Page 1 of 1

Damaged filesystem?

Posted: 13 Jan 2017, 14:37
by slomap
Hello,

I can't access my Seagate ST3000DM001 drive. It used to work in a desktop PC, but I had motherboard failure and decided it wasn't viable to repair it (it had been my second, say backup system in). I connected it through USB docking station to my maim computer and unfortunaetly it didn't work.

What TestDisk says is as follows:

Code: Select all


Fri Jan 13 14:26:09 2017
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Niepoprawna funkcja.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Niepoprawna funkcja.

Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119924588544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=0
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=750154244096
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096
Drive C: - 119 GB / 111 GiB - CHS 14580 255 63, sector size=512
Drive H: - 104 MB / 100 MiB - CHS 12 255 63, sector size=512
Drive J: - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512
That the sdd or PhysicalDrive3

I did Analyse:

Code: Select all

Partition table type (auto): Intel
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63
Geometry from i386 MBR: head=256 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
 1 P EFI GPT                  0   0  2 267349  89  4 4294967295

[b]Warning: Bad ending head (CHS and LBA don't match)[/b]
No partition is bootable
I guess that's the problem, but don't really know what to do with it :(
When I go forward:

Code: Select all

search_part()
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63
NTFS at 2/14/13
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size           4194304000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              2  14 13 32637 120 59  524288000
     NTFS, blocksize=4096, 2147 GB / 2000 GiB
NTFS at 32637/120/60
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
it does find both partitions on the drive, I can access files etc. but it won't write partition table :(

Code: Select all

filesystem size           1665961984
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          32637 120 60 45600  36  4  208245248
     NTFS, blocksize=4096, 852 GB / 794 GiB

Results
   * HPFS - NTFS              2  14 13 32637 120 59  524288000
     NTFS, blocksize=4096, 2147 GB / 2000 GiB
   P HPFS - NTFS          32637 120 60 45600  36  4  208245248
     NTFS, blocksize=4096, 852 GB / 794 GiB

interface_write()
 1 * HPFS - NTFS              2  14 13 32637 120 59  524288000
 2 P HPFS - NTFS          32637 120 60 45600  36  4  208245248
juest gives me an error.

Would appreciate help very much :)

Kind regards,

Pete

Re: Damaged filesystem?

Posted: 13 Jan 2017, 18:57
by cgrenier
Using latest 7.1-WIP version, try EFI GPT instead of PC Intel after selecting the disk.
Do you have more success rewriting the partition table ?

Re: Damaged filesystem?

Posted: 13 Jan 2017, 19:40
by slomap
Thank you for a replay. Unfortunetly it still can't write the table - it sees both partitions, I can check file just fine, but it still gives me error on write.

Full log:

Code: Select all


Fri Jan 13 19:36:18 2017
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 5.4, Cygwin 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=750156374016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=750156374016
filewin32_getfilesize(\\.\PhysicalDrive2) GetFileSize err Niepoprawna funkcja.

filewin32_setfilepointer(\\.\PhysicalDrive2) SetFilePointer err Niepoprawna funkcja.

Warning: can't get size for \\.\PhysicalDrive2
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592977920
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119924588544
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=0
Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=750154244096
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - INTEL SS DSC2CW120A3, S/N:VCVC240630CZ21B0NG, FW:400i
Disk /dev/sdb - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - TOSHIBA MQ01ABD075, S/N:7 Q4CBFJT0, FW:AX00
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Generic External, S/N:W1F1FQ7J, FW:0204
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - Generic External, S/N:W1F1FQ7J, FW:0204

Partition table type (auto): Intel
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - Generic External
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Disk \\.\PhysicalDrive3 - 3000 GB / 2794 GiB - CHS 45600 255 63
NTFS at 2/14/13
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size           4194304000
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                    33024  524321023  524288000 [Backup]
     NTFS, blocksize=4096, 2147 GB / 2000 GiB
NTFS at 32637/120/60
Warning: number of bytes per sector mismatches 512 (NTFS) != 4096 (HD)
filesystem size           1665961984
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                524321024  732566271  208245248 [Archiwum]
     NTFS, blocksize=4096, 852 GB / 794 GiB
file_win32_pread(420,2,buffer,732566644(45600/41/62)) read err: read after end of file
file_win32_pread(420,2,buffer,732566644(45600/41/62)) read err: read after end of file

Results
   P MS Data                    33024  524321023  524288000 [Backup]
     NTFS, blocksize=4096, 2147 GB / 2000 GiB
   P MS Data                524321024  732566271  208245248 [Archiwum]
     NTFS, blocksize=4096, 852 GB / 794 GiB

interface_write()
 1 P MS Data                    33024  524321023  524288000 [Backup]
 2 P MS Data                524321024  732566271  208245248 [Archiwum]