Hard drive on my Mac went bad... need help to get info out of it... I'm new to testdisk!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
irotema
Posts: 5
Joined: 04 Jul 2016, 12:51

Hard drive on my Mac went bad... need help to get info out of it... I'm new to testdisk!

#1 Post by irotema »

My Macbook pro laptop hard drive went bad after it failed to launch correctly coming out of sleep mode.

I had both Ubuntu and OS X 10 running on it (with their corresponding partitions). I had run testdisk from a windows computer connecting my hard drive as an external drive, and it took 6 days to run and the log had a lot of error messages like this:

file_pread(6,1,buffer,1953525168(121601/81/1)) ReadFile Data error (cyclic redundancy check).
file_pread(6,1,buffer,1953525169(121601/81/2)) lseek err Invalid argument
file_pread(6,1,buffer,1953525170(121601/81/3)) lseek err Invalid argument

I ran test disk again, but this time from a Mac OS, and it went much faster (it only took about 4 hours to finish - versus 6 days on the windows computer)... and it didn't give me any of the read errors above. The problem is that in the Mac PC it runs in read only mode (so I cannot write anything to the drive...)... why would it only run in read-only mode?

The windows log looked very similar as the one I am posting here from my Mac, but at the end it had several read errors like the ones above (I had posted it in a previous forum topic here: viewtopic.php?f=5&t=6292).

Anyway, since I cannot write to the disk with my MAC, I am running testdisk again on my windows PC, and if I wait for it to finish, it's going to take again 6 days, and probably will get the same log file as before, or hopefully this one that I got in my MAC PC which I am showing below.

From the log below, can somebody tell me what I would need to do to try to fix it?... and, do I really need to wait for the windows PC to finish analyzing again?... or can I stop the process and do something already with the information below?

Here is my testdisk.log file:


Fri Jul 8 16:26:12 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Darwin, kernel 15.5.0 (Darwin Kernel Version 15.5.0: Tue Apr 19 18:36:36 PDT 2016; root:xnu-3248.5
Compiler: GCC 4.0
Compilation date: 2015-04-18T13:01:34
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.4
Hard disk list
Disk /dev/disk0 - 750 GB / 698 GiB - 1465149168 sectors (RO), sector size=512
Disk /dev/disk2 - 1000 GB / 931 GiB - 1953525168 sectors (RO), sector size=512
Disk /dev/rdisk0 - 750 GB / 698 GiB - 1465149168 sectors (RO), sector size=512
Disk /dev/rdisk1 - 748 GB / 697 GiB - 1462744832 sectors (RO), sector size=512
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953525168 sectors (RO), sector size=512

Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Disk /dev/disk2 - 1000 GB / 931 GiB (RO)
Partition table type: EFI GPT

Analyse Disk /dev/disk2 - 1000 GB / 931 GiB - 1953525168 sectors (RO)
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
1 P EFI System 40 409639 409600 [EFI System Partition]
2 P Unknown 409640 1462714095 1462304456 [MAC OS]
3 P Mac HFS 1462714096 1463983855 1269760 [Recovery HD]
4 P Mac HFS 1463983856 1465515535 1531680 [Apple_HFS_Untitled_2]
5 P MS Data 1465516032 1936939007 471422976
6 P Linux Swap 1936939008 1953523711 16584704

search_part()
Disk /dev/disk2 - 1000 GB / 931 GiB - 1953525168 sectors (RO)
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)

FAT32 at 40/0/1
EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB

SYSV4 Marker at 80651805/0/1

recover_sysv4
Unknown 80651805 1481733809692 1481653157888 [<86>y<B5><9D>H<E2>]
SysV4, 758 TB / 689 TiB
Partition not added.

SYSV4 Marker at 522682625/0/1

recover_sysv4
Unknown 522682625 30602498848 30079816224 [<F9><A4><EC><FB>^A<CE>]
SysV4, 15 TB / 14 TiB
Partition not added.

SYSV4 Marker at 701117867/0/1

recover_sysv4
Unknown 701117867 181000381019562 180999679901696 [2<A5><B0><8A>07]
SysV4, 92671 TB / 84284 TiB
Partition not added.
Unknown 772717079 4068708323 3295991245
FATX, 1687 GB / 1571 GiB
Partition not added.

