Page 1 of 1

Trying to recover some files from Laptop drive

Posted: 31 Jan 2016, 02:35
by Harry27L
My sons laptop stopped working and there was a couple of files on that he needs.

I hooked drive to my PC and it would not show up in My Computer. When you accessed Drive Management it showed up but as "Disk 3 Unknown of 465.76 GB" and "Not Initalized". In detail for that drive it says "465.76 GB Unallocated". It also displays a message when I fist enter Disk Management that says "You must Initialize a disk before Logical Disk Manager can access it". It offers initialization in either MBR or GPT partition style. The harddrive is stamped as a HGST of 500 GB capacity.
I tried Linux and similar issues. On front screen it shows my 2 drives and Seagate external drive and no Hitachi drive. When I select Computer at top of main screenit shows the Hitachi Drive. When I select it says "Unable to mount location - Can't mount file".
I then ran TestDisk (I really know nothing about it) and got disk listed but got this back "Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable"
I then ran search and got:
HPFS - NTFS 4 203 8 19 35 16 230400
NTFS, blocksize=4096, 943 MB / 900 MiB
HPFS - NTFS 21 45 25 3054 14 32 48723200
NTFS, blocksize=4096, 199 GB / 185 GiB
HPFS - NTFS 3054 14 33 3061 62 9 115456
NTFS, blocksize=4096, 472 MB / 451 MiB
HPFS - NTFS 3061 62 10 7273 165 60 67672320
NTFS, blocksize=4096, 277 GB / 258 GiB
HPFS - NTFS 7273 165 61 7600 41 57 5245440
NTFS, blocksize=4096, 21 GB / 20 GiB

I have attached 2 copies of screen in hope someone may be able to further. I also have a log file
Regards

Re: Trying to recover some files from Laptop drive

Posted: 01 Feb 2016, 13:56
by cgrenier
The log file will help...

Re: Trying to recover some files from Laptop drive

Posted: 01 Feb 2016, 23:26
by Harry27L
I could not find way to add the file so I have copied it below.

un Jan 31 11:06:34 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build 3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000097185792
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=320070483968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000395698176
Hard disk list
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk \\.\PhysicalDrive1 - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 7600 255 63, sector size=4096
Drive C: - 1000 GB / 931 GiB - CHS 121588 255 63, sector size=512
Drive E: - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive F: - 2000 GB / 1863 GiB - CHS 243200 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 7600 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable

search_part()
Disk \\.\PhysicalDrive3 - 500 GB / 465 GiB - CHS 7600 255 63
check_FAT: number of bytes per sector mismatches 512 (FAT) != 4096 (HD)
NTFS at 4/203/8
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1843200
sectors_per_cluster 8
mft_lcn 76799
mftmirr_lcn 115199
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 4 203 8 19 35 16 230400
NTFS, blocksize=4096, 943 MB / 900 MiB
NTFS at 21/45/25
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 389785600
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 21 45 25 3054 14 32 48723200
NTFS, blocksize=4096, 199 GB / 185 GiB
NTFS at 3054/14/33
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 923648
sectors_per_cluster 8
mft_lcn 38485
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 3054 14 33 3061 62 9 115456
NTFS, blocksize=4096, 472 MB / 451 MiB
NTFS at 3061/62/10
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 541378560
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 33836159
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 3061 62 10 7273 165 60 67672320
NTFS, blocksize=4096, 277 GB / 258 GiB
NTFS at 7273/165/61
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 41963520
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2622719
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 7273 165 61 7600 41 57 5245440
NTFS, blocksize=4096, 21 GB / 20 GiB

