Can see files thru testdisk, cannot see drive in Windows

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
secret2
Posts: 3
Joined: 22 Sep 2015, 14:24

Can see files thru testdisk, cannot see drive in Windows

#1 Post by secret2 »

Hi, I am a newbie in using testdisk and I would really appreciate any help with my current situation, thanks a lot in advance!

I have been trying all I could to save my harddisk with important files but I'm currently stuck, any help would be appreciated.

Spec:

Win 7 Ultimate SP1

External harddisk (the one I'm trying to save) 160GB SATA Seagate

Symptom and what I've tried so far:

1. Plug in the harddisk with USB external stand. Nothing shows up in 'Computer'.

2. In Computer Management -> Disk Management I can see the disk; however it says 'Dynamic' and 'Invalid'

3. I downloaded testdisk-7.0 and analyze my harddisk. I can see the three partitions(http://imgur.com/x8RyjpC), and I can even see the files (I didn't verify if I can see all of them) by pressing p. But when I tried to write the table it gives this(http://imgur.com/suHCMBA)

4. I've also tried to edit the Hex following [here](http://www.wilderssecurity.com/threads/ ... ss.191006/) (although the location in question I have has 0F instead of 42), but it doesn't change a thing.

What is the best route to proceed at this point? I would really appreciate your help and suggestions, thanks again :)

secret2
Posts: 3
Joined: 22 Sep 2015, 14:24

Re: Can see files thru testdisk, cannot see drive in Windows

#2 Post by secret2 »

Update: Using EaseUS Partition Master, I am able to recover one partition out of 3 in the said harddisk (unfortunately it is not the one I want to access for my data...) The remaining 2 partitions is shown in Disk Management as a single blob of Unallocated space and EaseUS doesn't help either...

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Can see files thru testdisk, cannot see drive in Windows

#3 Post by cgrenier »

Can you post the testdisk.log file generated using TestDisk 7.1-WIP ?

secret2
Posts: 3
Joined: 22 Sep 2015, 14:24

Re: Can see files thru testdisk, cannot see drive in Windows

#4 Post by secret2 »

Here is the log:




Tue Sep 22 23:42:04 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=245227323392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=524183142400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=230686720000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=55181312000
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512
Drive C: - 245 GB / 228 GiB - CHS 29813 255 63, sector size=512
Drive D: - 524 GB / 488 GiB - CHS 63728 255 63, sector size=512
Drive E: - 230 GB / 214 GiB - CHS 28046 255 63, sector size=512
Drive F: - 55 GB / 51 GiB - CHS 6708 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 160 GB / 149 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P HPFS - NTFS 0 1 1 6708 191 10 107776000
No partition is bootable

search_part()
Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63
NTFS at 0/1/1
filesystem size 107776000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6735999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 6708 191 10 107776000
NTFS, blocksize=4096, 55 GB / 51 GiB
NTFS at 6708/191/11
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6399999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 6708 191 11 13082 217 62 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
NTFS at 13082/217/63
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6399999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13082 217 63 19456 244 51 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
file_pread(5,2,buffer,312582144(19457/86/22)) lseek err Invalid argument
file_pread(5,1,buffer,312582144(19457/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,312581823(19457/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,312581823(19457/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,312581951(19457/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,312582079(19457/85/20)) lseek err Invalid argument
file_pread(5,1,buffer,312582143(19457/86/21)) lseek err Invalid argument
file_pread(5,1,buffer,312582144(19457/86/22)) lseek err Invalid argument
file_pread(5,14,buffer,312582145(19457/86/23)) lseek err Invalid argument
file_pread(5,3,buffer,312582159(19457/86/37)) lseek err Invalid argument
file_pread(5,3,buffer,312582206(19457/87/21)) lseek err Invalid argument
file_pread(5,8,buffer,312582222(19457/87/37)) lseek err Invalid argument
file_pread(5,11,buffer,312582269(19457/88/21)) lseek err Invalid argument
file_pread(5,2,buffer,312584191(19457/118/53)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1

Results
HPFS - NTFS 0 1 1 6708 254 63 107780022
NTFS, blocksize=4096, 55 GB / 51 GiB
HPFS - NTFS 6708 191 11 13082 217 62 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
L HPFS - NTFS 13082 217 63 19456 244 51 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB


dir_partition inode=5
HPFS - NTFS 0 1 1 6708 254 63 107780022
NTFS, blocksize=4096, 55 GB / 51 GiB
Directory /
5 dr-xr-xr-x 0 0 0 16-Jul-2015 08:20 .
5 dr-xr-xr-x 0 0 0 16-Jul-2015 08:20 ..
461 dr-xr-xr-x 0 0 0 21-Feb-2013 09:32 $RECYCLE.BIN
118 dr-xr-xr-x 0 0 0 17-Dec-2014 23:22 Applications
2762 dr-xr-xr-x 0 0 0 28-Jun-2015 22:02 Books
2779 dr-xr-xr-x 0 0 0 7-Jun-2015 17:11 Games
426 dr-xr-xr-x 0 0 0 12-May-2015 20:21 Movies
29 dr-xr-xr-x 0 0 0 30-Mar-2014 22:48 Music
119 dr-xr-xr-x 0 0 0 20-Jul-2008 13:48 RECYCLER
27 dr-xr-xr-x 0 0 0 20-Jul-2008 17:30 System Volume Information
1681 dr-xr-xr-x 0 0 0 1-May-2014 23:30 Transcripts
1370 dr-xr-xr-x 0 0 0 22-Feb-2014 14:35 Violin


