External HDD with NTFS. Can't open filesystem. Filesystem seems damaged. MFT and MFT mirror are bad. Harddisk too small.

[lgcnlgc]

Hello, everyone. Need you help, please. I have external 2TB TOSHIBA HDD which I use for storing files, and there is a lot of important data. Yesterday it suddenly stopped working when it was connected to Windows PC. Chkdsk doesn't work so I'm tryiing to fix it using my Linux laptop with TestDisk but still I'm not successful. I've read a lot of topics here but nothing mentions identical set of issues which I have or a working solution.

I have one HPFS - NTFS primary partition. When I do a Quick Search in it, it says "The harddisk seems too small... The following partition can't be recovered" and when I click on Continue, it shows two Deleted NTFS paritions of the same size, the second is a backup (because it says "Found using backup sector"). If I choose any of them, it shows empty list and says "No partition found or selected for recovery". I've tried Deeper Search, but it hasn't found anything.

When I ran TestDisk for the first time, I also saw "Bad relative sector." message, but it's not shown now anymore. Probably, TestDisk fixed it during "interface_write()" or when I've tried changing the Type of partition.

Also I see such an error in the logs when performing interface_write()

Code: Select all

ntfs_mst_post_read_fixup_warn: magic: 0x454c4946  size: 1024   usa_ofs: 57  usa_count: 3: Invalid argument
Record 0 has corrupt allocation size (1024 <> 134292672)
Failed to load $MFT: Input/output error

If I try to list the files, it says "Can't open filesystem. Filesystem seems damaged."

This is my log file, uploaded it to Google Drive: https://drive.google.com/file/d/19iyWu0 ... sp=sharing
Hope it's allowed.

What I've already tried:
1) Advanced - Boot. Backup sector was OK while Backup boot sector was Bad. Sectors were not identical. I've clicked on Org. BS, and sectors became identical.
2) Changing the type of the first partition from 'Deleted' to 'Primary', rebooted. Doesn't help. Type is not changed.
3) Rebuild FS but it didn't finish:

Code: Select all

rebuild_NTFS_BS
Search mft stopped:    2228224/3907026944
Failed to rebuild NTFS boot sector.

4) Repair MFT, but it says "MFT and MFT mirror are bad. Failed to repair them."
5) I've tried PhotoRec, and it can recover files, I've tried it a bit and stopped. I hope there's a way to fix my HDD so as to save the file names and sturcture.
6) I've tried ntfsfix /dev/sda1 but also unsuccessfully:

Code: Select all

Mounting volume... Error opening read-only '/dev/sda1': Permission denied
FAILED
Attempting to correct errors... Error opening read-only '/dev/sda1': Permission denied
FAILED
Failed to startup volume: Permission denied
Error opening '/dev/sda1': Read-only file system
Volume is corrupt. You should run chkdsk.

What I haven't tried in TestDisk:
1) Advanced - Dump
2) MBR Code
3) Delete (all data in partition table)

Could you please help me? Is it possible to try something else and fix the HDD?

[recuperation]

Use smartmontools and create a log file of the SMART parameters to learn what your disk thinks about its health.
Clone the defective disk using ddrescue as described in the manual. Your rescue and fixing attempts may further degrade an already broken disk.
Use commercial data rescue software to see how much they can achieve.
When everything fails, use PhotoRec.

Data rescue software will try to extract your data.
"Fixing" as you expected is an exception provided by TestDisk.
To "fix" your HDD you will have to pay a data recovery company on an hourly basis.
Forget "fixing"!

[lgcnlgc]

Thank you, I will try to use smartmontools and ddrescue.
By fixing I've thought about errors in partitions or MFT and I was hoping that TestDisk could help me fix those errors so that the HDD. That's why I used that word.

