Damaged Drive with Question on TestDisk Output

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Imhotep1963
Posts: 1
Joined: 06 Dec 2012, 18:15

Damaged Drive with Question on TestDisk Output

#1 Post by Imhotep1963 »

Hi all! I have a task that has been giving me problems.I have my sister-in-law's external hard drive that has been damaged and the filesystem is not mountable.

I am running OSX 10.6.8

Using ddrescue, I recovered the contents and transfered to my external drive:

Code: Select all

ddrescue -r 3 -S /dev/rdisk5 /Volumes/goFlex/JJ/JJ_Recover.dmg /Volumes/goFlex/JJ/JJ_Recover.log
Upon completion, I tried to mount the image by double-clicking it but received the error:

Code: Select all

"No mountable filesystem"
So I tried using hdiutil:

Code: Select all

sudo hdiutil attach -nomount /volumes/backup/jj-recover.dmg
Success!

Code: Select all

/dev/disk5
So I try to mount:

Code: Select all

sudo mkdir /volumes/jj-drive
sudo mount -t hfs -r /dev/disk5 /volumes/jj-drive
Error:

Code: Select all

hfs: failed to load catalog file
So I ran Testdisk and got this information:

Code: Select all

Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors                       
     Partition               Start        End    Size in sectors                
>P CramFS                 313874337  319333484    5459148 [     L  ^Og~Yo]      
 P HFS+                  1952521844 1953058783     536940


1952521844
1953058783

Here is the ddrescue logfile

Code: Select all

# Rescue Logfile. Created by GNU ddrescue version 1.16
# Command line: ddrescue -r 3 -S /dev/rdisk5 /Volumes/goFlex/JJ/JJ_Recover.dmg /Volumes/goFlex/JJ/JJ_Recover.log
# current_pos  current_status
0x12560BE00     +
#      pos        size  status
0x00000000  0xF87CD000  +
0xF87CD000  0x00000800  -
0xF87CD800  0x00000600  +
0xF87CDE00  0x00000200  -
0xF87CE000  0x00232000  +
0xF8A00000  0x00001000  -
0xF8A01000  0x00119000  +
0xF8B1A000  0x00001000  -
0xF8B1B000  0x00118000  +
0xF8C33000  0x00001000  -
0xF8C34000  0x00119000  +
0xF8D4D000  0x00001000  -
0xF8D4E000  0x00118000  +
0xF8E66000  0x00001000  -
0xF8E67000  0x00119000  +
0xF8F80000  0x00001000  -
0xF8F81000  0x00255000  +
0xF91D6000  0x00001000  -
0xF91D7000  0x00118000  +
0xF92EF000  0x00001000  -
0xF92F0000  0x00232000  +
0xF9522000  0x00001000  -
0xF9523000  0x27D03000  +
0x121226000  0x00001000  -
0x121227000  0x00119000  +
0x121340000  0x00001000  -
0x121341000  0x00119000  +
0x12145A000  0x00001000  -
0x12145B000  0x00254000  +
0x1216AF000  0x00001000  -
0x1216B0000  0x00119000  +
0x1217C9000  0x00001000  -
0x1217CA000  0x00118000  +
0x1218E2000  0x00001000  -
0x1218E3000  0x00119000  +
0x1219FC000  0x00001000  -
0x1219FD000  0x00118000  +
0x121B15000  0x00001000  -
0x121B16000  0x00118000  +
0x121C2E000  0x00001000  -
0x121C2F000  0x00119000  +
0x121D48000  0x00001000  -
0x121D49000  0x00118000  +
0x121E61000  0x00001000  -
0x121E62000  0x0011A000  +
0x121F7C000  0x00001000  -
0x121F7D000  0x00254000  +
0x1221D1000  0x00001000  -
0x1221D2000  0x0010E000  +
0x1222E0000  0x0000B000  -
0x1222EB000  0x00115000  +
0x122400000  0x00005000  -
0x122405000  0x0010B000  +
0x122510000  0x0000E000  -
0x12251E000  0x00112000  +
0x122630000  0x00008000  -
0x122638000  0x00118000  +
0x122750000  0x00001000  -
0x122751000  0x0010F000  +
0x122860000  0x0000B000  -
0x12286B000  0x00115000  +
0x122980000  0x00004000  -
0x122984000  0x0010C000  +
0x122A90000  0x0000E000  -
0x122A9E000  0x00112000  +
0x122BB0000  0x00008000  -
0x122BB8000  0x00248000  +
0x122E00000  0x0000D000  -
0x122E0D000  0x00113000  +
0x122F20000  0x00007000  -
0x122F27000  0x00109000  +
0x123030000  0x00010000  -
0x123040000  0x00110000  +
0x123150000  0x0000A000  -
0x12315A000  0x00116000  +
0x123270000  0x00003000  -
0x123273000  0x0010D000  +
0x123380000  0x0000D000  -
0x12338D000  0x00113000  +
0x1234A0000  0x00006000  -
0x1234A6000  0x0010A000  +
0x1235B0000  0x00010000  -
0x1235C0000  0x00110000  +
0x1236D0000  0x0000A000  -
0x1236DA000  0x00246000  +
0x123920000  0x0000F000  -
0x12392F000  0x00111000  +
0x123A40000  0x00009000  -
0x123A49000  0x00117000  +
0x123B60000  0x00002000  -
0x123B62000  0x0010E000  +
0x123C70000  0x0000C000  -
0x123C7C000  0x00114000  +
0x123D90000  0x00005000  -
0x123D95000  0x0010B000  +
0x123EA0000  0x0000F000  -
0x123EAF000  0x00111000  +
0x123FC0000  0x00008000  -
0x123FC8000  0x00118000  +
0x1240E0000  0x00002000  -
0x1240E2000  0x0010E000  +
0x1241F0000  0x0000C000  -
0x1241FC000  0x00254000  +
0x124450000  0x00001000  -
0x124451000  0x0010F000  +
0x124560000  0x0000B000  -
0x12456B000  0x00115000  +
0x124680000  0x00004000  -
0x124684000  0x0010C000  +
0x124790000  0x0000E000  -
0x12479E000  0x00112000  +
0x1248B0000  0x00007000  -
0x1248B7000  0x00119000  +
0x1249D0000  0x00001000  -
0x1249D1000  0x0010F000  +
0x124AE0000  0x0000A000  -
0x124AEA000  0x00116000  +
0x124C00000  0x00003000  -
0x124C03000  0x0010D000  +
0x124D10000  0x0000E000  -
0x124D1E000  0x00252000  +
0x124F70000  0x00003000  -
0x124F73000  0x0010D000  +
0x125080000  0x0000D000  -
0x12508D000  0x00113000  +
0x1251A0000  0x00006000  -
0x1251A6000  0x0010A000  +
0x1252B0000  0x0000F000  -
0x1252BF000  0x00111000  +
0x1253D0000  0x00009000  -
0x1253D9000  0x00117000  +
0x1254F0000  0x00002000  -
0x1254F2000  0x0010E000  +
0x125600000  0x0000C000  -
0x12560C000  0xE7BB7AA000  +

