WD Unlocker UDF partition

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
cmedia
Posts: 2
Joined: 01 Jan 2017, 17:41

WD Unlocker UDF partition

#1 Post by cmedia »

Hi all,

When coding a HD with western digital unloker, it put a UDF partition with the unloking program that boots when plugin the HD, giving a password to it, and then loads the other partions.

Now when pluging the HD i have a big Raw disk without access to the "unloker" partition.

I tried testdisk and it only founds a FAT16 partion saying : Invalid FAT boot sector.

check_FAT: can't read FAT boot sector
Invalid FAT boot sector
0 D FAT16 <32M 141051 101 38 396140 231 54 4098012992
FAT16 <32M 141051 101 38 396140 231 54 4098012992

i'm pretty sure that this is the unloker partition that seems, on other HD that i have and on wich i have the same security... be the UDF partition but here it's wrong...

some one can help please...

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: WD Unlocker UDF partition

#2 Post by cgrenier »

Please post the whole testdisk.log file content

cmedia
Posts: 2
Joined: 01 Jan 2017, 17:41

Re: WD Unlocker UDF partition

#3 Post by cmedia »

Sorry

Code: Select all



Sun Jan 01 22:09:46 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, MinGW 3.11
Compilation date: Apr 18 2015 13:02:07
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20120504, curses lib: pdcurses build  3401
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\PhysicalDrive1
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\PhysicalDrive4
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=500074283008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive7)=31914983424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=159700221952
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=160266805248
filewin32_getfilesize(\\.\E:) GetFileSize err Fonction incorrecte.


filewin32_setfilepointer(\\.\E:) SetFilePointer err Fonction incorrecte.


Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=0
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=2209710080
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=34406400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=31457280
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=31910789120
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=500073234432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\P:)=107374182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Q:)=536870912000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\R:)=53687091200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\S:)=302235254784
Hard disk list
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB - CHS 60797 255 63, sector size=512
Disk \\.\PhysicalDrive6 - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512
Disk \\.\PhysicalDrive7 - 31 GB / 29 GiB - CHS 3880 255 63, sector size=512
Drive C: - 159 GB / 148 GiB - CHS 19415 255 63, sector size=512
Drive D: - 160 GB / 149 GiB - CHS 19484 255 63, sector size=512
Drive I: - 2209 MB / 2107 MiB - CHS 526 64 32, sector size=2048
Drive K: - 34 MB / 32 MiB - CHS 8 64 32, sector size=2048
Drive L: - 31 MB / 30 MiB - CHS 7 64 32, sector size=2048
Drive M: - 31 GB / 29 GiB - CHS 3879 255 63, sector size=512
Drive N: - 500 GB / 465 GiB - CHS 60797 255 63, sector size=512
Drive P: - 107 GB / 100 GiB - CHS 13054 255 63, sector size=512
Drive Q: - 536 GB / 500 GiB - CHS 65270 255 63, sector size=512
Drive R: - 53 GB / 50 GiB - CHS 6527 255 63, sector size=512
Drive S: - 302 GB / 281 GiB - CHS 36744 255 63, sector size=512

Partition table type (auto): Intel
Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB - CHS 60797 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
 1 P HPFS - NTFS              0  32 33 60797  59 62  976705536
 1 P HPFS - NTFS              0  32 33 60797  59 62  976705536
No partition is bootable

search_part()
Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB - CHS 60797 255 63
BAD_RS LBA=2265990715 9914614
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
     FAT16 <32M           141051 101 38 396140 231 54 4098012992
This partition ends after the disk limits. (start=2265990715, size=4098012992, end=6364003706, disk end=976707584)
file_win32_pread(88,16,buffer,111009792(6910/10/13)) read err: read after end of file
file_win32_pread(88,16,buffer,111009794(6910/10/15)) read err: read after end of file
file_win32_pread(88,1,buffer,111009800(6910/10/21)) read err: read after end of file
file_win32_pread(88,7,buffer,111009801(6910/10/22)) read err: read after end of file
file_win32_pread(88,3,buffer,111009808(6910/10/29)) read err: read after end of file
Search for partition aborted
Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB - CHS 60797 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 3258 GB / 3034 GiB)
The following partition can't be recovered:
     FAT16 <32M           141051 101 38 396140 231 54 4098012992

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB - CHS 60797 255 63
BAD_RS LBA=2265990715 9914614
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
     FAT16 <32M           141051 101 38 396140 231 54 4098012992
This partition ends after the disk limits. (start=2265990715, size=4098012992, end=6364003706, disk end=976707584)
file_win32_pread(88,16,buffer,111009792(6910/10/13)) read err: read after end of file
file_win32_pread(88,16,buffer,111009791(6910/10/12)) read err: read after end of file
file_win32_pread(88,16,buffer,111009794(6910/10/15)) read err: read after end of file
file_win32_pread(88,1,buffer,111009800(6910/10/21)) read err: read after end of file
file_win32_pread(88,7,buffer,111009801(6910/10/22)) read err: read after end of file
file_win32_pread(88,3,buffer,111009808(6910/10/29)) read err: read after end of file
Disk \\.\PhysicalDrive5 - 500 GB / 465 GiB - CHS 60797 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 3258 GB / 3034 GiB)
The following partition can't be recovered:
     FAT16 <32M           141051 101 38 396140 231 54 4098012992

Results


Locked