NTFS partition RAW in windows but readable as NTFS in linux

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
rstancuna
Posts: 3
Joined: 15 Apr 2016, 17:51

NTFS partition RAW in windows but readable as NTFS in linux

#1 Post by rstancuna »

Have a 3.5 2TB USB3 external HDD with around 1.6TB full of data.
Was being used in a rack that broke, since i have an Asus K53S i can't connect it inside the laptop. Bought a Thermaltake Silver River III 5G external hard drive enclosure.

Out of nowhere, my Win10 sees the drive as unpartitioned space (looking in Disk Management) and it assigns a letter to it. Boot into PartedMagic 02-03-2016, same thing.
I used testdisk from PartedMagic, only did a quick scan and it found the NTFS partition containing all my files. Wrote the partition table, could mount and use all the files from my NTFS partition. Strange thing was that Gparted saw 8MB of unpartitioned space before my partition and 10MB of unpartitioned space after my partition. Check disk from Gparted didn't find anything wrong with my partition.
Boot into Win10, it sees the partition as RAW (looking into Disk Management), it assigns a letter to it and wants it formatted. Back into PartedMagic, the NTFS partition mounts and is usable.
Format the first 8MB into a partition with Gparted, get back in windows. Both partitions get letters assigned, the 8MB one can be open and used while the big one is still RAW and unusable. Go back to linux, use testdisk again, redo partition table, back in windows, same thing. I don't know why i tought this may work but worth a shot i guess.
Back in linux, delete that 8MB partition, move my 1.6TB partition to the start of the drive and it took around 5 days. Can mount and use the NTFS partition in linux, windows still sees it as RAW. Windows Check Disk wants to format the drive.
I need the drive to be usable in windows and i'm out of ideeas.

Tried Easeus Partition Recovery and MiniTool Partition Wizard as well, both just fail to find a partition and both just fail to find a partition and it's expected since the partition is not hidden but just not usable in windows.
I do not have another drive with enough storage to just copy the files and format this one so i'm looking for a way to make windows see the partition as NTFS and be usable there as it is in linux.

Log:

Code: Select all


Fri Apr 15 20:00:55 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=8004304896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=8004304896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=119507255296
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500106788864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=33554432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000379969536
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk /dev/sdc - 8004 MB / 7633 MiB - CHS 973 255 63, sector size=512
Disk /dev/sdd - 2000 GB / 1863 GiB - CHS 1907729 64 32, sector size=512
Drive C: - 119 GB / 111 GiB - CHS 14529 255 63, sector size=512
Drive D: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive E: - 33 MB / 32 MiB - CHS 4 255 63, sector size=512
Drive F: - 2000 GB / 1862 GiB - CHS 1907711 64 32, sector size=512

Partition table type (auto): Intel
Disk /dev/sdd - 2000 GB / 1863 GiB
Partition table type: Intel

Analyse Disk /dev/sdd - 2000 GB / 1863 GiB - CHS 1907729 64 32
Geometry from i386 MBR: head=64 sector=32
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
Info: size boot_sector 488374016, partition 3906992128
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
 1 * HPFS - NTFS              1   0  1 1907711  63 32 3906992128

search_part()
Disk /dev/sdd - 2000 GB / 1863 GiB - CHS 1907729 64 32
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size           488374016
sectors_per_cluster       1
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   1
clusters_per_index_record 1
     HPFS - NTFS              1   0  1 1907711  63 32 3906992128
     NTFS, blocksize=4096, 2000 GB / 1862 GiB
file_pread(7,2,buffer,3907031039(1907729/63/32)) lseek err Invalid argument
file_pread(7,1,buffer,3907031039(1907729/63/32)) lseek err Invalid argument
file_pread(7,2,buffer,3907031040(1907730/0/1)) lseek err Invalid argument
file_pread(7,2,buffer,3907031072(1907730/1/1)) lseek err Invalid argument
file_pread(7,1,buffer,3907031072(1907730/1/1)) lseek err Invalid argument
file_pread(7,13,buffer,3907031042(1907730/0/3)) lseek err Invalid argument
file_pread(7,3,buffer,3907031055(1907730/0/16)) lseek err Invalid argument
file_pread(7,3,buffer,3907031102(1907730/1/31)) lseek err Invalid argument
file_pread(7,8,buffer,3907031118(1907730/2/15)) lseek err Invalid argument
file_pread(7,11,buffer,3907031165(1907730/3/30)) lseek err Invalid argument
file_pread(7,2,buffer,3907033087(1907730/63/32)) lseek err Invalid argument
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2

Results
   * HPFS - NTFS              1   0  1 1907711  63 32 3906992128
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
 1 * HPFS - NTFS              1   0  1 1907711  63 32 3906992128
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.

TestDisk exited normally.
TL;DR: Windows and Linux saw the drive as unpartitioned space, TestDisk fixed that and i was able to see it in linux as NTFS and mount/use it but windows it still sees the partition as RAW.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: NTFS partition RAW in windows but readable as NTFS in li

#2 Post by cgrenier »

Under Windows, run "cmd" (right click run as administrator) and "chkdsk /f d:" (replace d: by the correct drive letter).

rstancuna
Posts: 3
Joined: 15 Apr 2016, 17:51

Re: NTFS partition RAW in windows but readable as NTFS in li

#3 Post by rstancuna »

As i said, windows check disk wants to format the drive and this goes for both gui and command line check disk.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: NTFS partition RAW in windows but readable as NTFS in linux

#4 Post by cgrenier »

Can you post the chkdsk output ? I have already seen Windows Explorer asking if you want to format the disk or not, but never chkdsk.

rstancuna
Posts: 3
Joined: 15 Apr 2016, 17:51

Re: NTFS partition RAW in windows but readable as NTFS in linux

#5 Post by rstancuna »

Code: Select all

C:\Users\nkn>chkdsk /f E:
The type of the file system is RAW.
CHKDSK is not available for RAW drives.
Yes..not exacly that it wants to format it.

Locked