please I need help recovering my files on my 2TB HDD. I've tried to recover files from
my friend's external 500GB HDD which was not mounting in windows, by kroll ontrack easyrecovery software - choosing Copy Disk and copying external HDD to my computer was very bad idea. Now even my HDD is in RAW and not accessible.
This is my log from Testdisk:
Quick search only found some weird FAT16 unrecoverable partition. This partition ends after the disk limits. (start=4100259221, size=1081306929, end=886598853, disk end=3907029168).
After deep search it found my NTFS partition, with these parameters:
0 32 33 243201 45 44 3907024896
Shouldn't it be 0 1 1 something?
There is also warning> The harddisk (2000 GB / 1863 GiB) seems too small! (< 2652 GB / 2470 GiB).
It seems like there has been added those 500Gb to my 2TB disk?
When I try to list the files, it says the file system is corrupted
Code: Select all
TestDisk 6.14-WIP, Data Recovery Utility, May 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-05-25T13:15:04
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016
Hard disk list
Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63 (RO), sector size=512 - M4-CT128M4SSD1, S/N:3030303030303030323137313930383039433842, FW:000F
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63 (RO), sector size=512 - ST2000DM001-9YN164, S/N:202020202020202020202020325a3046394e374a, FW:CC4B
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63 (RO), sector size=512 - WDC WD10EARS-003BB1, S/N:2020202057202d44435756414d35383337303534, FW:80.00A80
Partition table type (auto): Intel
Media is opened in read-only.
Disk /dev/sdb - 2000 GB / 1863 GiB (RO) - ST2000DM001-9YN164
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
1 * HPFS - NTFS 0 32 33 243201 45 44 3907024896
New options :
Dump : No
Align partition: Yes
Expert mode : No
Analyse Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63 (RO)
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 * HPFS - NTFS 0 32 33 243201 45 44 3907024896
search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63 (RO)
BAD_RS LBA=4100259221 6081
file_pread(5,3,buffer,4100259221(255229/84/45)) lseek err Invalid argument
file_pread(5,1,buffer,4100259221(255229/84/45)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 255229 84 45 322537 146 47 1081306929
This partition ends after the disk limits. (start=4100259221, size=1081306929, end=886598853, disk end=3907029168)
file_pread(5,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(5,14,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(5,3,buffer,3907031055(243201/110/61)) lseek err Invalid argument
file_pread(5,3,buffer,3907031102(243201/111/45)) lseek err Invalid argument
file_pread(5,8,buffer,3907031118(243201/111/61)) lseek err Invalid argument
file_pread(5,11,buffer,3907031165(243201/112/45)) lseek err Invalid argument
file_pread(5,2,buffer,3907033087(243201/143/14)) lseek err Invalid argument
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63 (RO)
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 2652 GB / 2470 GiB)
The following partition can't be recovered:
FAT16 <32M 255229 84 45 322537 146 47 1081306929
Results
interface_write()
No partition found or selected for recovery
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
search_part()
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63 (RO)
BAD_RS LBA=4100259221 6081
file_pread(5,3,buffer,4100259221(255229/84/45)) lseek err Invalid argument
file_pread(5,1,buffer,4100259221(255229/84/45)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 255229 84 45 322537 146 47 1081306929
This partition ends after the disk limits. (start=4100259221, size=1081306929, end=886598853, disk end=3907029168)
NTFS at 243201/45/44
filesystem size 3907024896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
file_pread(5,2,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,1,buffer,3907031040(243201/110/46)) lseek err Invalid argument
file_pread(5,8,buffer,3907029248(243201/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,3907029376(243201/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,3907029504(243201/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,3907029632(243201/88/24)) lseek err Invalid argument
file_pread(5,8,buffer,3907029760(243201/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,3907029888(243201/92/28)) lseek err Invalid argument
file_pread(5,8,buffer,3907030016(243201/94/30)) lseek err Invalid argument
file_pread(5,8,buffer,3907030144(243201/96/32)) lseek err Invalid argument
file_pread(5,8,buffer,3907030272(243201/98/34)) lseek err Invalid argument
file_pread(5,8,buffer,3907030400(243201/100/36)) lseek err Invalid argument
file_pread(5,8,buffer,3907030528(243201/102/38)) lseek err Invalid argument
file_pread(5,8,buffer,3907030656(243201/104/40)) lseek err Invalid argument
file_pread(5,8,buffer,3907030784(243201/106/42)) lseek err Invalid argument
file_pread(5,8,buffer,3907030912(243201/108/44)) lseek err Invalid argument
file_pread(5,1,buffer,3907031039(243201/110/45)) lseek err Invalid argument
file_pread(5,14,buffer,3907031041(243201/110/47)) lseek err Invalid argument
file_pread(5,3,buffer,3907031055(243201/110/61)) lseek err Invalid argument
file_pread(5,3,buffer,3907031102(243201/111/45)) lseek err Invalid argument
file_pread(5,8,buffer,3907031118(243201/111/61)) lseek err Invalid argument
file_pread(5,11,buffer,3907031165(243201/112/45)) lseek err Invalid argument
file_pread(5,2,buffer,3907033087(243201/143/14)) lseek err Invalid argument
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63 (RO)
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 2652 GB / 2470 GiB)
The following partition can't be recovered:
FAT16 <32M 255229 84 45 322537 146 47 1081306929
Results
* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Not an exFAT boot sector.
* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Change partition type:
* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Not an exFAT boot sector.
* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 * HPFS - NTFS 0 32 33 243201 45 44 3907024896
Failed to startup volume: Invalid argument.
write!
write_mbr_i386: starting...
file_nopwrite(5,1,buffer,0(0/0/1)) write refused
write_all_log_i386: starting...
No extended partition
Partition: Write error
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
1 * HPFS - NTFS 0 32 33 243201 45 44 3907024896
Not an exFAT boot sector.
1 * HPFS - NTFS 0 32 33 243201 45 44 3907024896
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
1 * HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS at 0/32/33
filesystem size 1 3907024896
sectors_per_cluster 0 8
mft_lcn 0 786432
mftmirr_lcn 0 2
clusters_per_mft_record 0 -10
clusters_per_index_record 0 1
Boot sector
Status: Bad
Backup boot sector
Status: OK
Sectors are not identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Search mft stopped: 49152000/3907024896
TestDisk exited normally.
