Recovery of HFS-formatted Western Digital Harddisk recognized as RAW

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
lsgit
Posts: 1
Joined: 11 Apr 2018, 13:43

Recovery of HFS-formatted Western Digital Harddisk recognized as RAW

#1 Post by lsgit »

Hello,

I have a 1TB Western Digital disk, with a HFS-Partition, which is shown as a RAW disk in Windows.


The Log file shows the following:

Code: Select all

TestDisk 7.1-WIP, Data Recovery Utility, March 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Darwin, kernel 17.4.0 (Darwin Kernel Version 17.4.0: Sun Dec 17 09:19:54 PST 2017; root:xnu-4570.41.2~1/RELEASE_X86_64) x86_64
Compiler: GCC 4.0
Compilation date: Mar 19 201820:41:07
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.4
Hard disk list
Disk /dev/disk2 - 1000 GB / 931 GiB - 1953458176 sectors, sector size=512
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953458176 sectors, sector size=512
 
Partition table type (auto): Intel
Disk /dev/rdisk2 - 1000 GB / 931 GiB
Partition table type: Intel
 
Analyse Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953458176 sectors
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 1339
check_part_i386 failed for partition type AF
get_geometry_from_list_part_aux head=1 nbr=2
Current partition structure:
No HFS or HFS+ structure
1 P HFS                            2 1953458175 1953458174
1 P HFS                            2 1953458175 1953458174
 
Warning: Bad starting sector (CHS and LBA don't match)
No partition is bootable
 
search_part()
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953458176 sectors
BAD_RS LBA=3817705145 75
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
     FAT32 LBA             3817705145 8020123056 4202417912
This partition ends after the disk limits. (start=3817705145, size=4202417912, end=8020123056, disk end=1953458176)
BAD_RS LBA=525044350 1130
check_part_i386 failed for partition type 04
     FAT16 <32M             525044350 2585855897 2060811548
This partition ends after the disk limits. (start=525044350, size=2060811548, end=2585855897, disk end=1953458176)
BAD_RS LBA=111049470 759
check_part_i386 failed for partition type 01
     FAT12                  111049470 4215485328 4104435859
This partition ends after the disk limits. (start=111049470, size=4104435859, end=4215485328, disk end=1953458176)
BAD_RS LBA=503899722 711
check_part_i386 failed for partition type 07
     HPFS - NTFS            503899722 2544328891 2040429170
This partition ends after the disk limits. (start=503899722, size=2040429170, end=2544328891, disk end=1953458176)
BAD_RS LBA=1973015633 728
check_part_i386 failed for partition type 07
     HPFS - NTFS           1973015633 5374370701 3401355069
This partition ends after the disk limits. (start=1973015633, size=3401355069, end=5374370701, disk end=1953458176)
BAD_RS LBA=1048164684 339
check_part_i386 failed for partition type 0B
     FAT32                 1048164684 1822544159  774379476
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953458176 sectors
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 4106 GB / 3824 GiB)
The following partitions can't be recovered:
     FAT12                  111049470 4215485328 4104435859
     HPFS - NTFS            503899722 2544328891 2040429170
     FAT16 <32M             525044350 2585855897 2060811548
     HPFS - NTFS           1973015633 5374370701 3401355069
     FAT32 LBA             3817705145 8020123056 4202417912
get_geometry_from_list_part_aux head=1 nbr=2
 
Results
   * FAT32                 1048164684 1822544159  774379476
 
interface_write()
1 * FAT32                 1048164684 1822544159  774379476
simulate write!
 
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
 
Analyse Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953458176 sectors
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 1339
check_part_i386 failed for partition type AF
get_geometry_from_list_part_aux head=1 nbr=2
Current partition structure:
No HFS or HFS+ structure
1 P HFS                            2 1953458175 1953458174
1 P HFS                            2 1953458175 1953458174
 
Warning: Bad starting sector (CHS and LBA don't match)
No partition is bootable
 
search_part()
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953458176 sectors
Search for partition aborted
 
Results
 
interface_write()
No partition found or selected for recovery
simulate write!
 
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
 
TestDisk exited normally.
Do do not understand, why it is showing me FAT & NTFS Partitions, which ca not be recovered. Are those old ones from the time before the disk was formatted under MacOS?

As you can see the logfile, would it be possible to "repair" my disk?


Regards
lsgit

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovery of HFS-formatted Western Digital Harddisk recognized as RAW

#2 Post by cgrenier »

There is a chapter about repairing filesystem in https://www.cgsecurity.org/testdisk.pdf PhotoRec can used if it doesn't work.
Note that
- Windows can not access HFS or HFS+ partition.
- HFS partition aren't used for harddisk, only HFS+.

Locked