Cannot seem to fix the drive.

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
User avatar
JoeGons
Posts: 1
Joined: 18 Feb 2018, 22:41

Cannot seem to fix the drive.

#1 Post by JoeGons »

Hi,
I have a Dell B120 with XP Home.
It stopped booting.
The hard drive has some problems.
I removed the drive and attached it to a good computer with an external USB adapter.
Interestingly, it spins up and I can actually copy files from it with TestDisk.
The partitions seem to have been “deleted”.
I believe the Master Boot Record and the Partition record have been messed up.
I think there is psychical damage to the sectors involved.
TestDisk finds the Partitions but after I apply the corrections and “write”, the fix does not seem to help me see the drive in Windows.
I go through the motions and change the first deleted partition (OS C: partition) from D to *
The second to P.
Write.
And when I Analyse again, the same broken partitions show up.

Does the Program have the ability to write to a sector that is not broken?
Or does it keep trying to write to the same sector that is broken?
I still have hopes to rescue this drive so that I can clone it and put it to rest!!

Also, can anyone tell me exactly how to do a NTFS Boot sector recovery
Thanks
Joe

Log file:

Sun Feb 18 19:23:05 2018
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, February 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=16016998400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=40007761920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=16016998400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=250785824768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=106489870848
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=21478610944
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=171795860480
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=182481223680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=16015949824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=250785792000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=250785792000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=320070288384
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - WDC WD5000LPVX-22V0TT0, S/N:WD-WXV1E53HZC04, FW:01.01A01
Disk /dev/sdb - 250 GB / 233 GiB - CHS 30489 255 63, sector size=512 - SanDisk Cruzer Glide 3.0, S/N:4C530001190224109531, FW:1.00
Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63, sector size=512 - SAMSUNG MP0402H, S/N:100, FW:UC20
Disk /dev/sdd - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - TOSHIBA MK3259GSX, S/N:801130168383
Disk /dev/sde - 16 GB / 14 GiB - CHS 1947 255 63, sector size=512 - Lexar USB Flash Drive, S/N:AA00000000000485, FW:1100
Disk /dev/sdf - 250 GB / 233 GiB - CHS 30489 255 63, sector size=512 - SanDisk Cruzer Glide 3.0, S/N:4C530001010304116371, FW:1.00

Partition table type defaults to Intel
Disk /dev/sdc - 40 GB / 37 GiB - SAMSUNG MP0402H
Partition table type: Intel

Analyse Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63
Current partition structure:

Partition: Read error

search_part()
Disk /dev/sdc - 40 GB / 37 GiB - CHS 4864 255 63
file_pread(6,16,buffer,48(0/0/49)) ReadFile Incorrect function.

file_pread(6,16,buffer,95(0/1/33)) ReadFile Incorrect function.

file_pread(6,1,buffer,95(0/1/33)) ReadFile Incorrect function.

file_pread(6,8,buffer,111(0/1/49)) ReadFile Incorrect function.

file_pread(6,16,buffer,51(0/0/52)) ReadFile Incorrect function.

file_pread(6,16,buffer,97(0/1/35)) ReadFile Incorrect function.

file_pread(6,1,buffer,97(0/1/35)) ReadFile Incorrect function.

file_pread(6,2,buffer,119(0/1/57)) ReadFile Incorrect function.

file_pread(6,16,buffer,63(0/1/1)) ReadFile Incorrect function.

file_pread(6,1,buffer,63(0/1/1)) ReadFile Incorrect function.

file_pread(6,8,buffer,71(0/1/9)) ReadFile Incorrect function.

file_pread(6,3,buffer,79(0/1/17)) ReadFile Incorrect function.

file_pread(6,3,buffer,126(0/2/1)) ReadFile Incorrect function.

file_pread(6,8,buffer,142(0/2/17)) ReadFile Incorrect function.

NTFS at 2/0/1
filesystem size 71794485
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 16
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 2 0 1 4470 254 63 71794485
NTFS, blocksize=4096, 36 GB / 34 GiB
FAT32 at 4471/0/1
FAT1 : 36-6173
FAT2 : 6174-12311
start_rootdir : 12312 root cluster : 2
Data : 12312-6297479
sectors : 6297480
cluster_size : 8
no_of_cluster : 785646 (2 - 785647)
fat_length 6138 calculated 6138
set_FAT_info: name from BS used

FAT32 at 4471/0/1
FAT: cluster=2(0x2), pos=71838927
FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
FAT32, blocksize=4096, 3224 MB / 3074 MiB
file_pread(6,2,buffer,78141439(4864/20/20)) lseek err Invalid argument
file_pread(6,1,buffer,78141439(4864/20/20)) lseek err Invalid argument
file_pread(6,2,buffer,78141440(4864/20/21)) lseek err Invalid argument
NTFS at 4863/254/63
filesystem size 78140097
sectors_per_cluster 8
mft_lcn 3
mftmirr_lcn 4883756
clusters_per_mft_record -10
clusters_per_index_record 1
file_pread(6,16,buffer,93(0/1/31)) ReadFile Incorrect function.

file_pread(6,1,buffer,93(0/1/31)) ReadFile Incorrect function.

NTFS: Can't read MFT
HPFS - NTFS 0 1 1 4863 254 63 78140097
NTFS found using backup sector, blocksize=4096, 40 GB / 37 GiB
file_pread(6,1,buffer,78140160(4864/0/1)) ReadFile Incorrect function.

file_pread(6,14,buffer,78140161(4864/0/2)) lseek err Invalid argument
file_pread(6,3,buffer,78140175(4864/0/16)) lseek err Invalid argument
file_pread(6,3,buffer,78140222(4864/0/63)) lseek err Invalid argument
file_pread(6,8,buffer,78140238(4864/1/16)) lseek err Invalid argument
file_pread(6,11,buffer,78140285(4864/1/63)) lseek err Invalid argument
file_pread(6,2,buffer,78142207(4864/32/32)) lseek err Invalid argument
file_pread(6,1,buffer,78140178(4864/0/19)) lseek err Invalid argument
file_pread(6,1,buffer,78140225(4864/1/3)) lseek err Invalid argument
file_pread(6,1,buffer,78140246(4864/1/24)) lseek err Invalid argument
file_pread(6,1,buffer,78140296(4864/2/11)) lseek err Invalid argument
file_pread(6,1,buffer,78142209(4864/32/34)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=6
get_geometry_from_list_part_aux head=8 nbr=3
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=6

Results
HPFS - NTFS 0 1 1 4863 254 63 78140097
NTFS found using backup sector, blocksize=4096, 40 GB / 37 GiB
HPFS - NTFS 2 0 1 4470 254 63 71794485
NTFS, blocksize=4096, 36 GB / 34 GiB
FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]
FAT32, blocksize=4096, 3224 MB / 3074 MiB

interface_write()
1 * HPFS - NTFS 2 0 1 4470 254 63 71794485
2 P FAT32 LBA 4471 0 1 4862 254 63 6297480 [DellRestore]

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Cannot seem to fix the drive.

#2 Post by cgrenier »

Enable SMART monitoring in your BIOS setup.
It may help your disk to use spare sectors to replace damaged one.
If rewriting the partition still doesn't work, clone your disk to a new empty one (can be bigger) using ddrescue, read https://www.cgsecurity.org/testdisk.pdf for an howto.
good luck

Locked