HFS+ magic value at 1461444560/0/1

HFS+ magic value at 1461444560/0/1
part_size 1269536
Mac HFS 1461444560 1462714095 1269536
HFS+ blocksize=4096 + Backup, 650 MB / 619 MiB

HFS+ magic value at 1462714096/0/1

HFS+ magic value at 1462714096/0/1
part_size 1269760
Mac HFS 1462714096 1463983855 1269760
HFS+ blocksize=4096 + Backup, 650 MB / 620 MiB

HFS+ magic value at 1463983856/0/1

HFS+ magic value at 1463983856/0/1
part_size 1531680
Mac HFS 1463983856 1465515535 1531680
HFS+ blocksize=4096 + Backup, 784 MB / 747 MiB
FAT32 at 1465515536/0/1
FAT1 : 48-55532
FAT2 : 55533-111017
start_rootdir : 111018 root cluster : 2
Data : 111018-454586089
sectors : 454586148
cluster_size : 64
no_of_cluster : 7101173 (2 - 7101174)
fat_length 55485 calculated 55478
FAT differs, FAT sectors=0-16/55485
heads/cylinder 255 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
set_FAT_info: name from BS used

FAT32 at 1465515536/0/1
MS Data 1465515536 1920101683 454586148 [NO NAME]
FAT32, blocksize=32768, 232 GB / 216 GiB
Linux Swap 1936939000 1936939015 16
SWAP2 version 0, pagesize=8192, 8192 B

Results
P EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
P Mac HFS 1461444560 1462714095 1269536
HFS+ blocksize=4096 + Backup, 650 MB / 619 MiB
P Mac HFS 1462714096 1463983855 1269760
HFS+ blocksize=4096 + Backup, 650 MB / 620 MiB
P Mac HFS 1463983856 1465515535 1531680
HFS+ blocksize=4096 + Backup, 784 MB / 747 MiB
P MS Data 1465515536 1920101683 454586148 [NO NAME]
FAT32, blocksize=32768, 232 GB / 216 GiB
P Linux Swap 1936939000 1936939015 16
SWAP2 version 0, pagesize=8192, 8192 B


dir_partition inode=0
P EFI System 40 409639 409600 [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
FAT: cluster=2(0x2), pos=6374
Directory /
4 -rwxr-xr-x 0 0 4096 10-Dec-2013 07:36 ._.Trashes
21 drwxr-xr-x 0 0 0 12-Dec-2013 15:22 EFI
3 drwxr-xr-x 0 0 0 10-Dec-2013 07:36 .Trashes
213082 -rwxr-xr-x 0 0 153 9-Jan-2015 23:23 BOOTLOG
229598 drwxr-xr-x 0 0 0 23-Sep-2015 15:54 .Spotlight-V100
231421 drwxr-xr-x 0 0 0 23-Sep-2015 15:54 .fseventsd


dir_partition inode=0
P MS Data 1465515536 1920101683 454586148 [NO NAME]
FAT32, blocksize=32768, 232 GB / 216 GiB
FAT: cluster=2(0x2), pos=1465626554
Directory /
Can't open backup.log file: No such file or directory
interface_load

interface_write()
1 P EFI System 40 409639 409600 [EFI]
2 P Mac HFS 1461444560 1462714095 1269536
3 P Mac HFS 1462714096 1463983855 1269760
4 P Mac HFS 1463983856 1465515535 1531680
5 P MS Data 1465515536 1920101683 454586148 [NO NAME]
6 P Linux Swap 1936939000 1936939015 16
Don't write, no confirmation

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953525167 (expected 1953525167)
hdr_lba_start=34
hdr_lba_end=1953525134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
1 P EFI System 40 409639 409600 [EFI System Partition]
2 P Unknown 409640 1462714095 1462304456 [MAC OS]
3 P Mac HFS 1462714096 1463983855 1269760 [Recovery HD]
HFS+ blocksize=4096 + Backup, 650 MB / 620 MiB
4 P Mac HFS 1463983856 1465515535 1531680 [Apple_HFS_Untitled_2]
HFS+ blocksize=4096 + Backup, 784 MB / 747 MiB
5 P MS Data 1465516032 1936939007 471422976
ext4 blocksize=4096 Large_file Sparse_SB, 241 GB / 224 GiB
6 P Linux Swap 1936939008 1953523711 16584704
Incomplete image created.

TestDisk exited normally.

Locked