[lgcnlgc]

Hi, I've tried smartmontools, I've run both short and long tests, below are the results of the long one. Could you please advice what's wrong with my HDD based on this output?

smartctl 7.4 2023-08-01 r5530 [x86_64-linux-6.14.0-37-generic] (local build)
Copyright (C) 2002-23, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Family: Toshiba 2.5" HDD MQ04UBD...
Device Model: TOSHIBA MQ04UBD200
Serial Number: 18N4TDCDT
LU WWN Device Id: 0 000000 000000000
Firmware Version: JT000U
User Capacity: 2 000 398 934 016 bytes [2,00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate: 5400 rpm
Form Factor: 2.5 inches
Zoned Device: Device managed zones
Device is: In smartctl database 7.3/5528
ATA Version is: ACS-3 T13/2161-D revision 5
SATA Version is: SATA 3.3, 3.0 Gb/s (current: 3.0 Gb/s)
Local Time is: Thu Dec 18 13:55:11 2025 EET
SMART support is: Available - device has SMART capability.
SMART support is: Enabled
AAM feature is: Unavailable
APM level is: 128 (minimum power consumption without standby)
Rd look-ahead is: Enabled
Write cache is: Enabled
DSN feature is: Disabled
ATA Security is: Disabled, NOT FROZEN [SEC1]
Wt Cache Reorder: Unknown

=== START OF READ SMART DATA SECTION ===
SMART Status not supported: Incomplete response, ATA output registers missing
SMART overall-health self-assessment test result: PASSED
Warning: This result is based on an Attribute check.

General SMART Values:
Offline data collection status: (0x00) Offline data collection activity
was never started.
Auto Offline Data Collection: Disabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: ( 120) seconds.
Offline data collection
capabilities: (0x5b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
No Conveyance Self-test supported.
Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 2) minutes.
Extended self-test routine
recommended polling time: ( 328) minutes.
SCT capabilities: (0x003d) SCT Status supported.
SCT Error Recovery Control supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAGS VALUE WORST THRESH FAIL RAW_VALUE
1 Raw_Read_Error_Rate PO-R-- 100 100 050 - 0
2 Throughput_Performance P-S--- 100 100 050 - 0
3 Spin_Up_Time POS--K 100 100 001 - 2178
4 Start_Stop_Count -O--CK 100 100 000 - 18922
5 Reallocated_Sector_Ct PO--CK 100 100 050 - 3
7 Seek_Error_Rate PO-R-- 100 100 050 - 0
8 Seek_Time_Performance P-S--- 100 100 050 - 0
9 Power_On_Hours -O--CK 083 083 000 - 6998
10 Spin_Retry_Count PO--CK 253 100 030 - 0
12 Power_Cycle_Count -O--CK 100 100 000 - 3207
191 G-Sense_Error_Rate -O--CK 100 100 000 - 198
192 Power-Off_Retract_Count -O--CK 097 097 000 - 1672
193 Load_Cycle_Count -O--CK 098 098 000 - 28613
194 Temperature_Celsius -O---K 100 100 000 - 31 (Min/Max 15/65)
196 Reallocated_Event_Count -O--CK 100 100 000 - 3
197 Current_Pending_Sector -O--CK 100 100 000 - 0
198 Offline_Uncorrectable ----CK 100 100 000 - 0
199 UDMA_CRC_Error_Count -O--CK 200 200 000 - 0
220 Disk_Shift -O---- 100 100 000 - 0
222 Loaded_Hours -O--CK 096 096 000 - 1928
223 Load_Retry_Count -O--CK 100 100 000 - 0
224 Load_Friction -O---K 100 100 000 - 0
226 Load-in_Time -OS--K 100 100 000 - 264
240 Head_Flying_Hours P----- 100 100 001 - 0
||||||_ K auto-keep
|||||__ C event count
||||___ R error rate
|||____ S speed/performance
||_____ O updated online
|______ P prefailure warning

