cgsecurity.org

Hi,
Data on my external USB disc My Book Live 2 TB are not accessible anymore. In Windows Disk management utility it appears as "1862.98 GB RAW" now.
I run a quick test and you could find the result below. Do you have any hints how to proceed?
Thanks a lot for your support!
--------------------------------------
Wed Jan 27 22:00:40 2021
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, December 2020
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 9.3, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=255533776896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000362143744
Hard disk list
Disk /dev/sda - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - SAMSUNG SSD PM871 mSATA 256GB, S/N:S20ENXAG838102, FW:EMT42D0Q
Disk /dev/sdb - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Book 1130, S/N:WCAZA7712177, FW:1016

Partition table type (auto): Intel
Disk /dev/sdb - 2000 GB / 1862 GiB - WD My Book 1130
Partition table type: Intel

Analyse Disk /dev/sdb - 2000 GB / 1862 GiB - CHS 243197 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
Current partition structure:
Invalid NTFS or exFAT boot
1 * HPFS - NTFS 0 32 33 243196 247 59 3906957312
1 * HPFS - NTFS 0 32 33 243196 247 59 3906957312

search_part()
Disk /dev/sdb - 2000 GB / 1862 GiB - CHS 243197 255 63
BAD_RS LBA=1969545925 8436274
check_part_i386 failed for partition type 04
FAT16 <32M 122598 143 47 260179 236 60 2210244638
This partition ends after the disk limits. (start=1969545925, size=2210244638, end=4179790562, disk end=3906963456)
BAD_RS LBA=5522030886 9591688
file_pread(5,3,buffer,5522030886(343730/133/58)) lseek err Invalid argument
file_pread(5,1,buffer,5522030886(343730/133/58)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0B
FAT32 343730 133 58 534624 250 33 3066719457
This partition ends after the disk limits. (start=5522030886, size=3066719457, end=8588750342, disk end=3906963456)
check_FAT: Bad number of sectors per cluster
file_pread(5,2,buffer,3906963455(243197/57/60)) ReadFile The request failed due to a fatal device hardware error.

file_pread(5,1,buffer,3906963456(243197/57/61)) ReadFile The drive cannot find the sector requested.

file_pread(5,1,buffer,3906963457(243197/57/62)) lseek err Invalid argument
file_pread(5,14,buffer,3906963458(243197/57/63)) lseek err Invalid argument
file_pread(5,3,buffer,3906963472(243197/58/14)) lseek err Invalid argument
file_pread(5,3,buffer,3906963519(243197/58/61)) lseek err Invalid argument
file_pread(5,8,buffer,3906963535(243197/59/14)) lseek err Invalid argument
file_pread(5,11,buffer,3906963582(243197/59/61)) lseek err Invalid argument
file_pread(5,2,buffer,3906965504(243197/90/30)) lseek err Invalid argument
Disk /dev/sdb - 2000 GB / 1862 GiB - CHS 243197 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (2000 GB / 1862 GiB) seems too small! (< 4397 GB / 4095 GiB)
The following partitions can't be recovered:
FAT16 <32M 122598 143 47 260179 236 60 2210244638
FAT32 343730 133 58 534624 250 33 3066719457

Results

interface_write()

No partition found or selected for recovery

Try TestDisk, Advanced, Boot, RebuildBS, List.
If you can see your files, choose Write, confirm, Quit and restart your computer.

Thanks a lot for increadible fast reply. It works, that's great! Going to donate TestDisk .

Hi,
I am opening similar issue once more. I have another not accessible external disk. Once I run Analyze I am getting a log copy-pasted below.
Should I follow the same procedure as previously? i.e. "Try TestDisk, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write, confirm, Quit and restart your computer."

Thanks a lot for your support in advance!

Best regards, Jiri
---------------------
Fri Jun 25 14:04:21 2021
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=511462191104
Hard disk list
Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512 - KXG6AZNV512G TOSHIBA, S/N:8CE3_8E05_004B_81D7., FW:5108AGLA
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - WDC WD30 EZRS-11J99B1, S/N:3195532ZWACW-DW, FW:80.0
Disk \\.\PhysicalDrive1 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - WDC WD30 EZRS-11J99B1, S/N:3195532ZWACW-DW, FW:80.0

Partition table type (auto): Intel
Disk /dev/sdb - 3000 GB / 2794 GiB - WDC WD30 EZRS-11J99B1
Partition table type: Intel

Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 45600 255 63
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=1 0
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Bad relative sector.
No partition is bootable