Seagate USB

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
sbtm77
Posts: 16
Joined: 31 Mar 2015, 06:56

Seagate USB

#1 Post by sbtm77 »

Hi Everyone,

I have an external Seagate USB drive where I have important office stuff. Plugged it in tonight only to get the drive is not formatted message. I had used it the night before and it was working fine. In fact, used it to retrieve some files off of it.

Testdisk crashes when I list the files and also give me a message that the size of the disk is too small!

To cut the story short, I am attaching the log file!

Code: Select all


Thu Feb 25 23:24:52 2016
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, March 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2015-03-31T14:27:51
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=476370173952
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500105217024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2142240768
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=21271412736
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Hitachi HTS725050A7E, S/N:FT50009Y70D9L9, FW:GH2O
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Seagate FreeAgent Go, S/N:2GE1CP9P, FW:102D

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - Seagate FreeAgent Go
Partition table type: Intel

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
 1 * HPFS - NTFS              0   1  1 60800 254 63  976768002

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size           976768002
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               61048000
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   1  1 60800 254 63  976768002
     NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,14,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
   * HPFS - NTFS              0   1  1 60800 254 63  976768002
     NTFS, blocksize=4096, 500 GB / 465 GiB

interface_write()
 1 * HPFS - NTFS              0   1  1 60800 254 63  976768002

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 0/1/1
filesystem size           976768002
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               61048000
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   1  1 60800 254 63  976768002
     NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,16,buffer,826032281(51418/33/33)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,826032191(51418/32/6)) ReadFile The request could not be performed because of an I/O device error.

file_pread(5,16,buffer,827010324(51479/3/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,827010324(51479/3/1)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,832873107(51843/243/4)) ReadFile The request could not be performed because of an I/O device error.

file_pread(5,16,buffer,832873170(51843/244/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,832873233(51843/245/4)) ReadFile Data error (cyclic redundancy check).

file_pread(5,16,buffer,832876623(51844/43/55)) ReadFile Data error (cyclic redundancy check).

NTFS at 60800/254/63
filesystem size           976768002
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               61048000
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   1  1 60800 254 63  976768002
     NTFS found using backup sector, blocksize=4096, 500 GB / 465 GiB
NTFS at 60800/254/63
filesystem size           976768002
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               61048000
clusters_per_mft_record   -10
clusters_per_index_record 1
file_pread(5,1024,buffer,983062592(61192/208/9)) lseek err Invalid argument
file_pread(5,1,buffer,983062592(61192/208/9)) lseek err Invalid argument
NTFS: Can't read MFT
     HPFS - NTFS          60800 254 63 121601 253 62  976768002
     NTFS, blocksize=4096, 500 GB / 465 GiB
This partition ends after the disk limits. (start=976768064, size=976768002, end=1953536065, disk end=976773168)
file_pread(5,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(5,8,buffer,976773199(60801/81/32)) lseek err Invalid argument
file_pread(5,11,buffer,976773246(60801/82/16)) lseek err Invalid argument
file_pread(5,2,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,7,buffer,976773184(60801/81/17)) lseek err Invalid argument
file_pread(5,8,buffer,976773311(60801/83/18)) lseek err Invalid argument
file_pread(5,8,buffer,976773439(60801/85/20)) lseek err Invalid argument
file_pread(5,8,buffer,976773567(60801/87/22)) lseek err Invalid argument
file_pread(5,8,buffer,976773695(60801/89/24)) lseek err Invalid argument
file_pread(5,8,buffer,976773823(60801/91/26)) lseek err Invalid argument
file_pread(5,8,buffer,976773951(60801/93/28)) lseek err Invalid argument
file_pread(5,8,buffer,976774079(60801/95/30)) lseek err Invalid argument
file_pread(5,8,buffer,976774207(60801/97/32)) lseek err Invalid argument
file_pread(5,8,buffer,976774335(60801/99/34)) lseek err Invalid argument
file_pread(5,8,buffer,976774463(60801/101/36)) lseek err Invalid argument
file_pread(5,8,buffer,976774591(60801/103/38)) lseek err Invalid argument
file_pread(5,8,buffer,976774719(60801/105/40)) lseek err Invalid argument
file_pread(5,8,buffer,976774847(60801/107/42)) lseek err Invalid argument
file_pread(5,8,buffer,976774975(60801/109/44)) lseek err Invalid argument
file_pread(5,8,buffer,976775103(60801/111/46)) lseek err Invalid argument
file_pread(5,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(5,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(5,14,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(5,3,buffer,976775183(60801/112/63)) lseek err Invalid argument
file_pread(5,3,buffer,976775230(60801/113/47)) lseek err Invalid argument
file_pread(5,8,buffer,976775246(60801/113/63)) lseek err Invalid argument
file_pread(5,11,buffer,976775293(60801/114/47)) lseek err Invalid argument
file_pread(5,2,buffer,976777215(60801/145/16)) lseek err Invalid argument
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 1000 GB / 931 GiB)
The following partition can't be recovered:
     HPFS - NTFS          60800 254 63 121601 253 62  976768002
     NTFS, blocksize=4096, 500 GB / 465 GiB
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2

Results
   * HPFS - NTFS              0   1  1 60800 254 63  976768002
     NTFS, blocksize=4096, 500 GB / 465 GiB

interface_write()
 1 * HPFS - NTFS              0   1  1 60800 254 63  976768002
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
 1 * HPFS - NTFS              0   1  1 60800 254 63  976768002
Top
sbtm77
Posts: 16
Joined: 31 Mar 2015, 06:56

Re: Seagate USB

#2 Post by sbtm77 »

No one's looking at my post! :cry:
Top
User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: Seagate USB

#3 Post by cgrenier »

There are CRC errors, it means the disk contains bad sectors. You should clone the disk to a new empty disk (can be bigger) using ddrescue from a Linux LIveCD/USB. Once it's done, remove the original disk and try to access your data on the clone.
Here is an old tutorial about ddrescue https://www.cgsecurity.org/wiki/Damaged_Hard_Disk
Top
sbtm77
Posts: 16
Joined: 31 Mar 2015, 06:56

Re: Seagate USB

#4 Post by sbtm77 »

cgrenier wrote:There are CRC errors, it means the disk contains bad sectors. You should clone the disk to a new empty disk (can be bigger) using ddrescue from a Linux LIveCD/USB. Once it's done, remove the original disk and try to access your data on the clone.
Here is an old tutorial about ddrescue https://www.cgsecurity.org/wiki/Damaged_Hard_Disk
Thanks cgrenier. Will do and report back!
Top
Locked

Return to “Filesystem repair”