5 TB External USB Toshiba HDD

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
gone64
Posts: 1
Joined: 23 May 2017, 20:53

5 TB External USB Toshiba HDD

#1 Post by gone64 »

Hi folks, I have the following problem with a Toshiba 5GB HDD which I am trying to recover.

Apparently something went wrong when I accidentally disconnected it from the USB port without using the "safely remove media" option in WIndows.
When i connect it, it shows as available but windows gives this message: " F:/ is not accessible. The disk structure is corrupted and unreadable"
data appears as RAW.

Using chkdsk does not work, its output is:
The type of the file system is NTFS.
Unable to determine volume version and state. CHKDSK aborted.

Therefore, I started Testdisk -> create new log and then selected the correct drive:
>Disk /dev/sdb - 5000 GB / 4657 GiB - TOSHIBA External USB 3.0
Next, i got the suggestion to select EFI GPT (which makes sense since the drive has only 1 partition), so I selected it

I then selected Analyse and i get this screen:
Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 608001 255 63
Current partition structure:
Partition Start End Size in sectors
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 9767540735 9767276544 [Basic data partition]

after a quick search I got this screen:

Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 608001 255 63
Partition Start End Size in sectors
>P MS Data 264192 9767540735 9767276544
Structure: Ok. Use Up/Down Arrow keys to select partition.
Use Left/Right Arrow keys to CHANGE partition characteristics:
P=Primary D=Deleted
Keys A: add partition, L: load backup, T: change type, P: list files,
Enter: to continue
NTFS, blocksize=4096, 5000 GB / 4657 GiB
when trying to list files, i got:
Can't open filesystem. Filesystem seems damaged.
I tried deeper search, after one day it did only 15% so I stopped it and this was the output:
Analyse cylinder 97039/608000: 15%

MS Data 264192 9767540735 9767276544
Unknown 177870678 9482188455810901 9482188277940224
Mac HFS 205506127 205507676 1550 [v^A^B\^A]
Mac HFS 205504581 205506130 1550 [v^A^B\^A]
Mac HFS 246861662 246863211 1550 [^A^B\^A]
Mac HFS 246860116 246861665 1550 [^A^B\^A]
check_FAT: Bad jump in FAT partition
Mac HFS 364277586 364279135 1550 [v^A^B\^A]
Mac HFS 364276040 364277589 1550 [v^A^B\^A]
Mac HFS 400721673 400723222 1550 [M-'^A^B\^A]
Mac HFS 400720127 400721676 1550 [M-'^A^B\^A]
check_FAT: Bad jump in FAT partition
Mac HFS 953260491 953262040 1550 [^A^B\^A]
Mac HFS 953258945 953260494 1550 [^A^B\^A]
Unknown 1390031186 16394449711441 16393059680256 [.M-?~^Cz{]
I restarted testdisk and went EFI GPT -> Advanced, then selected
2 P MS Data 264192 9767540735 9767276544 [Basic data partition]
and with it selected rebuild BS, this is the output:

Disk /dev/sdb - 5000 GB / 4657 GiB - CHS 608001 255 63
Partition Start End Size in sectors
2 P MS Data 264192 9767540735 9767276544 [Basic data partition]

Boot sector
Status: OK

Backup boot sector
Status: OK
Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
I then tried repair MFT, the output was:
MFT and MFT mirror match perfectly.
is there anything else i can do? thanks in advance.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: 5 TB External USB Toshiba HDD

#2 Post by cgrenier »

Can you see your files when using TestDisk, Advanced, Boot, List ?
If it works, you should be able to copy your files.
If it doesn't, it' possible to use PhotoRec to recover your data but sorting several TB of recovered data will be arduous... It may be worth to try some commercial data recovery utilities.

Locked