(Edit: images are posted as links, hopefully this works better)
Hello, I'm hoping I can recover my external drive which has files important to me. Any help is appreciated.
OS: Debian 13 - Gnome
Hard Drive trying to recover: External USB HDD - 4TB WD MyBook - NTFS
What happened: The drive was always unmounted and safely removed before PC shutdowns or being disconnected. One day the pc was shutdown and the next day after boot the hard drive was inaccessible. The hard drive has over 3TB used. The drive still shows up it just can't be opened and Gnome file manager gives this message: https://ibb.co/jvvgYDYt
The irony is just purchased a hard drive to back it up and this happened before I could. I'm still hoping that I can, worst case there's space for a Photorec recovery. This "back up" hard drive is formatted as EXT4 and is being used but still has enough space to back up the failed hard drive. I worked from the failed hard drive because of how large the image file would be.
Here is the output from fdisk: https://ibb.co/dwH2ywpP
This is Quick Search in Testdisk:
https://ibb.co/LztrcKk9
https://ibb.co/1Jd89LgH
Next I tried to list the files and started a Deep Search:
https://ibb.co/Q31Wy21z
https://ibb.co/xqQF5QgW
https://ibb.co/ynDxCmCn
https://ibb.co/MDWpsynP
https://ibb.co/27MwpWbc
https://ibb.co/G3FR3wPs
https://ibb.co/tpLJcNr7
https://ibb.co/3xgTw3L
https://ibb.co/dscjCWyw
No files were listed:
https://ibb.co/7Jh2w6KV
Next I tried Rebuild Boot Sector:
https://ibb.co/7Jjp38gD
https://ibb.co/PzQNLVJx
https://ibb.co/1YgVfsZG
https://ibb.co/tpxwY2jD
Then tried to list the files again:
https://ibb.co/JwzHjmW3
Tried to change geometry:
https://ibb.co/Kc13k53N
https://ibb.co/N6cXY54Q
https://ibb.co/23b0tPh2
https://ibb.co/Jj6BN7KV
https://ibb.co/qLB1DdqN
Next another Deep Search and List Files:
https://ibb.co/FLfVphbv
https://ibb.co/35F1WJDw
https://ibb.co/6RC0kLjN
https://ibb.co/svgBLfTs
https://ibb.co/mCTftzGq
https://ibb.co/qMwF94BJ
https://ibb.co/5xGjwrQ3
https://ibb.co/2zh0KyX
After that I tried to repair the drive with fsck, but apparently it needs a symlink and/or dependencies to download?:
https://ibb.co/DHdmhBxR
Then I tried to rebuild the boot sector again:
https://ibb.co/My20tTNw
https://ibb.co/0yjLb94M
https://ibb.co/Z6pkzXhv
https://ibb.co/9mjP4ZsD
https://ibb.co/27Lgb13R
https://ibb.co/B2QN3VvY
https://ibb.co/Z6pkzXhv
I decided to stop here and ask for help before I accidentally ruin something.
https://ibb.co/MydTymwq
Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
Last edited by crashtech on 06 Mar 2026, 23:58, edited 1 time in total.
-
recuperation
- Posts: 3129
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
Quick answer: I don't know. This question cannot be answered.
You linked a lot of web locations instead of pictures. They are not show.
Please modify your posting and link the images files directly.
You linked a lot of web locations instead of pictures. They are not show.
Please modify your posting and link the images files directly.
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
The images are now links, hopefully this is better.
-
recuperation
- Posts: 3129
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
Could you post your TestDisk log file?
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
Here is the testdisk log file:
Code: Select all
Mon Mar 2 16:04:56 2026
Command line: TestDisk
TestDisk 7.2, Data Recovery Utility, February 2024
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 6.12.73+deb13-amd64 (#1 SMP PREEMPT_DYNAMIC Debian 6.12.73-1 (2026-02-17)) x86_64
Compiler: GCC 14.2
ext2fs lib: 1.47.2, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.5
User is not root!
Hard disk list
TestDisk exited normally.
Using locale 'en_US.UTF-8'.
