History of how I lost my files, anything more I can do?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
timaneo
Posts: 5
Joined: 25 Nov 2015, 07:01

History of how I lost my files, anything more I can do?

#1 Post by timaneo »

I have a Seagate Barracuda 3TB ST3000DM001 that was completely full of videos and has had some major issues.

1) Half a year ago, about 500gb just vanished. The file names were still there but the files were 0kb

2) A few months ago, many of the videos became unplayable, they seemed to play just sound and it wasn't even from the video itself but from another source on the hard drive. Grabbing these files and transferring them over on a linux machine somehow fixed most of these.

3) A couple weeks ago, the hard drive said it needs to be reformatted to be accessed.

4) I have tried test disk to recover the partition. I had one 3TB partition but test disk saw a 700gb partition. Installing intel drivers fixed the issue and test disk now saw the complete 3TB. I ran a quick search as well as a deep search. There didn't seem to be any useful partitions that could be found. None of them had my files. (I had screenshots of all of my test disk findings but my computer had a forced update and restart and I lost the document...Not having a good computer month)

5) I ran PhotoRec and it recovered half my files, all of them in a folder with the file names missing. Having over 3600 unlabeled files is pretty useless.

6) After restarting windows, windows started doing a check/fix thing on the drive upon booting into Windows and it said "deleting orphan file record segment xxxx" Now my drive is active in windows and has a partition but shows to be empty.

I realize I did a lot wrong in terms of safely trying to recover the files. But now that I am here, is there anything else I can do?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: History of how I lost my files, anything more I can do?

#2 Post by Fiona »

Did chkdsk delete only 1 orphaned file or did you see a large list running deleting of orphaned files on your display?
Can you copy and paste the content of your testdisk logfile?
You'll find it within your testdisk folder.
Do you still have your partition available, after installing your Intel driver or did you create a new one?
Info will follow.

Fiona

timaneo
Posts: 5
Joined: 25 Nov 2015, 07:01

Re: History of how I lost my files, anything more I can do?

#3 Post by timaneo »

Hi Fiona,

It was a large list, thousands.
I tried to attach the log file but it didn't work. It is about 185 pages. Is there anything from it you'd like me to copy and paste or can I email it to you?
After I installed the Intel driver, Windows still was asking to reformat the disk but testdisk now saw the correct size of the disk.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: History of how I lost my files, anything more I can do?

#4 Post by Fiona »

Could you copy and paste the content of 3 pages of your log file?
At least, your disk gets recognized with full size.
So I'd be able to check your current partition structure (partition table) and could consider a boot sector diagnose and have a try to liust your files.
Otherwise datarecovery software would be recommended.

Fiona

timaneo
Posts: 5
Joined: 25 Nov 2015, 07:01

Re: History of how I lost my files, anything more I can do?

#5 Post by timaneo »

Which 3 out of 185 pages would you like to see?

I already tried PhotoRec as I mentioned in the first post, is there another software you recommend?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: History of how I lost my files, anything more I can do?

#6 Post by Fiona »

I'd need your current partition structure (partition table).
You can try to scan your disk with commercial datarecovery software too.
It's advisable to use a trial first and check the result, before you buy it!

Fiona

timaneo
Posts: 5
Joined: 25 Nov 2015, 07:01

Re: History of how I lost my files, anything more I can do?

#7 Post by timaneo »

Here is the last part of the log file, does this include what you need?

Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (3000 GB / 2794 GiB) seems too small! (< 6001 GB / 5588 GiB)
The following partition can't be recovered:
MS Data 5860532223 11720800254 5860268032
NTFS, blocksize=4096, 3000 GB / 2794 GiB

