cgsecurity.org

I have a 4tb that is currently not responding to windows explorer but can be found in
-safely remove hardware
-disk management (not initialised, not allocated)

I've tried using testdisk, quick analyse takes too long and only gives me fat32, I went to advanced and chosed efi, ntfs.

Partition table type (auto): EFI GPT
Disk /dev/sdc - 4000 GB / 3725 GiB - WD My Passport 25E2
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=7813969919
hdr_lba_alt=1 (expected 1)
hdr_lba_start=34
hdr_lba_end=7813969886
hdr_lba_table=7813969887
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Data 2048 7813967871 7813965824 [My Passport]
Trying alternate GPT
check_FAT: can't read FAT boot sector
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Data 2048 7813967871 7813965824 [My Passport]
1 P MS Data 2048 7813967871 7813965824 [My Passport]
1 P MS Data 2048 7813967871 7813965824 [My Passport]
gpt_change_part_type
SIGINT detected! PhotoRec has been killed.
Change partition type:
1 P EFI System 2048 7813967871 7813965824 [My Passport]
Change partition type:
1 P NTFS 2048 7813967871 7813965824 [My Passport]

ntfs_boot_sector
1 P EFI System 2048 7813967871 7813965824 [My Passport]
NTFS at 0/32/33
filesystem size 1 7813965824
sectors_per_cluster 0 8
mft_lcn 0 786432
mftmirr_lcn 0 2
clusters_per_mft_record 0 -10
clusters_per_index_record 0 1
Boot sector
ntfs_boot_sector: Can't read boot sector.
Status: Bad

Backup boot sector
Status: OK

i went ahead with backup BS which set my BS to OK but it is unable to save this setting. If I select list it says filesystem corrupted. if I select rebuild BS after my external goes 100%.

What am I supposed to do after restoring from my Backup BS?

Your drive may be broken on hardware level - not just the file system.
Please post a smartmontools log file.

Instructions can be found here:

viewtopic.php?p=27477#p27477

Hi recuperation,

smartmontools as follow

=== START OF INFORMATION SECTION ===
Model Family: Western Digital Elements / My Passport (USB, AF)
Device Model: WDC WD40NMZW-11GX6S1
Serial Number: WD-WX61D583RE78
LU WWN Device Id: 5 0014ee 0af3a0601
Firmware Version: 01.01A01
User Capacity: 4,000,753,475,584 bytes [4.00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate: 5400 rpm
Form Factor: 2.5 inches
Device is: In smartctl database [for details use: -P show]
ATA Version is: ACS-3 (minor revision not indicated)
SATA Version is: SATA 3.1, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is: Tue Oct 27 23:19:26 2020 MPST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===
SMART overall-health self-assessment test result: PASSED

General SMART Values:
Offline data collection status: (0x00) Offline data collection activity
was never started.
Auto Offline Data Collection: Disabled.
Self-test execution status: ( 0) The previous self-test routine completed
without error or no self-test has ever
been run.
Total time to complete Offline
data collection: (20220) seconds.
Offline data collection
capabilities: (0x1b) SMART execute Offline immediate.
Auto Offline data collection on/off support.
Suspend Offline collection upon new
command.
Offline surface scan supported.
Self-test supported.
No Conveyance Self-test supported.
No Selective Self-test supported.
SMART capabilities: (0x0003) Saves SMART data before entering
power-saving mode.
Supports SMART auto save timer.
Error logging capability: (0x01) Error logging supported.
General Purpose Logging supported.
Short self-test routine
recommended polling time: ( 2) minutes.
Extended self-test routine
recommended polling time: ( 157) minutes.
SCT capabilities: (0x30b5) SCT Status supported.
SCT Feature Control supported.
SCT Data Table supported.

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x002f 145 144 051 Pre-fail Always - 4043
3 Spin_Up_Time 0x0027 253 253 021 Pre-fail Always - 4250
4 Start_Stop_Count 0x0032 100 100 000 Old_age Always - 229
5 Reallocated_Sector_Ct 0x0033 200 200 140 Pre-fail Always - 0
7 Seek_Error_Rate 0x002e 200 200 000 Old_age Always - 0
9 Power_On_Hours 0x0032 100 100 000 Old_age Always - 601
10 Spin_Retry_Count 0x0032 100 100 000 Old_age Always - 0
11 Calibration_Retry_Count 0x0032 100 100 000 Old_age Always - 0
12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 115
192 Power-Off_Retract_Count 0x0032 200 200 000 Old_age Always - 51
193 Load_Cycle_Count 0x0032 199 199 000 Old_age Always - 4391
194 Temperature_Celsius 0x0022 099 098 000 Old_age Always - 53
196 Reallocated_Event_Count 0x0032 200 200 000 Old_age Always - 0
197 Current_Pending_Sector 0x0032 200 200 000 Old_age Always - 176
198 Offline_Uncorrectable 0x0030 100 253 000 Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x0032 200 200 000 Old_age Always - 0
200 Multi_Zone_Error_Rate 0x0008 100 253 000 Old_age Offline - 0

