WD My Passport 1TB suddenly empty

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Post Reply
Message
Author
franklin
Posts: 2
Joined: 04 Dec 2023, 12:28

WD My Passport 1TB suddenly empty

#1 Post by franklin »

Hi everyone, hope you are doing great.
I apologize if this is the wrong forum or category, but I don’t totally understand the nature of the problem.

Background:
I have a WD My Passport 1TB external hdd (one partition, NTFS, non encrypted) which is mostly used to storage multimedia. Like a month ago it started to get tricky to be properly recognized, problem that always was solved by simply unplug and plug (presuming this was caused by the aged front panel connector). One night when I plugged in, it started to clicking for a couple of seconds and i immediately disconnected when stops. I get a second hdd to extract the data, avoid the front panel and plugged in the back, no issues, start copying some directories but not all. Umount and safely remove all devices before shutdown the system and go to bed whit the idea of finishing the job the next morning. To my surprise when I connect the drive, is suddenly “empty” only two directories listed “$RECYCLE.BIN” and “System Volume Information”.

smartctl output:

Code: Select all

smartctl 7.4 2023-08-01 r5530 [x86_64-linux-6.6.2-101.fc38.x86_64] (local build)
Copyright (C) 2002-23, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Family:     Western Digital Elements / My Passport (USB, AF)
Device Model:     WDC WD10JMVW-11AJGS4
Serial Number:    WD-WXS1A171D0YN
LU WWN Device Id: 5 0014ee 65cb6fc8c
Firmware Version: 01.01A01
User Capacity:    1,000,171,332,096 bytes [1.00 TB]
Sector Sizes:     512 bytes logical, 4096 bytes physical
Rotation Rate:    5400 rpm
Device is:        In smartctl database 7.3/5528
ATA Version is:   ACS-2 (minor revision not indicated)
SATA Version is:  SATA 3.0, 3.0 Gb/s (current: 3.0 Gb/s)
Local Time is:    Mon Dec  4 00:42:25 2023 -03
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

General SMART Values:
Offline data collection status:  (0x00)	Offline data collection activity
					was never started.
					Auto Offline Data Collection: Disabled.
Self-test execution status:      (   0)	The previous self-test routine completed
					without error or no self-test has ever 
					been run.
Total time to complete Offline 
data collection: 		(18720) seconds.
Offline data collection
capabilities: 			 (0x7b) SMART execute Offline immediate.
					Auto Offline data collection on/off support.
					Suspend Offline collection upon new
					command.
					Offline surface scan supported.
					Self-test supported.
					Conveyance Self-test supported.
					Selective Self-test supported.
SMART capabilities:            (0x0003)	Saves SMART data before entering
					power-saving mode.
					Supports SMART auto save timer.
Error logging capability:        (0x01)	Error logging supported.
					General Purpose Logging supported.
Short self-test routine 
recommended polling time: 	 (   2) minutes.
Extended self-test routine
recommended polling time: 	 ( 209) minutes.
Conveyance self-test routine
recommended polling time: 	 (   5) minutes.
SCT capabilities: 	       (0x7035)	SCT Status supported.
					SCT Feature Control supported.
					SCT Data Table supported.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME          FLAG     VALUE WORST THRESH TYPE      UPDATED  WHEN_FAILED RAW_VALUE
  1 Raw_Read_Error_Rate     0x002f   200   200   051    Pre-fail  Always       -       0
  3 Spin_Up_Time            0x0027   129   117   021    Pre-fail  Always       -       4541
  4 Start_Stop_Count        0x0032   099   099   000    Old_age   Always       -       1067
  5 Reallocated_Sector_Ct   0x0033   200   200   140    Pre-fail  Always       -       0
  7 Seek_Error_Rate         0x002e   100   253   000    Old_age   Always       -       0
  9 Power_On_Hours          0x0032   100   100   000    Old_age   Always       -       575
 10 Spin_Retry_Count        0x0032   100   100   000    Old_age   Always       -       0
 11 Calibration_Retry_Count 0x0032   100   100   000    Old_age   Always       -       0
 12 Power_Cycle_Count       0x0032   100   100   000    Old_age   Always       -       929
192 Power-Off_Retract_Count 0x0032   200   200   000    Old_age   Always       -       35
193 Load_Cycle_Count        0x0032   196   196   000    Old_age   Always       -       12221
194 Temperature_Celsius     0x0022   120   104   000    Old_age   Always       -       27
196 Reallocated_Event_Count 0x0032   200   200   000    Old_age   Always       -       0
197 Current_Pending_Sector  0x0032   200   200   000    Old_age   Always       -       0
198 Offline_Uncorrectable   0x0030   100   253   000    Old_age   Offline      -       0
199 UDMA_CRC_Error_Count    0x0032   200   200   000    Old_age   Always       -       0
200 Multi_Zone_Error_Rate   0x0008   100   253   000    Old_age   Offline      -       0

