I tried to attach the logs so far but it keeps telling me the extension is invalid. I tried a few different ones but no luck. Below are the 2 logs I have. The first is if I select Non partitioned media for the type, which is what it defaults to when I get to that screen. Here is see the ufs partition. I did a deep search but it was going very slow, about 1 cylinder per second. The drive has 972,800 cylinders. At that rate it was going to take 11 - 12 days to complete. The 2nd log is when I select PC/Intel from the type list. That shows the NTFS partition. The deep search is running faster on it but won't be finished until later today or tomorrow. With this additional info would you still suggest using the dd command you mentioned earlier? Thank you for your help.
Non partitioned media type log:
Fri Jun 8 21:25:35 2018
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=8001562869760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=8001562869760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511499815936
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=8001560772608
Hard disk list
Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63, sector size=512
Drive C: - 511 GB / 476 GiB - CHS 62186 255 63, sector size=512
Drive D: - 8001 GB / 7452 GiB - CHS 972801 255 63, sector size=512
Partition table type (auto): None
Disk /dev/sdb - 8001 GB / 7452 GiB
Partition table type: None
Analyse Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
Current partition structure:
P UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
search_part()
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
UFS2 blocksize=4096, 8001 GB / 7452 GiB
file_pread(5,8,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,1,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,1,buffer,2743150593(972801/70/7)) lseek err Invalid argument
file_pread(5,14,buffer,2743150594(972801/70/8)) lseek err Invalid argument
file_pread(5,3,buffer,2743150608(972801/70/22)) lseek err Invalid argument
file_pread(5,3,buffer,2743150655(972801/71/6)) lseek err Invalid argument
file_pread(5,8,buffer,2743150671(972801/71/22)) lseek err Invalid argument
file_pread(5,11,buffer,2743150718(972801/72/6)) lseek err Invalid argument
file_pread(5,2,buffer,2743152640(972801/102/38)) lseek err Invalid argument
Results
P UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
UFS2 blocksize=4096, 8001 GB / 7452 GiB
interface_write()
P UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
Write isn't available because the partition table type "None" has been selected.
search_part()
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 0 1 2 972801 71 6 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 0 1 50 972801 71 54 15628052480 [/backups/usb_drive]
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 0 2 51 972801 72 55 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
NTFS at 0/32/33
filesystem size 15628048384
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=8001560772608, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size 15628048384
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS 0 32 33 972801 37 36 15628048384
NTFS, blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 79 209 3 972881 24 7 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=1282304, size=15628052480, end=15629334783, disk end=15628052480)
UFS 2 - Little Endian 79 210 52 972881 25 56 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=1282416, size=15628052480, end=15629334895, disk end=15628052480)
UFS 2 - Little Endian 159 162 4 972960 232 8 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=2564544, size=15628052480, end=15630617023, disk end=15628052480)
UFS 2 - Little Endian 159 163 53 972960 233 57 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=2564656, size=15628052480, end=15630617135, disk end=15628052480)
UFS 2 - Little Endian 239 115 5 973040 185 9 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=3846784, size=15628052480, end=15631899263, disk end=15628052480)
UFS 2 - Little Endian 239 116 54 973040 186 58 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=3846896, size=15628052480, end=15631899375, disk end=15628052480)
UFS 2 - Little Endian 319 68 6 973120 138 10 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=5129024, size=15628052480, end=15633181503, disk end=15628052480)
UFS 2 - Little Endian 319 69 55 973120 139 59 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=5129136, size=15628052480, end=15633181615, disk end=15628052480)
UFS 2 - Little Endian 399 21 7 973200 91 11 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=6411264, size=15628052480, end=15634463743, disk end=15628052480)
UFS 2 - Little Endian 399 22 56 973200 92 60 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
This partition ends after the disk limits. (start=6411376, size=15628052480, end=15634463855, disk end=15628052480)
file_pread(5,2,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,1,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,2,buffer,2743150619(972801/70/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743150619(972801/70/33)) lseek err Invalid argument
file_pread(5,2,buffer,2743150655(972801/71/6)) lseek err Invalid argument
file_pread(5,1,buffer,2743150655(972801/71/6)) lseek err Invalid argument
