Page 1 of 2

the following partition can't be recovered/ filesystem damaged

Posted: 24 May 2019, 10:11
by fetus
Hi!
After a few episodes of blue screens on a win10 PC, a relatively new Intenso 5TB external HDD (named "Murmansk" drive letter I: file system:NTFS) with important documentaries and videos on it got RAW.
There is no physical damage on the HDD. I am not an expert on PCs.

I Initially followed the basic steps as follows:
create -> Disk /dev/sdd (disk selection) -> Intel -> Analyse -> Quick Search
After Quick Search I got these messages "Hard disk seems too small"
Image
and "the following partition can't be recovered/ filesystem damaged"

The Log File of this 1st attempt:

Code: Select all

Wed May 22 23:50:04 2019
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, December 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=6001175125504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=5000981078016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=6001175125504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=5000981078016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000097185792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=4695818240
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=6001175090688
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=5000969191424
filewin32_getfilesize(\\.\N:) GetFileSize err ÅóöáëìÝíç ëåéôïõñãßá.(Incorrect operation)

filewin32_setfilepointer(\\.\N:) SetFilePointer err ÅóöáëìÝíç ëåéôïõñãßá.(Incorrect operation)

Warning: can't get size for \\.\N:
filewin32_getfilesize(\\.\O:) GetFileSize err ÅóöáëìÝíç ëåéôïõñãßá.(Incorrect operation)

filewin32_setfilepointer(\\.\O:) SetFilePointer err ÅóöáëìÝíç ëåéôïõñãßá.(Incorrect operation)

Warning: can't get size for \\.\O:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WD WD10EZEX-08WN4A0, S/N:WD-WCC6Y1EAFHLE, FW:01.0
Disk /dev/sdb - 6001 GB / 5589 GiB - CHS 729601 255 63, sector size=512 - Seagate Backup+ Hub BK, S/N:NA9Q4NMH, FW:D781
Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402
Disk \\.\PhysicalDrive3 - 5000 GB / 4657 GiB - CHS 76000 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402
Drive D: - 4695 MB / 4478 MiB - CHS 1119 64 32, sector size=2048 - ATAPI iHAS120   X, FW:FL01
Drive I: - 5000 GB / 4657 GiB - CHS 75999 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402

Partition table type (auto): Intel
Disk /dev/sdd - 5000 GB / 4657 GiB - Intenso External USB 3.0
Partition table type: Intel

Analyse Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744
No partition is bootable

search_part()
Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63
NTFS at 75999/254/63
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
     HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS found using backup sector, blocksize=4096, 5000 GB / 4657 GiB
NTFS at 75999/254/63
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
file_pread(6,1,buffer,1221726434(76048/243/6)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          75999 254 63 151999 250 58 1220939744
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
This partition ends after the disk limits. (start=1220939999, size=1220939744, end=2441879742, disk end=1220942646)
file_pread(6,1,buffer,1220942847(76000/45/13)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (5000 GB / 4657 GiB) seems too small! (< 10001 GB / 9315 GiB)
The following partition can't be recovered:
     HPFS - NTFS          75999 254 63 151999 250 58 1220939744
     NTFS, blocksize=4096, 5000 GB / 4657 GiB

Results
   * HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]
     NTFS found using backup sector, blocksize=4096, 5000 GB / 4657 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

   * HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]
     NTFS found using backup sector, blocksize=4096, 5000 GB / 4657 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 * HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]