dir_partition inode=5
HPFS - NTFS 6708 191 11 13082 217 62 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
Directory /
5 dr-xr-xr-x 0 0 0 16-Jul-2015 08:20 .
5 dr-xr-xr-x 0 0 0 16-Jul-2015 08:20 ..
13737 dr-xr-xr-x 0 0 0 21-Feb-2013 09:32 $RECYCLE.BIN
11795 dr-xr-xr-x 0 0 0 20-Feb-2013 16:30 CUHK stuff backup
7002 dr-xr-xr-x 0 0 0 16-Sep-2009 11:16 Flash Finger Backup
9496 dr-xr-xr-x 0 0 0 21-Jan-2010 19:54 Flash Finger Backup Jan10
125 dr-xr-xr-x 0 0 0 24-Oct-2014 23:29 Pics ArXiv
34 dr-xr-xr-x 0 0 0 26-Oct-2008 13:52 RECYCLER
27 dr-xr-xr-x 0 0 0 20-Jul-2008 17:30 System Volume Information
11396 -r--r--r-- 0 0 2147474928 14-Mar-2010 17:27 CDR00001.GHO
11409 -r--r--r-- 0 0 2147464752 14-Mar-2010 17:31 CDR00001.GHS
11410 -r--r--r-- 0 0 2147460834 14-Mar-2010 17:35 CDR00002.GHS
11412 -r--r--r-- 0 0 2147454446 14-Mar-2010 17:37 CDR00003.GHS
11413 -r--r--r-- 0 0 2147455508 14-Mar-2010 17:38 CDR00004.GHS
11415 -r--r--r-- 0 0 2147458123 14-Mar-2010 17:39 CDR00005.GHS
11416 -r--r--r-- 0 0 1396991363 14-Mar-2010 17:40 CDR00006.GHS
11383 -r--r--r-- 0 0 2147479351 14-Mar-2010 17:40 Primary HD image_Mar10.gho


dir_partition inode=5
L HPFS - NTFS 13082 217 63 19456 244 51 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
Directory /
5 dr-xr-xr-x 0 0 0 16-Jul-2015 08:20 .
5 dr-xr-xr-x 0 0 0 16-Jul-2015 08:20 ..
297 dr-xr-xr-x 0 0 0 21-Feb-2013 09:32 $RECYCLE.BIN
347 dr-xr-xr-x 0 0 0 9-Nov-2014 01:41 Algo Trading Group
106 dr-xr-xr-x 0 0 0 25-Dec-2014 12:27 C++ Codes
7831 dr-xr-xr-x 0 0 0 26-Apr-2014 19:15 Games
46458 dr-xr-xr-x 0 0 0 9-Feb-2010 20:18 MFE Preprogram
13863 dr-xr-xr-x 0 0 0 21-Jun-2015 11:51 MTCM
6196 dr-xr-xr-x 0 0 0 18-Dec-2014 22:29 Program Files
95 dr-xr-xr-x 0 0 0 7-Nov-2009 13:28 RECYCLER
27 dr-xr-xr-x 0 0 0 20-Jul-2008 17:30 System Volume Information
11469 dr-xr-xr-x 0 0 0 13-Aug-2013 18:32 Wii Backup Manager
1110 dr-xr-xr-x 0 0 0 10-Oct-2013 15:12 boost_1_54_0
6112 dr-xr-xr-x 0 0 0 2-Dec-2013 17:42 wxWidgets
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
1 E extended LBA 13082 0 1 19456 254 63 102414375
5 L HPFS - NTFS 13082 217 63 19456 244 51 102400000
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
write_all_log_i386: CHS: 13082/0/1,lba=210162330

Analyse Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P HPFS - NTFS 0 1 1 6708 191 10 107776000
No partition is bootable

search_part()
Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63
NTFS at 0/1/1
filesystem size 107776000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6735999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 6708 191 10 107776000
NTFS, blocksize=4096, 55 GB / 51 GiB
NTFS at 6708/191/11
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6399999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 6708 191 11 13082 217 62 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
NTFS at 13082/217/63
filesystem size 102400000
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 6399999
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 13082 217 63 19456 244 51 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
file_pread(5,2,buffer,312582144(19457/86/22)) lseek err Invalid argument
file_pread(5,1,buffer,312582144(19457/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,312581823(19457/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,312581823(19457/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,312581951(19457/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,312582079(19457/85/20)) lseek err Invalid argument
file_pread(5,1,buffer,312582143(19457/86/21)) lseek err Invalid argument
file_pread(5,1,buffer,312582144(19457/86/22)) lseek err Invalid argument
file_pread(5,14,buffer,312582145(19457/86/23)) lseek err Invalid argument
file_pread(5,3,buffer,312582159(19457/86/37)) lseek err Invalid argument
file_pread(5,3,buffer,312582206(19457/87/21)) lseek err Invalid argument
file_pread(5,8,buffer,312582222(19457/87/37)) lseek err Invalid argument
file_pread(5,11,buffer,312582269(19457/88/21)) lseek err Invalid argument
file_pread(5,2,buffer,312584191(19457/118/53)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1

Results
HPFS - NTFS 0 1 1 6708 254 63 107780022
NTFS, blocksize=4096, 55 GB / 51 GiB
HPFS - NTFS 6708 191 11 13082 217 62 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
L HPFS - NTFS 13082 217 63 19456 244 51 102400000
NTFS, blocksize=4096, 52 GB / 48 GiB
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
1 E extended LBA 13082 0 1 19456 254 63 102414375
5 L HPFS - NTFS 13082 217 63 19456 244 51 102400000

Locked