: 1612823298
Bad sector at: 1612823299
Bad sector at: 1612823300
Bad sector at: 1612823301
Bad sector at: 1612823302
Bad sector at: 1612823303
Checking finished.

EaseUS Partition Master – Partition recovery wizard
- Returmed 29 ‘Deleted’ partitions, some EXT3, some FAT12, ranging between 360KB and 886MB in size.
- Most seem empty? I havem’t clicked ‘proceed’ as afraid will lose everything
- Some partitions are labelled things like ‘dban-1.0.6’, ‘FREEDOS’, and ‘NBGBOOT’ and ‘GParted-EFI’. Preview shows the odd file in some of the labelled partitions, nothing of significance to myself.

Testdisk-7.0: Log as follows:

Thu Apr 9 22:33:33 2015
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, March 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-04-09T12:52:46
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119926685696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=317532160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=624099328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=3000584577024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1000204828672
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=3000579915776
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - SanDisk SDSSDX120GG2, S/N:212133040072, FW:R112
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM 001-1CH164, S/N:1S0E2SH3, FW:CC43
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508
Disk /dev/sde - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - BUFFALO HD-PCTU3, FW:0001
Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508
Drive D: - 317 MB / 302 MiB - CHS 75 64 32, sector size=2048 - HL-DT-ST DVDRAM GH24NS90, S/N:WKCFG60L20 1, FW:IN01
Drive G: - 624 MB / 595 MiB - CHS 148 64 32, sector size=2048 - HL-DT-ST BDDVDRW CH12LS28, S/N:9KCPFC4944 9, FW:1.00
Drive H: - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Drive K: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508

Partition table type (auto): EFI GPT
Disk /dev/sdb - 2000 GB / 1863 GiB - ST2000DM 001-1CH164
Partition table type: Intel

Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Hard drive stuff up - help appreciated!

#2 Post by Fiona »

Bad sectors and read errors can cause that an OS or testdisk hang.
You can use crystal disk info to check your disk.
Please use the portable version, because the installer (*.exe) contains adware Open Candy.
Initializing a disk should only write a signatur to your MBR so that windows can use it!
Info:
http://www.multibooters.com/articles/ha ... ature.html
MBR doesn't touch any data within partition or file system.
At least in my tests it was working?
Using the right disk type like Intel or GPT would be better.
Intel MBR would scan a lot faster.
Of course, except if you have bad sectors and testdisk or your OS hangs.
Cloning a disk can help.
It would be depend on how familiar you're with Knoppix and dd.
Info:
http://www.cgsecurity.org/wiki/Damaged_Hard_Disk
Under windows shareware like True Image could help?
Please be careful where you clone your disk.
Driveletters could be changed.

Fiona

Todd91
Posts: 6
Joined: 26 Apr 2015, 05:32

Re: Hard drive stuff up - help appreciated!

#3 Post by Todd91 »

Thanks for your input!
Sorry, I'm just learning as I'm going, and not familiar with knoppix.
CrystalDiscInfo:

Code: Select all

----------------------------------------------------------------------------
CrystalDiskInfo 6.3.1 (C) 2008-2015 hiyohiyo
                                Crystal Dew World : http://crystalmark.info/
----------------------------------------------------------------------------

    OS : Windows 7 Ultimate SP1 [6.1 Build 7601] (x64)
  Date : 2015/04/26 21:12:56

-- Controller Map ----------------------------------------------------------
 + Intel(R) 7 Series/C216 Chipset Family SATA AHCI Controller [ATA]
   - SanDisk SDSSDX120GG25
   - ST2000DM001-1CH164
   - HL-DT-ST DVDRAM GH24NS90
   - HL-DT-ST BDDVDRW CH12LS28
 - Asmedia 106x SATA Controller [SCSI]
 - AC3EXWQI IDE Controller [SCSI]
 - ASRock RAM Disk [SCSI]

