Page 1 of 1

Trying to recover data from usb thumb drive

Posted: 21 Apr 2017, 11:52
by tintedsepia
Hi

My Sandisk 16Gb seems to be playing up.

This is what is reported in Windows 10:-
Disk Management.png
Disk Management.png (104.4 KiB) Viewed 916 times

The following is what happened when I ran a detailed report in TestDIsk
ClusterSize TestDisk.JPG
ClusterSize TestDisk.JPG (33.71 KiB) Viewed 916 times


Thu Apr 20 15:46:06 2017
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, August 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=15631122432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdg)=31104958464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=15631122432
filewin32_getfilesize(\\.\PhysicalDrive5) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive5) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive5
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive6)=31104958464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499581452288
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202043392
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=31093735424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=0
Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=15631122432
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - Samsung SSD 850 EVO 1TB, S/N:S21DNXAG706050F, FW:EMT01B6Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - Hitachi HDS721010DLE630, S/N:MSK523Y200J9TB, FW:MS2OA610
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000DM003-9YN162, S/N:S1D6RXHQ, FW:CC4B
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 850 EVO 500GB, S/N:S2RBNXAH331140F, FW:EMT02B6Q
Disk /dev/sde - 15 GB / 14 GiB - CHS 1900 255 63, sector size=512 - SanDisk Cruzer Blade, S/N:4C531001630301115333, FW:1.27
Disk /dev/sdg - 31 GB / 28 GiB - CHS 3781 255 63, sector size=512 - SanDisk Ultra, S/N:4C530001261013115411, FW:1.00

Partition table type defaults to Intel
Disk /dev/sde - 15 GB / 14 GiB - SanDisk Cruzer Blade
Partition table type: None

Interface Advanced
P Unknown 0 0 1 1900 95 51 30529536
Change partition type:
P FAT32 0 0 1 1900 95 51 30529536

fat32_boot_sector
P FAT32 0 0 1 1900 95 51 30529536
Boot sector
Bad

Backup boot sector
Bad

Sectors are identical.

A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.


Finally I tried PhotoRec and this is what it produced
ZeroFIlesPR.JPG
ZeroFIlesPR.JPG (48.09 KiB) Viewed 916 times

Is there any hope of getting data back from this usb thumb drive?

Re: Trying to recover data from usb thumb drive

Posted: 21 Apr 2017, 19:05
by cgrenier
PhotoRec doesn't recover anything, so there is no chance to recover data via a software solution.
If you really valued your data, contact a data recovery company.