Boot sector and backup boot sector bad Topic is solved

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Starfish
Posts: 7
Joined: 10 Mar 2021, 00:07

Boot sector and backup boot sector bad

#1 Post by Starfish »

I have a 4TB disk (non-bootable) that I am trying to recover. It has a single partition. The steps I have tried so far are Analyze (with Deep Search) and RebuildBS. RebuildBS failed (see screenshot), saying Boot sector is bad and Backup boot sector is bad. So I cannot List the files ("Can't open filesystem. Filesystem seems damaged"). It seems to have correctly identified the primary partition, but at this point I'm not sure what the next step should be. Could anyone please advise? With the Deep Search I was a little bit confused about the FAT16 partition it seemed to find (which it said "This partition ends after the disk limits"). I've included the full log below.

The files I'm trying to recover are from niche scientific software so I don't think PhotoRec would work, but please correct me if I'm wrong.

On trying to Rebuild BS
Image

After Deep Search
Image

Code: Select all


Mon Mar  8 12:02:08 2021
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=256060514304
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=4000787030016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=249405733376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=256042336256
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=500096991744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=1000202043392
Hard disk list
Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Samsung SSD 850 EVO M.2 250GB, S/N:S33CNX0J500309W, FW:EMT21B6Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - SAMSUNG HD103SJ, S/N:S246J9KB705572, FW:1AJ10001
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-1CH166, S/N:Z1F0TE1K, FW:CC43
Disk /dev/sdd - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - Sabrent, S/N:6479_A732_9002_2759., FW:RKT303.3
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - ST4000LM 024-2AN17V, S/N:L25W3KCW

Partition table type (auto): Intel
Disk /dev/sde - 4000 GB / 3726 GiB - ST4000LM 024-2AN17V
Partition table type: Intel

Analyse Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
No partition is bootable

search_part()
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
BAD_RS LBA=2911158969 12897716
file_pread(8,3,buffer,2911158969(715909/245/42)) lseek err Invalid argument
file_pread(8,1,buffer,2911158969(715909/245/42)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           715909 245 42 891696 184 59 2824014330
This partition ends after the disk limits. (start=11501093561, size=2824014330, end=14325107890, disk end=7814037168)
file_pread(8,2,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,1,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,2,buffer,3519070208(486401/86/22)) lseek err Invalid argument
file_pread(8,14,buffer,3519070210(486401/86/24)) lseek err Invalid argument
file_pread(8,3,buffer,3519070224(486401/86/38)) lseek err Invalid argument
file_pread(8,3,buffer,3519070271(486401/87/22)) lseek err Invalid argument
file_pread(8,8,buffer,3519070287(486401/87/38)) lseek err Invalid argument
file_pread(8,11,buffer,3519070334(486401/88/22)) lseek err Invalid argument
file_pread(8,2,buffer,3519072256(486401/118/54)) lseek err Invalid argument
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (4000 GB / 3726 GiB) seems too small! (< 7334 GB / 6830 GiB)
The following partition can't be recovered:
     FAT16 >32M           715909 245 42 891696 184 59 2824014330

Results

interface_write()
 
No partition found or selected for recovery

search_part()
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
BAD_RS LBA=2911158969 12897716
file_pread(8,3,buffer,2911158969(715909/245/42)) lseek err Invalid argument
file_pread(8,1,buffer,2911158969(715909/245/42)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           715909 245 42 891696 184 59 2824014330
This partition ends after the disk limits. (start=11501093561, size=2824014330, end=14325107890, disk end=7814037168)
file_pread(8,2,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,1,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,2,buffer,3519070208(486401/86/22)) lseek err Invalid argument
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (4000 GB / 3726 GiB) seems too small! (< 7334 GB / 6830 GiB)
The following partition can't be recovered:
     FAT16 >32M           715909 245 42 891696 184 59 2824014330

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Partition table type (auto): Intel
Disk /dev/sde - 4000 GB / 3726 GiB - ST4000LM 024-2AN17V
Partition table type: Intel

