Page 1 of 1

Lost 1TB partition - too big for recovery

Posted: 30 Nov 2016, 00:13
by marko87s
I would first like to thank everyone working on the tool and this forum to take their time helping people who lost their data. This really can be a traumatic experience...

I'm kindly asking for help with an issue I'm facing.
I have a 1TB USB WD disk, which suddenly lost its partition (windows would report the disk requires formatting). I had ran chkdsk on the disk while it was still on USB and had a letter assigned. It did not help. As I've wanted to exclude any issues with the chassis, I've took the disk out and connected it directly to the computer. The issue remained, but this time the disk lost the assigned letter, which hinted to me partition was probably missing. I've then ran scan with testdisk. Results below.

Quick search:
Image

Continuing (the only available option) does not offer anything to recover the partition:
Image

Deep search:
Image

As seen from the pictures I've been unable to recover the partition, even though it was found, as testdisk says it's too big for the hard drive.

What could I do next? I'm also providing the logs below. Any help would be greatly appreciated...

Code: Select all


Mon Nov 28 00:02:14 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499999834112
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=320070288384
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 516811 135 14, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive C: - 499 GB / 465 GiB - CHS 516699 135 14, sector size=512
Drive G: - 320 GB / 298 GiB - CHS 38912 255 63, sector size=512

Partition table type default to Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel
New options :
 Dump : No
 Align partition: Yes
 Expert mode : Yes

Interface Advanced

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(5,16,buffer,6156288(383/53/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6156290(383/53/57)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6156296(383/53/63)) ReadFile Data error (cyclic redundancy check).

file_pread(5,7,buffer,6156297(383/54/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6156304(383/54/8)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6156351(383/54/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,6156367(383/55/8)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,6156414(383/55/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6162432(383/151/25)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6162434(383/151/27)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6162440(383/151/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,7,buffer,6162441(383/151/34)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6162448(383/151/41)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6162495(383/152/25)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,6162511(383/152/41)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6169086(384/2/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6169096(384/2/11)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,6169149(384/3/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6172798(384/60/59)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6172800(384/60/61)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,6283343(391/30/39)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,6283390(391/31/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6285330(391/62/10)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293504(391/191/57)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293506(391/191/59)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6293512(391/192/2)) ReadFile Data error (cyclic redundancy check).

file_pread(5,7,buffer,6293513(391/192/3)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293583(391/193/10)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293630(391/193/57)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6293640(391/194/4)) ReadFile Data error (cyclic redundancy check).

BAD_RS LBA=1030594917 10304328
file_pread(5,1,buffer,1030594917(331500/233/35)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          331500 233 35 485291 145  7 2470646844
This partition ends after the disk limits. (start=5325562213, size=2470646844, end=7796209056, disk end=1953525168)
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 3991 GB / 3717 GiB)
The following partition can't be recovered:
     HPFS - NTFS          331500 233 35 485291 145  7 2470646844

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(5,16,buffer,6156288(383/53/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6156287(383/53/54)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6156290(383/53/57)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6156296(383/53/63)) ReadFile Data error (cyclic redundancy check).

file_pread(5,7,buffer,6156297(383/54/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6156304(383/54/8)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6156351(383/54/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,6156367(383/55/8)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,6156414(383/55/55)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6162432(383/151/25)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6162431(383/151/24)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6162434(383/151/27)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6162440(383/151/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,7,buffer,6162441(383/151/34)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6162448(383/151/41)) ReadFile Data error (cyclic redundancy check).

file_pread(5,3,buffer,6162495(383/152/25)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,6162511(383/152/41)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6169086(384/2/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6169096(384/2/11)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6169102(384/2/17)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,6169149(384/3/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6172798(384/60/59)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6172800(384/60/61)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6172788(384/60/49)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6186110(385/17/15)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6283526(391/33/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6283327(391/30/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,8,buffer,6283343(391/30/39)) ReadFile Data error (cyclic redundancy check).

file_pread(5,11,buffer,6283390(391/31/23)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6285243(391/60/49)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293504(391/191/57)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293503(391/191/56)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293506(391/191/59)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,6293512(391/192/2)) ReadFile Data error (cyclic redundancy check).

file_pread(5,7,buffer,6293513(391/192/3)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293583(391/193/10)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,6293510(391/191/63)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,976092645(60758/244/4)) ReadFile Data error (cyclic redundancy check).

