Lost 1TB partition - too big for recovery
Posted: 30 Nov 2016, 00:13
I would first like to thank everyone working on the tool and this forum to take their time helping people who lost their data. This really can be a traumatic experience...
I'm kindly asking for help with an issue I'm facing.
I have a 1TB USB WD disk, which suddenly lost its partition (windows would report the disk requires formatting). I had ran chkdsk on the disk while it was still on USB and had a letter assigned. It did not help. As I've wanted to exclude any issues with the chassis, I've took the disk out and connected it directly to the computer. The issue remained, but this time the disk lost the assigned letter, which hinted to me partition was probably missing. I've then ran scan with testdisk. Results below.
Quick search:
Continuing (the only available option) does not offer anything to recover the partition:
Deep search:
As seen from the pictures I've been unable to recover the partition, even though it was found, as testdisk says it's too big for the hard drive.
What could I do next? I'm also providing the logs below. Any help would be greatly appreciated...
I'm kindly asking for help with an issue I'm facing.
I have a 1TB USB WD disk, which suddenly lost its partition (windows would report the disk requires formatting). I had ran chkdsk on the disk while it was still on USB and had a letter assigned. It did not help. As I've wanted to exclude any issues with the chassis, I've took the disk out and connected it directly to the computer. The issue remained, but this time the disk lost the assigned letter, which hinted to me partition was probably missing. I've then ran scan with testdisk. Results below.
Quick search:
Continuing (the only available option) does not offer anything to recover the partition:
Deep search:
As seen from the pictures I've been unable to recover the partition, even though it was found, as testdisk says it's too big for the hard drive.
What could I do next? I'm also providing the logs below. Any help would be greatly appreciated...
Code: Select all
Mon Nov 28 00:02:14 2016 Command line: TestDisk TestDisk 7.0, Data Recovery Utility, April 2015 Christophe GRENIER <grenier@cgsecurity.org> http://www.cgsecurity.org OS: Windows 7 (7600) Compiler: GCC 4.8, Cygwin 1007.34 Compilation date: 2015-04-18T13:01:55 ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376 disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499999834112 filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function. filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function. Warning: can't get size for \\.\D: filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function. filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function. Warning: can't get size for \\.\F: disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=320070288384 Hard disk list Disk /dev/sda - 500 GB / 465 GiB - CHS 516811 135 14, sector size=512 Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 Drive C: - 499 GB / 465 GiB - CHS 516699 135 14, sector size=512 Drive G: - 320 GB / 298 GiB - CHS 38912 255 63, sector size=512 Partition table type default to Intel Disk /dev/sdb - 1000 GB / 931 GiB Partition table type: Intel New options : Dump : No Align partition: Yes Expert mode : Yes Interface Advanced Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 Current partition structure: Partition sector doesn't have the endmark 0xAA55 search_part() Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 file_pread(5,16,buffer,6156288(383/53/55)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6156290(383/53/57)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6156296(383/53/63)) ReadFile Data error (cyclic redundancy check). file_pread(5,7,buffer,6156297(383/54/1)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6156304(383/54/8)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6156351(383/54/55)) ReadFile Data error (cyclic redundancy check). file_pread(5,8,buffer,6156367(383/55/8)) ReadFile Data error (cyclic redundancy check). file_pread(5,11,buffer,6156414(383/55/55)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6162432(383/151/25)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6162434(383/151/27)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6162440(383/151/33)) ReadFile Data error (cyclic redundancy check). file_pread(5,7,buffer,6162441(383/151/34)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6162448(383/151/41)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6162495(383/152/25)) ReadFile Data error (cyclic redundancy check). file_pread(5,8,buffer,6162511(383/152/41)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6169086(384/2/1)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6169096(384/2/11)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check). file_pread(5,11,buffer,6169149(384/3/1)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6172798(384/60/59)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6172800(384/60/61)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check). file_pread(5,8,buffer,6283343(391/30/39)) ReadFile Data error (cyclic redundancy