-- Disk List ---------------------------------------------------------------
 (1) SanDisk SDSSDX120GG25 : 120.0 GB [0/0/0, pd1] - sf
 (2) ST2000DM001-1CH164 : 2000.3 GB [1/0/1, pd1] - st
 (3) ST3000DM001-1E6166 : 3000.5 GB [2/X/X, sa1] (V=0BC2, P=3320) - st
 (4) ST3000DM003-1F216N : 3000.5 GB [3/X/X, sa1] (V=0BC2, P=A0A1) - st
 (5) WDC WD10JPVT-00A1YT0 : 1000.2 GB [4/X/X, sa1] (V=0411, P=01DE) - wd
 (6) ST3000DM001-1CH166 : 3000.5 GB [5/X/X, sa1] (V=0BC2, P=A0A1) - st

----------------------------------------------------------------------------
 (2) ST2000DM001-1CH164
----------------------------------------------------------------------------
           Model : ST2000DM001-1CH164
        Firmware : CC43
   Serial Number : S1E0S23H
       Disk Size : 2000.3 GB (8.4/137.4/2000.3/2000.3)
     Buffer Size : Unknown
     Queue Depth : 32
    # of Sectors : 3907029168
   Rotation Rate : 7200 RPM
       Interface : Serial ATA
   Major Version : ATA8-ACS
   Minor Version : ATA8-ACS version 4
   Transfer Mode : SATA/600 | SATA/600
  Power On Hours : 18645 hours
  Power On Count : 534 count
     Temperature : 33 C (91 F)
   Health Status : Caution
        Features : S.M.A.R.T., APM, 48bit LBA, NCQ
       APM Level : 8080h [ON]
       AAM Level : ----

-- S.M.A.R.T. --------------------------------------------------------------
ID Cur Wor Thr RawValues(6) Attribute Name
01 116 _89 __6 0000066B8638 Read Error Rate
03 _95 _95 __0 000000000000 Spin-Up Time
04 _99 _99 _20 0000000005C4 Start/Stop Count
05 100 100 _36 000000000048 Reallocated Sectors Count
07 _62 _52 _30 005208262682 Seek Error Rate
09 _79 _79 __0 0000000048D5 Power-On Hours
0A 100 100 _97 000000000000 Spin Retry Count
0C 100 100 _20 000000000216 Power Cycle Count
B7 100 100 __0 000000000000 Vendor Specific
B8 100 100 _99 000000000000 End-to-End Error
BB __1 __1 __0 0000000000F9 Reported Uncorrectable Errors
BC 100 _96 __0 000000000018 Command Timeout
BD _97 _97 __0 000000000003 High Fly Writes
BE _67 _47 _45 000027190021 Airflow Temperature
BF 100 100 __0 000000000000 G-Sense Error Rate
C0 100 100 __0 00000000007D Power-off Retract Count
C1 _99 _99 __0 000000000E06 Load/Unload Cycle Count
C2 _33 _53 __0 000900000021 Temperature
C5 100 100 __0 000000000010 Current Pending Sector Count
C6 100 100 __0 000000000010 Uncorrectable Sector Count
C7 200 200 __0 000000000000 UltraDMA CRC Error Count
F0 100 253 __0 4D4200004644 Head Flying Hours
F1 100 253 __0 0008F3CBD380 Total Host Writes
F2 100 253 __0 0011633C6DD3 Total Host Reads

