WD 2TB drive turns RAW, partition and RebuildBS failed,

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
xzhang22
Posts: 3
Joined: 08 Dec 2014, 17:24

WD 2TB drive turns RAW, partition and RebuildBS failed,

#1 Post by xzhang22 »

Hi
My WD 2TB USB 3.0 drive recently somehow turns RAW. The drive is initially format as NTFS and usually mounted and used under Linux.

I firstly tried analyse of testdisk to detect lost partition table, but with no luck, the testdisk find FAT12 partition only. After reading a lot of threads on this forum, I decide go for advances and manually change format to NTFS, but list files still failed. With confirm on Boot, testdisk figures out that my boot sector and its backup are damaged, which lead me to Rebuild BS. After waiting for almost a day, nothing change, Rebuild BS give me another fail. After that I tried another analyse, but the result is even more strange. Any idea?

I attached log file as followings.

////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

Sat Dec 6 09:23:26 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.2.0-23-generic (#36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012) x86_64
Compiler: GCC 4.4
Compilation date: 2014-11-13T19:10:45
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 976773168 sectors
/dev/sda: user_max 976773168 sectors
/dev/sda: native_max 976773168 sectors
/dev/sda: dco 976773168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Hitachi HDS721050CLA362, S/N:JPB530HN2AN5DB, FW:JP2OA39C
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512 - WD My Book 3.0 1123, FW:1006
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Book 1140, FW:1003

Partition table type default to Intel
Disk /dev/sdc - 2000 GB / 1862 GiB - WD My Book 1140
Partition table type: None

Interface Advanced
P Unknown 0 0 1 243197 57 60 3906963456
Change partition type:
P NTFS 0 0 1 243197 57 60 3906963456

ntfs_boot_sector
P NTFS 0 0 1 243197 57 60 3906963456
filesystem size 4017377223096236722 17537237637257306048
sectors_per_cluster 100 200
mft_lcn 1596838857764493033 9988127914298301494
mftmirr_lcn 18431903474790528344 17537237637257306047
clusters_per_mft_record -16 54
clusters_per_index_record -88 107
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
P NTFS 0 0 1 243197 57 60 3906963456
filesystem size 4017377223096236722 17537237637257306048
sectors_per_cluster 61 200
mft_lcn 1596838857764493033 9988127914298301494
mftmirr_lcn 18431903474790528344 17537237637257306047
clusters_per_mft_record -16 54
clusters_per_index_record -88 107
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

ntfs_boot_sector
P NTFS 0 0 1 243197 57 60 3906963456
filesystem size 4017377223096236722 17537237637257306048
sectors_per_cluster 61 200
mft_lcn 1596838857764493033 9988127914298301494
mftmirr_lcn 18431903474790528344 17537237637257306047
clusters_per_mft_record -16 54
clusters_per_index_record -88 107
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
NTFS signature is missing.
NTFS signature is missing.

P NTFS 0 0 1 243197 57 60 3906963456
Can't open filesystem. Filesystem seems damaged.

Analyse Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63
Current partition structure:
P Unknown 0 0 1 243197 57 60 3906963456

search_part()
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63

SYSV4 Marker at 21692/164/56

recover_sysv4
SysV 4 21692 164 56 21692 164 55 0 [Tí=öxÅ]
SysV4, 0 B
Partition not added.
Sys=0C 46156 15 14 304005 33 23 4142345329
FATX, 2120 GB / 1975 GiB
This partition ends after the disk limits. (start=741497098, size=4142345329, end=4883842426, disk end=3906963456)
check_FAT: Bad jump in FAT partition
check_FAT: Bad jump in FAT partition
check_FAT: Bad jump in FAT partition
check_FAT: Bad jump in FAT partition

SYSV4 Marker at 109062/234/50

recover_sysv4
SysV 4 109062 234 50 547168691 74 36 8788512929792 [F÷ö€]
SysV4, 4499 TB / 4092 TiB
This partition ends after the disk limits. (start=1752095821, size=8788512929792, end=8790265025612, disk end=3906963456)

SYSV4 Marker at 146716/126/15

recover_sysv4
SysV 4 146716 126 15 146716 126 14 0 [êžé7]
SysV4, 0 B
Partition not added.
Sys=0C 174172 196 4 419436 10 31 3940154470
FATX, 2017 GB / 1878 GiB
This partition ends after the disk limits. (start=2798085531, size=3940154470, end=6738240000, disk end=3906963456)
check_FAT: Bad jump in FAT partition

