WD My Passport turned RAW from NTFS
Posted: 30 Sep 2017, 21:57
Hi All,
I have a WD My Passport 1 TB which is now around 4 years old with lots of valuable data in it personal and work related docs, images, videos, executables,etc. These are very valuable to me. Couple of days back I was accessing some files on the disk when the laptop seemed to get slow, I tried ejecting the hdd by safely remove option. But when it did not seem to work I forcefully pulled it out. But when I plugged it back to access the folders its now not getting detected in the file explorer. I see it as Local Disk K while it used to be displayed with its actual name My Passport. Disk Management does not seem to respond when I access it with hdd connected while the Device Manager rightly shows it as WD My Passport. Tried accessing it using Ubuntu Live USB and its the same not accessible.<br/>
Tried TestDisk as well but it seems to take ages so I had to cancel it. The quick search ran for almost 3 hours but still at 0%. And was from away ever from reaching to even 1%.
Please help. Would be grateful for your responses. Have attached the logs that may help.
TestDisk Log file :
Sat Sep 30 20:28:02 2017
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, July 2017
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin32 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=111044198400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=179240435712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=209715200000
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=1000169537536
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST9500325AS, S/N:S2W7YA4Q, FW:D005DEM1
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD My Passport 0748, S/N:WXQ1E13NHSY5, FW:1022
Partition table type (auto): Intel
Disk /dev/sdc - 1000 GB / 931 GiB - WD My Passport 0748
Partition table type: Intel
Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
BAD_RS LBA=2048 4294967295
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or exFAT boot
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
Warning: Bad starting sector (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
file_pread(5,16,buffer,2048(0/32/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2048(0/32/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,2,buffer,1953458175(121597/37/40)) ReadFile The drive cannot find the sector requested.
file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.
I have a WD My Passport 1 TB which is now around 4 years old with lots of valuable data in it personal and work related docs, images, videos, executables,etc. These are very valuable to me. Couple of days back I was accessing some files on the disk when the laptop seemed to get slow, I tried ejecting the hdd by safely remove option. But when it did not seem to work I forcefully pulled it out. But when I plugged it back to access the folders its now not getting detected in the file explorer. I see it as Local Disk K while it used to be displayed with its actual name My Passport. Disk Management does not seem to respond when I access it with hdd connected while the Device Manager rightly shows it as WD My Passport. Tried accessing it using Ubuntu Live USB and its the same not accessible.<br/>
Tried TestDisk as well but it seems to take ages so I had to cancel it. The quick search ran for almost 3 hours but still at 0%. And was from away ever from reaching to even 1%.
Please help. Would be grateful for your responses. Have attached the logs that may help.
TestDisk Log file :
Sat Sep 30 20:28:02 2017
Command line: TestDisk
TestDisk 7.1-WIP, Data Recovery Utility, July 2017
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin32 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=111044198400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=179240435712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=209715200000
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=1000169537536
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST9500325AS, S/N:S2W7YA4Q, FW:D005DEM1
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD My Passport 0748, S/N:WXQ1E13NHSY5, FW:1022
Partition table type (auto): Intel
Disk /dev/sdc - 1000 GB / 931 GiB - WD My Passport 0748
Partition table type: Intel
Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
BAD_RS LBA=2048 4294967295
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or exFAT boot
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
Warning: Bad starting sector (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
file_pread(5,16,buffer,2048(0/32/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,1,buffer,2048(0/32/33)) ReadFile Data error (cyclic redundancy check).
file_pread(5,2,buffer,1953458175(121597/37/40)) ReadFile The drive cannot find the sector requested.
file_pread(5,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.
Search for partition aborted
Results
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
TestDisk exited normally.