Mon Mar 2 16:05:05 2026
Command line: TestDisk /debug
TestDisk 7.2, Data Recovery Utility, February 2024
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Linux, kernel 6.12.73+deb13-amd64 (#1 SMP PREEMPT_DYNAMIC Debian 6.12.73-1 (2026-02-17)) x86_64
Compiler: GCC 14.2
ext2fs lib: 1.47.2, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.5
/dev/sdb: LBA, LBA48, DCO support
/dev/sdb: size 976773168 sectors
/dev/sdb: user_max 976773168 sectors
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - HP Secure Hard D, FW:YXM7
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 476926 64 32, sector size=4096 - My Book 1230, FW:1065
Partition table type (auto): Intel
Disk /dev/sdc - 4000 GB / 3725 GiB - My Book 1230
Partition table type: Intel
Analyse Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 476926 64 32
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=256 132
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
get_geometry_from_list_part_aux head=8 nbr=2
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
Warning: Bad ending sector (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 476926 64 32
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
get_geometry_from_list_part_aux head=8 nbr=2
Warning: the current number of heads per cylinder is 64 but the correct value may be 8.
Results
* HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 7813967872 linear /dev/sdc 2048" | dmsetup create test0
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
* HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 * HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
search_part()
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 476926 64 32
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
BAD_RS LBA=1901241090 507239
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 928340 24 3 2680041 53 13 3587484586
This partition ends after the disk limits. (start=1901241090, size=3587484586, end=5488725676, disk end=976746240)
block_group_nr 5
recover_EXT2: "e2fsck -b 40961 -B 1024 device" may be needed
recover_EXT2: s_block_group_nr=5/39, s_mnt_count=4/4294967295, s_blocks_per_group=8192, s_inodes_per_group=1992
recover_EXT2: s_blocksize=1024
recover_EXT2: s_blocks_count 319936
recover_EXT2: part_size 79984
Filesystem created: Sun Sep 9 08:27:22 2018
Last mount time: Sun Sep 9 09:52:17 2018
Linux 271221 15 32 271260 19 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
BAD_RS LBA=5035191068 1399259
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 2458589 24 29 3443134 8 10 2016347629
This partition ends after the disk limits. (start=5035191068, size=2016347629, end=7051538697, disk end=976746240)
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 476926 64 32
Check the hard disk size: HD jumper settings, BIOS detection...
The hard disk (4000 GB / 3725 GiB) seems too small! (< 28 TB / 26 TiB)
The following partitions can't be recovered:
FAT32 LBA 928340 24 3 2680041 53 13 3587484586
FAT16 <32M 2458589 24 29 3443134 8 10 2016347629
get_geometry_from_list_part_aux head=8 nbr=2
Warning: the current number of heads per cylinder is 64 but the correct value may be 8.
Results
HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Linux 271221 15 32 271260 19 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 7813967872 linear /dev/sdc 2048" | dmsetup create test0
echo "0 639874 linear /dev/sdc 4443688958" | dmsetup create test1
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
Linux 271221 15 32 271260 19 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
Can't open filesystem. Filesystem seems damaged.
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
Can't open backup.log file: No such file or directory
interface_load
interface_write()
No partition found or selected for recovery
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=256 132
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
get_geometry_from_list_part_aux head=8 nbr=2
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
ntfs_boot_sector
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Invalid location of MFT or MFTMirr.
Invalid location of MFT or MFTMirr.
rebuild_NTFS_BS
mft at 488372991
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: mft_record_size 4096
mft at 786432
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: sectors_per_cluster 1
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: mft_record_size 4096 bytes
ntfs_find_mft: index_block_size 4096
New / Current boot sector
filesystem size 976745984 976745984
sectors_per_cluster 1 1
mft_lcn 786432 786432
mftmirr_lcn 0 488372991
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
Extrapolated boot sector and current boot sector are different.
filesystem size 976745984 976745984
sectors_per_cluster 1 1
mft_lcn 786432 786432
mftmirr_lcn 0 488372991
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
Not an exFAT boot sector.