Results
HPFS - NTFS 4 203 8 19 35 16 230400
NTFS, blocksize=4096, 943 MB / 900 MiB
HPFS - NTFS 21 45 25 3054 14 32 48723200
NTFS, blocksize=4096, 199 GB / 185 GiB
HPFS - NTFS 3054 14 33 3061 62 9 115456
NTFS, blocksize=4096, 472 MB / 451 MiB
HPFS - NTFS 3061 62 10 7273 165 60 67672320
NTFS, blocksize=4096, 277 GB / 258 GiB
HPFS - NTFS 7273 165 61 7600 41 57 5245440
NTFS, blocksize=4096, 21 GB / 20 GiB


dir_partition inode=5
HPFS - NTFS 4 203 8 19 35 16 230400
NTFS, blocksize=4096, 943 MB / 900 MiB
Directory /
5 dr-xr-xr-x 0 0 0 3-Mar-2015 17:24 .
5 dr-xr-xr-x 0 0 0 3-Mar-2015 17:24 ..
35 dr-xr-xr-x 0 0 0 1-Aug-2012 22:21 Boot
39 dr-xr-xr-x 0 0 0 3-Jul-2012 17:24 EFI
147 dr-xr-xr-x 0 0 0 13-Apr-2013 13:11 FACLog
101 dr-xr-xr-x 0 0 0 1-Jul-2013 16:11 Recovery
48 dr-xr-xr-x 0 0 0 14-Apr-2013 05:51 Sources
145 dr-xr-xr-x 0 0 0 14-Apr-2013 04:17 System Volume Information
47 dr-xr-xr-x 0 0 0 3-Jul-2012 17:27 en-us
150 -r--r--r-- 0 0 2361 14-Apr-2013 04:49 AsFac.log
102 -r--r--r-- 0 0 272 19-Nov-2012 20:38 AsPartition.ini
143 -r--r--r-- 0 0 6952 14-Apr-2013 04:16 AsTCDProc_20130413101604.log
153 -r--r--r-- 0 0 8612 14-Apr-2013 06:07 AsTCDProc_20130413120741.log
142 -r--r--r-- 0 0 57 14-Apr-2013 06:07 AsTool.state
106 -r--r--r-- 0 0 41 19-Nov-2012 20:25 AsToolCDVer.txt
104 -r--r--r-- 0 0 1894 7-Jan-2013 02:56 DetectResult.ini
144 -r--r--r-- 0 0 28883 14-Apr-2013 04:15 FAC1_dism.log
154 -r--r--r-- 0 0 6636791 14-Apr-2013 06:05 FAC3_dism.log
155 -r--r--r-- 0 0 6 14-Apr-2013 06:07 PASS.txt
103 -r--r--r-- 0 0 145 14-Sep-2012 17:44 SWPackage.ini
49 -r--r--r-- 0 0 398156 25-Jul-2012 22:44 bootmgr
50 -r--r--r-- 0 0 1350896 25-Jul-2012 23:57 bootmgr.efi


dir_partition inode=5
HPFS - NTFS 21 45 25 3054 14 32 48723200
NTFS, blocksize=4096, 199 GB / 185 GiB
Directory /
5 dr-xr-xr-x 0 0 0 18-Mar-2015 19:10 .
5 dr-xr-xr-x 0 0 0 18-Mar-2015 19:10 ..
175235 dr-xr-xr-x 0 0 0 7-Oct-2013 20:14 $AVG
27726 dr-xr-xr-x 0 0 0 3-Mar-2015 22:43 $Recycle.Bin
54 dr-xr-xr-x 0 0 0 28-Nov-2012 04:00 Boot
6611 dr-xr-xr-x 0 0 0 3-Mar-2015 22:28 Config.Msi
204967 dr-xr-xr-x 0 0 0 23-Aug-2013 00:45 Documents and Settings
422 dr-xr-xr-x 0 0 0 14-Apr-2013 04:23 Intel
27727 dr-xr-xr-x 0 0 0 23-Aug-2013 01:22 PerfLogs
27731 dr-xr-xr-x 0 0 0 8-Mar-2015 18:06 Program Files
36263 dr-xr-xr-x 0 0 0 3-Mar-2015 22:16 Program Files (x86)
37259 dr-xr-xr-x 0 0 0 3-Mar-2015 22:19 ProgramData
206981 dr-xr-xr-x 0 0 0 4-Mar-2015 15:59 Recovery
38 dr-xr-xr-x 0 0 0 23-Mar-2015 18:51 System Volume Information
37662 dr-xr-xr-x 0 0 0 3-Mar-2015 22:16 Users
37746 dr-xr-xr-x 0 0 0 18-Mar-2015 18:32 Windows
91 dr-xr-xr-x 0 0 0 14-Apr-2013 04:38 eSupport
198574 dr-xr-xr-x 0 0 0 26-Oct-2013 13:27 sources
93231 -r--r--r-- 0 0 1 18-Jun-2013 22:18 BOOTNXT
164097 -r--r--r-- 0 0 6293504 26-Dec-2012 18:55 X402CA.BIN
164100 -r--r--r-- 0 0 6293504 24-Dec-2012 17:13 X502CA.BIN
40667 -r--r--r-- 0 0 398156 26-Jul-2012 13:44 bootmgr
112049 -r--r--r-- 0 0 3340107776 18-Mar-2015 18:34 hiberfil.sys
207605 -r--r--r-- 0 0 738197504 18-Mar-2015 18:34 pagefile.sys
207964 -r--r--r-- 0 0 268435456 18-Mar-2015 18:34 swapfile.sys


