Attempting to fix RAW disk with TestDisk

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
firehawk12
Posts: 2
Joined: 05 Feb 2021, 05:56

Attempting to fix RAW disk with TestDisk

#1 Post by firehawk12 »

Apologies for not using Attachments - I can't seem to find the tab that would let me upload attachments, so I'm not sure if it is because I do not have permissions to add them.

My disk was detected as RAW by Windows and gave me the Parameter Incorrect error and asked me to format. I've done some research and saw that TestDisk can be used to recover the boot sector. However, I'm just running into an issue where I do not see the option. Just to note that PhotoRec is able to read the partition is pull out files, so I'm not sure if I'm using TestDisk incorrectly and am unable to find the boot sector recovery option.

When I view my drive in the "Advanced" menu, the "Boot" option where the "Backup BS" function is located does not appear:
Image

When I Analyze and try to view the files in the partition it has found, I receive this error: "Can't open filesystem. Filesystem seems damaged."

Again, apologies for not being able to use attachments. My log file can be found here: https://pastebin.com/jTsynnMB

The end of the log file is here if that helps:

Code: Select all

file_pread(9,1,buffer,2743153329(972801/113/34)) lseek err Invalid argument

Results
   P MS Data                    32772 15628050435 15628017664
     NTFS, blocksize=4096, 8001 GB / 7452 GiB
Failed to open $MFT/$BITMAP: No such file or directory.
ntfs_mft_load(): Failed.
Failed to load $MFT: No such file or directory.
Failed to startup volume: No such file or directory.
Failed to open $MFT/$BITMAP: No such file or directory.
ntfs_mft_load(): Failed.
Failed to load $MFT: No such file or directory.

   P MS Data                    32772 15628050435 15628017664
     NTFS, blocksize=4096, 8001 GB / 7452 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 P MS Data                    32772 15628050435 15628017664

interface_write()
 1 P MS Data                    32772 15628050435 15628017664
simulate write!

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=15628053167 (expected 15628053167)
hdr_lba_start=34
hdr_lba_end=15628053134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
check_part_gpt failed for partition
 2 P MS Data                    32768 15628050431 15628017664 [Basic data partition]
 1 P MS Reserved                   34      32767      32734 [Microsoft reserved partition]
 2 P MS Data                    32768 15628050431 15628017664 [Basic data partition]
I noticed that the majority of the log file contains file_pread errors, which may be a sign of the problem with my drive but I'm not sure how to interpret it.
Any help is greatly appreciated. Thank you.

recuperation
Posts: 2718
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Attempting to fix RAW disk with TestDisk

#2 Post by recuperation »

Some essential hidden system files in your partition are broken that are needed to access the content of your partition.
Use Photorec or try with any other recovery software.

firehawk12
Posts: 2
Joined: 05 Feb 2021, 05:56

Re: Attempting to fix RAW disk with TestDisk

#3 Post by firehawk12 »

recuperation wrote: 05 Feb 2021, 15:00 Some essential hidden system files in your partition are broken that are needed to access the content of your partition.
Use Photorec or try with any other recovery software.
I was thinking that may be the case. Thank you for the confirmation!

Locked