-- IDENTIFY_DEVICE ---------------------------------------------------------
        0    1    2    3    4    5    6    7    8    9
000: 0C5A 3FFF C837 0010 0000 0000 003F 0000 0000 0000
010: 2020 2020 2020 2020 2020 2020 5331 4530 5332 3348
020: 0000 0000 0004 4343 3433 2020 2020 5354 3230 3030
030: 444D 3030 312D 3143 4831 3634 2020 2020 2020 2020
040: 2020 2020 2020 2020 2020 2020 2020 8010 4000 2F00
050: 4000 0200 0200 0007 3FFF 0010 003F FC10 00FB 0110
060: FFFF 0FFF 0000 0007 0003 0078 0078 0078 0078 0000
070: 0000 0000 0000 0000 0000 001F 850E 0006 004C 0040
080: 01F0 0029 346B 7D09 4163 3469 BC09 4163 407F 0067
090: 0067 8080 FFFE 0000 D000 0000 0000 0000 0000 0000
100: 88B0 E8E0 0000 0000 0000 0000 6003 0000 5000 C500
110: 51CE C757 0000 0000 0000 0000 0000 0000 0000 401E
120: 401C 0000 0000 0000 0000 0000 0000 0000 0029 88B0
130: E8E0 88B0 E8E0 2020 0002 0140 0100 5000 3C06 3C0A
140: 0000 003C 0000 0008 0000 0000 05FF 0280 0000 0000
150: 0008 0000 0000 0000 0000 0000 0000 0000 5800 A800
160: 0000 0000 0000 0000 0000 0000 0000 0000 0002 0000
170: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
180: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
190: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
200: 0000 0000 0000 0000 0000 0000 3085 0000 0000 4000
210: 0000 0000 0000 0000 0000 0000 0000 1C20 0000 0000
220: 0000 0000 1020 0000 0000 0000 0000 0000 0000 0000
230: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
240: 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000
250: 0000 0000 0000 0000 0000 1BA5

-- SMART_READ_DATA ---------------------------------------------------------
     +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 0A 00 01 0F 00 74 59 38 86 6B 06 00 00 00 03 03
010: 00 5F 5F 00 00 00 00 00 00 00 04 32 00 63 63 C4
020: 05 00 00 00 00 00 05 33 00 64 64 48 00 00 00 00
030: 00 00 07 0F 00 3E 34 82 26 26 08 52 00 00 09 32
040: 00 4F 4F D5 48 00 00 00 00 00 0A 13 00 64 64 00
050: 00 00 00 00 00 00 0C 32 00 64 64 16 02 00 00 00
060: 00 00 B7 32 00 64 64 00 00 00 00 00 00 00 B8 32
070: 00 64 64 00 00 00 00 00 00 00 BB 32 00 01 01 F9
080: 00 00 00 00 00 00 BC 32 00 64 60 18 00 00 00 00
090: 00 00 BD 3A 00 61 61 03 00 00 00 00 00 00 BE 22
0A0: 00 43 2F 21 00 19 27 00 00 00 BF 32 00 64 64 00
0B0: 00 00 00 00 00 00 C0 32 00 64 64 7D 00 00 00 00
0C0: 00 00 C1 32 00 63 63 06 0E 00 00 00 00 00 C2 22
0D0: 00 21 35 21 00 00 00 09 00 00 C5 12 00 64 64 10
0E0: 00 00 00 00 00 00 C6 10 00 64 64 10 00 00 00 00
0F0: 00 00 C7 3E 00 C8 C8 00 00 00 00 00 00 00 F0 00
100: 00 64 FD 44 46 00 00 42 4D 36 F1 00 00 64 FD 80
110: D3 CB F3 08 00 00 F2 00 00 64 FD D3 6D 3C 63 11
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 3F 02 00 73
170: 03 00 01 00 01 D6 02 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 22 00 00 00 01 05 05 05 05 05 05 05
190: 05 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 5B A9 BA 10 0C 3D 00 00
1B0: 00 00 00 00 01 00 B0 D1 80 D3 CB F3 08 00 00 00
1C0: D3 6D 3C 63 11 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 CC 1D 00 00 01 00 00 00
1E0: 00 00 00 00 60 01 00 00 05 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 BC