dir_partition inode=5
HPFS - NTFS 3054 14 33 3061 62 9 115456
NTFS, blocksize=4096, 472 MB / 451 MiB
Directory /
5 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 .
5 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 ..
35 dr-xr-xr-x 0 0 0 4-Mar-2015 15:59 Recovery
40 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 System Volume Information

dir_partition inode=40
HPFS - NTFS 3054 14 33 3061 62 9 115456
NTFS, blocksize=4096, 472 MB / 451 MiB
Directory /System Volume Information
40 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 .
5 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 ..
41 -r--r--r-- 0 0 20480 3-Mar-2015 22:02 tracking.log
Directory /
5 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 .
5 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 ..
35 dr-xr-xr-x 0 0 0 4-Mar-2015 15:59 Recovery
40 dr-xr-xr-x 0 0 0 3-Mar-2015 22:02 System Volume Information


dir_partition inode=5
HPFS - NTFS 3061 62 10 7273 165 60 67672320
NTFS, blocksize=4096, 277 GB / 258 GiB
Directory /
5 dr-xr-xr-x 0 0 0 26-Mar-2015 16:46 .
5 dr-xr-xr-x 0 0 0 26-Mar-2015 16:46 ..
37 dr-xr-xr-x 0 0 0 28-Jun-2013 18:21 $RECYCLE.BIN
510 dr-xr-xr-x 0 0 0 25-Mar-2015 19:23 Better Call Saul
118 dr-xr-xr-x 0 0 0 8-Dec-2014 17:54 Black Jesus
52 dr-xr-xr-x 0 0 0 1-Dec-2014 17:12 Brooklyn Nine Nine
53 dr-xr-xr-x 0 0 0 1-Dec-2014 17:08 Gotham
520 dr-xr-xr-x 0 0 0 23-Mar-2015 16:23 Last man on earth
178 dr-xr-xr-x 0 0 0 6-Dec-2014 22:26 My name is earl
51 dr-xr-xr-x 0 0 0 18-Dec-2014 16:22 Sons of Anarchy
35 dr-xr-xr-x 0 0 0 3-Mar-2015 22:37 System Volume Information
50 dr-xr-xr-x 0 0 0 19-Mar-2015 21:07 The Walking Dead
133 dr-xr-xr-x 0 0 0 6-Dec-2014 23:12 Tims movies
526 dr-xr-xr-x 0 0 0 3-Mar-2015 17:46 Vikings
628 dr-xr-xr-x 0 0 0 26-Mar-2015 16:47 Workaholics season 5
532 dr-xr-xr-x 0 0 0 3-Mar-2015 19:17 always sunny season 10