General Purpose Log Directory Version 1
SMART Log Directory Version 1 [multi-sector log support]
Address Access R/W Size Description
0x00 GPL,SL R/O 1 Log Directory
0x01 SL R/O 1 Summary SMART error log
0x02 SL R/O 51 Comprehensive SMART error log
0x03 GPL R/O 64 Ext. Comprehensive SMART error log
0x04 GPL,SL R/O 8 Device Statistics log
0x06 SL R/O 1 SMART self-test log
0x07 GPL R/O 1 Extended self-test log
0x09 SL R/W 1 Selective self-test log
0x0a GPL R/W 2 Device Statistics Notification
0x10 GPL R/O 1 NCQ Command Error log
0x11 GPL R/O 1 SATA Phy Event Counters log
0x24 GPL R/O 32768 Current Device Internal Status Data log
0x30 GPL,SL R/O 9 IDENTIFY DEVICE data log
0x80-0x9f GPL,SL R/W 16 Host vendor specific log
0xa7 GPL VS 8 Device vendor specific log
0xe0 GPL,SL R/W 1 SCT Command/Status
0xe1 GPL,SL R/W 1 SCT Data Transfer

SMART Extended Comprehensive Error Log Version: 1 (64 sectors)
No Errors Logged

SMART Error Log Version: 1
No Errors Logged

SMART Extended Self-test Log Version: 1 (1 sectors)
Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error
# 1 Extended offline Completed without error 00% 6996 -
# 2 Extended offline Aborted by host 20% 6972 -
# 3 Short offline Completed without error 00% 6968 -

SMART Self-test log structure revision number 1
Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error
# 1 Extended offline Completed without error 00% 6996 -
# 2 Extended offline Aborted by host 20% 6972 -
# 3 Short offline Completed without error 00% 6968 -

SMART Selective self-test log data structure revision number 1
SPAN MIN_LBA MAX_LBA CURRENT_TEST_STATUS
1 0 0 Not_testing
2 0 0 Not_testing
3 0 0 Not_testing
4 0 0 Not_testing
5 0 0 Not_testing
Selective self-test flags (0x0):
After scanning selected spans, do NOT read-scan remainder of disk.
If Selective self-test is pending on power-up, resume after 0 minute delay.

SCT Status Version: 3
SCT Version (vendor specific): 1 (0x0001)
Device State: Active (0)
Current Temperature: 31 Celsius
Power Cycle Min/Max Temperature: 24/51 Celsius
Lifetime Min/Max Temperature: 15/65 Celsius
Under/Over Temperature Limit Count: 0/33

SCT Temperature History Version: 2
Temperature Sampling Period: 1 minute
Temperature Logging Interval: 1 minute
Min/Max recommended Temperature: 0/60 Celsius
Min/Max Temperature Limit: 0/60 Celsius
Temperature History Size (Index): 478 (66)