-- SMART_READ_THRESHOLD ----------------------------------------------------
     +0 +1 +2 +3 +4 +5 +6 +7 +8 +9 +A +B +C +D +E +F
000: 01 00 01 06 00 00 00 00 00 00 00 00 00 00 03 00
010: 00 00 00 00 00 00 00 00 00 00 04 14 00 00 00 00
020: 00 00 00 00 00 00 05 24 00 00 00 00 00 00 00 00
030: 00 00 07 1E 00 00 00 00 00 00 00 00 00 00 09 00
040: 00 00 00 00 00 00 00 00 00 00 0A 61 00 00 00 00
050: 00 00 00 00 00 00 0C 14 00 00 00 00 00 00 00 00
060: 00 00 B7 00 00 00 00 00 00 00 00 00 00 00 B8 63
070: 00 00 00 00 00 00 00 00 00 00 BB 00 00 00 00 00
080: 00 00 00 00 00 00 BC 00 00 00 00 00 00 00 00 00
090: 00 00 BD 00 00 00 00 00 00 00 00 00 00 00 BE 2D
0A0: 00 00 00 00 00 00 00 00 00 00 BF 00 00 00 00 00
0B0: 00 00 00 00 00 00 C0 00 00 00 00 00 00 00 00 00
0C0: 00 00 C1 00 00 00 00 00 00 00 00 00 00 00 C2 00
0D0: 00 00 00 00 00 00 00 00 00 00 C5 00 00 00 00 00
0E0: 00 00 00 00 00 00 C6 00 00 00 00 00 00 00 00 00
0F0: 00 00 C7 00 00 00 00 00 00 00 00 00 00 00 F0 00
100: 00 00 00 00 00 00 00 00 00 00 F1 00 00 00 00 00
110: 00 00 00 00 00 00 F2 00 00 00 00 00 00 00 00 00
120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
140: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
150: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
160: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
170: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
190: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1A0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1B0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1C0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1D0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1E0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
1F0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 E3
Apologies, I'm teaching myself this as I'm going, but I'll try to keep up. You're saying the fact I initialised the disk shouldn't affect the testdisk results?
I read up on the geometry of my HDD:
http://www.seagate.com/staticfiles/supp ... 686584.pdf
2.3 Default logical geometry
• Cylinders: 16,383
• Read/write heads: 16
• Sectors per track: 63
Attempted re-analysing (quick scan) with above modified geometry (instead of 243201 cylinders, 255 heads, 63 sectors per track), as an Intel/PC:

Code: Select all

Sun Apr 26 17:56:19 2015
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, March 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-04-09T12:52:46
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119926685696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=317532160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=3000579915776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=3961473024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=3000584577024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1000204828672
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=3000579915776
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - SanDisk SDSSDX120GG2, S/N:212133040072, FW:R112
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM 001-1CH164, S/N:1S0E2SH3, FW:CC43
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508
Disk /dev/sde - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - BUFFALO HD-PCTU3, FW:0001
Disk /dev/sdf - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5JTNXR, FW:D802
Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508
Disk \\.\PhysicalDrive5 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5JTNXR, FW:D802
Drive D: - 317 MB / 302 MiB - CHS 75 64 32, sector size=2048 - HL-DT-ST DVDRAM GH24NS90, S/N:WKCFG60L20 1, FW:IN01
Drive E: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5JTNXR, FW:D802
Drive G: - 3961 MB / 3777 MiB - CHS 944 64 32, sector size=2048 - HL-DT-ST BDDVDRW CH12LS28, S/N:9KCPFC4944 9, FW:1.00
Drive H: - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Drive K: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508

Partition table type (auto): EFI GPT
Disk /dev/sdb - 2000 GB / 1863 GiB - ST2000DM 001-1CH164
Partition table type: Intel
New geometry
Disk /dev/sdb - 8455 MB / 8063 MiB - CHS 16383 16 63 sector_size=512

Analyse Disk /dev/sdb - 8455 MB / 8063 MiB - CHS 16383 16 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
 1 P EFI GPT                  0   0  2 4260880   4  4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk /dev/sdb - 8455 MB / 8063 MiB - CHS 16383 16 63
BAD_RS LBA=1463717284 349103
check_part_i386 failed for partition type 01
     FAT12                1452100   7 44 1452100   7 44          1
BAD_RS LBA=3233743300 863222
check_part_i386 failed for partition type 04
     FAT16 <32M           3208078  10 47 3937277  12  8  735032680
This partition ends after the disk limits. (start=3233743300, size=735032680, end=3968775979, disk end=16514064)
BAD_RS LBA=89286723 147325
file_pread(5,3,buffer,89286723(4349458/5/41)) lseek err Invalid argument
file_pread(5,1,buffer,89286723(4349458/5/41)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
     FAT16 <32M           4349458   5 41 7899508   9 38 3578450650
This partition ends after the disk limits. (start=4384254019, size=3578450650, end=7962704668, disk end=16514064)
file_pread(5,16,buffer,1612820176(1600020/0/17)) ReadFile The semaphore timeout period has expired.