dir_partition inode=532
HPFS - NTFS 3061 62 10 7273 165 60 67672320
NTFS, blocksize=4096, 277 GB / 258 GiB
Directory /always sunny season 10
532 dr-xr-xr-x 0 0 0 3-Mar-2015 19:17 .
5 dr-xr-xr-x 0 0 0 26-Mar-2015 16:46 ..
549 dr-xr-xr-x 0 0 0 3-Mar-2015 18:53 Its.Always.Sunny.in.Philadelphia.S10E02.HDTV.x264-KILLERS[ettv]
554 dr-xr-xr-x 0 0 0 3-Mar-2015 19:00 Its.Always.Sunny.in.Philadelphia.S10E03.HDTV.x264-KILLERS[ettv]
561 dr-xr-xr-x 0 0 0 3-Mar-2015 19:17 Its.Always.Sunny.in.Philadelphia.S10E07.HDTV.x264-KILLERS[ettv]
533 -r--r--r-- 0 0 197886677 3-Mar-2015 18:13 Its.Always.Sunny.in.Philadelphia.S10E01.HDTV.x264-KILLERS.mp4
558 -r--r--r-- 0 0 241397198 3-Mar-2015 19:09 Its.Always.Sunny.in.Philadelphia.S10E04.HDTV.x264-KILLERS.mp4
559 -r--r--r-- 0 0 231945511 3-Mar-2015 19:08 Its.Always.Sunny.in.Philadelphia.S10E05.HDTV.x264-LOL.mp4
560 -r--r--r-- 0 0 245253387 3-Mar-2015 19:17 Its.Always.Sunny.in.Philadelphia.S10E06.HDTV.x264-KILLERS.mp4
Directory /
5 dr-xr-xr-x 0 0 0 26-Mar-2015 16:46 .
5 dr-xr-xr-x 0 0 0 26-Mar-2015 16:46 ..
37 dr-xr-xr-x 0 0 0 28-Jun-2013 18:21 $RECYCLE.BIN
510 dr-xr-xr-x 0 0 0 25-Mar-2015 19:23 Better Call Saul
118 dr-xr-xr-x 0 0 0 8-Dec-2014 17:54 Black Jesus
52 dr-xr-xr-x 0 0 0 1-Dec-2014 17:12 Brooklyn Nine Nine
53 dr-xr-xr-x 0 0 0 1-Dec-2014 17:08 Gotham
520 dr-xr-xr-x 0 0 0 23-Mar-2015 16:23 Last man on earth
178 dr-xr-xr-x 0 0 0 6-Dec-2014 22:26 My name is earl
51 dr-xr-xr-x 0 0 0 18-Dec-2014 16:22 Sons of Anarchy
35 dr-xr-xr-x 0 0 0 3-Mar-2015 22:37 System Volume Information
50 dr-xr-xr-x 0 0 0 19-Mar-2015 21:07 The Walking Dead
133 dr-xr-xr-x 0 0 0 6-Dec-2014 23:12 Tims movies
526 dr-xr-xr-x 0 0 0 3-Mar-2015 17:46 Vikings
628 dr-xr-xr-x 0 0 0 26-Mar-2015 16:47 Workaholics season 5
532 dr-xr-xr-x 0 0 0 3-Mar-2015 19:17 always sunny season 10


dir_partition inode=5
HPFS - NTFS 7273 165 61 7600 41 57 5245440
NTFS, blocksize=4096, 21 GB / 20 GiB
Directory /
5 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 .
5 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 ..
36 dr-xr-xr-x 0 0 0 14-Apr-2013 05:51 RecoveryBoot
42 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 RecoveryImage
38 dr-xr-xr-x 0 0 0 14-Apr-2013 04:17 System Volume Information

dir_partition inode=38
HPFS - NTFS 7273 165 61 7600 41 57 5245440
NTFS, blocksize=4096, 21 GB / 20 GiB
Directory /System Volume Information
38 dr-xr-xr-x 0 0 0 14-Apr-2013 04:17 .
5 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 ..
39 -r--r--r-- 0 0 20480 14-Apr-2013 04:17 tracking.log
Directory /
5 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 .
5 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 ..
36 dr-xr-xr-x 0 0 0 14-Apr-2013 05:51 RecoveryBoot
42 dr-xr-xr-x 0 0 0 14-Apr-2013 06:06 RecoveryImage
38 dr-xr-xr-x 0 0 0 14-Apr-2013 04:17 System Volume Information