LVM magic value at 213413/150/28
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1862 GiB) seems too small! (< 4500 TB / 4093 TiB)
The following partitions can't be recovered:
Sys=0C 46156 15 14 304005 33 23 4142345329
FATX, 2120 GB / 1975 GiB
SysV 4 109062 234 50 547168691 74 36 8788512929792 [F÷ö€]
SysV4, 4499 TB / 4092 TiB
Sys=0C 174172 196 4 419436 10 31 3940154470
FATX, 2017 GB / 1878 GiB

Results

interface_write()

TestDisk exited normally.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: WD 2TB drive turns RAW, partition and RebuildBS failed,

#2 Post by cgrenier »

The correct partition table type is Intel, not none.
Please run TestDisk, Intel, Analyse, Quick Search, Deeper Search, Quit and post the new log

xzhang22
Posts: 3
Joined: 08 Dec 2014, 17:24

Re: WD 2TB drive turns RAW, partition and RebuildBS failed,

#3 Post by xzhang22 »

Hi Christophe
Thanks so much for reply.

Actually that's what I did in the first place. But anyway, I start over process as you instructed (Intel, Analyse, Quick Search, Deeper Search, Quit). I still get wrong partition FAT12, not sure why. I post the log in the following:



Mon Dec 8 13:02:25 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 3.2.0-23-generic (#36-Ubuntu SMP Tue Apr 10 20:39:51 UTC 2012) x86_64
Compiler: GCC 4.4
Compilation date: 2014-11-13T19:10:45
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size 976773168 sectors
/dev/sda: user_max 976773168 sectors
/dev/sda: native_max 976773168 sectors
/dev/sda: dco 976773168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Hitachi HDS721050CLA362, S/N:JPB530HN2AN5DB, FW:JP2OA39C
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512 - WD My Book 3.0 1123, FW:1006
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Book 1230, FW:1065
Disk /dev/sdd - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Book 1140, FW:1003

Partition table type default to Intel
Disk /dev/sdd - 2000 GB / 1862 GiB - WD My Book 1140
Partition table type: Intel

Analyse Disk /dev/sdd - 2000 GB / 1862 GiB - CHS 243197 255 63
Current partition structure:

Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdd - 2000 GB / 1862 GiB - CHS 243197 255 63
BAD_RS LBA=2940475285 12257840
check_part_i386 failed for partition type 01
FAT12 183036 30 56 198090 179 5 241851847
BAD_RS LBA=7606790626 8417057
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 473500 208 23 507245 114 15 542107496
This partition ends after the disk limits. (start=7606790626, size=542107496, end=8148898121, disk end=3906963456)
Disk /dev/sdd - 2000 GB / 1862 GiB - CHS 243197 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1862 GiB) seems too small! (< 4172 GB / 3885 GiB)
The following partition can't be recovered:
FAT16 <32M 473500 208 23 507245 114 15 542107496

Results
L FAT12 183036 30 56 198090 179 5 241851847

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 241851847 linear /dev/sdd 2940475285" | dmsetup create test0

interface_write()
1 P FAT12 183036 30 56 198090 179 5 241851847

search_part()
Disk /dev/sdd - 2000 GB / 1862 GiB - CHS 243197 255 63
BAD_RS LBA=2940475285 12257840
check_part_i386 failed for partition type 01
FAT12 183036 30 56 198090 179 5 241851847
BAD_RS LBA=7606790626 8417057
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 473500 208 23 507245 114 15 542107496
This partition ends after the disk limits. (start=7606790626, size=542107496, end=8148898121, disk end=3906963456)
Disk /dev/sdd - 2000 GB / 1862 GiB - CHS 243197 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1862 GiB) seems too small! (< 4172 GB / 3885 GiB)
The following partition can't be recovered:
FAT16 <32M 473500 208 23 507245 114 15 542107496

Results
L FAT12 183036 30 56 198090 179 5 241851847

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 241851847 linear /dev/sdd 2940475285" | dmsetup create test0
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
1 E extended LBA 183036 0 1 198090 254 63 241858575
5 L FAT12 183036 30 56 198090 179 5 241851847

xzhang22
Posts: 3
Joined: 08 Dec 2014, 17:24

Re: WD 2TB drive turns RAW, partition and RebuildBS failed,

#4 Post by xzhang22 »

Any idea? should I change the type or geometry and run analyse or RebuildBS again?

Locked