search_part()
Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63
BAD_RS LBA=3319709394 4109838
file_pread(6,3,buffer,3319709394(206642/89/58)) lseek err Invalid argument
file_pread(6,1,buffer,3319709394(206642/89/58)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           206642  89 58 438199  97 18 3719963670
This partition ends after the disk limits. (start=3319709394, size=3719963670, end=7039673063, disk end=1220942646)
BAD_RS LBA=1477446660 16075720
file_pread(6,1,buffer,1477446660(91966/204/19)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          91966 204 19 296656  32 14 3288334010
This partition ends after the disk limits. (start=1477446660, size=3288334010, end=4765780669, disk end=1220942646)
BAD_RS LBA=1816229660 15556514
file_pread(6,1,buffer,1816229660(113055/17/15)) lseek err Invalid argument
check_part_i386 failed for partition type 07
     HPFS - NTFS          113055  17 15 248286 216 23 2172498561
This partition ends after the disk limits. (start=1816229660, size=2172498561, end=3988728220, disk end=1220942646)
BAD_RS LBA=4391942050 7121846
file_pread(6,3,buffer,4391942050(273385/190/56)) lseek err Invalid argument
file_pread(6,1,buffer,4391942050(273385/190/56)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
     FAT32 LBA            273385 190 56 503730  62 12 3700484318
This partition ends after the disk limits. (start=4391942050, size=3700484318, end=8092426367, disk end=1220942646)
BAD_RS LBA=2048779815 10251440
file_pread(6,3,buffer,2048779815(127530/164/34)) lseek err Invalid argument
file_pread(6,1,buffer,2048779815(127530/164/34)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0B
     FAT32                127530 164 34 184406  20 46  913703881
This partition ends after the disk limits. (start=2048779815, size=913703881, end=2962483695, disk end=1220942646)
BAD_RS LBA=5169425748 8490826
file_pread(6,3,buffer,5169425748(321781/221/61)) lseek err Invalid argument
file_pread(6,1,buffer,5169425748(321781/221/61)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           321781 221 61 388655  76 23 1074321638
This partition ends after the disk limits. (start=5169425748, size=1074321638, end=6243747385, disk end=1220942646)
NTFS at 75999/254/63
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
     HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS found using backup sector, blocksize=4096, 5000 GB / 4657 GiB
NTFS at 75999/254/63
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
file_pread(6,1,buffer,1221726434(76048/243/6)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          75999 254 63 151999 250 58 1220939744
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
This partition ends after the disk limits. (start=1220939999, size=1220939744, end=2441879742, disk end=1220942646)
file_pread(6,1,buffer,1220942847(76000/45/13)) lseek err Invalid argument
file_pread(6,1,buffer,1220942848(76000/45/14)) lseek err Invalid argument
file_pread(6,1,buffer,1220942847(76000/45/13)) lseek err Invalid argument
Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (5000 GB / 4657 GiB) seems too small! (< 33 TB / 30 TiB)
The following partitions can't be recovered:
     HPFS - NTFS          75999 254 63 151999 250 58 1220939744
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
     HPFS - NTFS          91966 204 19 296656  32 14 3288334010
     HPFS - NTFS          113055  17 15 248286 216 23 2172498561
     FAT32                127530 164 34 184406  20 46  913703881
     FAT16 >32M           206642  89 58 438199  97 18 3719963670
     FAT32 LBA            273385 190 56 503730  62 12 3700484318
     FAT16 >32M           321781 221 61 388655  76 23 1074321638

Results
   * HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]
     NTFS found using backup sector, blocksize=4096, 5000 GB / 4657 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Then I read this message and used the advice given by cgrenier to Jamsah on this page ("select /dev/sdb, Intel, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write, confirm, Quit and restart your computer.") and after "Boot" I got here:
Image

This is the log file:

Code: Select all

Thu May 23 10:27:30 2019
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, December 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=6001175125504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=5000981078016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=6001175125504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=5000981078016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000097185792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=4695818240
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=6001175090688
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=5000969191424
filewin32_getfilesize(\\.\N:) GetFileSize err Εσφαλμένη λειτουργία.

filewin32_setfilepointer(\\.\N:) SetFilePointer err Εσφαλμένη λειτουργία.

Warning: can't get size for \\.\N:
filewin32_getfilesize(\\.\O:) GetFileSize err Εσφαλμένη λειτουργία.

filewin32_setfilepointer(\\.\O:) SetFilePointer err Εσφαλμένη λειτουργία.

