WD20EARS partition problems

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
janoatthe
Posts: 16
Joined: 10 Apr 2012, 03:13

WD20EARS partition problems

#1 Post by janoatthe »

Hello

My WD20EARS-00MVWB0 storage disk was damaged by a program recently.It is a single partition and was formatted
with windows 7 64 bit ultimate. and has only been used for storing music files. What I need to figure out is if partition recovery is practical or is commercial recovery software the way to proceed as I would like to recover text files and other related files with the correct names along with the audio files.
I have ran deep search and added the log file. The drive is recognized in the bios, in disk managment as healthy primary partion, raw, and in device manager as f:\ drive. I have screen shots taken if they are needed.

Any help is much appreciated,

Thanks Mike

Fri Apr 27 22:50:56 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, March 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Mar 25 2012 21:26:32
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=319965626368
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=250048479744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250058801664
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000263577600
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.
filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1500291039744
Hard disk list
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 41345 240 63, sector size=512
Disk \\.\PhysicalDrive1 - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 250 GB / 232 GiB - CHS 484521 16 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 258401 240 63, sector size=512
Drive C: - 319 GB / 297 GiB - CHS 41331 240 63, sector size=512
Drive D: - 250 GB / 232 GiB - CHS 30399 255 63, sector size=512
Drive E: - 250 GB / 232 GiB - CHS 484519 16 63, sector size=512
Drive F: - 2000 GB / 1862 GiB - CHS 258383 240 63, sector size=512
Drive H: - 1500 GB / 1397 GiB - CHS 182399 255 63, sector size=512

Partition table type (auto): None
Partition table type (auto): EFI GPT
Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB
Partition table type: EFI GPT

Analyse Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 258401 240 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=3907029167 (expected 3907029167)
hdr_lba_start=34
hdr_lba_end=3907029134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]

search_part()
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 258401 240 63
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery

search_part()
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 258401 240 63
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=135266304, part_size=2000263577600, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 264192 3907028991 3906764800
NTFS, 2000 GB / 1862 GiB

LVM magic value at 1466/46/31

LVM magic value at 2303/133/5

HFS magic value at 10534/180/18
part_size 10336262
Mac HFS 159285437 169621698 10336262 [›DéöÚ|Ž†¾ÎôQVÈóKCýZç·ëû]
HFS, 5292 MB / 5047 MiB

HFS magic value at 10534/180/20
part_size 10336262
Mac HFS 148949179 159285440 10336262 [›DéöÚ|Ž†¾ÎôQVÈóKCýZç·ëû]
HFS found using backup sector!, 5292 MB / 5047 MiB

Unknown 412733416 5200775103500263 5200774690766848
WBFS, 2662796 TB / 2421799 TiB
Partition not added.

LVM magic value at 27555/143/29

HFS magic value at 32694/116/41
part_size 588870065
Mac HFS 494340628 1083210692 588870065 [`>Z{ŠBë@N PMA5£A›ÐàK?]
HFS, 301 GB / 280 GiB

HFS magic value at 32694/116/43

cramfs Marker at 78830/55/63

recover_cramfs
MS Data 1191913127 1197300201 5387074 [%(îX„çΚ¯C=ên«½Ú]
cramfs, 2758 MB / 2630 MiB

XFS Marker at 89811/138/45

recover_xfs
MS Data 1357951058 27738143322620371 27738141964669313 [†V0
Ô”Þkó„]
XFS <=6.1, 14201928 TB / 12916578 TiB
This partition ends after the disk limits. (start=1357951058, size=1921552769, end=3279503827, disk end=3907029168)

HFS magic value at 118802/3/41
part_size 552101399
Mac HFS 1796286469 2348387867 552101399 [ÞÃù]
HFS, 282 GB / 263 GiB

HFS magic value at 118802/3/43
part_size 552101399
Mac HFS 1244185074 1796286472 552101399 [ÞÃù]
HFS found using backup sector!, 282 GB / 263 GiB

SYSV4 Marker at 125435/160/20

recover_sysv4
Unknown 1896587299 234309774254114 234307877666816 [µŸªfVm]
SysV4, 119965 TB / 109108 TiB
Partition not added.