check). file_pread(5,11,buffer,6283390(391/31/23)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6285330(391/62/10)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293504(391/191/57)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293506(391/191/59)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6293512(391/192/2)) ReadFile Data error (cyclic redundancy check). file_pread(5,7,buffer,6293513(391/192/3)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293583(391/193/10)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293630(391/193/57)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6293640(391/194/4)) ReadFile Data error (cyclic redundancy check). BAD_RS LBA=1030594917 10304328 file_pread(5,1,buffer,1030594917(331500/233/35)) lseek err Invalid argument check_part_i386 failed for partition type 07 HPFS - NTFS 331500 233 35 485291 145 7 2470646844 This partition ends after the disk limits. (start=5325562213, size=2470646844, end=7796209056, disk end=1953525168) file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 Check the harddisk size: HD jumpers settings, BIOS detection... The harddisk (1000 GB / 931 GiB) seems too small! (< 3991 GB / 3717 GiB) The following partition can't be recovered: HPFS - NTFS 331500 233 35 485291 145 7 2470646844 Results interface_write() No partition found or selected for recovery search_part() Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 file_pread(5,16,buffer,6156288(383/53/55)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6156287(383/53/54)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6156290(383/53/57)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6156296(383/53/63)) ReadFile Data error (cyclic redundancy check). file_pread(5,7,buffer,6156297(383/54/1)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6156304(383/54/8)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6156351(383/54/55)) ReadFile Data error (cyclic redundancy check). file_pread(5,8,buffer,6156367(383/55/8)) ReadFile Data error (cyclic redundancy check). file_pread(5,11,buffer,6156414(383/55/55)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6162432(383/151/25)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6162431(383/151/24)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6162434(383/151/27)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6162440(383/151/33)) ReadFile Data error (cyclic redundancy check). file_pread(5,7,buffer,6162441(383/151/34)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6162448(383/151/41)) ReadFile Data error (cyclic redundancy check). file_pread(5,3,buffer,6162495(383/152/25)) ReadFile Data error (cyclic redundancy check). file_pread(5,8,buffer,6162511(383/152/41)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6169086(384/2/1)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6169096(384/2/11)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check). file_pread(5,11,buffer,6169149(384/3/1)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6172798(384/60/59)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6172800(384/60/61)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6172788(384/60/49)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6186110(385/17/15)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check). file_pread(5,8,buffer,6283343(391/30/39)) ReadFile Data error (cyclic redundancy check). file_pread(5,11,buffer,6283390(391/31/23)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6285243(391/60/49)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293504(391/191/57)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293503(391/191/56)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293506(391/191/59)) ReadFile Data error (cyclic redundancy check). file_pread(5,1,buffer,6293512(391/192/2)) ReadFile Data error (cyclic redundancy check). file_pread(5,7,buffer,6293513(391/192/3)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293583(391/193/10)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,6293510(391/191/63)) ReadFile Data error (cyclic redundancy check). file_pread(5,16,buffer,976092645(60758/244/4)) ReadFile Data error (cyclic redundancy check). BAD_RS LBA=1030594917 10304328 file_pread(5,1,buffer,1030594917(331500/233/35)) lseek err Invalid argument check_part_i386 failed for partition type 07 HPFS - NTFS 331500 233 35 485291 145 7 2470646844 This partition ends after the disk limits. (start=5325562213, size=2470646844, end=7796209056, disk end=1953525168) file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 Check the harddisk size: HD jumpers settings, BIOS detection... The harddisk (1000 GB / 931 GiB) seems too small! (< 3991 GB / 3717 GiB) The following partition can't be recovered: HPFS - NTFS 331500 233 35 485291 145 7 2470646844 Results interface_write() No partition found or selected for recovery simulate write! write_mbr_i386: starting... Store new MBR code write_all_log_i386: starting... No extended partition Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 Current partition structure: Partition sector doesn't have the endmark 0xAA55 search_part() Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63 file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument Search for partition aborted Results SIGHUP detected! TestDisk has been killed.