Missing files aftrer driver power state failure

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
iNoU
Posts: 1
Joined: 18 Nov 2014, 20:26

Missing files aftrer driver power state failure

#1 Post by iNoU »

I recently quick formatted a Western Digital Blue WD6400AAKS 640GB hard drive and installed Windows 8.1 64x on it. I then remove the drive from it's PC and placed inside another PC so I could transfer some backed-up files to it more quickly. After transferring the files over, the drive had about 10 GB of free space left. I then placed the drive back into the original PC again and powered it on.

When I opened file explorer it showed the drive still having the same amount of free space that it had before the transfer, but a progress bar at the top of Explorer told me that Windows was currently updating the file index to reflect the newly transferred files. However, right before it finished updating, the system suffered a driver power state failure and shutdown.

When I booted it up again I was stupid enough to not check the drive immediately and instead went and uninstalled some Windows features and moved some files around. After this I went to open another folder I was notified that it was inaccessible due to corruption, and when I looked at the drive more closely I realized a folder was missing and the stated amount of free space was less, but still inaccurate. It says I have 226 GB of free instead of the 10 GB it actually has. Before the transfer it was something like 380 GB free. So a lot of data is missing.

I ran windows disc error checking and it told me the drive needed to be repaired. So I restarted the computer, however, Windows features were scheduled to be uninstalled before the disk repair program had a chance to run. The disc repair process did restore some of the files and fix the folder corruption, but the most important folder was still missing and the stated free space was still inaccurate.

I placed the drive back in my other computer and ran Recuva set to deep scan, it found quite a few recoverable files on the drive with unknown original locations, but the most important files are still nowhere to be seen. Any advice on how to fix this would be greatly appreciated. Thanks!

The drive passed both the SMART status quick test and extended test in the WD Data Lifeguard Diagnostic tool. Windows disc Error checking tool says no errors found, but Test Disk gave me "Filesystem seems damaged" message. Here's the log file below.

Code: Select all


Mon Nov 17 17:00:13 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-11-13T18:59:50
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=640135028736
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=512107741184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=640132579328
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=738054897664
filewin32_getfilesize(\\.\H:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\H:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\H:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=52428800000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\S:)=83886080000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=62913511424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\U:)=937286434816
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\V:)=104856551424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\X:)=20974431744
Hard disk list
Disk /dev/sda - 640 GB / 596 GiB - CHS 77825 255 63, sector size=512 - WDC WD6400AAKS-00A7B2, S/N:WD-WCASY3701674, FW:01.03B01
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD1002FAEX-00Z3A0, S/N:WD-WCATR9757455, FW:05.01D05
Disk /dev/sdc - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - Crucial_CT512MX100SSD1, S/N:14350D1F86A2, FW:MU01
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD1002FAEX-00Y9A0, S/N:WD-WCAW34992222, FW:05.01D05

Partition table type (auto): Intel
Disk /dev/sda - 640 GB / 596 GiB - WDC WD6400AAKS-00A7B2
Partition table type: Intel

Analyse Disk /dev/sda - 640 GB / 596 GiB - CHS 77825 255 63
Geometry from i386 MBR: head=240 sector=63
NTFS at 0/32/33
heads/cylinder 240 (NTFS) != 255 (HD)
Current partition structure:
Warning: number of heads/cylinder mismatches 240 (NTFS) != 255 (HD)
 1 * HPFS - NTFS              0  32 33 77825  37 36 1250258944
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

search_part()
Disk /dev/sda - 640 GB / 596 GiB - CHS 77825 255 63
NTFS at 0/1/1
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size           40944897
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   1  1  2548 179 63   40944897
     NTFS, blocksize=4096, 20 GB / 19 GiB
file_pread(4,2,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(4,1,buffer,1250265088(77825/102/38)) lseek err Invalid argument
file_pread(4,1,buffer,1250265087(77825/102/37)) lseek err Invalid argument
file_pread(4,14,buffer,1250265089(77825/102/39)) lseek err Invalid argument
file_pread(4,3,buffer,1250265103(77825/102/53)) lseek err Invalid argument
file_pread(4,3,buffer,1250265150(77825/103/37)) lseek err Invalid argument
file_pread(4,8,buffer,1250265166(77825/103/53)) lseek err Invalid argument
file_pread(4,11,buffer,1250265213(77825/104/37)) lseek err Invalid argument
file_pread(4,2,buffer,1250267135(77825/135/6)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=1
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=1
Warning: the current number of heads per cylinder is 255 but the correct value may be 240.

Results
   * HPFS - NTFS              0   1  1  2548 254 63   40949622
     NTFS, blocksize=4096, 20 GB / 19 GiB
Not an exFAT boot sector.

   * HPFS - NTFS              0   1  1  2548 254 63   40949622
     NTFS, blocksize=4096, 20 GB / 19 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
 1 * HPFS - NTFS              0   1  1  2548 254 63   40949622
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=240 sector=63
NTFS at 0/32/33
heads/cylinder 240 (NTFS) != 255 (HD)
 1 * HPFS - NTFS              0  32 33 77825  37 36 1250258944
     NTFS, blocksize=4096, 640 GB / 596 GiB

TestDisk exited normally.

eclark461
Posts: 7
Joined: 17 Nov 2014, 21:36

Re: Missing files aftrer driver power state failure

#2 Post by eclark461 »

Please refer to the documentation found here
http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

If that does not work, then you can try to recover the files that you need from the disk and then reformat the disk and repartition.

Locked