Index Estimated Time Temperature Celsius
67 2025-12-18 05:58 31 ************
... ..( 40 skipped). .. ************
108 2025-12-18 06:39 31 ************
109 2025-12-18 06:40 ? -
110 2025-12-18 06:41 31 ************
111 2025-12-18 06:42 31 ************
112 2025-12-18 06:43 ? -
113 2025-12-18 06:44 25 ******
114 2025-12-18 06:45 26 *******
115 2025-12-18 06:46 27 ********
116 2025-12-18 06:47 27 ********
117 2025-12-18 06:48 28 *********
118 2025-12-18 06:49 29 **********
119 2025-12-18 06:50 29 **********
120 2025-12-18 06:51 30 ***********
121 2025-12-18 06:52 30 ***********
122 2025-12-18 06:53 30 ***********
123 2025-12-18 06:54 31 ************
124 2025-12-18 06:55 31 ************
125 2025-12-18 06:56 32 *************
126 2025-12-18 06:57 34 ***************
127 2025-12-18 06:58 35 ****************
128 2025-12-18 06:59 35 ****************
129 2025-12-18 07:00 36 *****************
130 2025-12-18 07:01 37 ******************
131 2025-12-18 07:02 38 *******************
132 2025-12-18 07:03 38 *******************
133 2025-12-18 07:04 39 ********************
134 2025-12-18 07:05 39 ********************
135 2025-12-18 07:06 40 *********************
136 2025-12-18 07:07 40 *********************
137 2025-12-18 07:08 41 **********************
138 2025-12-18 07:09 42 ***********************
139 2025-12-18 07:10 42 ***********************
140 2025-12-18 07:11 43 ************************
141 2025-12-18 07:12 43 ************************
142 2025-12-18 07:13 43 ************************
143 2025-12-18 07:14 44 *************************
144 2025-12-18 07:15 44 *************************
145 2025-12-18 07:16 45 **************************
146 2025-12-18 07:17 45 **************************
147 2025-12-18 07:18 46 ***************************
... ..( 3 skipped). .. ***************************
151 2025-12-18 07:22 46 ***************************
152 2025-12-18 07:23 47 ****************************
... ..( 2 skipped). .. ****************************
155 2025-12-18 07:26 47 ****************************
156 2025-12-18 07:27 48 *****************************
... ..( 2 skipped). .. *****************************
159 2025-12-18 07:30 48 *****************************
160 2025-12-18 07:31 49 ******************************
... ..( 16 skipped). .. ******************************
177 2025-12-18 07:48 49 ******************************
178 2025-12-18 07:49 50 *******************************
... ..( 53 skipped). .. *******************************
232 2025-12-18 08:43 50 *******************************
233 2025-12-18 08:44 49 ******************************
234 2025-12-18 08:45 50 *******************************
... ..( 11 skipped). .. *******************************
246 2025-12-18 08:57 50 *******************************
247 2025-12-18 08:58 49 ******************************
... ..( 87 skipped). .. ******************************
335 2025-12-18 10:26 49 ******************************
336 2025-12-18 10:27 47 ****************************
337 2025-12-18 10:28 46 ***************************
338 2025-12-18 10:29 45 **************************
339 2025-12-18 10:30 44 *************************
340 2025-12-18 10:31 43 ************************
341 2025-12-18 10:32 43 ************************
342 2025-12-18 10:33 42 ***********************
343 2025-12-18 10:34 41 **********************
... ..( 8 skipped). .. **********************
352 2025-12-18 10:43 41 **********************
353 2025-12-18 10:44 42 ***********************
354 2025-12-18 10:45 41 **********************
355 2025-12-18 10:46 42 ***********************
356 2025-12-18 10:47 42 ***********************
357 2025-12-18 10:48 42 ***********************
358 2025-12-18 10:49 43 ************************
... ..( 23 skipped). .. ************************
382 2025-12-18 11:13 43 ************************
383 2025-12-18 11:14 44 *************************
... ..( 3 skipped). .. *************************
387 2025-12-18 11:18 44 *************************
388 2025-12-18 11:19 45 **************************
... ..( 5 skipped). .. **************************
394 2025-12-18 11:25 45 **************************
395 2025-12-18 11:26 46 ***************************
... ..( 3 skipped). .. ***************************
399 2025-12-18 11:30 46 ***************************
400 2025-12-18 11:31 44 *************************
401 2025-12-18 11:32 44 *************************
402 2025-12-18 11:33 43 ************************
... ..( 14 skipped). .. ************************
417 2025-12-18 11:48 43 ************************
418 2025-12-18 11:49 44 *************************
... ..( 3 skipped). .. *************************
422 2025-12-18 11:53 44 *************************
423 2025-12-18 11:54 45 **************************
424 2025-12-18 11:55 44 *************************
425 2025-12-18 11:56 43 ************************
426 2025-12-18 11:57 42 ***********************
427 2025-12-18 11:58 41 **********************
428 2025-12-18 11:59 40 *********************
429 2025-12-18 12:00 40 *********************
430 2025-12-18 12:01 39 ********************
431 2025-12-18 12:02 38 *******************
432 2025-12-18 12:03 38 *******************
433 2025-12-18 12:04 37 ******************
434 2025-12-18 12:05 36 *****************
435 2025-12-18 12:06 36 *****************
436 2025-12-18 12:07 36 *****************
437 2025-12-18 12:08 35 ****************
... ..( 3 skipped). .. ****************
441 2025-12-18 12:12 35 ****************
442 2025-12-18 12:13 34 ***************
... ..( 2 skipped). .. ***************
445 2025-12-18 12:16 34 ***************
446 2025-12-18 12:17 33 **************
... ..( 3 skipped). .. **************
450 2025-12-18 12:21 33 **************
451 2025-12-18 12:22 32 *************
... ..( 11 skipped). .. *************
463 2025-12-18 12:34 32 *************
464 2025-12-18 12:35 31 ************
465 2025-12-18 12:36 32 *************
466 2025-12-18 12:37 31 ************
... ..( 20 skipped). .. ************
9 2025-12-18 12:58 31 ************
10 2025-12-18 12:59 30 ***********
... ..( 48 skipped). .. ***********
59 2025-12-18 13:48 30 ***********
60 2025-12-18 13:49 31 ************
... ..( 5 skipped). .. ************
66 2025-12-18 13:55 31 ************