BAD_RS LBA=1030594917 10304328
file_pread(5,1,buffer,1030594917(331500/233/35)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          331500 233 35 485291 145  7 2470646844
This partition ends after the disk limits. (start=5325562213, size=2470646844, end=7796209056, disk end=1953525168)
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 3991 GB / 3717 GiB)
The following partition can't be recovered:
     HPFS - NTFS          331500 233 35 485291 145  7 2470646844

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument
Search for partition aborted

Results
SIGHUP detected! TestDisk has been killed.

Re: Lost 1TB partition - too big for recovery

Posted: 01 Dec 2016, 06:47
by cgrenier
There are a lot of bad sectors (see the crc errors in the log file).
You need to clone the disk to a new empty disk using gnu ddrescue
See https://www.cgsecurity.org/testdisk.pdf "Creating a live USB" and "DDRescue: data recovery from damaged disk"

Re: Lost 1TB partition - too big for recovery

Posted: 04 Dec 2016, 01:46
by marko87s
Hello, thank you very much for the response. I have bought a new disk and performed as suggested. DDRescue output said the following after finishing:

Code: Select all

ubuntu@ubuntu:~$ sudo ddrescue --force /dev/sdb /dev/sdc1 sdb.log
GNU ddrescue 1.19
Press Ctrl-C to interrupt
rescued:	1000 GB,		errsize:   1319 kB,		current rate:        0 B/s
ipos:		499759 MB,	errors:     186,			average rate:   20803 kB/s
opos:	499759 MB,	run time:   13.35 h,		successful read:    1.71 m ago
Finished 
I have ran ddrescue another time with -r5 option, which ended up in errsize 1125 kB. It took quite a long time to salvage these few kBs. I am now letting ddrescue run with -r10 option on the same log file and will see how it goes but it seems that I have recovered what I could.

If I run testdisk on the new disk now (without going into analysis), and if I select Advanced (utils), I can actually see the corrupted partition. If I try to list the files, I get:

Code: Select all

1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848

Can't open filesystem. Filesystem seems damaged.
If I check boot section in the tools I can see:

Code: Select all

Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
     Partition                  Start        End    Size in sectors
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848

Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Should I use 'Copy backup boot sector over boot sector' option?

Thank you!

Re: Lost 1TB partition - too big for recovery

Posted: 05 Dec 2016, 06:48
by cgrenier
Yes, restore the boot sector.
Using TestDisk 7.1-WIP (not 7.0), use Advanced, Boot, Repair MFT if after a reboot your computer still failed to list your files.

Re: Lost 1TB partition - too big for recovery

Posted: 09 Dec 2016, 18:17
by marko87s
No luck even with repair MFT. Photorec?

Code: Select all


Tue Dec  6 20:42:15 2016
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 5.4, Cygwin 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499999834112
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 516811 135 14, sector size=512 - SAMSUNG HD502IJ, S/N:31535433444a5157313432373830202020202020, FW:1AA01110
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EADS-11M2B1, S/N:2020202057202d44435756413435383335313830, FW:80.00A80
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate BUP Slim BL, S/N:NA7SJD7W, FW:0107

Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - Seagate BUP Slim BL
Partition table type: Intel

Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 83
Current partition structure:
No ext2, JFS, Reiser, cramfs or XFS marker
 1 P Linux                    0  32 33 243201  80 62 3907027119
 1 P Linux                    0  32 33 243201  80 62 3907027119
No partition is bootable

search_part()
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
BAD_RS LBA=5325564261 10304328
file_pread(6,1,buffer,5325564261(331501/11/4)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          331501  11  4 485291 177 39 2470646844
This partition ends after the disk limits. (start=5325564261, size=2470646844, end=7796211104, disk end=3907029167)
file_pread(6,2,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(6,14,buffer,3907031042(243201/110/48)) lseek err Invalid argument
file_pread(6,3,buffer,3907031056(243201/110/62)) lseek err Invalid argument
file_pread(6,3,buffer,3907031103(243201/111/46)) lseek err Invalid argument
file_pread(6,8,buffer,3907031119(243201/111/62)) lseek err Invalid argument
file_pread(6,11,buffer,3907031166(243201/112/46)) lseek err Invalid argument
file_pread(6,2,buffer,3907033088(243201/143/15)) lseek err Invalid argument
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 3991 GB / 3717 GiB)
The following partition can't be recovered:
     HPFS - NTFS          331501  11  4 485291 177 39 2470646844