SMART Error Log Version: 1
No Errors Logged

SMART Self-test log structure revision number 1
No self-tests have been logged.  [To run self-tests, use: smartctl -t]

SMART Selective self-test log data structure revision number 1
 SPAN  MIN_LBA  MAX_LBA  CURRENT_TEST_STATUS
    1        0        0  Not_testing
    2        0        0  Not_testing
    3        0        0  Not_testing
    4        0        0  Not_testing
    5        0        0  Not_testing
Selective self-test flags (0x0):
  After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.

The above only provides legacy SMART information - try 'smartctl -x' for more
testdisk log:

Code: Select all


Sun Nov 19 07:14:31 2023
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 6.5.10-200.fc38.x86_64 (#1 SMP PREEMPT_DYNAMIC Thu Nov  2 19:59:55 UTC 2023) x86_64
Compiler: GCC 13.0
ext2fs lib: 1.46.5, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.4
/dev/sda: LBA, LBA48 support
/dev/sda: size       468862128 sectors
/dev/sda: user_max   468862128 sectors
/dev/sdb: LBA, LBA48, DCO support
/dev/sdb: size       488397168 sectors
/dev/sdb: user_max   488397168 sectors
/dev/sdb: dco        488397168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 240 GB / 223 GiB - CHS 29185 255 63, sector size=512 - Patriot Burst Elite 240GB, S/N:PBELIBA22041210650, FW:HCS1A25C
Disk /dev/sdb - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - TOSHIBA MK2565GSX, S/N:41UHP07GT, FW:GJ002C
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63, sector size=512 - WD My Passport 25E1, FW:1015

Partition table type (auto): EFI GPT
Disk /dev/sdc - 1000 GB / 931 GiB - WD My Passport 25E1
Partition table type: EFI GPT

Analyse Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=1953458175 (expected 1953458175)
hdr_lba_start=34
hdr_lba_end=1953458142
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
Current partition structure:
 1 P MS Data                     2048 1953456127 1953454080

search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size           1953454080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=1000168488960, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size           1953454080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048 1953456127 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
   P MS Data                     2048 1953456127 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1953454080 linear /dev/sdc 2048" | dmsetup create test0
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
   P MS Data                     2048 1953456127 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB
Directory /
       5 dr-xr-xr-x     0      0         0 31-Oct-2023 18:06 .
       5 dr-xr-xr-x     0      0         0 31-Oct-2023 18:06 ..
      37 dr-xr-xr-x     0      0         0 31-Oct-2023 18:06 $RECYCLE.BIN
      35 dr-xr-xr-x     0      0         0 31-Oct-2023 18:06 System Volume Information

interface_write()
 1 P MS Data                     2048 1953456127 1953454080

search_part()
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
NTFS at 0/32/33
filesystem size           1953454080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=1000168488960, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size           1953454080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048 1953456127 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB

block_group_nr 625

recover_EXT2: "e2fsck -b 20480000 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=625/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2046 1953458133 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 625

recover_EXT2: "e2fsck -b 20480000 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=625/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2048 1953458135 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 729

recover_EXT2: "e2fsck -b 23887872 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=729/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2046 1953458133 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 729

recover_EXT2: "e2fsck -b 23887872 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=729/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2048 1953458135 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown                528866159 35039205642328942 35039205113462784
     WBFS, 17940073 TB / 16316401 TiB
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.
       0 0000 0000 00 00 00 00 00 00 00 00
     Unknown                562489127 29786872529894297 29786871967405170 [fŽ’uû?ÁÏÙ8†n¼•ûÖó
ßµpô+™)ÔD¦]
     BeFS blocksize=4, 15250878 TB / 13870593 TiB
       0 0000 0000 00 00 00 00 00 00 00 00
Partition not added.

