Primary and Backup BS Both Bad, but Identical?
Posted: 21 Nov 2019, 07:29
I have a 2TB external hard drive in my possession. The controller in the enclosure or something on the board has failed, causing the host computer to lock up when connected via USB. This also seems to have corrupted the boot sector and partition table on the drive. The drive, removed from the enclosure and connected directly via eSATA dock is accessible. Windows shows a 232.88GB unformatted partition as well as 1.59TB of unallocated space. I was told the drive was used on a Windows computer and was one large partition.
I selected Intel/PC (auto detected) partition table type in TestDisk. Analyze shows the 232.88GB partition twice as FAT32. Advanced shows the primary and backup boot sector as bad, but identical... so there's nothing to rebuild. I was not able to generate a file list by manual changing the partition type to NTFS either.
Any suggestions? Here's the initial log file after running Analyze:
Wed Nov 20 20:21:56 2019
Command line: TestDisk
TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=255415287808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250049865216
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - MTFDDAK256MAM-1K1, S/N:133603887A11, FW:070H
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM001-1E6164, S/N:W1E6GLSL, FW:SC48
Partition table type (auto): Intel
Disk /dev/sdb - 2000 GB / 1863 GiB - ST2000DM001-1E6164
Partition table type: Intel
Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 16450559
test_FAT()
1 P FAT32 0 0 3 30400 41 62 488378643
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 0B
Current partition structure:
Invalid FAT boot sector
1 P FAT32 0 0 3 30400 41 62 488378643
1 P FAT32 0 0 3 30400 41 62 488378643
Bad relative sector.
No partition is bootable
I selected Intel/PC (auto detected) partition table type in TestDisk. Analyze shows the 232.88GB partition twice as FAT32. Advanced shows the primary and backup boot sector as bad, but identical... so there's nothing to rebuild. I was not able to generate a file list by manual changing the partition type to NTFS either.
Any suggestions? Here's the initial log file after running Analyze:
Wed Nov 20 20:21:56 2019
Command line: TestDisk
TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive2
filewin32_getfilesize(\\.\PhysicalDrive3) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive3) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive3
filewin32_getfilesize(\\.\PhysicalDrive4) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive4) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive4
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive5
filewin32_getfilesize(\\.\PhysicalDrive6) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\PhysicalDrive6) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\PhysicalDrive6
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=255415287808
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250049865216
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=0
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=0
Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=0
Warning: can't get size for \\.\J:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=0
Warning: can't get size for \\.\K:
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - MTFDDAK256MAM-1K1, S/N:133603887A11, FW:070H
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DM001-1E6164, S/N:W1E6GLSL, FW:SC48
Partition table type (auto): Intel
Disk /dev/sdb - 2000 GB / 1863 GiB - ST2000DM001-1E6164
Partition table type: Intel
Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=2 16450559
test_FAT()
1 P FAT32 0 0 3 30400 41 62 488378643
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 0B
Current partition structure:
Invalid FAT boot sector
1 P FAT32 0 0 3 30400 41 62 488378643
1 P FAT32 0 0 3 30400 41 62 488378643
Bad relative sector.
No partition is bootable