Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Belthasar
Posts: 3
Joined: 24 Nov 2019, 05:06

Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

#1 Post by Belthasar »

Hello,

I have a 500 GB external hard drive that appears to have lost the bulk of its data. I ran TestDisk's quick search, which produced the following log. Any help in what to do would be appreciated! It says that the partitions couldn't be recovered, that the file system may be damaged.

Code: Select all

Fri Nov 22 11:09:39 2019
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, November 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 7.4, Cygwin 3000.3
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=64023257088
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=64023257088
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=2000396746752
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=63444090880
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=371752960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=34359738368
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=2000395698176
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=2000263577600
Hard disk list
Disk /dev/sda - 64 GB / 59 GiB - CHS 7783 255 63, sector size=512 - SAMSUNG SSD 830 Series, S/N:S0VTNYABB00263, FW:CXM03B1Q
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST500DM002-1BD142, S/N:Z2AA74DF, FW:KC43
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD2002FAEX-00MJRA0, S/N:WD-WCC1P0968148, FW:01.01L01
Disk /dev/sdd - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WD Ext HDD 1021, S/N:WCAZA2527155, FW:2002
Disk /dev/sde - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Seagate Portable, S/N:2GH3A382, FW:0130
Drive D: - 371 MB / 354 MiB - CHS 88 64 32, sector size=2048 - ASUS DRW-24B1ST   a, FW:1.04

Partition table type (auto): EFI GPT
Disk /dev/sde - 250 GB / 232 GiB - Seagate Portable
Partition table type: EFI GPT

Analyse Disk /dev/sde - 250 GB / 232 GiB - CHS 30401 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=488397167 (expected 488397167)
hdr_lba_start=34
hdr_lba_end=488397134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]
 1 P MS Reserved                   34     262177     262144 [Microsoft reserved partition]

search_part()
Disk /dev/sde - 250 GB / 232 GiB - CHS 30401 255 63
FAT32 at 0/32/33
FAT1 : 8196-16385
FAT2 : 16386-24575
start_rootdir : 24576 root cluster : 2
Data : 24576-67108863
sectors : 67108864
cluster_size : 64
no_of_cluster : 1048192 (2 - 1048193)
fat_length 8190 calculated 8190

FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=26624
     EFI System                  2048   67110911   67108864 [EFI System Partition] [ESD-USB]
     FAT32, blocksize=32768, 34 GB / 32 GiB
NTFS at 13691/170/47
filesystem size           488392065
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               30524504
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=112617815552, part_size=250056737280, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 13691/170/47
filesystem size           488392065
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               30524504
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                219956671  708348735  488392065
     NTFS, blocksize=4096, 250 GB / 232 GiB
This partition ends after the disk limits. (start=219956671, size=488392065, end=708348735, disk end=488397168)
NTFS at 30401/0/63
filesystem size           488392065
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               30524504
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                       63  488392127  488392065
     NTFS found using backup sector, blocksize=4096, 250 GB / 232 GiB
NTFS at 30401/0/63
filesystem size           488392065
sectors_per_cluster       8
mft_lcn                   4
mftmirr_lcn               30524504
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                488392127  976784191  488392065
     NTFS, blocksize=4096, 250 GB / 232 GiB
This partition ends after the disk limits. (start=488392127, size=488392065, end=976784191, disk end=488397168)
file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,1,buffer,488397170(30401/81/3)) lseek err Invalid argument
< MANY SIMILAR LINES >
file_pread(8,1,buffer,488399130(30401/112/10)) lseek err Invalid argument
file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,11,buffer,488397208(30401/81/41)) lseek err Invalid argument
file_pread(8,1,buffer,488399131(30401/112/11)) lseek err Invalid argument
< MANY SIMILAR LINES >
file_pread(8,1,buffer,488399134(30401/112/14)) lseek err Invalid argument
file_pread(8,8,buffer,488397165(30401/80/61)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,11,buffer,488397212(30401/81/45)) lseek err Invalid argument
file_pread(8,1,buffer,488399135(30401/112/15)) lseek err Invalid argument
< MANY SIMILAR LINES >
file_pread(8,1,buffer,488397238(30401/82/8)) lseek err Invalid argument
file_pread(8,1,buffer,488399151(30401/112/31)) lseek err Invalid argument
file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,8,buffer,488397182(30401/81/15)) lseek err Invalid argument
file_pread(8,11,buffer,488397229(30401/81/62)) lseek err Invalid argument
< MANY SIMILAR LINES >
file_pread(8,1,buffer,488399198(30401/113/15)) lseek err Invalid argument
file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397215(30401/81/48)) lseek err Invalid argument
file_pread(8,1,buffer,488397236(30401/82/6)) lseek err Invalid argument
< MANY SIMILAR LINES >
file_pread(8,1,buffer,488399201(30401/113/18)) lseek err Invalid argument
file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397171(30401/81/4)) lseek err Invalid argument
file_pread(8,1,buffer,488397218(30401/81/51)) lseek err Invalid argument
file_pread(8,1,buffer,488397239(30401/82/9)) lseek err Invalid argument
file_pread(8,1,buffer,488397289(30401/82/59)) lseek err Invalid argument
file_pread(8,1,buffer,488399202(30401/113/19)) lseek err Invalid argument
file_pread(8,14,buffer,488397156(30401/80/52)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,3,buffer,488397170(30401/81/3)) lseek err Invalid argument
file_pread(8,3,buffer,488397217(30401/81/50)) lseek err Invalid argument
file_pread(8,8,buffer,488397233(30401/82/3)) lseek err Invalid argument
file_pread(8,11,buffer,488397280(30401/82/50)) lseek err Invalid argument
file_pread(8,2,buffer,488399202(30401/113/19)) lseek err Invalid argument
file_pread(8,14,buffer,488397157(30401/80/53)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,2,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,3,buffer,488397171(30401/81/4)) lseek err Invalid argument
file_pread(8,3,buffer,488397218(30401/81/51)) lseek err Invalid argument
file_pread(8,8,buffer,488397234(30401/82/4)) lseek err Invalid argument
file_pread(8,11,buffer,488397281(30401/82/51)) lseek err Invalid argument
file_pread(8,2,buffer,488399203(30401/113/20)) lseek err Invalid argument
file_pread(8,14,buffer,488397158(30401/80/54)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,3,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,3,buffer,488397172(30401/81/5)) lseek err Invalid argument
file_pread(8,3,buffer,488397219(30401/81/52)) lseek err Invalid argument
file_pread(8,8,buffer,488397235(30401/82/5)) lseek err Invalid argument
file_pread(8,11,buffer,488397282(30401/82/52)) lseek err Invalid argument
file_pread(8,2,buffer,488399204(30401/113/21)) lseek err Invalid argument
file_pread(8,14,buffer,488397159(30401/80/55)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,4,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,3,buffer,488397173(30401/81/6)) lseek err Invalid argument
file_pread(8,3,buffer,488397220(30401/81/53)) lseek err Invalid argument
file_pread(8,8,buffer,488397236(30401/82/6)) lseek err Invalid argument
file_pread(8,11,buffer,488397283(30401/82/53)) lseek err Invalid argument
file_pread(8,2,buffer,488399205(30401/113/22)) lseek err Invalid argument
file_pread(8,14,buffer,488397160(30401/80/56)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,5,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,3,buffer,488397174(30401/81/7)) lseek err Invalid argument
file_pread(8,3,buffer,488397221(30401/81/54)) lseek err Invalid argument
file_pread(8,8,buffer,488397237(30401/82/7)) lseek err Invalid argument
file_pread(8,11,buffer,488397284(30401/82/54)) lseek err Invalid argument
file_pread(8,2,buffer,488399206(30401/113/23)) lseek err Invalid argument
file_pread(8,1,buffer,488397177(30401/81/10)) lseek err Invalid argument
file_pread(8,1,buffer,488397224(30401/81/57)) lseek err Invalid argument
file_pread(8,1,buffer,488397245(30401/82/15)) lseek err Invalid argument
file_pread(8,1,buffer,488397295(30401/83/2)) lseek err Invalid argument
file_pread(8,1,buffer,488399208(30401/113/25)) lseek err Invalid argument
file_pread(8,14,buffer,488397162(30401/80/58)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,7,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,3,buffer,488397176(30401/81/9)) lseek err Invalid argument
file_pread(8,3,buffer,488397223(30401/81/56)) lseek err Invalid argument
file_pread(8,8,buffer,488397239(30401/82/9)) lseek err Invalid argument
file_pread(8,11,buffer,488397286(30401/82/56)) lseek err Invalid argument
file_pread(8,1,buffer,488399209(30401/113/26)) lseek err Invalid argument
file_pread(8,1,buffer,488397179(30401/81/12)) lseek err Invalid argument
file_pread(8,1,buffer,488397226(30401/81/59)) lseek err Invalid argument
file_pread(8,1,buffer,488397247(30401/82/17)) lseek err Invalid argument
file_pread(8,1,buffer,488397297(30401/83/4)) lseek err Invalid argument
file_pread(8,1,buffer,488399210(30401/113/27)) lseek err Invalid argument
file_pread(8,14,buffer,488397164(30401/80/60)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,8,buffer,488397170(30401/81/3)) lseek err Invalid argument
file_pread(8,3,buffer,488397178(30401/81/11)) lseek err Invalid argument
file_pread(8,3,buffer,488397225(30401/81/58)) lseek err Invalid argument
file_pread(8,8,buffer,488397241(30401/82/11)) lseek err Invalid argument
file_pread(8,11,buffer,488397288(30401/82/58)) lseek err Invalid argument
file_pread(8,1,buffer,488399211(30401/113/28)) lseek err Invalid argument
file_pread(8,10,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,1,buffer,488397181(30401/81/14)) lseek err Invalid argument
file_pread(8,1,buffer,488397228(30401/81/61)) lseek err Invalid argument
file_pread(8,1,buffer,488397249(30401/82/19)) lseek err Invalid argument
file_pread(8,1,buffer,488397299(30401/83/6)) lseek err Invalid argument
file_pread(8,1,buffer,488399212(30401/113/29)) lseek err Invalid argument
file_pread(8,14,buffer,488397166(30401/80/62)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,1,buffer,488397179(30401/81/12)) lseek err Invalid argument
file_pread(8,3,buffer,488397180(30401/81/13)) lseek err Invalid argument
file_pread(8,3,buffer,488397227(30401/81/60)) lseek err Invalid argument
file_pread(8,8,buffer,488397243(30401/82/13)) lseek err Invalid argument
file_pread(8,11,buffer,488397290(30401/82/60)) lseek err Invalid argument
file_pread(8,1,buffer,488399213(30401/113/30)) lseek err Invalid argument
file_pread(8,12,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,1,buffer,488397183(30401/81/16)) lseek err Invalid argument
file_pread(8,1,buffer,488397230(30401/81/63)) lseek err Invalid argument
file_pread(8,1,buffer,488397251(30401/82/21)) lseek err Invalid argument
file_pread(8,1,buffer,488397301(30401/83/8)) lseek err Invalid argument
file_pread(8,1,buffer,488399214(30401/113/31)) lseek err Invalid argument
file_pread(8,1,buffer,488397184(30401/81/17)) lseek err Invalid argument
file_pread(8,1,buffer,488397231(30401/82/1)) lseek err Invalid argument
file_pread(8,1,buffer,488397252(30401/82/22)) lseek err Invalid argument
file_pread(8,1,buffer,488397302(30401/83/9)) lseek err Invalid argument
file_pread(8,1,buffer,488399215(30401/113/32)) lseek err Invalid argument
file_pread(8,1,buffer,488397168(30401/81/1)) ReadFile The drive cannot find the sector requested.