HFS magic value at 127876/60/56
part_size 244
Mac HFS 1933488955 1933489198 244 [KBDTH0.DLL¹££;=Ã$'´]
HFS, 124 KB / 122 KiB

HFS magic value at 127876/60/58
part_size 244
Mac HFS 1933488715 1933488958 244 [KBDTH0.DLL¹££;=Ã$'´]
HFS found using backup sector!, 124 KB / 122 KiB

LVM magic value at 130524/15/37

LVM magic value at 133452/136/17
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT12 at 136857/206/63
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 240 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 136857/206/63
MS Data 2069290880 2069293759 2880
FAT12, 1474 KB / 1440 KiB
FAT32 at 136858/2/24
FAT1 : 32-798
FAT2 : 799-1565
start_rootdir : 1566 root cluster : 2
Data : 1566-786237
sectors : 786240
cluster_size : 8
no_of_cluster : 98084 (2 - 98085)
fat_length 767 calculated 767
FAT differs, FAT sectors=0-16/767
set_FAT_info: name from BS used

FAT32 at 136858/2/24
MS Data 2069293109 2070079348 786240 [W98__BOOT]
FAT32, 402 MB / 383 MiB
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT12 at 136858/12/57
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 240 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 136858/12/57
MS Data 2069293772 2069296651 2880
FAT12, 1474 KB / 1440 KiB
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT12 at 136858/58/39
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 240 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 136858/58/39
MS Data 2069296652 2069299531 2880
FAT12, 1474 KB / 1440 KiB
check_FAT: Bad number of sectors per cluster

HFS magic value at 149117/207/32
part_size 1549861967
Mac HFS 2254662112 3804524078 1549861967 [,¤{ë]
HFS, 793 GB / 739 GiB

HFS magic value at 149117/207/34
part_size 1549861967
Mac HFS 704800149 2254662115 1549861967 [,¤{ë]
HFS found using backup sector!, 793 GB / 739 GiB
Unknown 2384248340 5326446584 2942198245
FATX, 1506 GB / 1402 GiB
Partition not added.

LVM magic value at 159259/41/48
NTFS at 163011/37/34
heads/cylinder 16 (NTFS) != 240 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 2464722511 2464728684 6174
NTFS found using backup sector!, 3161 KB / 3087 KiB
NTFS at 163011/37/34
heads/cylinder 16 (NTFS) != 240 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 2464728684 2464734857 6174 [Boot]
NTFS, 3161 KB / 3087 KiB
FAT12 at 163011/137/22
FAT1 : 1-8
FAT2 : 9-16
start_rootdir : 17
Data : 49-20736
sectors : 20739
cluster_size : 8
no_of_cluster : 2586 (2 - 2587)
fat_length 8 calculated 8
FAT differs, FAT sectors=0-8/8
heads/cylinder 4 (FAT) != 240 (HD)
sect/track 17 (FAT) != 63 (HD)

FAT12 at 163011/137/22
MS Data 2464734972 2464755710 20739 [NO NAME]
FAT12, 10 MB / 10 MiB
check_FAT: Unusual, only one FAT
FAT32 at 163011/137/23
check_FAT: Bad number of entries in root dir

HFS magic value at 168214/17/57
part_size 1142886232
Mac HFS 2543396807 3686283038 1142886232 [°Æv„<]
HFS, 585 GB / 544 GiB

HFS magic value at 168214/17/59
part_size 1142886232
Mac HFS 1400510579 2543396810 1142886232 [°Æv„<]
HFS found using backup sector!, 585 GB / 544 GiB