SMART WRITE LOG does not return COUNT and LBA_LOW register
SCT (Get) Error Recovery Control command failed

Device Statistics (GP Log 0x04)
Page Offset Size Value Flags Description
0x01 ===== = = === == General Statistics (rev 1) ==
0x01 0x008 4 3207 --- Lifetime Power-On Resets
0x01 0x010 4 6998 --- Power-on Hours
0x01 0x018 6 11747999008 --- Logical Sectors Written
0x01 0x020 6 144783171 --- Number of Write Commands
0x01 0x028 6 33726061681 --- Logical Sectors Read
0x01 0x030 6 1050545047 --- Number of Read Commands
0x01 0x038 6 25194204548 --- Date and Time TimeStamp
0x02 ===== = = === == Free-Fall Statistics (rev 1) ==
0x02 0x010 4 198 --- Overlimit Shock Events
0x03 ===== = = === == Rotating Media Statistics (rev 1) ==
0x03 0x008 4 2354 --- Spindle Motor Power-on Hours
0x03 0x010 4 1928 --- Head Flying Hours
0x03 0x018 4 28614 --- Head Load Events
0x03 0x020 4 3 -D- Number of Reallocated Logical Sectors
0x03 0x028 4 2980 --- Read Recovery Attempts
0x03 0x030 4 0 --- Number of Mechanical Start Failures
0x03 0x038 4 0 --- Number of Realloc. Candidate Logical Sectors
0x03 0x040 4 1672 --- Number of High Priority Unload Events
0x04 ===== = = === == General Errors Statistics (rev 1) ==
0x04 0x008 4 0 --- Number of Reported Uncorrectable Errors
0x04 0x010 4 17 --- Resets Between Cmd Acceptance and Completion
0x05 ===== = = === == Temperature Statistics (rev 1) ==
0x05 0x008 1 31 --- Current Temperature
0x05 0x010 1 38 N-- Average Short Term Temperature
0x05 0x018 1 33 N-- Average Long Term Temperature
0x05 0x020 1 65 --- Highest Temperature
0x05 0x028 1 15 --- Lowest Temperature
0x05 0x030 1 45 N-- Highest Average Short Term Temperature
0x05 0x038 1 24 N-- Lowest Average Short Term Temperature
0x05 0x040 1 39 N-- Highest Average Long Term Temperature
0x05 0x048 1 31 N-- Lowest Average Long Term Temperature
0x05 0x050 4 146 --- Time in Over-Temperature
0x05 0x058 1 60 --- Specified Maximum Operating Temperature
0x05 0x060 4 0 --- Time in Under-Temperature
0x05 0x068 1 0 --- Specified Minimum Operating Temperature
0x06 ===== = = === == Transport Statistics (rev 1) ==
0x06 0x008 4 8837 --- Number of Hardware Resets
0x06 0x010 4 11792 --- Number of ASR Events
0x06 0x018 4 0 --- Number of Interface CRC Errors
0x07 ===== = = === == Solid State Device Statistics (rev 1) ==
|||_ C monitored condition met
||__ D supports DSN
|___ N normalized value