file_pread(5,1,buffer,1612820176(1600020/0/17)) ReadFile The semaphore timeout period has expired.

BAD_RS LBA=2747173780 352004
check_part_i386 failed for partition type 0B
     FAT32                2725370  13  2 6370891   0 37 3674684385
This partition ends after the disk limits. (start=2747173780, size=3674684385, end=6421858164, disk end=16514064)
BAD_RS LBA=1437318143 52730
file_pread(5,3,buffer,1437318143(5686791/1/49)) lseek err Invalid argument
file_pread(5,1,buffer,1437318143(5686791/1/49)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
     FAT12                5686791   1 49 9939291   0 51 4286519940
This partition ends after the disk limits. (start=5732285439, size=4286519940, end=10018805378, disk end=16514064)
BAD_RS LBA=77175280 8063
file_pread(5,3,buffer,77175280(4337443/0/33)) lseek err Invalid argument
file_pread(5,1,buffer,77175280(4337443/0/33)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           4337443   0 33 5757714  12 28 1431633920
This partition ends after the disk limits. (start=4372142576, size=1431633920, end=5803776495, disk end=16514064)
BAD_RS LBA=2885923574 421479
check_part_i386 failed for partition type 04
     FAT16 <32M           2863019   6 45 3453250  13  5  594953250
BAD_RS LBA=2983793914 231153
file_pread(5,1,buffer,2983793914(7220993/4/15)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          7220993   4 15 11476330  14 47 4289380359
This partition ends after the disk limits. (start=7278761210, size=4289380359, end=11568141568, disk end=16514064)
file_pread(5,2,buffer,3907029200(3876021/0/33)) lseek err Invalid argument
file_pread(5,1,buffer,3907029200(3876021/0/33)) lseek err Invalid argument
file_pread(5,2,buffer,3907029263(3876021/1/33)) lseek err Invalid argument
file_pread(5,1,buffer,3907029263(3876021/1/33)) lseek err Invalid argument
file_pread(5,2,buffer,3907030208(3876022/0/33)) lseek err Invalid argument
file_pread(5,1,buffer,3907030208(3876022/0/33)) lseek err Invalid argument
file_pread(5,2,buffer,3907030271(3876022/1/33)) lseek err Invalid argument
file_pread(5,1,buffer,3907030271(3876022/1/33)) lseek err Invalid argument
file_pread(5,2,buffer,3907031040(3876022/13/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907031040(3876022/13/46)) lseek err Invalid argument
Disk /dev/sdb - 8455 MB / 8063 MiB - CHS 16383 16 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (8455 MB / 8063 MiB) seems too small! (< 5922 GB / 5516 GiB)
The following partitions can't be recovered:
     FAT32                2725370  13  2 6370891   0 37 3674684385
     FAT16 <32M           3208078  10 47 3937277  12  8  735032680
     FAT16 >32M           4337443   0 33 5757714  12 28 1431633920
     FAT16 <32M           4349458   5 41 7899508   9 38 3578450650
     FAT12                5686791   1 49 9939291   0 51 4286519940
     HPFS - NTFS          7220993   4 15 11476330  14 47 4289380359
Warning: the current number of heads per cylinder is 16 but the correct value may be 255.