Warning: can't get size for \\.\O:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WD WD10EZEX-08WN4A0, S/N:WD-WCC6Y1EAFHLE, FW:01.0
Disk /dev/sdb - 6001 GB / 5589 GiB - CHS 729601 255 63, sector size=512 - Seagate Backup+ Hub BK, S/N:NA9Q4NMH, FW:D781
Disk /dev/sdd - 5000 GB / 4657 GiB - CHS 76000 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402
Disk \\.\PhysicalDrive3 - 5000 GB / 4657 GiB - CHS 76000 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402
Drive D: - 4695 MB / 4478 MiB - CHS 1119 64 32, sector size=2048 - ATAPI iHAS120   X, FW:FL01
Drive I: - 5000 GB / 4657 GiB - CHS 75999 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402

Partition table type (auto): Intel
Disk /dev/sdd - 5000 GB / 4657 GiB - Intenso External USB 3.0
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744

ntfs_boot_sector
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744
NTFS at 0/4/5
filesystem size           11797157940903298790 1220939744
sectors_per_cluster       148 1
mft_lcn                   4025226182940823097 786432
mftmirr_lcn               16306854626075542534 2
clusters_per_mft_record   13 1
clusters_per_index_record -54 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 523593
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         0
ntfs_find_mft: mft_record_size     4096

mft at 1348994
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         0
ntfs_find_mft: mft_record_size     4096

mft at 1669493
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         0
ntfs_find_mft: mft_record_size     4096

mft at 2003042
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         0
ntfs_find_mft: mft_record_size     4096

Failed to rebuild NTFS boot sector.

ntfs_boot_sector
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744
NTFS at 0/4/5
filesystem size           11797157940903298790 1220939744
sectors_per_cluster       148 1
mft_lcn                   4025226182940823097 786432
mftmirr_lcn               16306854626075542534 2
clusters_per_mft_record   13 1
clusters_per_index_record -54 1
Boot sector
Status: Bad

Backup boot sector
Status: OK

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Are these steps that I followed the right steps or should I follow a different path?
Should I continue through "RebuildBS, List. If you can see your files, choose Write, confirm, Quit and restart your computer." or should I do something else?
Should I backup the files that have been found with Deep Scan by a Data Recovery software before proceeding, (Only 1/3 of the files are found and could be recovered by the Data Recovery Software).
Your advice would be much appreciated. Thank you

Re: the following partition can't be recovered/ filesystem damaged

Posted: 25 May 2019, 09:06
by cgrenier
Run TestDisk, Advanced, Boot, BackupBS, confirm, Quit and restart your computer.

Re: the following partition can't be recovered/ filesystem damaged

Posted: 25 May 2019, 16:35
by fetus
Dear cgrenier, I appreciate your kindness trying to help me. Thank you so much
I tried "TestDisk, Advanced, Boot, BackupBS, confirm, Quit and restart" but unfortunately windows didn't see my HDD.

I tried again the sequence TestDisk, Advanced, Boot
Image
Image
and after "Boot" I get the following mesage:
Image
"Boot sector status OK
Backup boot sector status OK
Sectors are identical
A valid NTFS Boot sector must be present in order toaccess any data; even if the partition is bootable"
If I press "List" it says
"Can't open filesystem. Filesystem seems damaged."

Code: Select all

Sat May 25 18:04:52 2019
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, December 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=5000981078016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=6001175125504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=5000981078016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=6001175125504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000097185792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2048
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=6001175090688
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=5000969191424
filewin32_getfilesize(\\.\N:) GetFileSize err Εσφαλμένη λειτουργία.

filewin32_setfilepointer(\\.\N:) SetFilePointer err Εσφαλμένη λειτουργία.

Warning: can't get size for \\.\N:
filewin32_getfilesize(\\.\O:) GetFileSize err Εσφαλμένη λειτουργία.

filewin32_setfilepointer(\\.\O:) SetFilePointer err Εσφαλμένη λειτουργία.