Pending Defects log (GP Log 0x0c) not supported

SATA Phy Event Counters (GP Log 0x11)
ID Size Value Description
0x0001 4 0 Command failed due to ICRC error
0x0002 4 0 R_ERR response for data FIS
0x0003 4 0 R_ERR response for device-to-host data FIS
0x0004 4 0 R_ERR response for host-to-device data FIS
0x0005 4 0 R_ERR response for non-data FIS
0x0006 4 0 R_ERR response for device-to-host non-data FIS
0x0007 4 0 R_ERR response for host-to-device non-data FIS
0x0008 4 0 Device-to-host non-data FIS retries
0x0009 4 5 Transition from drive PhyRdy to drive PhyNRdy
0x000a 4 2 Device-to-host register FISes sent due to a COMRESET
0x000b 4 0 CRC errors within host-to-device FIS
0x000d 4 0 Non-CRC errors within host-to-device FIS
0x000f 4 0 R_ERR response for host-to-device data FIS, CRC
0x0010 4 0 R_ERR response for host-to-device data FIS, non-CRC
0x0012 4 0 R_ERR response for host-to-device non-data FIS, CRC
0x0013 4 0 R_ERR response for host-to-device non-data FIS, non-CRC

[recuperation]

1. Maximum temperature with 65°C way beyond reasonable value.
2. 3 reallocated sectors in 3 event

1. may have caused 2.

[lgcnlgc]

1. Maximum temperature with 65°C way beyond reasonable value.
2. 3 reallocated sectors in 3 event

1. may have caused 2.

The first may be because of HDD was connected and running too long because of this long smartmontools test. But I don't think that all that issues which TestDisk notifies me about are caused by high temperature. I just hope that there's some problem with partitions or filesystem which may be fixed with TestDisk

So you think that TestDisk can't help me and I have to backup the data and then get HDD to a repair service?

[lgcnlgc]

I'm not able to create an image of my HDD using TestDisk or ddrescue because I don't have other disk of 2TB size. I can only recover files with PhotoRec but there are millions of files on that HDD and I don't know how I will process each files to understand what is that and put it into correct folder etc. So I still hope to find a way to repair the partition structure using TestDisk.

Looking again through TestDisk instructions and my errors, I have new thoughts.

TestDisk step by step manual says this:

The first partition is listed twice which points to a corrupted partition or an invalid partition table entry.
Invalid NTFS boot points to a faulty NTFS boot sector, so it's a corrupted filesystem.

In my case the same partition is indeed listed twice (after Quick Search) and probably this causes the error

The harddisk (2000 GB / 1863 GiB) seems too small! (< 4000 GB / 3726 GiB)

.
And both partitions are shown as 'Deleted', so I wonder, shall I try to change the type of both of them to 'Primary' or only single one? And which one in that case?

[recuperation]

https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

[lgcnlgc]

Thanks, I've already went through Step by Step instruction initially.

The guide says

When all partitions are available and data correctly listed, you should go to the menu Write to save the partition structure.

In my case the data is not listed. And even when I tried to change the type of partition from D to P and rebooted, nothing changed and data is still not listed.

By the way, I've noticed the name of the partition in the last column on the screenshots in the guide. I don't have such names.

Further, the guide says

Both partitions are listed with status D for deleted, because they overlap each other. You need to identify which partition to recover.

But in my case the filsystem on both of them is damaged. Is there a way to restore or fix the filesystem if it's broken on both main and backup partitions?

[recuperation]

If you don't find your content using the p-key ("list files") TestDisk can't help you. You are left with commercial software that will try to recover your content. If everything fails use PhotoRec.

Nobody will "repair" your disk. When undertaking big repairs, modifying the defective source candidate is outright unprofessional.
You are free to learn the internals of NTFS and starting massacring your defective source candidate with a hex editor or any other tools.

Nobody will take your '"I don't have a spare disk" seriously. This is a lame excuse. Borrow the necessary storage from someone or wait until you can buy the necessary storage.

Alternatively you can reach out to a professional lab and pay them 10 to 20 times the prices for one spare disk. They are looking forward to be of service for you.

Good luck!