Filesystem corrupted, partition OK
Posted: 28 Apr 2014, 17:28
My 1TB NTFS drive (not the boot disk) all of a sudden is inaccessible, wIndows wants to format it.
I ran testdisk on it and the partition seems OK, but the filesystem is gone:
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63
Partition Start End Size in sectors
> HPFS - NTFS 0 4 5 15200 35 3 244189952
HPFS - NTFS 0 4 5 15200 35 4 244189952
Is it possible to recover the file system somehow and retrieve filenames and directories?
TIA!
The log file says:
TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-04-28T11:22:53
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=101948850176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=130970288128
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000204886016
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - SanDisk SD6SN1M256G1002, S/N:133910400919, FW:X231202
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Partition table type (auto): Intel
Drive E: - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
Partition table type: Intel
Analyse Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 32 33 121601 25 24 1953519616
1 P HPFS - NTFS 0 32 33 121601 25 24 1953519616
No partition is bootable
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
search_part()
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63
NTFS at 0/4/5
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1953519616
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 4 5 15200 35 3 244189952
NTFS, blocksize=4096, 1000 GB / 931 GiB
Search for partition aborted
Results
* HPFS - NTFS 0 4 5 15200 35 3 244189952
NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.
I ran testdisk on it and the partition seems OK, but the filesystem is gone:
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63
Partition Start End Size in sectors
> HPFS - NTFS 0 4 5 15200 35 3 244189952
HPFS - NTFS 0 4 5 15200 35 4 244189952
Is it possible to recover the file system somehow and retrieve filenames and directories?
TIA!
The log file says:
TestDisk 7.0-WIP, Data Recovery Utility, April 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-04-28T11:22:53
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=101948850176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=130970288128
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000204886016
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - SanDisk SD6SN1M256G1002, S/N:133910400919, FW:X231202
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Disk \\.\PhysicalDrive1 - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63, sector size=4096 - TOSHIBA DT01ACA100, S/N:152D20337A0C
Partition table type (auto): Intel
Drive E: - 1000 GB / 931 GiB - TOSHIBA DT01ACA100
Partition table type: Intel
Analyse Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or EXFAT boot
1 P HPFS - NTFS 0 32 33 121601 25 24 1953519616
1 P HPFS - NTFS 0 32 33 121601 25 24 1953519616
No partition is bootable
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
NTFS signature is missing.
search_part()
Drive E: - 1000 GB / 931 GiB - CHS 15200 255 63
NTFS at 0/4/5
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size 1953519616
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 4 5 15200 35 3 244189952
NTFS, blocksize=4096, 1000 GB / 931 GiB
Search for partition aborted
Results
* HPFS - NTFS 0 4 5 15200 35 3 244189952
NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.