SMART Error Log Version: 1
No Errors Logged

SMART Self-test log structure revision number 1
Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error
# 1 Short offline Completed: read failure 90% 596 5926528
# 2 Extended offline Completed: read failure 90% 596 5926528
# 3 Short offline Completed: read failure 90% 596 5926528

Selective Self-tests/Logging not supported

If it's really a hardware disk crash, is there any possibility of data backup/recovery?

there's a few information inside that I would prefer not be lost.

pigcanswim wrote: 27 Oct 2020, 16:21 Hi recuperation,

smartmontools as follow

=== START OF INFORMATION SECTION ===
Model Family: Western Digital Elements / My Passport (USB, AF)
Device Model: WDC WD40NMZW-11GX6S1
Serial Number: WD-WX61D583RE78
LU WWN Device Id: 5 0014ee 0af3a0601
Firmware Version: 01.01A01
User Capacity: 4,000,753,475,584 bytes [4.00 TB]
Sector Sizes: 512 bytes logical, 4096 bytes physical
Rotation Rate: 5400 rpm
Form Factor: 2.5 inches
Device is: In smartctl database [for details use: -P show]
ATA Version is: ACS-3 (minor revision not indicated)
SATA Version is: SATA 3.1, 6.0 Gb/s (current: 6.0 Gb/s)
Local Time is: Tue Oct 27 23:19:26 2020 MPST
SMART support is: Available - device has SMART capability.
SMART support is: Enabled

=== START OF READ SMART DATA SECTION ===

SMART Attributes Data Structure revision number: 16
Vendor Specific SMART Attributes with Thresholds:
ID# ATTRIBUTE_NAME FLAG VALUE WORST THRESH TYPE UPDATED WHEN_FAILED RAW_VALUE
1 Raw_Read_Error_Rate 0x002f 145 144 051 Pre-fail Always - 4043
3 Spin_Up_Time 0x0027 253 253 021 Pre-fail Always - 4250
4 Start_Stop_Count 0x0032 100 100 000 Old_age Always - 229
5 Reallocated_Sector_Ct 0x0033 200 200 140 Pre-fail Always - 0
7 Seek_Error_Rate 0x002e 200 200 000 Old_age Always - 0
9 Power_On_Hours 0x0032 100 100 000 Old_age Always - 601
10 Spin_Retry_Count 0x0032 100 100 000 Old_age Always - 0
11 Calibration_Retry_Count 0x0032 100 100 000 Old_age Always - 0
12 Power_Cycle_Count 0x0032 100 100 000 Old_age Always - 115
192 Power-Off_Retract_Count 0x0032 200 200 000 Old_age Always - 51
193 Load_Cycle_Count 0x0032 199 199 000 Old_age Always - 4391
194 Temperature_Celsius 0x0022 099 098 000 Old_age Always - 53
196 Reallocated_Event_Count 0x0032 200 200 000 Old_age Always - 0
197 Current_Pending_Sector 0x0032 200 200 000 Old_age Always - 176
198 Offline_Uncorrectable 0x0030 100 253 000 Old_age Offline - 0
199 UDMA_CRC_Error_Count 0x0032 200 200 000 Old_age Always - 0
200 Multi_Zone_Error_Rate 0x0008 100 253 000 Old_age Offline - 0

SMART Error Log Version: 1
No Errors Logged

SMART Self-test log structure revision number 1
Num Test_Description Status Remaining LifeTime(hours) LBA_of_first_error
# 1 Short offline Completed: read failure 90% 596 5926528
# 2 Extended offline Completed: read failure 90% 596 5926528
# 3 Short offline Completed: read failure 90% 596 5926528

Selective Self-tests/Logging not supported

If it's really a hardware disk crash, is there any possibility of data backup/recovery?

there's a few information inside that I would prefer not be lost.

Why is your drive running so hot at 53°C?
Please explain.
No wonder you already have 176 pending sectors.
I marked both infos in bold writing when I quoted you above.

Please duplicate your drive using ddrescue as described in the manual.
Normally removal of the drive from the enclosure is a good idea, but I don't know if that drive is encrypted and will require the case to show unencrypted data.
You can periodically check the temperature when duplicating, interrupt ddrescue and recontinue.

What is a hard disk crash?

You do backups with healthy drives. Your case is recovery.

It's hot because I'm running testdisk disk imaging but looking at some post stating that it might actually kill the drive faster so I aborted it.

Recovery is secondary and if unrecoverable it would be great if the disk is permanently unrecoverable.

However from what you said it seems that its actually recoverable

My drive is still under warranty so removal from enclosure is a no go to do the recovery myself. I guess I will have to trust WD drive wipe and get a new one from them.

My hard drive crash is referring to the hardware failure.

Appreciate the help recuperation, but I guess I will pull my data again from the net.