LVM magic value at 168421/117/52
NTFS at 186922/77/46
heads/cylinder 16 (NTFS) != 240 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 2826259363 2826265536 6174
NTFS found using backup sector!, 3161 KB / 3087 KiB
NTFS at 186922/77/46
heads/cylinder 16 (NTFS) != 240 (HD)
sect/track 2 (NTFS) != 63 (HD)
filesystem size 6174
sectors_per_cluster 1
mft_lcn 2058
mftmirr_lcn 5162
clusters_per_mft_record 2
clusters_per_index_record 8
MS Data 2826265536 2826271709 6174 [Boot]
NTFS, 3161 KB / 3087 KiB
FAT12 at 186922/177/34
FAT1 : 1-8
FAT2 : 9-16
start_rootdir : 17
Data : 49-20736
sectors : 20739
cluster_size : 8
no_of_cluster : 2586 (2 - 2587)
fat_length 8 calculated 8
FAT differs, FAT sectors=0-8/8
heads/cylinder 4 (FAT) != 240 (HD)
sect/track 17 (FAT) != 63 (HD)

FAT12 at 186922/177/34
MS Data 2826271824 2826292562 20739 [NO NAME]
FAT12, 10 MB / 10 MiB
check_FAT: Unusual, only one FAT
FAT32 at 186922/177/35
check_FAT: Bad number of entries in root dir
check_FAT: Bad jump in FAT partition

LVM magic value at 199821/28/36

recover_JFS: s_blocksize=2817560477
recover_JFS: s_size 3947538340
recover_JFS: s_fsckpxd.len:345385
recover_JFS: s_logpxd.len:10825424
recover_JFS: part_size 1525009774
MS Data 30

User avatar
remy
Posts: 457
Joined: 25 Mar 2012, 10:21
Location: Strasbourg, France.
Contact:

Re: WD20EARS partition problems

#2 Post by remy »

It seems this partition :
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
Is the one you are looking for ?

Were you able to list files using "P" ?

janoatthe
Posts: 16
Joined: 10 Apr 2012, 03:13

Re: WD20EARS partition problems

#3 Post by janoatthe »

Hello


2 P MS Data 264192 3907028991 3906764800 [Basic data partition]

yes that looks to be the correct partition.


" Were you able to list files using "P"? "

when I tried using "P" I received the error message:

can't open file-system. File-system seems damaged I

User avatar
remy
Posts: 457
Joined: 25 Mar 2012, 10:21
Location: Strasbourg, France.
Contact:

Re: WD20EARS partition problems

#4 Post by remy »

When going in advanced menu are you able to add a partition with same caracteristics, and try to rebuilt BS, then try to list again. Don't "WRITE", it's only a try, there.

janoatthe
Posts: 16
Joined: 10 Apr 2012, 03:13

Re: WD20EARS partition problems

#5 Post by janoatthe »

Hello


I tried to rebuild the bs


then I tried to list with no success
Attachments
Capture may3 2.JPG
Capture may3 2.JPG (51.81 KiB) Viewed 13577 times
Capture may3.JPG
Capture may3.JPG (84.87 KiB) Viewed 13577 times

janoatthe
Posts: 16
Joined: 10 Apr 2012, 03:13

Re: WD20EARS partition problems

#6 Post by janoatthe »

here is the current log, and would the heads/cylinder mismatch have a bearing with this problem?
The board bios shows different setting for the heads/cylinder and sectors for that drive.

cylinders 65535
head 16
landing zone 65534
sector 255

Thu May 03 09:59:30 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, March 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.7, MinGW 3.11
Compilation date: Mar 25 2012 21:26:32
ext2fs lib: none, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=319965626368
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=250048479744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250058801664
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000263577600
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.


filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.


Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1500291039744
Hard disk list
Disk \\.\PhysicalDrive0 - 320 GB / 298 GiB - CHS 41345 240 63, sector size=512
Disk \\.\PhysicalDrive1 - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512
Disk \\.\PhysicalDrive2 - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512
Disk \\.\PhysicalDrive3 - 250 GB / 232 GiB - CHS 484521 16 63, sector size=512
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB - CHS 258401 240 63, sector size=512
Drive C: - 319 GB / 297 GiB - CHS 41331 240 63, sector size=512
Drive D: - 250 GB / 232 GiB - CHS 30399 255 63, sector size=512
Drive E: - 250 GB / 232 GiB - CHS 484519 16 63, sector size=512
Drive F: - 2000 GB / 1862 GiB - CHS 258383 240 63, sector size=512
Drive H: - 1500 GB / 1397 GiB - CHS 182399 255 63, sector size=512

Partition table type (auto): EFI GPT
Disk \\.\PhysicalDrive4 - 2000 GB / 1863 GiB
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=3907029167 (expected 3907029167)
hdr_lba_start=34
hdr_lba_end=3907029134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB

ntfs_boot_sector
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 2464466550, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 2058
ntfs_find_mft: mftmirr_lcn 5162
ntfs_find_mft: mft_record_size 1024

mft at 2464469654, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 2058
ntfs_find_mft: mftmirr_lcn 5162
ntfs_find_mft: mft_record_size 1024

mft at 2517422272, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 2826003402, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 2058
ntfs_find_mft: mftmirr_lcn 5162
ntfs_find_mft: mft_record_size 1024

mft at 2826006506, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 2058
ntfs_find_mft: mftmirr_lcn 5162
ntfs_find_mft: mft_record_size 1024

mft at 3184499760, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3185306544, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3185560448, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3338328032, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3408241952, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3411411392, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3760708864, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3771759216, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3863825968, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3869257824, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3869876832, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3870335328, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3870674368, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3870784528, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3874211104, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3875159168, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3875389600, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3875589328, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3875766976, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3876353984, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3877399904, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3878722768, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3878900544, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3879787184, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3879964960, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3894852480, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3895492896, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3895801888, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3897527904, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3898936960, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3900332960, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3900620960, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3901923392, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3902590368, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3903192512, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3903859008, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3904578304, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

mft at 3906592576, seq=1, main=0 res=1
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024

Potential partition:
2 P MS Data 2464728684 6371493483 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
2 P MS Data 2826265536 6733030335 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
Search mft stopped: 851968/3906764800
Failed to rebuild NTFS boot sector.

ntfs_boot_sector
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
repair_MFT
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
MFT and MFT mirror are bad. Failed to repair them.
MFT and MFT mirror are bad. Failed to repair them.

ntfs_boot_sector
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.

2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, 2000 GB / 1862 GiB
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
NTFS at 17/113/34
heads/cylinder 255 (NTFS) != 240 (HD)
filesystem size 3906764800
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

User avatar
remy
Posts: 457
Joined: 25 Mar 2012, 10:21
Location: Strasbourg, France.
Contact:

Re: WD20EARS partition problems

#7 Post by remy »

It seems your partition is well recognised, but your both MFT are damaged. I don't think geometry mismatch is a problem there. A solution could be to use chkdsk on this partition, but sometimes windows tools are creating more problems than solutions. "Professionnal advice" is to duplicate your disk before trying to repair with chkdsk. But I know that copying a 2TB disk is not easy...

I'll ask Fiona her advice about your case, she has really good skills with windows filesystem related problems.

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: WD20EARS partition problems

#8 Post by Fiona »

Hi janoatthe
Are you sure,that you have a GPT Disk?
GPT would only be needed for Disks bigger than 2,2 TB.
Did you use TestDisk 6.147 64-bit?
It's only recommended to use it on 64bit-systems lacking WOW64 as some features are missing!
Would it be possible to use the 32 bit version of TestDisk 6.14?
Please repat your diagnose.
Also use the menu Geoemtry and change the value 240 to 255 before you confirm at Analyse.
I'd need infos from Analyse (current partition structur) and Quick Search.
If no partition is found, from Deeper Search also!

Some infos about geometry!
On your harddisk the CHS-values are normally 16 heads per cylinder.
But Motherboard controller changing it to 255 heads.
If you have a 2.5 inch HDD geometry might be 15 heads per cylinder and controller changes it to 240 heads.
It's normally intended for Laptops, Notebooks, netbooks and tablets etc...
So there is nothing special.
If geometry is wrong, it woukld be possible that you partition is not found.
But it affects most intel MBR.
GPT-partition have another structur.
They're in slices and not aligned on cylinder or megabyte boundary.

