Zapped drive

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
EvilWayz
Posts: 9
Joined: 16 Jul 2016, 01:00

Zapped drive

#1 Post by EvilWayz »

I was fumbling in the dark for the power cable to my backup drive, and I accidentally plugged my laptop adapter into my WD My Book. That resulted in a loud bang and a puff of smoke.

So I tore the drive out of the enclosure, and added it as a third drive. It shows up as the correct hard drive in bios, and it also shows up in gparted. But it shows up as 2 TB of unallocated space. Now, I have accidentally deleted a partition table before, and it was my understanding that if you don't create a new one over it, you can usually retrieve it.

I attempted to use linux's gpart utility, but got multiple read errors before it froze. Someone at ubuntuforums recommended testdisk.
Test disk recognizes that there is a partition, and it shows up as NTFS, which is correct. I have tried a simple and deep scan, and the only error that appear is:

Code: Select all

 Read Error at 2119/06/60 (lba=34045952)
But, when the scan is done it says the partition is not able to be recovered. I hesitate to use advanced settings without guidance, so here I am.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Zapped drive

#2 Post by cgrenier »

You must clone the disk to a new empty one using gnu ddrescue from a Linux LiveDVD/USB (ie. Fedora).
Here is an old tutorial: https://www.cgsecurity.org/wiki/Damaged_Hard_Disk
If it doesn't work, you will have to contact a data recovery company.

EvilWayz
Posts: 9
Joined: 16 Jul 2016, 01:00

Re: Zapped drive

#3 Post by EvilWayz »

Before I buy a new hard disk, it also says invalid NTFS or EXFAT boot. Is this something I need to correct before I clone, or can it be fixed on the cloned drive?

Below is my log, in case there are any other problems.

Code: Select all

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 4.2.0-16-generic (#19-Ubuntu SMP Thu Oct 8 15:35:06 UTC 2015) x86_64
Compiler: GCC 4.9
Compilation date: 2015-04-03T09:01:54
ext2fs lib: 1.42.12, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none
/dev/sda: LBA, HPA, LBA48, DCO support
/dev/sda: size       3907029168 sectors
/dev/sda: user_max   3907029168 sectors
/dev/sda: native_max 3907029168 sectors
/dev/sda: dco        3907029168 sectors
/dev/sdb: LBA, HPA, LBA48, DCO support
/dev/sdb: size       3907029168 sectors
/dev/sdb: user_max   3907029168 sectors
/dev/sdb: native_max 3907029168 sectors
/dev/sdb: dco        3907029168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 1 sectors, sector size=512
/dev/sr0 is not an ATA disk
Hard disk list
Disk /dev/sda - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST2000DL003-9VT166, S/N:6YD1W1Q4, FW:CC3C
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20EARS-00MVWB0, S/N:WD-WMAZA2100367, FW:51.0AB51
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WD 20EADS External, FW:1.61
Disk /dev/sr0 - 1178 MB / 1123 MiB - 575392 sectors (RO), sector size=2048 - LITE-ON COMBO SOHC-4836K, S/N:2006080900050678, FW:SQK5

Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - WD 20EADS External
Partition table type: Intel
Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - WD 20EADS External
Partition table type: EFI GPT

Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.
Current partition structure:
Bad GPT partition, invalid signature.
Trying alternate GPT
Bad GPT partition, invalid signature.

search_part()
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
simulate write!
Partition table type (auto): Intel
Disk /dev/sdc - 2000 GB / 1863 GiB - WD 20EADS External
Partition table type: Intel

Analyse Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Geometry from i386 MBR: head=173 sector=61
BAD_RS LBA=251523306 11167466
check_part_i386 1 type 03: no test
BAD_RS LBA=1273958680 7143820
check_part_i386 failed for partition type 83
BAD_RS LBA=1273958680 7136953
check_part_i386 failed for partition type 83
BAD_RS LBA=18335659 550263
check_part_i386 4 type 6D: no test
Current partition structure:
 1 * XENIX /usr           15656 153 28 203460 152 18 3017071188

Bad relative sector.
No ext2, JFS, Reiser, cramfs or XFS marker
 2 * Linux                79300  66 23 126195 121 41  753371659
 2 * Linux                79300  66 23 126195 121 41  753371659

Bad relative sector.
No ext2, JFS, Reiser, cramfs or XFS marker
 3 * Linux                79300  66 23 126195 121 41  753371659
 3 * Linux                79300  66 23 126195 121 41  753371659

Bad relative sector.
 4 * Sys=6D                1141  87 14 119184 105 20 1896361936

Bad relative sector.
Only one partition must be bootable
Space conflict between the following two partitions
 4 * Sys=6D                1141  87 14 119184 105 20 1896361936
 1 * XENIX /usr           15656 153 28 203460 152 18 3017071188
Space conflict between the following two partitions
 1 * XENIX /usr           15656 153 28 203460 152 18 3017071188
 2 * Linux                79300  66 23 126195 121 41  753371659

search_part()
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
file_pread(6,16,buffer,34048000(2119/99/29)) read err: Input/output error
BAD_RS LBA=4596424261 2100023
check_part_i386 failed for partition type 07
     HPFS - NTFS          286114  45 17 457696 221 40 2756475942
This partition ends after the disk limits. (start=4596424261, size=2756475942, end=7352900202, disk end=3907029168)
BAD_RS LBA=3559719192 316602
check_part_i386 failed for partition type 0E
     FAT16 LBA            221582  69 16 337380  68  5 1860294797
This partition ends after the disk limits. (start=3559719192, size=1860294797, end=5420013988, disk end=3907029168)
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (2000 GB / 1863 GiB) seems too small! (< 3764 GB / 3506 GiB)
The following partitions can't be recovered:
     FAT16 LBA            221582  69 16 337380  68  5 1860294797
     HPFS - NTFS          286114  45 17 457696 221 40 2756475942

Results

interface_write()
 
No partition found or selected for recovery

EvilWayz
Posts: 9
Joined: 16 Jul 2016, 01:00

Re: Zapped drive

#4 Post by EvilWayz »

Does the MBR right in the same place as where the partition is stored? If so I might be in trouble, I think i might have let testdisk write a new one trying to fix this bad boot error.

EvilWayz
Posts: 9
Joined: 16 Jul 2016, 01:00

Re: Zapped drive

#5 Post by EvilWayz »

Is there any chance having the pcb board cloned might fix this problem? I'm told it is often damaged in power surges like the one I did.

Locked