file_pread(5,2,buffer,2743150682(972801/71/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743150682(972801/71/33)) lseek err Invalid argument
file_pread(5,7,buffer,2743150593(972801/70/7)) lseek err Invalid argument
file_pread(5,1,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,8,buffer,2743150600(972801/70/14)) lseek err Invalid argument
file_pread(5,3,buffer,2743150608(972801/70/22)) lseek err Invalid argument
file_pread(5,2,buffer,2743150656(972801/71/7)) lseek err Invalid argument
file_pread(5,8,buffer,2743150671(972801/71/22)) lseek err Invalid argument
file_pread(5,11,buffer,2743150718(972801/72/6)) lseek err Invalid argument
file_pread(5,2,buffer,2743152640(972801/102/38)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (8001 GB / 7452 GiB) seems too small! (< 8004 GB / 7455 GiB)
The following partitions can't be recovered:
UFS 2 - Little Endian 79 209 3 972881 24 7 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 79 210 52 972881 25 56 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 159 162 4 972960 232 8 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 159 163 53 972960 233 57 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 239 115 5 973040 185 9 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 239 116 54 973040 186 58 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 319 68 6 973120 138 10 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 319 69 55 973120 139 59 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 399 21 7 973200 91 11 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
UFS 2 - Little Endian 399 22 56 973200 92 60 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
Results
P UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
UFS2 blocksize=4096, 8001 GB / 7452 GiB
P UFS 2 - Little Endian 0 1 2 972801 71 6 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
P UFS 2 - Little Endian 0 1 50 972801 71 54 15628052480 [/backups/usb_drive]
UFS2 blocksize=4096, 8001 GB / 7452 GiB
P UFS 2 - Little Endian 0 2 51 972801 72 55 15628052480
UFS2 blocksize=4096, 8001 GB / 7452 GiB
P NTFS 0 32 33 972801 37 36 15628048384
NTFS, blocksize=4096, 8001 GB / 7452 GiB
Change partition type:
P NTFS 0 32 33 972801 37 36 15628048384
NTFS, blocksize=4096, 8001 GB / 7452 GiB
interface_write()
P UFS 2 - Little Endian 0 0 1 972801 70 5 15628052480 [/backups/usb_drive]
P UFS 2 - Little Endian 0 1 2 972801 71 6 15628052480
P UFS 2 - Little Endian 0 1 50 972801 71 54 15628052480 [/backups/usb_drive]
P UFS 2 - Little Endian 0 2 51 972801 72 55 15628052480
P NTFS 0 32 33 972801 37 36 15628048384
Write isn't available because the partition table type "None" has been selected.
TestDisk exited normally.
PC/Intel type log.
Fri Jun 8 21:55:05 2018
Command line: TestDisk
TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <
grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=8001562869760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=8001562869760
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511499815936
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=8001560772608
Hard disk list
Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63, sector size=512
Drive C: - 511 GB / 476 GiB - CHS 62186 255 63, sector size=512
Drive D: - 8001 GB / 7452 GiB - CHS 972801 255 63, sector size=512
Partition table type (auto): None
Disk /dev/sdb - 8001 GB / 7452 GiB
Partition table type: Intel
Analyse Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295
Warning: Bad ending head (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdb - 8001 GB / 7452 GiB - CHS 972801 255 63
NTFS at 0/32/33
filesystem size 15628048384
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 972801 37 36 15628048384
NTFS, blocksize=4096, 8001 GB / 7452 GiB
file_pread(5,2,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,1,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,2,buffer,2743150619(972801/70/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743150619(972801/70/33)) lseek err Invalid argument
file_pread(5,2,buffer,2743150655(972801/71/6)) lseek err Invalid argument
file_pread(5,1,buffer,2743150655(972801/71/6)) lseek err Invalid argument
file_pread(5,2,buffer,2743150682(972801/71/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743150682(972801/71/33)) lseek err Invalid argument
file_pread(5,1,buffer,2743150592(972801/70/6)) ReadFile The drive cannot find the sector requested.
file_pread(5,14,buffer,2743150593(972801/70/7)) lseek err Invalid argument
file_pread(5,3,buffer,2743150607(972801/70/21)) lseek err Invalid argument
file_pread(5,3,buffer,2743150654(972801/71/5)) lseek err Invalid argument
file_pread(5,8,buffer,2743150670(972801/71/21)) lseek err Invalid argument
file_pread(5,11,buffer,2743150717(972801/72/5)) lseek err Invalid argument
file_pread(5,2,buffer,2743152639(972801/102/37)) lseek err Invalid argument
file_pread(5,1,buffer,2743150610(972801/70/24)) lseek err Invalid argument
file_pread(5,1,buffer,2743150657(972801/71/8)) lseek err Invalid argument
file_pread(5,1,buffer,2743150678(972801/71/29)) lseek err Invalid argument
file_pread(5,1,buffer,2743150728(972801/72/16)) lseek err Invalid argument
file_pread(5,1,buffer,2743152641(972801/102/39)) lseek err Invalid argument
Results
* HPFS - NTFS 0 32 33 972801 37 36 15628048384
NTFS, blocksize=4096, 8001 GB / 7452 GiB
interface_write()
1 * HPFS - NTFS 0 32 33 972801 37 36 15628048384