Page 1 of 1

WD Elements 500 Gt USB 3.0 external

Posted: 07 Aug 2016, 16:53
by RE91
Hello!

I am trying to recover my EHDD (WD Elements 500 Gt USB 3.0 external) but i don't really know what i am doing as step-by-step is not similar to my case..

What i have done is:
1. Choose SDD that is my EHDD
2. Analyze
3. Quick search
4. Deeper search.
...

What should i do now, i wouldn't want to lose my data, and i have no idea how this has happened.

Here are my specs just to give you all information that might be needed:

Code: Select all

Computer specs: 
Corsair Carbide Air 540 
Corsair AX1200W 
Asus Maximus VII Formula, LGA1150, DDR3 
Intel Core i7-4790K, LGA1150, 4.0GHz 8MB 
Noctua NH-D15 CPU Cooler 
Corsair Vengeage 16GB DDR3, 1600MHz, 9-9-9-24, CL9 
Sapphire Vapor-X Radeon R9 290X Tri-X 4GB GDDR5 
Samsung 850 EVO 
128GB Agility3 SSD 
2TB WD Caviar Black 
Windows 10 64bit Pro 

Code: Select all


Sun Aug  7 15:28:28 2016
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, April 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin32 2005.2
Compilation date: 2016-07-29T22:55:50
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=500074283008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500074283008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=449503559680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000263577600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=119439097856
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500073234432
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - OCZ-AGILITY3, S/N:OCZ-X7199A58WKVFK9RV, FW:2.25
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 850 EVO 500GB, S/N:S2RBNX0H454241J, FW:EMT02B6Q
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD2002FAEX-007BA0, S/N:WD-WMAWP0544922, FW:05.01D05
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60797 255 63, sector size=512 - WD Elements 1078, S/N:WXE1E14CDTJ4, FW:1065

Partition table type (auto): Intel
Disk /dev/sdd - 500 GB / 465 GiB - WD Elements 1078
Partition table type: Intel

Analyse Disk /dev/sdd - 500 GB / 465 GiB - CHS 60797 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
 1 P HPFS - NTFS              0  32 33 60797  59 62  976705536
 1 P HPFS - NTFS              0  32 33 60797  59 62  976705536
No partition is bootable

search_part()
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60797 255 63

recover_EXT2: s_block_group_nr=0/3725, s_mnt_count=7/4294967295, s_blocks_per_group=32768, s_inodes_per_group=48
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 122088192
recover_EXT2: part_size 976705536
Filesystem created: Thu Jan  1 02:03:09 1970
Last mount time:    Thu Jan  1 02:00:19 1970
     Linux                    0  32 33 60797  59 62  976705536
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 500 GB / 465 GiB
file_pread(7,8,buffer,976707584(60797/59/63)) ReadFile The drive cannot find the sector requested.

file_pread(7,1,buffer,976707584(60797/59/63)) ReadFile The drive cannot find the sector requested.

file_pread(7,1,buffer,976707585(60797/60/1)) lseek err Invalid argument
file_pread(7,14,buffer,976707586(60797/60/2)) lseek err Invalid argument
file_pread(7,3,buffer,976707600(60797/60/16)) lseek err Invalid argument
file_pread(7,3,buffer,976707647(60797/60/63)) lseek err Invalid argument
file_pread(7,8,buffer,976707663(60797/61/16)) lseek err Invalid argument
file_pread(7,11,buffer,976707710(60797/61/63)) lseek err Invalid argument
file_pread(7,2,buffer,976709632(60797/92/32)) lseek err Invalid argument

Results
   * Linux                    0  32 33 60797  59 62  976705536
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 500 GB / 465 GiB


dir_partition inode=2
   * Linux                    0  32 33 60797  59 62  976705536
     ext4 blocksize=4096 Large_file Sparse_SB Recover, 500 GB / 465 GiB
Directory /
       2 drwxrwxr-x     0   1010      4096  1-Jan-1970 02:03 .
       2 drwxrwxr-x     0   1010      4096  1-Jan-1970 02:03 ..
      11 drwx------     0      0     16384  1-Jan-1970 02:03 lost+found
      12 -rwxr-xr-x  1010   1010        21  1-Jan-1970 02:03 .cm0013
  103681 drwxrwxr-x     0   1010      4096  1-Jan-1970 02:03 CONTENTS

interface_write()
 1 * Linux                    0  32 33 60797  59 62  976705536

Re: WD Elements 500 Gt USB 3.0 external

Posted: 07 Aug 2016, 18:39
by cgrenier
I assume
- an NTFS partition was present
- your disk has been connected to a Linux device (ie. video recorder) and reformated.

Run TestDisk, Advanced, RebuildBS, List. If you see your files, choose Write, confirm, Quit and restart your computer.

Re: WD Elements 500 Gt USB 3.0 external

Posted: 07 Aug 2016, 19:25
by RE91
cgrenier wrote:I assume
- an NTFS partition was present
- your disk has been connected to a Linux device (ie. video recorder) and reformated.

Run TestDisk, Advanced, RebuildBS, List. If you see your files, choose Write, confirm, Quit and restart your computer.
Thank you very much! Files saved and your guiding was easy and fast :)