Warning: can't get size for \\.\O:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WD WD10EZEX-08WN4A0, S/N:WD-WCC6Y1EAFHLE, FW:01.0
Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 76000 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402
Disk /dev/sdc - 6001 GB / 5589 GiB - CHS 729601 255 63, sector size=512 - Seagate Backup+ Hub BK, S/N:NA9Q4NMH, FW:D781
Disk \\.\PhysicalDrive1 - 5000 GB / 4657 GiB - CHS 76000 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402
Drive D: - 2048 B - CHS 1 64 32, sector size=2048 - ATAPI iHAS120   X, FW:FL01
Drive I: - 5000 GB / 4657 GiB - CHS 75999 255 63, sector size=4096 - Intenso External USB 3.0, S/N:2016122910159, FW:1402

Partition table type (auto): Intel
Disk /dev/sdb - 5000 GB / 4657 GiB - Intenso External USB 3.0
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB

ntfs_boot_sector
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
NTFS at 0/4/5
NTFS at 0/4/5
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
NTFS at 0/4/5
NTFS at 0/4/5
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
NTFS at 0/4/5
NTFS at 0/4/5
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

Analyse Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 76000 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
Current partition structure:
 1 P HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
No partition is bootable

search_part()
Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 76000 255 63
NTFS at 0/4/5
filesystem size           1220939744
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
     HPFS - NTFS              0   4  5 75999 254 63 1220939744 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
file_pread(5,1,buffer,1220942847(76000/45/13)) lseek err Invalid argument
file_pread(5,1,buffer,1220942848(76000/45/14)) lseek err Invalid argument
file_pread(5,2,buffer,1220942848(76000/45/14)) lseek err Invalid argument
file_pread(5,1,buffer,1220942850(76000/45/16)) lseek err Invalid argument
file_pread(5,2,buffer,1220942855(76000/45/21)) lseek err Invalid argument
file_pread(5,2,buffer,1220942857(76000/45/23)) lseek err Invalid argument
file_pread(5,3,buffer,1220942863(76000/45/29)) lseek err Invalid argument
file_pread(5,1,buffer,1220943104(76000/49/18)) lseek err Invalid argument

Results
   * HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]
     NTFS, blocksize=4096, 5000 GB / 4657 GiB
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
 1 E extended LBA             0   4  4 76000   0 32 1220939777
 5 L HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
 1 E extended LBA             0   4  4 76000   0 32 1220939777
 5 L HPFS - NTFS              0   4  5 76000   0 32 1220939776 [Murmansk]
The content of the HDD is really important for me.. Is there anything more that could be done?
Thanks again.

Re: the following partition can't be recovered/ filesystem damaged

Posted: 25 May 2019, 17:34
by fetus
Forgot to mention that when trying to Repair MFT i get "MFT and MFT mirror are bad. Failed to repair them."

Re: the following partition can't be recovered/ filesystem damaged

Posted: 26 May 2019, 12:18
by recuperation
fetus wrote: 25 May 2019, 16:35 The content of the HDD is really important for me.. Is there anything more that could be done?
Your testdisk log exhibits input/output errors on your "Murmansk" drive.

Please check the SMART parameters with smartmontools running smartctl -a /dev/sdX.
X stands for the label of your Intenso drive.

You can write the analysis directly into a file by using
smartctl -a /dev/sdX > c:\Intenso.txt
on a windows machine.

Attach that file to your posting as a file attachment.

Re: the following partition can't be recovered/ filesystem damaged

Posted: 26 May 2019, 16:52
by fetus
Thank you recuparation for your kind reply.
I followed your advice and I get the following message:

Code: Select all

/dev/sdI: Unable to detect device type
Please specify device type with the -d option.

Use smartctl -h to get a usage summary
Could you please tell me what exactly should I type?

Re: the following partition can't be recovered/ filesystem damaged

Posted: 28 May 2019, 13:11
by recuperation
Sorry for that confusion!
Use a small letter instead of a big one.
I wrote the example with a big "x" to point out that is has to be replaced by your individual drive letter.

Re: the following partition can't be recovered/ filesystem damaged

Posted: 28 May 2019, 15:02
by fetus
Thank you recuperation for you effort.
I typed using a small letter as follows:
smartctl -a /dev/sdi > c:\Intenso.txt
But the same message appears

Code: Select all

/dev/sdi: Unable to detect device type
Please specify device type with the -d option.

Use smartctl -h to get a usage summary
Any clue?

Re: the following partition can't be recovered/ filesystem damaged

Posted: 28 May 2019, 16:42
by recuperation
Does
smartctl -a /dev/hdi > c:\Intenso.txt
work?

