I'd love some tips on where to go from here. My drive is a fairly new Seagate 1tb drive, but for whatever reason it has completely lost its way. The drive has a number of music files, legally purchased from back when that was a thing, and some jpeg images of album art. I can't remember if the drive was formatted NTFS or ext3, but I'm fairly sure that it was all one partition.
I did both a quick and deep search with testdisk, and even tried to "force" a partition onto the drive; I can't seem to get partitions to stick. Then I ran Photorec on the default settings on the drive and nothing was recovered.
Testdisk.log (truncated to remove irrelevant drives):
Code: Select all
Mon Mar 21 11:59:00 2022
Command line: TestDisk
TestDisk 7.2-WIP, Data Recovery Utility, February 2022
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
Warning: can't get size for \\.\I:
Hard disk list
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST1000LM048-2E7172, S/N:ZDELKFKX, FW:0001
Partition table type defaults to Intel
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - ST1000LM048-2E7172
Partition table type: Intel
Analyse Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63
Current partition structure:
Partition sector doesn't have the endmark 0xAA55
search_part()
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63
Results
interface_write()
No partition found or selected for recovery
search_part()
Disk \\.\PhysicalDrive0 - 1000 GB / 931 GiB - CHS 121601 255 63
Results
interface_write()
No partition found or selected for recovery
Change partition type:
HPFS - NTFS 0 0 1 121600 254 63 1953520065
Change partition type:
NTFS 0 0 1 121600 254 63 1953520065
interface_write()
No partition found or selected for recovery
interface_write()
No partition found or selected for recovery
interface_write()
No partition found or selected for recovery
Change partition type:
HPFS - NTFS 0 0 1 121600 254 63 1953520065
Change partition type:
Unknown 0 0 1 121600 254 63 1953520065
interface_write()
No partition found or selected for recovery
Change partition type:
HPFS - NTFS 0 0 1 121600 254 63 1953520065
Change partition type:
ext3 0 0 1 121600 254 63 1953520065
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
Store new MBR code
write_all_log_i386: starting...
No extended partition
Interface Advanced
Interface Advanced
TestDisk exited normally.
Code: Select all
<dfxml xmloutputversion="1.0">
<metadata xmlns="http://www.forensicswiki.org/wiki/Category:Digital_Forensics_XML" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:dc="http://purl.org/dc/elements/1.1/">
<dc:type>Carve Report</dc:type>
</metadata>
<creator>
<package>PhotoRec</package>
<version>7.2-WIP</version>
<build_environment>
<compiler>GCC 11.2, Cygwin32 3001.4</compiler>
<library name="libext2fs" version="1.45.3"/>
<library name="libewf" version="20140608"/>
<library name="libjpeg" version="libjpeg-turbo-1.5.3"/>
<library name="libntfs" version="10:0:0"/>
<library name="zlib" version="1.2.11"/>
</build_environment>
<execution_environment>
<os_sysname>Windows</os_sysname>
<os_release>Windows 8 (9200)</os_release>
<os_version>Windows 8 (9200)</os_version>
<host>WTM-Dsktp</host>
<arch>i686</arch>
<uid>197611</uid>
<start_time>2022-03-21T20:01:24-0600</start_time>
</execution_environment>
</creator>
<source>
<image_filename>\\.\PhysicalDrive0</image_filename>
<sectorsize>512</sectorsize>
<device_model>ST1000LM048-2E7172</device_model>
<image_size>1000204886016</image_size>
<volume>
<byte_runs>
<byte_run offset="0" img_offset="0" len="1000204886016"/>
</byte_runs>
</volume>
</source>
<configuration> </configuration>
</dfxml>