Here is the TestDisk logfile

Code: Select all

Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, July 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Darwin, kernel 10.8.0 (Darwin Kernel Version 10.8.0: Tue Jun  7 16:32:41 PDT 2011; root:xnu-1504.1
Compiler: GCC 4.0
Compilation date: 2012-07-28T12:34:16
ext2fs lib: 1.41.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
Hard disk list
Disk /dev/disk0 - 400 GB / 372 GiB - 781422768 sectors (RO), sector size=512
Disk /dev/disk1 - 120 GB / 111 GiB - 234441648 sectors (RO), sector size=512
Disk /dev/disk2 - 1000 GB / 931 GiB - 1953525168 sectors (RO), sector size=512
Disk /dev/disk3 - 1500 GB / 1397 GiB - 2930277167 sectors (RO), sector size=512
Disk /dev/disk4 - 1000 GB / 931 GiB - 1953525168 sectors (RO), sector size=512
Disk /dev/disk5 - 1000 GB / 931 GiB - 1953525168 sectors, sector size=512
Disk /dev/rdisk0 - 400 GB / 372 GiB - 781422768 sectors (RO), sector size=512
Disk /dev/rdisk1 - 120 GB / 111 GiB - 234441648 sectors (RO), sector size=512
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953525168 sectors (RO), sector size=512
Disk /dev/rdisk3 - 1500 GB / 1397 GiB - 2930277167 sectors (RO), sector size=512
Disk /dev/rdisk4 - 1000 GB / 931 GiB - 1953525168 sectors (RO), sector size=512
Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors, sector size=512

Partition table type default to EFI GPT
Disk /dev/rdisk5 - 1000 GB / 931 GiB
Partition table type: None

Analyse Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors
Current partition structure:
   P Unknown                        0 1953525167 1953525168

search_part()
Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors
check_FAT: Bad number of sectors per cluster

LVM magic value at 279219280/0/1
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery

Interface Advanced
   P Unknown                        0 1953525167 1953525168
New options :
 Dump : No
 Align partition: Yes
 Expert mode : Yes

Analyse Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors
Current partition structure:
   P Unknown                        0 1953525167 1953525168

search_part()
Disk /dev/rdisk5 - 1000 GB / 931 GiB - 1953525168 sectors
check_FAT: Bad number of sectors per cluster

LVM magic value at 279219280/0/1

cramfs Marker at 313874337/0/1

recover_cramfs
     CramFS                 313874337  319333484    5459147 [Ù•àôÎw	L…ÿ„‘gôo]
     cramfs, 2795 MB / 2665 MiB
check_FAT: Bad jump in FAT partition

SYSV4 Marker at 869161358/0/1

recover_sysv4
     SysV 4                 869161358  869161357          0 [¢x"QZÜ]
     SysV4, 0 B
Partition not added.

HFS+ magic value at 1952521844/0/1
part_size 536940
     HFS+                  1952521844 1953058783     536940
     HFS+ blocksize=2048, 274 MB / 262 MiB

Results
   P CramFS                 313874337  319333484    5459148 [Ù•àôÎw	L…ÿ„‘gôo]
     cramfs, 2795 MB / 2665 MiB
   P HFS+                  1952521844 1953058783     536940
     HFS+ blocksize=2048, 274 MB / 262 MiB

interface_write()
   P CramFS                 313874337  319333484    5459148 [Ù•àôÎw	L…ÿ„‘gôo]
   P HFS+                  1952521844 1953058783     536940
 
Write isn't available because the partition table type "None" has been selected.

TestDisk exited normally.
So here I am debating what to do. I was hoping that someone may have had similar issue or may have some recommendation as to what to do.

I appreciate any and all help!! Thank you!

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Damaged Drive with Question on TestDisk Output

#2 Post by cgrenier »

Honestly it doesn't look very good. Have you try PhotoRec to recover some data ?

Locked