block_group_nr 3125

recover_EXT2: "e2fsck -b 102400000 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3125/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2046 1953458133 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 3125

recover_EXT2: "e2fsck -b 102400000 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=3125/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2048 1953458135 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

cramfs Marker at 68877/87/55

recover_cramfs
     Linux filesys. data   1106514540 1106967965     453425 [•Ó‚XUˆ
)ªŽÖª—½]
     cramfs, 232 MB / 221 MiB

cramfs Marker at 68877/87/56

recover_cramfs
     Linux filesys. data   1106514541 1106967966     453425 [•Ó‚XUˆ
)ªŽÖª—½]
     cramfs, 232 MB / 221 MiB

cramfs Marker at 76561/185/58

recover_cramfs
     Linux filesys. data   1229964177 1231336160    1371983 [GW¹¤Ø«ÝŠ½Í(bždSÜ]
     cramfs, 702 MB / 669 MiB

cramfs Marker at 76561/185/59

recover_cramfs
     Linux filesys. data   1229964178 1231336161    1371983 [GW¹¤Ø«ÝŠ½Í(bždSÜ]
     cramfs, 702 MB / 669 MiB

LVM magic value at 96997/11/20

block_group_nr 6561

recover_EXT2: "e2fsck -b 214990848 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=6561/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2046 1953458133 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB

block_group_nr 6561

recover_EXT2: "e2fsck -b 214990848 -B 4096 device" may be needed
recover_EXT2: s_block_group_nr=6561/7451, s_mnt_count=0/4294967295, s_blocks_per_group=32768, s_inodes_per_group=8192
recover_EXT2: s_blocksize=4096
recover_EXT2: s_blocks_count 244182011
recover_EXT2: part_size 1953456088
Filesystem created: Wed Oct 18 01:36:19 2017
     Linux filesys. data         2048 1953458135 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB
NTFS at 121597/5/8
filesystem size           1953454080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                     2048 1953456127 1953454080
     NTFS found using backup sector, blocksize=4096, 1000 GB / 931 GiB
NTFS at 121597/5/8
filesystem size           1953454080
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS: Can't read MFT
     MS Data               1953456127 3906910206 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB
This partition ends after the disk limits. (start=1953456127, size=1953454080, end=3906910206, disk end=1953458176)
Disk /dev/sdc - 1000 GB / 931 GiB - CHS 121597 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (1000 GB / 931 GiB) seems too small! (< 2000 GB / 1862 GiB)
The following partition can't be recovered:
     MS Data               1953456127 3906910206 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB

Results
     Linux filesys. data         2046 1953458133 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB
     MS Data                     2048 1953456127 1953454080
     NTFS, blocksize=4096, 1000 GB / 931 GiB
     Linux filesys. data         2048 1953458135 1953456088
     ext4 blocksize=4096 Large_file Sparse_SB Backup_SB, 1000 GB / 931 GiB
     Linux filesys. data   1106514540 1106967965     453426 [•Ó‚XUˆ
)ªŽÖª—½]
     cramfs, 232 MB / 221 MiB
     Linux filesys. data   1106514541 1106967966     453426 [•Ó‚XUˆ
)ªŽÖª—½]
     cramfs, 232 MB / 221 MiB
     Linux filesys. data   1229964177 1231336160    1371984 [GW¹¤Ø«ÝŠ½Í(bždSÜ]
     cramfs, 702 MB / 669 MiB
     Linux filesys. data   1229964178 1231336161    1371984 [GW¹¤Ø«ÝŠ½Í(bždSÜ]
     cramfs, 702 MB / 669 MiB

Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 1953456088 linear /dev/sdc 2046" | dmsetup create test0
echo "0 1953454080 linear /dev/sdc 2048" | dmsetup create test1
echo "0 1953456088 linear /dev/sdc 2048" | dmsetup create test2
echo "0 453426 linear /dev/sdc 1106514540" | dmsetup create test3
echo "0 453426 linear /dev/sdc 1106514541" | dmsetup create test4
echo "0 1371984 linear /dev/sdc 1229964177" | dmsetup create test5
echo "0 1371984 linear /dev/sdc 1229964178" | dmsetup create test6

recuperation
Posts: 2737
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: WD My Passport 1TB suddenly empty

#2 Post by recuperation »

What is the question?

franklin
Posts: 2
Joined: 04 Dec 2023, 12:28

Re: WD My Passport 1TB suddenly empty

#3 Post by franklin »

Hi, thanks for your reply. The question is what kind of issue I'm facing? Partition tables? File system? Or it is something to a hardware level?

Other things I forgot to mention: I’m under linux and second, that I don’t remove the drive physically. This make me thing of a file system check during boot that some what mess the drive.

Post Reply