Results

interface_write()
 
No partition found or selected for recovery
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

search_part()
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
BAD_RS LBA=5325564261 10304328
file_pread(6,1,buffer,5325564261(331501/11/4)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          331501  11  4 485291 177 39 2470646844
This partition ends after the disk limits. (start=5325564261, size=2470646844, end=7796211104, disk end=3907029167)
NTFS at 243201/13/12
filesystem size           3907022848
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
file_pread(6,2,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(6,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(6,8,buffer,3907029248(243201/82/18)) lseek err Invalid argument
file_pread(6,8,buffer,3907029376(243201/84/20)) lseek err Invalid argument
file_pread(6,8,buffer,3907029504(243201/86/22)) lseek err Invalid argument
file_pread(6,8,buffer,3907029632(243201/88/24)) lseek err Invalid argument
file_pread(6,8,buffer,3907029760(243201/90/26)) lseek err Invalid argument
file_pread(6,8,buffer,3907029888(243201/92/28)) lseek err Invalid argument
file_pread(6,8,buffer,3907030016(243201/94/30)) lseek err Invalid argument
file_pread(6,8,buffer,3907030144(243201/96/32)) lseek err Invalid argument
file_pread(6,8,buffer,3907030272(243201/98/34)) lseek err Invalid argument
file_pread(6,8,buffer,3907030400(243201/100/36)) lseek err Invalid argument
file_pread(6,8,buffer,3907030528(243201/102/38)) lseek err Invalid argument
file_pread(6,8,buffer,3907030656(243201/104/40)) lseek err Invalid argument
file_pread(6,8,buffer,3907030784(243201/106/42)) lseek err Invalid argument
file_pread(6,8,buffer,3907030912(243201/108/44)) lseek err Invalid argument
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 3991 GB / 3717 GiB)
The following partition can't be recovered:
     HPFS - NTFS          331501  11  4 485291 177 39 2470646844

Results
   * HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

   P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

   P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
filesystem size           7981731343930452439 3907022848
sectors_per_cluster       238 8
mft_lcn                   8034489645917374466 786432
mftmirr_lcn               2003561159666429596 2
clusters_per_mft_record   -128 -10
clusters_per_index_record -70 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
filesystem size           7981731343930452439 3907022848
sectors_per_cluster       238 8
mft_lcn                   8034489645917374466 786432
mftmirr_lcn               2003561159666429596 2
clusters_per_mft_record   -128 -10
clusters_per_index_record -70 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
filesystem size           7981731343930452439 3907022848
sectors_per_cluster       238 8
mft_lcn                   8034489645917374466 786432
mftmirr_lcn               2003561159666429596 2
clusters_per_mft_record   -128 -10
clusters_per_index_record -70 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Search mft stopped:     196608/3907022848
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
filesystem size           7981731343930452439 3907022848
sectors_per_cluster       238 8
mft_lcn                   8034489645917374466 786432
mftmirr_lcn               2003561159666429596 2
clusters_per_mft_record   -128 -10
clusters_per_index_record -70 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
filesystem size           7981731343930452439 3907022848
sectors_per_cluster       238 8
mft_lcn                   8034489645917374466 786432
mftmirr_lcn               2003561159666429596 2
clusters_per_mft_record   -128 -10
clusters_per_index_record -70 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
copy backup boot sector over boot sector

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size           3907022848
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0  32 33 243201  13 12 3907022848
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size           3907022848
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
You will have to reboot for the change to take effect.
SIGHUP detected! TestDisk has been killed.

Re: Lost 1TB partition - too big for recovery

Posted: 09 Dec 2016, 19:14
by marko87s
Just started qphotorec, its at 22% and only found 5 files (all corupt, few kb in size and weird extensions). I'll see it down the line but it doesn't look good.
Oh well. Any other options?