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
filesystem size 976745984 976745984
sectors_per_cluster 1 1
mft_lcn 786432 786432
mftmirr_lcn 0 488372991
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
ntfs_boot_sector
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 64 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=256 132
NTFS at 0/8/1
heads/cylinder 255 (NTFS) != 64 (HD)
sect/track 63 (NTFS) != 32 (HD)
get_geometry_from_list_part_aux head=8 nbr=2
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
1 P HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
New geometry
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32 sector_size=4096
Analyse Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=256 132
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
Warning: Bad ending sector (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
Results
* HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 7813967872 linear /dev/sdc 2048" | dmsetup create test0
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
* HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
interface_write()
1 * HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Analyse Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=256 132
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
Current partition structure:
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
Warning: Bad ending sector (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
Results
* HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 7813967872 linear /dev/sdc 2048" | dmsetup create test0
interface_write()
1 * HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
search_part()
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
BAD_RS LBA=558903295 199705
check_part_i386 failed for partition type 01
FAT12 2183215 7 32 4146332 1 30 502557758
This partition ends after the disk limits. (start=558903295, size=502557758, end=1061461053, disk end=976746240)
BAD_RS LBA=3907381373 65326
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 15263208 3 30 18923946 1 3 937148837
This partition ends after the disk limits. (start=3907381373, size=937148837, end=4844530210, disk end=976746240)
BAD_RS LBA=414142931 142957
check_part_i386 failed for partition type 06
FAT16 >32M 1617745 6 20 4524180 4 29 744047305
This partition ends after the disk limits. (start=414142931, size=744047305, end=1158190236, disk end=976746240)
BAD_RS LBA=1901241090 64615
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 7426723 0 3 21440334 5 13 3587484586
This partition ends after the disk limits. (start=1901241090, size=3587484586, end=5488725676, disk end=976746240)
BAD_RS LBA=530697536 75956
check_part_i386 failed for partition type 0C
FAT32 LBA 2073037 2 1 14414291 0 24 3159360983
This partition ends after the disk limits. (start=530697536, size=3159360983, end=3690058519, disk end=976746240)
BAD_RS LBA=4066788187 101653
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 06
FAT16 >32M 15885891 2 28 17324670 4 20 368327480
This partition ends after the disk limits. (start=4066788187, size=368327480, end=4435115667, disk end=976746240)
block_group_nr 5
recover_EXT2: "e2fsck -b 40961 -B 1024 device" may be needed
recover_EXT2: s_block_group_nr=5/39, s_mnt_count=4/4294967295, s_blocks_per_group=8192, s_inodes_per_group=1992
recover_EXT2: s_blocksize=1024
recover_EXT2: s_blocks_count 319936
recover_EXT2: part_size 79984
Filesystem created: Sun Sep 9 08:27:22 2018
Last mount time: Sun Sep 9 09:52:17 2018
Linux 2169769 7 32 2170082 3 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
block_group_nr 5
recover_EXT2: "e2fsck -b 40961 -B 1024 device" may be needed
recover_EXT2: s_block_group_nr=5/39, s_mnt_count=4/4294967295, s_blocks_per_group=8192, s_inodes_per_group=1992
recover_EXT2: s_blocksize=1024
recover_EXT2: s_blocks_count 319936
recover_EXT2: part_size 79984
Filesystem created: Sun Sep 9 08:27:22 2018
Last mount time: Sun Sep 9 09:52:17 2018
Linux 2169770 0 1 2170082 3 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
recover_EXT2: s_block_group_nr=0/39, s_mnt_count=66/4294967295, s_blocks_per_group=8192, s_inodes_per_group=1992
recover_EXT2: s_blocksize=1024
recover_EXT2: s_blocks_count 319936