Analyse Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
No partition is bootable

search_part()
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
file_pread(8,2,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,1,buffer,3519070207(486401/86/21)) lseek err Invalid argument
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
No partition is bootable
Backup partition structure
partition_save

search_part()
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
file_pread(8,2,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,1,buffer,3519070207(486401/86/21)) lseek err Invalid argument
Search for partition aborted

Results

interface_write()
 
No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Analyse Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
Invalid NTFS or exFAT boot
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
No partition is bootable
Backup partition structure
partition_save

search_part()
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
BAD_RS LBA=2911158969 12897716
file_pread(8,3,buffer,2911158969(715909/245/42)) lseek err Invalid argument
file_pread(8,1,buffer,2911158969(715909/245/42)) lseek err Invalid argument
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
     FAT16 >32M           715909 245 42 891696 184 59 2824014330
This partition ends after the disk limits. (start=11501093561, size=2824014330, end=14325107890, disk end=7814037168)
file_pread(8,2,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,1,buffer,3519070207(486401/86/21)) lseek err Invalid argument
file_pread(8,2,buffer,3519070208(486401/86/22)) lseek err Invalid argument
file_pread(8,14,buffer,3519070210(486401/86/24)) lseek err Invalid argument
file_pread(8,3,buffer,3519070224(486401/86/38)) lseek err Invalid argument
file_pread(8,3,buffer,3519070271(486401/87/22)) lseek err Invalid argument
file_pread(8,8,buffer,3519070287(486401/87/38)) lseek err Invalid argument
file_pread(8,11,buffer,3519070334(486401/88/22)) lseek err Invalid argument
file_pread(8,2,buffer,3519072256(486401/118/54)) lseek err Invalid argument
Disk /dev/sde - 4000 GB / 3726 GiB - CHS 486401 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (4000 GB / 3726 GiB) seems too small! (< 7334 GB / 6830 GiB)
The following partition can't be recovered:
     FAT16 >32M           715909 245 42 891696 184 59 2824014330

Results

interface_write()
 
No partition found or selected for recovery
Failed to startup volume: Invalid argument.
Failed to startup volume: Invalid argument.
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
Not an exFAT boot sector.

 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
filesystem size           1 1
sectors_per_cluster       0 0
mft_lcn                   0 0
mftmirr_lcn               0 0
clusters_per_mft_record   0 85
clusters_per_index_record 0 85
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 457
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         0
ntfs_find_mft: mft_record_size     4096

mft at 6291897
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn             786432
ntfs_find_mft: mftmirr_lcn         0
ntfs_find_mft: mft_record_size     4096

Failed to rebuild NTFS boot sector.

ntfs_boot_sector
 1 P HPFS - NTFS              0   1  1 60799 254 63  976751937
filesystem size           1 1
sectors_per_cluster       0 0
mft_lcn                   0 0
mftmirr_lcn               0 0
clusters_per_mft_record   0 85
clusters_per_index_record 0 85
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Top
recuperation
Posts: 3036
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Boot sector and backup boot sector bad

#2 Post by recuperation »

With a sector size of 512 bytes - as outlined in the log - selecting GPT is mandatory for a 4TB drive. Please rerun Testdisk with this settings.
The files I'm trying to recover are from niche scientific software so I don't think PhotoRec would work, but please correct me if I'm wrong.
You can run Photorec to evaluate the supported file formats. "niche scientific software" is not specific.
Top
Starfish
Posts: 7
Joined: 10 Mar 2021, 00:07

Re: Boot sector and backup boot sector bad

#3 Post by Starfish »

recuperation wrote: 10 Mar 2021, 12:29 With a sector size of 512 bytes - as outlined in the log - selecting GPT is mandatory for a 4TB drive. Please rerun Testdisk with this settings.
The files I'm trying to recover are from niche scientific software so I don't think PhotoRec would work, but please correct me if I'm wrong.
You can run Photorec to evaluate the supported file formats. "niche scientific software" is not specific.
Really appreciate the quick reply, thanks a lot recuperation. After selecting GPT I am able to list my files and copy. I think I can recover everything like this.

For anyone experiencing similar issues:
  • My partition table type was automatically identified as Intel - I originally went with this and ran into the issues described earlier in the thread
  • Changing to type GPT worked immediately
Top
Locked

Return to “Partition Recovery”