Filesystem Seems Damaged...How?

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Filesystem Seems Damaged...How?

#1 Post by likekinds »

I'm new here. I just now read several threads on the repair of the filesystem with TestDisk and some instructions for doing so. I know little about this end of computers. With TestDisk stating only that the filesystem seems damaged, how does one know what steps to take? Could it be the MBR? Could it be the MFT? Or the filesystem in general? Without knowing these things, how will I know which step to take next? Sorry for being such a newbie.
Attachments
S.M.A.R.T.JPG
S.M.A.R.T.JPG (157.36 KiB) Viewed 9310 times
Testdisk 1.JPG
Testdisk 1.JPG (63.6 KiB) Viewed 9310 times
File System Seems Damaged.JPG
File System Seems Damaged.JPG (35 KiB) Viewed 9310 times

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#2 Post by likekinds »

To whoever helps me with this issue:

For what it's worth,

With different software, (requiring purchase for recovery), I am able to see the data on this drive. All 424 GB are there and all seem to be in perfect order. Apparently, the filesystem is not damaged. How do I get TestDisk to find and show this data?

Thank you

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Filesystem Seems Damaged...How?

#3 Post by Fiona »

TestDisk displays a partition which starts before the middle of the disk space.
Is this the correct partition?
Can your run TestDisk / Deeper Search to have a try to find more partitions?
When more partitions are found, please select each partition and press p to have a try to list your data.
Please copy and paste the content of your testdisk.log into your next post.

Fiona

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#4 Post by likekinds »

I am not familiar with partitions. I have never partitioned this drive. Unless it was partitioned when I bought it from WD, then it is not.

Since waiting to hear from you, I tried some things on my own. After having to rebuild the boot sector, I was able to list my files. Now I am in the process of copying my files to another ext HDD. First, I went to this other drive (G) and created a folder for the copied files. I named the folder 'Destination'.

I go back to TestDisk, find Directory G, and the folder 'Destination', and proceed to copy files. When I look in 'G', Destination folder, it is empty. Are these files copied in real time? Are they not showing up yet, because I'm copying the whole drive at once (428 GB). or have I done something wrong?
Attachments
copyingg.JPG
copyingg.JPG (94.95 KiB) Viewed 9284 times

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Filesystem Seems Damaged...How?

#5 Post by Fiona »

TestDisk copies files in real time.
Standard path will be the testdisk folder.
Can you check it.
To change directories, after selecting files for recovery, you can select these 2 dots in the upperr area of the display and press enter.
Each time you'll get 1 directory up until you get to your disk selection.
There, you can select another disk and partition as the destination.
You should avoid to select system files like Recycler and System Volume Information etc..

Fiona

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#6 Post by likekinds »

The way you describe is the way I did it the first time, except that I directed it to Directory G and there was no folder or partition shown (at least, no partition as I remember), and the files did not show up in G. That's why I thought It might work better if a specific folder was the destination. I see I was wrong. I will try your way again and get a screen shot for you.

Funny, every time I try again, I have to rebuild the boot sector each time.

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#7 Post by likekinds »

When I went back to TestDisk.exe, to try again, I saw this log. I'm not sure, but I think it's from my last try. Maybe it will show what I'm doing wrong. Now, I will try your way.





Wed Dec 30 01:13:38 2015
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
Failed to startup volume: Invalid argument.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=80000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=80000000000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000170586112
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=79990815744
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000161114624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=2000364240896
Hard disk list
Disk /dev/sda - 80 GB / 74 GiB - CHS 9726 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512
Disk /dev/sdc - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512
Drive C: - 79 GB / 74 GiB - CHS 9724 255 63, sector size=512
Drive E: - 1000 GB / 931 GiB - CHS 121595 255 63, sector size=512
Drive G: - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=1
get_geometry_from_list_part_aux head=16 nbr=1
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=2
1 P HPFS - NTFS 0 1 1 121595 254 63 1953439677
Not an exFAT boot sector.

1 P HPFS - NTFS 0 1 1 121595 254 63 1953439677
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
1 P HPFS - NTFS 0 1 1 121595 254 63 1953439677
filesystem size 1
sectors_per_cluster 0
mft_lcn 0
mftmirr_lcn 0
clusters_per_mft_record 0
clusters_per_index_record 0
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 6291456
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 5250238
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 5250238
ntfs_find_mft: mft_record_size 1024
ntfs_find_mft: index_block_size 4096
New / Current boot sector
filesystem size 1953439677 1
sectors_per_cluster 8 0
mft_lcn 786432 0
mftmirr_lcn 5250238 0
clusters_per_mft_record -10 0
clusters_per_index_record 1 0
Extrapolated boot sector and current boot sector are different.
filesystem size 1953439677 1
sectors_per_cluster 8 0
mft_lcn 786432 0
mftmirr_lcn 5250238 0
clusters_per_mft_record -10 0
clusters_per_index_record 1 0