file_pread(8,2,buffer,488397181(30401/81/14)) lseek err Invalid argument
file_pread(8,1,buffer,488397185(30401/81/18)) lseek err Invalid argument
file_pread(8,1,buffer,488397232(30401/82/2)) lseek err Invalid argument
file_pread(8,8,buffer,488397246(30401/82/16)) lseek err Invalid argument
file_pread(8,11,buffer,488397293(30401/82/63)) lseek err Invalid argument
file_pread(8,1,buffer,488399216(30401/113/33)) lseek err Invalid argument
file_pread(8,1,buffer,488397169(30401/81/2)) lseek err Invalid argument
file_pread(8,14,buffer,488397170(30401/81/3)) lseek err Invalid argument
file_pread(8,1,buffer,488397186(30401/81/19)) lseek err Invalid argument
file_pread(8,1,buffer,488397233(30401/82/3)) lseek err Invalid argument
file_pread(8,1,buffer,488397254(30401/82/24)) lseek err Invalid argument
file_pread(8,1,buffer,488397304(30401/83/11)) lseek err Invalid argument
file_pread(8,1,buffer,488399217(30401/113/34)) lseek err Invalid argument
Disk /dev/sde - 250 GB / 232 GiB - CHS 30401 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (250 GB / 232 GiB) seems too small! (< 500 GB / 465 GiB)
The following partitions can't be recovered:
     MS Data                219956671  708348735  488392065
     NTFS, blocksize=4096, 250 GB / 232 GiB
     MS Data                488392127  976784191  488392065
     NTFS, blocksize=4096, 250 GB / 232 GiB

Results
     MS Data                       63  488392127  488392065
     NTFS found using backup sector, blocksize=4096, 250 GB / 232 GiB
     EFI System                  2048   67110911   67108864 [EFI System Partition] [ESD-USB]
     FAT32, blocksize=32768, 34 GB / 32 GiB
Top
User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

#2 Post by cgrenier »

Do you had a single NTFS partition ?
After Deeper Search, TestDisk has found the partition

Code: Select all

MS Data                       63  488392127  488392065
     NTFS found using backup sector, blocksize=4096, 250 GB / 232 GiB
Can you try to list its files ? If it's the partition you want to recover, use the arrow key to switch this partition to P(rimary), on next screen, choose Write, confirm, Quit.
Top
Belthasar
Posts: 3
Joined: 24 Nov 2019, 05:06

Re: Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

#3 Post by Belthasar »

That is the partition that I am trying to recover, but attempts to list its files fail; I get a message saying that the file system may be damaged. If I followed your instruction, would writing the files allow me to view them again, even though they couldn't be previewed?
Top
recuperation
Posts: 2729
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

#4 Post by recuperation »

No.
Top
Belthasar
Posts: 3
Joined: 24 Nov 2019, 05:06

Re: Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

#5 Post by Belthasar »

Ok, so am I to conclude that recovery is impossible, based on the information I have provided? Thanks for all of your help, both of you.
Top
recuperation
Posts: 2729
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Hard Disk Lost All Data; Log File Says Partitions Can't Be Recovered

#6 Post by recuperation »

Belthasar wrote: ↑26 Nov 2019, 06:59 Ok, so am I to conclude that recovery is impossible, based on the information I have provided? Thanks for all of your help, both of you.
No. Other software or a professional recovery company performing a partly manual individual recovery might give better results.
Top
Locked

Return to “Partition Recovery”