recover_EXT2: part_size 79984
Filesystem created: Sun Sep 9 08:27:22 2018
Last mount time: Sat Sep 1 07:56:35 2018
Linux 2172259 1 1 2172571 4 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Recover, 327 MB / 312 MiB
BAD_RS LBA=625956416 32
check_part_i386 failed for partition type 0E
FAT16 LBA 2445142 2 1 2460894 0 31 4032479
BAD_RS LBA=2406796979 43756
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 9401550 5 20 19954997 3 9 2701682358
This partition ends after the disk limits. (start=2406796979, size=2701682358, end=5108479336, disk end=976746240)
BAD_RS LBA=3916939498 165493
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 15300544 7 11 29108425 0 23 3534817324
This partition ends after the disk limits. (start=3916939498, size=3534817324, end=7451756822, disk end=976746240)
BAD_RS LBA=2410531324 230771
check_part_i386 failed for partition type 07
HPFS - NTFS 9416137 7 29 14736086 3 15 1361906802
This partition ends after the disk limits. (start=2410531324, size=1361906802, end=3772438126, disk end=976746240)
BAD_RS LBA=2403092623 19501
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 0C
FAT32 LBA 9387080 4 16 10396743 5 27 258473771
This partition ends after the disk limits. (start=2403092623, size=258473771, end=2661566394, disk end=976746240)
BAD_RS LBA=5035191068 180699
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 04
FAT16 <32M 19668715 0 29 27545073 0 10 2016347629
This partition ends after the disk limits. (start=5035191068, size=2016347629, end=7051538697, disk end=976746240)
BAD_RS LBA=1470527848 46351
check_FAT: can't read FAT boot sector
check_part_i386 failed for partition type 01
FAT12 5744249 3 9 15806053 7 30 2575821973
This partition ends after the disk limits. (start=1470527848, size=2575821973, end=4046349821, disk end=976746240)
NTFS at 3815414/7/32
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS found using backup sector, blocksize=4096, 4000 GB / 3725 GiB
Disk /dev/sdc - 4000 GB / 3725 GiB - CHS 3815415 8 32
Check the hard disk size: HD jumper settings, BIOS detection...
The hard disk (4000 GB / 3725 GiB) seems too small! (< 30 TB / 27 TiB)
The following partitions can't be recovered:
FAT16 >32M 1617745 6 20 4524180 4 29 744047305
FAT32 LBA 2073037 2 1 14414291 0 24 3159360983
FAT12 2183215 7 32 4146332 1 30 502557758
FAT12 5744249 3 9 15806053 7 30 2575821973
FAT32 LBA 7426723 0 3 21440334 5 13 3587484586
FAT32 LBA 9387080 4 16 10396743 5 27 258473771
FAT32 LBA 9401550 5 20 19954997 3 9 2701682358
HPFS - NTFS 9416137 7 29 14736086 3 15 1361906802
FAT32 LBA 15263208 3 30 18923946 1 3 937148837
FAT16 <32M 15300544 7 11 29108425 0 23 3534817324
FAT16 >32M 15885891 2 28 17324670 4 20 368327480
FAT16 <32M 19668715 0 29 27545073 0 10 2016347629
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=1
Results
HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Linux 2169769 7 32 2170082 3 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
Linux 2169770 0 1 2170082 7 32 80128
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 328 MB / 313 MiB
Linux 2172259 1 1 2172571 7 32 80096
ext4 blocksize=1024 Large_file Sparse_SB Recover, 328 MB / 312 MiB
FAT16 LBA 2445142 2 1 2460894 0 32 4032480
Hint for advanced users: dmsetup may be used if you prefer to avoid rewriting the partition table for the moment:
echo "0 7813967872 linear /dev/sdc 2048" | dmsetup create test0
echo "0 639874 linear /dev/sdc 4443688958" | dmsetup create test1
echo "0 641024 linear /dev/sdc 4443688960" | dmsetup create test2
echo "0 640768 linear /dev/sdc 4448786688" | dmsetup create test3
echo "0 32259840 linear /dev/sdc 5007651328" | dmsetup create test4
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
Linux 2169769 7 32 2170082 3 16 79984
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 327 MB / 312 MiB
Can't open filesystem. Filesystem seems damaged.
dir_partition inode=2
Linux 2169770 0 1 2170082 7 32 80128
ext4 blocksize=1024 Large_file Sparse_SB Backup_SB, 328 MB / 313 MiB
ext2fs_dir_iterate failed with error 2133571354.
Directory /
dir_partition inode=2
Linux 2172259 1 1 2172571 7 32 80096
ext4 blocksize=1024 Large_file Sparse_SB Recover, 328 MB / 312 MiB
ext2fs_dir_iterate failed with error 2133571354.