If that fails, try out
smartctl -a /dev/sda > c:\test_a.txt
or
smartctl -a /dev/hda > c:\test_a.txt
and run through the alphabet:
smartctl -a /dev/sdb > c:\test_b.txt

Does that work?
You might post a picture of your drive management application where your collection of drives and volumes can be seen.

Re: the following partition can't be recovered/ filesystem damaged

Posted: 28 May 2019, 17:27
by fetus
Thank you for your efforts.
I got a valid hdd analysis.
Here it is:
smartctl 7.0 2018-12-30 r4883 [x86_64-w64-mingw32-win7-sp1] (sf-7.0-1)
Copyright (C) 2002-18, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Device Model: ST5000DM003-2FH18L
Serial Number: WCV00RS4
LU WWN Device Id: 5 000c50 0a878e3cd
Firmware Version: 0001
User Capacity: 5.000.981.078.016 bytes [5,00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate: 5425 rpm
Device is: Not in smartctl database [for details use: -P showall]
ATA Version is: ACS-3 T13/2161-D revision 5
SATA Version is: SATA 3.1, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is: Tue May 28 19:24:27 2019 GTB
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART Status not supported: Incomplete response, ATA output registers missing
SMART overall-health self-assessment test result: PASSED
Warning: This result is based on an Attribute check.

General SMART Values:
Offline data collection status: (0x82) Offline data collection activity
was completed without error.
Auto Offline Data Collection: Enabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: ( 0) seconds.
Offline data collection
capabilities: (0x7b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 1) minutes.
Extended self-test routine
recommended polling time: ( 626) minutes.
Conveyance self-test routine
recommended polling time: ( 2) minutes.
SCT capabilities: (0x30a5) SCT Status supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 10
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x000f 075 064 006 Pre-fail Always - 28757856
3 Spin_Up_Time 0x0003 094 094 000 Pre-fail Always - 0
4 Start_Stop_Count 0x0032 089 089 020 Old_age Always - 11743
5 Reallocated_Sector_Ct 0x0033 100 100 010 Pre-fail Always - 0
7 Seek_Error_Rate 0x000f 071 060 030 Pre-fail Always - 43078838933
9 Power_On_Hours 0x0032 080 080 000 Old_age Always - 17653 (166 232 0)
10 Spin_Retry_Count 0x0013 100 100 097 Pre-fail Always - 0
12 Power_Cycle_Count 0x0032 100 100 020 Old_age Always - 159
183 Runtime_Bad_Block 0x0032 100 100 000 Old_age Always - 0
184 End-to-End_Error 0x0032 100 100 099 Old_age Always - 0
187 Reported_Uncorrect 0x0032 100 100 000 Old_age Always - 0
188 Command_Timeout 0x0032 100 100 000 Old_age Always - 0
189 High_Fly_Writes 0x003a 100 100 000 Old_age Always - 0
190 Airflow_Temperature_Cel 0x0022 057 049 040 Old_age Always - 43 (Min/Max 41/43)
191 G-Sense_Error_Rate 0x0032 100 100 000 Old_age Always - 0
192 Power-Off_Retract_Count 0x0032 100 100 000 Old_age Always - 300
193 Load_Cycle_Count 0x0032 094 094 000 Old_age Always - 13406
194 Temperature_Celsius 0x0022 043 051 000 Old_age Always - 43 (0 20 0 0 0)
195 Hardware_ECC_Recovered 0x001a 075 064 000 Old_age Always - 28757856
197 Current_Pending_Sector 0x0012 100 100 000 Old_age Always - 0
198 Offline_Uncorrectable 0x0010 100 100 000 Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x003e 200 200 000 Old_age Always - 0
240 Head_Flying_Hours 0x0000 100 253 000 Old_age Offline - 9609 (156 127 0)
241 Total_LBAs_Written 0x0000 100 253 000 Old_age Offline - 67625124464
242 Total_LBAs_Read 0x0000 100 253 000 Old_age Offline - 153682081600

SMART Error Log Version: 1
No Errors Logged

SMART Self-test log structure revision number 1
No self-tests have been logged. [To run self-tests, use: smartctl -t]

SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.