Fiona

Fiona

janoatthe
Posts: 16
Joined: 10 Apr 2012, 03:13

Re: WD20EARS partition problems

#9 Post by janoatthe »

Hello

First, thanks very much for all your help Remy I appreciate it.

In regards to the GPT disk I have no idea, The drive was only formatted the once,on a previous
build of win 7 . I remember I was rushed, so it wouldn't surprise me if operator error occurred also
as it was just a storage disk ect.

Interestingly right after the drive locked up, I ran my recovery software and files it recovered was
unusable, garbled ect..After running Testdisk it changed something and now the file recovery works.

I had time to run my recovery software last night and had no problem recovering 500 gigs of music file
intact, file structure intact, so when I can get another drive I'll transfer everything.

I switched the version of testdisk, and did a quick search which ran for a few minutes to 100% and then locked .
It still recognized the drive as GPT. the only question I have about changing the Geometry at this point is there
a big chance of data lose? Or am I able to try the change without saving it? If it is risky I don't mind waiting for
a new drive and then trying to recover the partition at a later time.

Thanks
Mike



Fri May 4 10:51:34 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, May 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-05-01T20:08:09
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=319965626368
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=250048479744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=250058801664
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000263577600
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1500291039744
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 41345 240 63, sector size=512 - ST3320620A, S/N:2020202020202020202020205133304643374354, FW:3.AAC
Disk /dev/sdb - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - ST325031 0AS, S/N:9RY3VV8V, FW:4.AA
Disk /dev/sdc - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512 - ST315005 41AS, S/N:6XW0JTY4, FW:CC34
Disk /dev/sdd - 250 GB / 232 GiB - CHS 484521 16 63, sector size=512 - ST325031 0AS, S/N:6RY4DSTQ, FW:3.AA
Disk /dev/sde - 2000 GB / 1863 GiB - CHS 258401 240 63, sector size=512 - WDC WD20 EARS-00MVWB0, S/N:WD-WMAZ20152192, FW:50.0

Partition table type (auto): EFI GPT
Disk /dev/sde - 2000 GB / 1863 GiB - WDC WD20 EARS-00MVWB0
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=3907029167 (expected 3907029167)
hdr_lba_start=34
hdr_lba_end=3907029134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, blocksize=4096, 2000 GB / 1862 GiB
gpt_change_part_type
Change partition type:
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, blocksize=4096, 2000 GB / 1862 GiB
Change partition type:
2 P NTFS 264192 3907028991 3906764800 [Basic data partition]
NTFS, blocksize=4096, 2000 GB / 1862 GiB

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=3907029167 (expected 3907029167)
hdr_lba_start=34
hdr_lba_end=3907029134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
NTFS, blocksize=4096, 2000 GB / 1862 GiB

Analyse Disk /dev/sde - 2000 GB / 1863 GiB - CHS 258401 240 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=3907029167 (expected 3907029167)
hdr_lba_start=34
hdr_lba_end=3907029134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
Warning: number of heads/cylinder mismatches 255 (NTFS) != 240 (HD)
2 P MS Data 264192 3907028991 3906764800 [Basic data partition]
Capture.JPG
Capture.JPG (88.93 KiB) Viewed 13554 times
Capture2.JPG
Capture2.JPG (84.36 KiB) Viewed 13554 times
Capture3.JPG
Capture3.JPG (79.31 KiB) Viewed 13554 times

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: WD20EARS partition problems

#10 Post by Fiona »

the only question I have about changing the Geometry at this point is there
a big chance of data lose? Or am I able to try the change without saving it?
It's not risky at all.
As long as you don't write in TestDisk at the menu Write, your not going to change anything.
Would it be possible to upload a screenshot from your disk management console?

Fiona

Locked