Results
MS Data 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Mac HFS 1959466554 1968903739 9437186 [€¯V±9“¦‡† ]
HFS found using backup sector!, 4831 MB / 4608 MiB
Mac HFS 1968903736 1978340921 9437186 [€¯V±9“¦‡† ]
HFS blocksize=1048576, 4831 MB / 4608 MiB
Mac HFS 1981125246 2386934193 405808948 [é
õâ6 E ßW¬G ]
HFS found using backup sector!, 207 GB / 193 GiB
Mac HFS 2010962408 2382158313 371195906
HFS found using backup sector!, 190 GB / 177 GiB
Mac HFS 2382158310 2753354215 371195906
HFS blocksize=67108864, 190 GB / 177 GiB
Mac HFS 2386934190 2792743137 405808948 [é
õâ6 E ßW¬G ]
HFS blocksize=134217728, 207 GB / 193 GiB
Mac HFS 2908000357 2910105702 2105346 [Ú,>l± bA ]
HFS found using backup sector!, 1077 MB / 1028 MiB
Mac HFS 2910105699 2912211044 2105346 [Ú,>l± bA ]
HFS blocksize=1048576, 1077 MB / 1028 MiB
NTFS filesystem need to be repaired.


dir_partition inode=5
MS Data 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 .
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 ..
35 dr-xr-xr-x 0 0 0 5-Mar-2015 16:25 $RECYCLE.BIN

Mac HFS 1959466554 1968903739 9437186 [€¯V±9“¦‡† ]
HFS found using backup sector!, 4831 MB / 4608 MiB
Support for this filesystem hasn't been implemented.

Mac HFS 1968903736 1978340921 9437186 [€¯V±9“¦‡† ]
HFS blocksize=1048576, 4831 MB / 4608 MiB
Support for this filesystem hasn't been implemented.

Mac HFS 1981125246 2386934193 405808948 [é
õâ6 E ßW¬G ]
HFS found using backup sector!, 207 GB / 193 GiB
Support for this filesystem hasn't been implemented.

Mac HFS 2010962408 2382158313 371195906
HFS found using backup sector!, 190 GB / 177 GiB
Support for this filesystem hasn't been implemented.

Mac HFS 2382158310 2753354215 371195906
HFS blocksize=67108864, 190 GB / 177 GiB
Support for this filesystem hasn't been implemented.

Mac HFS 2386934190 2792743137 405808948 [é
õâ6 E ßW¬G ]
HFS blocksize=134217728, 207 GB / 193 GiB
Support for this filesystem hasn't been implemented.

Mac HFS 2908000357 2910105702 2105346 [Ú,>l± bA ]
HFS found using backup sector!, 1077 MB / 1028 MiB
Support for this filesystem hasn't been implemented.

Mac HFS 2910105699 2912211044 2105346 [Ú,>l± bA ]
HFS blocksize=1048576, 1077 MB / 1028 MiB
Support for this filesystem hasn't been implemented.
NTFS filesystem need to be repaired.


dir_partition inode=5
MS Data 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 .
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 ..
35 dr-xr-xr-x 0 0 0 5-Mar-2015 16:25 $RECYCLE.BIN
gpt_change_part_type
Change partition type:
MS LDM MetaData 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Change partition type:
NTFS 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
NTFS filesystem need to be repaired.


dir_partition inode=5
MS LDM MetaData 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 .
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 ..
35 dr-xr-xr-x 0 0 0 5-Mar-2015 16:25 $RECYCLE.BIN
gpt_change_part_type
Change partition type:
MS Data 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
Change partition type:
NTFS 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
NTFS filesystem need to be repaired.


dir_partition inode=5
MS Data 264192 5860532223 5860268032
NTFS found using backup sector, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 .
5 dr-xr-xr-x 0 0 0 10-Nov-2015 15:00 ..
35 dr-xr-xr-x 0 0 0 5-Mar-2015 16:25 $RECYCLE.BIN

interface_write()

No partition found or selected for recovery
simulate write!

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
check_part_gpt failed for partition
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
New options :
Dump : No
Align partition: Yes
Expert mode : No

Analyse Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
check_part_gpt failed for partition
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]

timaneo
Posts: 5
Joined: 25 Nov 2015, 07:01

Re: History of how I lost my files, anything more I can do?

#8 Post by timaneo »

Am I out of luck?

Locked