Directory /
5 dr-xr-xr-x 0 0 0 22-Nov-2015 12:02 .
5 dr-xr-xr-x 0 0 0 22-Nov-2015 12:02 ..
27299 dr-xr-xr-x 0 0 0 18-Sep-2015 19:53 $RECYCLE.BIN
63946 dr-xr-xr-x 0 0 0 13-Nov-2015 16:55 +
5039 dr-xr-xr-x 0 0 0 18-Sep-2015 19:53 .gimp-2.6
167082 dr-xr-xr-x 0 0 0 13-Nov-2015 17:42 119bba2700e3f35fc29c
167239 dr-xr-xr-x 0 0 0 22-Nov-2015 11:13 4c241c2041c6e63b28b8d60812
38 dr-xr-xr-x 0 0 0 10-Nov-2015 23:18 5f22e907527342c65224c7e64f78fe7f
77069 dr-xr-xr-x 0 0 0 13-Nov-2015 16:00 9100 11-13 15
46168 dr-xr-xr-x 0 0 0 1-Jan-2002 03:47 Acer Backup Feb 2015
41968 dr-xr-xr-x 0 0 0 28-Feb-2012 17:29 AppData
30837 dr-xr-xr-x 0 0 0 27-Jan-2013 13:35 Bugsy Malone [Original Cast Recording]
65365 dr-xr-xr-x 0 0 0 21-Sep-2014 16:47 Charlotte windows 7
46270 dr-xr-xr-x 0 0 0 22-Nov-2015 22:01 Desktop
30331 dr-xr-xr-x 0 0 0 20-Nov-2015 19:46 Documents
51 dr-xr-xr-x 0 0 0 26-Jul-2015 07:36 Documertaries
31402 dr-xr-xr-x 0 0 0 29-Sep-2015 18:31 Downloads
432 dr-xr-xr-x 0 0 0 7-Mar-2013 14:09 Drivers
387 dr-xr-xr-x 0 0 0 18-Sep-2014 20:24 From 9100
36155 dr-xr-xr-x 0 0 0 30-Oct-2015 22:43 From Optiplex
45 dr-xr-xr-x 0 0 0 14-Nov-2015 19:33 Movies
37 dr-xr-xr-x 0 0 0 26-Oct-2015 11:00 Music
55 dr-xr-xr-x 0 0 0 9-Apr-2013 23:39 Music (Misc)
3008 dr-xr-xr-x 0 0 0 5-Jan-2015 21:59 Operating Systems
4914 dr-xr-xr-x 0 0 0 20-Nov-2015 19:44 Pictures
74890 dr-xr-xr-x 0 0 0 19-Sep-2014 10:34 Program Files
7697 dr-xr-xr-x 0 0 0 31-May-2012 10:43 RECOVERY
93149 dr-xr-xr-x 0 0 0 13-Nov-2015 23:42 RECYCLER
35 dr-xr-xr-x 0 0 0 13-Nov-2015 16:54 System Volume Information
33327 dr-xr-xr-x 0 0 0 22-Nov-2015 13:38 Videos
61965 dr-xr-xr-x 0 0 0 6-Oct-2012 03:03 Visual Studio 6.0 Enterprise Edition
38655 dr-xr-xr-x 0 0 0 9-Jan-2012 01:11 WD
46497 dr-xr-xr-x 0 0 0 9-Jan-2013 21:02 dwhelper
40480 dr-xr-xr-x 0 0 0 13-Jan-2012 16:46 testdisk-6.13.win
78222 -r--r--r-- 0 0 276 10-Jan-2013 23:48 AT&T Products, Services & Support - Please Identify Your Location.URL
31647 -r--r--r-- 0 0 83682 28-Aug-2012 23:29 Acer Aspire M5640 M3640 M1640 M1641 Desktop Motherboard MB.SAK09.007 (7655).JPG
27121 -r--r--r-- 0 0 108856 28-Aug-2012 23:31 Gateway Acer M1640 M1641 Desktop Motherboard MB.SAK09.007.jpg
61968 -r--r--r-- 0 0 309840363 3-Oct-2012 03:10 Visual Studio 6.0 Enterprise Edition.uif
SIGHUP detected! TestDisk has been killed.

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#8 Post by likekinds »

My problem now, is that when I select the two dots and press enter, after selecting files to be copied, nothing happens.
Attachments
sc9.JPG
sc9.JPG (84.63 KiB) Viewed 9266 times

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#9 Post by likekinds »

Fiona,

I have made a mistake. I thought when I opened 'G', I should see my copied files, there. I did not realize til just now, that TestDisk had created a separate 'page' within 'G', and placed my copied files there. All are not there because I had aborted the operation before it had finished. Now, I am copying one directory at a time for the rest of them and all seems to be going well.

Another question for you, please. I know for a fact that all the data on this donor drive is intact. It was not accidentally formatted. None of the files were accidentally erased.
I think the reason I got the request to format in the first place was that maybe I did not
'Safely Remove Hardware' the last time I disconnected the drive from the computer. If I did forget to, maybe it affected it's USB chipset?

Anyway, now that I know all the data is safe and intact on the donor drive, is there anything I can do with TestDisk to 'repair' the drive so that when I try to open it from Computer, I can, rather than still getting a request to format. If that is not possible, I will format the drive after copying the rest of my files to 'G'

I do appreciate all your help

Thank you so much

Doug

likekinds
Posts: 9
Joined: 27 Dec 2015, 05:32

Re: Filesystem Seems Damaged...How?

#10 Post by likekinds »

Fiona! Fiona! Fiona!

My 'bad' drive is suddenly back to normal. How do you suppose that happened?
Golly, If I knew, I could make a fortune in no time!

Thanks, again

Doug

Locked