Results
   L FAT12                1452100   7 44 1452100   7 44          1
   L FAT16 <32M           2863019   6 45 3453250  13  5  594953250
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
 1 E extended LBA         1452100   0  1 3453250  13  5 2017160024
 5 L FAT12                1452100   7 44 1452100   7 44          1
 6 L FAT16 <32M           2863019   6 45 3453250  13  5  594953250
What do you think my next step should be? I'll read up on the wiki you posted in the meantime.
Thanks very much for your help, I'd be glad to send some donations your way (if you accept them) when this is over.
Edit: also, what do you think the correct geometry of my HDD should be, given above results?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Hard drive stuff up - help appreciated!

#4 Post by Fiona »

Using the menu geometry caused wrong values.?
Your disk is only recognized as 8 GB
New geometry
Disk /dev/sdb - 8455 MB / 8063 MiB - CHS 16383 16 63 sector_size=512
In case, close testdisk and restart it.
Until yet there is no reason to change your geometry.
But disk size should be recognized correctly.
I'd need info running testdisk / Analyse and your current partition structure.

Fiona

Todd91
Posts: 6
Joined: 26 Apr 2015, 05:32

Re: Hard drive stuff up - help appreciated!

#5 Post by Todd91 »

Code: Select all


Mon Apr 27 06:39:18 2015
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, March 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-04-09T12:52:46
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119926685696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=317532160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=3000579915776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=3961473024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=3000584577024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1000204828672
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=3000579915776
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - SanDisk SDSSDX120GG2, S/N:212133040072, FW:R112
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM 001-1CH164, S/N:1S0E2SH3, FW:CC43
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508
Disk /dev/sde - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - BUFFALO HD-PCTU3, FW:0001
Disk /dev/sdf - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5JTNXR, FW:D802
Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508
Disk \\.\PhysicalDrive5 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5JTNXR, FW:D802
Drive D: - 317 MB / 302 MiB - CHS 75 64 32, sector size=2048 - HL-DT-ST DVDRAM GH24NS90, S/N:WKCFG60L20 1, FW:IN01
Drive E: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5JTNXR, FW:D802
Drive G: - 3961 MB / 3777 MiB - CHS 944 64 32, sector size=2048 - HL-DT-ST BDDVDRW CH12LS28, S/N:9KCPFC4944 9, FW:1.00
Drive H: - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Seagate Expansion Desk, S/N:NA4LLCCN, FW:070B
Drive K: - 3000 GB / 2794 GiB - CHS 45599 255 63, sector size=4096 - Seagate Backup+ Desk, S/N:NA5K6Y7A, FW:0508

Partition table type (auto): EFI GPT
Disk /dev/sdb - 2000 GB / 1863 GiB - ST2000DM 001-1CH164
Partition table type: Intel

Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
 1 P EFI GPT                  0   0  2 267349  89  4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
BAD_RS LBA=484066239 8092742
check_part_i386 failed for partition type 04
     FAT16 <32M           30131 186  7 151013  37 11 1941959948
BAD_RS LBA=1437318143 760409
file_pread(5,3,buffer,1437318143(356818/67/49)) lseek err Invalid argument
file_pread(5,1,buffer,1437318143(356818/67/49)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
     FAT12                356818  67 49 623641 201 51 4286519940
This partition ends after the disk limits. (start=5732285439, size=4286519940, end=10018805378, disk end=3907029168)
BAD_RS LBA=981101859 10265143
file_pread(5,3,buffer,981101859(328420/29/29)) lseek err Invalid argument
file_pread(5,1,buffer,981101859(328420/29/29)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0E
     FAT16 LBA            328420  29 29 575331  30 53 3966625303
This partition ends after the disk limits. (start=5276069155, size=3966625303, end=9242694457, disk end=3907029168)
BAD_RS LBA=3993872267 528071
file_pread(5,3,buffer,3993872267(248607/12/57)) lseek err Invalid argument
file_pread(5,1,buffer,3993872267(248607/12/57)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           248607  12 57 251748 151  4   50468870
This partition ends after the disk limits. (start=3993872267, size=50468870, end=4044341136, disk end=3907029168)
file_pread(5,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(5,14,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(5,3,buffer,3907031055(243201/110/61)) lseek err Invalid argument
file_pread(5,3,buffer,3907031102(243201/111/45)) lseek err Invalid argument
file_pread(5,8,buffer,3907031118(243201/111/61)) lseek err Invalid argument
file_pread(5,11,buffer,3907031165(243201/112/45)) lseek err Invalid argument
file_pread(5,2,buffer,3907033087(243201/143/14)) lseek err Invalid argument
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 5129 GB / 4777 GiB)
The following partitions can't be recovered:
     FAT16 >32M           248607  12 57 251748 151  4   50468870
     FAT16 LBA            328420  29 29 575331  30 53 3966625303
     FAT12                356818  67 49 623641 201 51 4286519940

