External WD 3TB Raw + Unallocated
Posted: 04 Mar 2016, 12:16
Hello there,
First of all tyvm for the awesome tool.
Let me explain my situation. The External HDD had some problem with the power chip (or something) so I removed it from it's original case and moved it to another case. Now the thing is that move messed up the HDD and I see Raw + Unallocated space:
I've followed a couple of guides and I can see the files and all but I just can't seem to be able to fix this :/ After a lot of tries I've managed to see that if I change the sector size from 512 to 4096 I can see everything being OK but after the restart the sector size is back to 512 and in the same situation :/
Here are a few screens and log:
After that I go to Analyze -> Quick Search -> Write -> restart but the sector size is 512 and still raw after the restart..
Fri Mar 4 12:46:10 2016
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, February 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, Cygwin32 2002.0
Compilation date: 2016-03-01T21:27:27
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
Failed to startup volume: Invalid argument.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=118094823424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=118094823424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=118094823424
filewin32_getfilesize(\\.\I:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\I:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=375073669120
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:2020202020202020202020205639325953584e53, FW:CC37
Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:2020202020202020202020205639325930595032, FW:CC37
Disk /dev/sdc - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:20202020202020202020202056393259345a4138, FW:CC37
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30 EZRX-00DC0B0, S/N:350000104102
Partition table type (auto): Intel
Disk /dev/sdd - 3000 GB / 2794 GiB - WDC WD30 EZRX-00DC0B0
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
Not an exFAT boot sector.
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
filesystem size 1 12131320475419809822
sectors_per_cluster 0 243
mft_lcn 0 3657397243
mftmirr_lcn 0 41078
clusters_per_mft_record 0 -97
clusters_per_index_record 0 31
Boot sector
Status: Bad
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
New geometry
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45601 255 63 sector_size=4096
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
dir_partition inode=5
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 15-Oct-2014 02:06 .
5 dr-xr-xr-x 0 0 0 15-Oct-2014 02:06 ..
47674 dr-xr-xr-x 0 0 0 27-Dec-2013 17:54 $RECYCLE.BIN
116985 dr-xr-xr-x 0 0 0 15-Oct-2014 02:31 Back ups cameras
46249 dr-xr-xr-x 0 0 0 27-Dec-2013 18:12 My downloads
30 dr-xr-xr-x 0 0 0 7-Jan-2013 14:24 System Volume Information
27 dr-xr-xr-x 0 0 0 3-Sep-2011 11:00 autorun
60789 dr-xr-xr-x 0 0 0 15-Oct-2014 00:32 iTunes
5864 dr-xr-xr-x 0 0 0 19-Feb-2015 15:46 Οι φωτογÏαφίες μου
67940 dr-xr-xr-x 0 0 0 15-Oct-2014 00:50 Τα ÎγγÏαφά μου
28 -r--r--r-- 0 0 36 16-Oct-2002 15:56 autorun.inf
ntfs_boot_sector
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS at 0/4/5
NTFS at 0/4/5
filesystem size 732565760
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366282879
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.
Any ideas?
Thank you very much!
First of all tyvm for the awesome tool.
Let me explain my situation. The External HDD had some problem with the power chip (or something) so I removed it from it's original case and moved it to another case. Now the thing is that move messed up the HDD and I see Raw + Unallocated space:
I've followed a couple of guides and I can see the files and all but I just can't seem to be able to fix this :/ After a lot of tries I've managed to see that if I change the sector size from 512 to 4096 I can see everything being OK but after the restart the sector size is back to 512 and in the same situation :/
Here are a few screens and log:
After that I go to Analyze -> Quick Search -> Write -> restart but the sector size is 512 and still raw after the restart..
Fri Mar 4 12:46:10 2016
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, February 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, Cygwin32 2002.0
Compilation date: 2016-03-01T21:27:27
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
Failed to startup volume: Invalid argument.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=118094823424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=118094823424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=118094823424
filewin32_getfilesize(\\.\I:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\I:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=375073669120
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:2020202020202020202020205639325953584e53, FW:CC37
Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:2020202020202020202020205639325930595032, FW:CC37
Disk /dev/sdc - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:20202020202020202020202056393259345a4138, FW:CC37
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30 EZRX-00DC0B0, S/N:350000104102
Partition table type (auto): Intel
Disk /dev/sdd - 3000 GB / 2794 GiB - WDC WD30 EZRX-00DC0B0
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
Not an exFAT boot sector.
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
filesystem size 1 12131320475419809822
sectors_per_cluster 0 243
mft_lcn 0 3657397243
mftmirr_lcn 0 41078
clusters_per_mft_record 0 -97
clusters_per_index_record 0 31
Boot sector
Status: Bad
Backup boot sector
Status: Bad
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
New geometry
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45601 255 63 sector_size=4096
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
dir_partition inode=5
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 15-Oct-2014 02:06 .
5 dr-xr-xr-x 0 0 0 15-Oct-2014 02:06 ..
47674 dr-xr-xr-x 0 0 0 27-Dec-2013 17:54 $RECYCLE.BIN
116985 dr-xr-xr-x 0 0 0 15-Oct-2014 02:31 Back ups cameras
46249 dr-xr-xr-x 0 0 0 27-Dec-2013 18:12 My downloads
30 dr-xr-xr-x 0 0 0 7-Jan-2013 14:24 System Volume Information
27 dr-xr-xr-x 0 0 0 3-Sep-2011 11:00 autorun
60789 dr-xr-xr-x 0 0 0 15-Oct-2014 00:32 iTunes
5864 dr-xr-xr-x 0 0 0 19-Feb-2015 15:46 Οι φωτογÏαφίες μου
67940 dr-xr-xr-x 0 0 0 15-Oct-2014 00:50 Τα ÎγγÏαφά μου
28 -r--r--r-- 0 0 36 16-Oct-2002 15:56 autorun.inf
ntfs_boot_sector
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS at 0/4/5
NTFS at 0/4/5
filesystem size 732565760
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366282879
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Status: OK
Backup boot sector
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.
Any ideas?
Thank you very much!