Need help finding lost partition. I think.

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
volk564
Posts: 3
Joined: 27 May 2014, 18:09

Need help finding lost partition. I think.

#1 Post by volk564 »

Hello everyone. Sorry to bother, but I have an issue with my external and I think you all may be able to help. I have a 1TB WD external that I've been using for 3 years with no issues until this morning when I booted up my computer and got an error message stating that my drive needed reformatting. I don't want to lose any data, so I've spent the morning trying to restore the drive to its former glory. Here's what I've done so far:
-run chkdsk, gotten the message "The type of the file system is NTFS. Unable to determine volume version and state. CHKDSK aborted."
-downloaded HDDScan and scanned the drive, gotten correct model/serial number/etc and a report that showed normal results (assuming that's what green means) except for a current pending errors count.
-downloaded Partition Find and Mount, run both a fast and normal scan which found no partitions; running a full scan now.
-used TestDisk, analyzing the drive returned 1 partition, HPFS-NTFS, with Start: 0 32 33, End: 121597 37 40, and size in sectors 1953456128" Below that, it reads "No partition is bootable." Quick search reveals the same parition, but listing it returns "Can't open filesystem. Filesystem seems damaged."

I'm not quite sure where to go from here, and some decent internet searching has revealed problems a little different from mine. Any help would be appreciated - I'd love to avoid spending serious change on a new drive, and I really do need the stuff on this one. Thanks in advance, and please let me know if I can provide any further information!

In case it's relevant, I'm running Windows 7.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Need help finding lost partition. I think.

#2 Post by Fiona »

To judge your situation I'd need some information.
Can you run Analyse / Quick and Deeper Search?
If partitions are found, please mark them one after another and press p to have a try to list your data.
In your testdisk folder, you'll find a file called testdisk.log.
Open it using a wordprocessor like notepad and copy and paste the content into your next post.

Fiona

volk564
Posts: 3
Joined: 27 May 2014, 18:09

Re: Need help finding lost partition. I think.

#3 Post by volk564 »

Thanks for the reply! TestDisk just finished running the Deeper search and didn't seem to find anything. Here are the results of the log:



Wed May 28 08:39:41 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, May 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-05-20T10:35:40
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=250057252864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=3104243712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000169537536
filewin32_getfilesize(\\.\F:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\F:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\F:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=250056705024
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - ST925041 0AS, S/N:V5AG24YY, FW:D005
Disk /dev/sdb - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Seagate FreeAgentDesktop, S/N:5QE396B6, FW:100D
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD My Passport 0748, S/N:WX81C32D6047, FW:1010
Drive D: - 3104 MB / 2960 MiB - CHS 740 64 32, sector size=2048 - TSSTcorp DVD+-RW TS-U633J, S/N:8R07G6BU214197, FW:D300

Partition table type (auto): Intel
Disk /dev/sdc - 1000 GB / 931 GiB - WD My Passport 0748
Partition table type: Intel

Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
No partition is bootable
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.

search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size 1953456128
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 122091007
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(6,8,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(6,1,buffer,1953458176(121597/37/41)) ReadFile The drive cannot find the sector requested.

file_pread(6,1,buffer,1953458177(121597/37/42)) lseek err Invalid argument
file_pread(6,14,buffer,1953458178(121597/37/43)) lseek err Invalid argument
file_pread(6,3,buffer,1953458192(121597/37/57)) lseek err Invalid argument
file_pread(6,3,buffer,1953458239(121597/38/41)) lseek err Invalid argument
file_pread(6,8,buffer,1953458255(121597/38/57)) lseek err Invalid argument
file_pread(6,11,buffer,1953458302(121597/39/41)) lseek err Invalid argument
file_pread(6,2,buffer,1953460224(121597/70/10)) lseek err Invalid argument

Results
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()

No partition found or selected for recovery

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Need help finding lost partition. I think.

#4 Post by Fiona »

Could you run Deeper Search?

Might be possible that TestDisk finds more partitions using the backup of the boot sector.
If more partitions are found, please have another try to list data.

Fiona

volk564
Posts: 3
Joined: 27 May 2014, 18:09

Re: Need help finding lost partition. I think.

#5 Post by volk564 »

Hey Fiona,

That was the deeper search result. It ran through about 121000 cylinders and took roughly 6 hours.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Need help finding lost partition. I think.

#6 Post by Fiona »

Until yet, I found only Quick Search.
You confirmed at Analyse and testdisk displayed your current partition structur (partition table containing one partition.
Current partition structure:
1 P HPFS - NTFS 0 32 33 121597 37 40 1953456128
No partition is bootable
Your file system looks damaged:
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Failed to startup volume: Input/output error.
Failed to open inode $MFTMirr: Input/output error.
Failed to load $MFTMirr: Input/output error.
Followed by Quick Search:
Here is your result:
Results
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
You tried to list data and you got a message that your file system is damaged:
* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 121597 37 40 1953456128
NTFS, blocksize=4096, 1000 GB / 931 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.
It's the same partition like in your partition table.

After pressing enter you got to the write interface.
Exactly here, you'll find the menu "Deeper Search".
Any results of Deeper Search are not available!
Deeper Search searches additional for a backup of a boot sector and can display more partitions for recovery.
If any found, please have a try to list your data.
Otherwise your file system is broke and you'll need datarecovery software.
interface_write()

No partition found or selected for recovery
Fiona

Locked