Results
   L FAT16 <32M           30131 186  7 151013  37 11 1941959948
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
 1 E extended LBA         30131   0  1 151013 254 63 1941985395
 5 L FAT16 <32M           30131 186  7 151013  37 11 1941959948

search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
file_pread(5,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(5,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,14,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(5,3,buffer,3907031055(243201/110/61)) lseek err Invalid argument
file_pread(5,3,buffer,3907031102(243201/111/45)) lseek err Invalid argument
file_pread(5,8,buffer,3907031118(243201/111/61)) lseek err Invalid argument
file_pread(5,11,buffer,3907031165(243201/112/45)) lseek err Invalid argument
file_pread(5,2,buffer,3907033087(243201/143/14)) lseek err Invalid argument
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
Attachments
re-analysis
re-analysis
Untitled2.png (77.44 KiB) Viewed 5946 times

Todd91
Posts: 6
Joined: 26 Apr 2015, 05:32

Re: Hard drive stuff up - help appreciated!

#6 Post by Todd91 »

My 'hard disk seems too small'?? This was from an analysis using default geometry, as Intel/PC.
Also, below is a screenshot of a hard drive scan using AOMEI - some damaged sectors, but mostly green. I'm optimistic. Let me know what you think
Attachments
Untitled.jpg
Untitled.jpg (230.11 KiB) Viewed 5946 times

Todd91
Posts: 6
Joined: 26 Apr 2015, 05:32

Re: Hard drive stuff up - help appreciated!

#7 Post by Todd91 »

And here's the analysis using completely default settings (default geometry, EFI) - attached (word count too large).
Now it tells me partition "MS Data", with "NTFS, blocksize 4096, 2000GB/1863" at the bottom, but still the 'harddisk seems too small (<4000GB)' error message at the top.

:S

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Hard drive stuff up - help appreciated!

#8 Post by Fiona »

Did testdisk hang reading bad sectors?
In case, your disk should be cloned.
A full scan of Deeper Search would be necessary and was aborted.
TestDisk Deeper Search looks for a backup of a boot sector too.
If you've had for example a NTFS partition, the backup of your boot sector would be at the end of your partition.

Knoppix was only intended to clone your disk.

FAT 12 and FAT16<32M partitions found by testdisk have no significance and might be found or recognized as any remnants during the scan.
Are you sure, that your disk was as GPT disk?
Intel-MBR supports disks up to 2.2 TB.
Info:
http://www.quepublishing.com/articles/a ... 4&seqNum=7
http://knowledge.seagate.com/articles/e ... uage=en_US
Your affected disk has 2 TB only.

For now, it's important to scan your disk running a complete Deeper Search.
If TestDisk hangs, cloning a disk could help.
Bad sectors can cause that TestDisk and datarecovery software might hang also?

Fiona

Todd91
Posts: 6
Joined: 26 Apr 2015, 05:32

Re: Hard drive stuff up - help appreciated!

#9 Post by Todd91 »

I don't actually know for sure whether it was GPT or MBR, do you know how I can find out for sure? And whether it makes a difference in trying to recover?

I assume the hard drive would have been NTFS. It's not a boot disk by the way though.

I'm away from my PC until after the weekend (holidays) but will clone my hard drive using knoppix when I get back. Thanks again for your help.

Locked