Directory /
dir_partition inode=0
FAT16 LBA 2445142 2 1 2460894 0 32 4032480
FAT: Can't list files, bad cluster size.
Directory /
interface_write()
No partition found or selected for recovery
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=256 132
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
ntfs_boot_sector
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
$MFTMirr does not match $MFT (record 3).
$MFTMirr does not match $MFT (record 3).
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
ntfs_boot_sector
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Invalid location of MFT or MFTMirr.
Invalid location of MFT or MFTMirr.
rebuild_NTFS_BS
mft at 488372991
read_mft_info failed
ntfs_find_mft: sectors_per_cluster invalid
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: mft_record_size 4096
mft at 786432
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: sectors_per_cluster 1
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 0
ntfs_find_mft: mft_record_size 4096 bytes
ntfs_find_mft: index_block_size 4096
New / Current boot sector
filesystem size 976745984 976745984
sectors_per_cluster 1 1
mft_lcn 786432 786432
mftmirr_lcn 0 488372991
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
Extrapolated boot sector and current boot sector are different.
filesystem size 976745984 976745984
sectors_per_cluster 1 1
mft_lcn 786432 786432
mftmirr_lcn 0 488372991
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
Not an exFAT boot sector.
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
Can't open filesystem. Filesystem seems damaged.
filesystem size 976745984 976745984
sectors_per_cluster 1 1
mft_lcn 786432 786432
mftmirr_lcn 0 488372991
clusters_per_mft_record 1 1
clusters_per_index_record 1 1
ntfs_boot_sector
1 P HPFS - NTFS 1 0 1 3815414 7 32 976745984 [My Book]
NTFS, blocksize=4096, 4000 GB / 3725 GiB
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
NTFS at 1/0/1
heads/cylinder 255 (NTFS) != 8 (HD)
sect/track 63 (NTFS) != 32 (HD)
filesystem size 976745984
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 488372991
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Backup boot sector
Warning: number of heads/cylinder mismatches 255 (NTFS) != 8 (HD)
Warning: number of sectors per track mismatches 63 (NTFS) != 32 (HD)
Status: OK
Sectors are identical.
A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
TestDisk exited normally.-
recuperation
- Posts: 3129
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
TestDisk cannot open the partition located at 1/0/1.
There is a least one issue with the location of the MFT as the location in the NTFS boot sector differs from the NTFS mirror.
What you could try out is to clone your disk using ddrescue as described in the manual.
Keep in mind that your disk has a sector size of 4096 bytes . This is an important information that may be needed later on.
The partition data (not the content) of the found partition
* HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
looks plausible but the partition contains at least one error according to the log file:
"$MFTMirr does not match $MFT (record 3)."
You could then try out if overwriting the current information about the MFT location from the information in the so-called MFT mirror heals the problem.
Select your partition and go to Advanced/Boot/Repair MFT.
In order to changes taking effect you need to be root user - you did not operate TestDisk in root mode so far.
You could then try out to look into the partition(s) found again.
I don't know if TestDisk needs disconnecting and reconnecting the failing external disk or even a restart after this repair. I would let TestDisk do the repair, exit TestDisk, disconnect the disk, reconnect and start TestDisk again.
When creating a new log file it should not contain the line
"$MFTMirr does not match $MFT (record 3)." anymore.
Then try TestDisk again using the p-key ("list files").
If that fails use commercial recovery software and try out those products.
If they fail, use PhotoRec as the last line of defense.
There is a least one issue with the location of the MFT as the location in the NTFS boot sector differs from the NTFS mirror.
What you could try out is to clone your disk using ddrescue as described in the manual.
Keep in mind that your disk has a sector size of 4096 bytes . This is an important information that may be needed later on.
The partition data (not the content) of the found partition
* HPFS - NTFS 0 8 1 476926 55 32 976745984 [My Book]
looks plausible but the partition contains at least one error according to the log file:
"$MFTMirr does not match $MFT (record 3)."
You could then try out if overwriting the current information about the MFT location from the information in the so-called MFT mirror heals the problem.
Select your partition and go to Advanced/Boot/Repair MFT.
In order to changes taking effect you need to be root user - you did not operate TestDisk in root mode so far.
You could then try out to look into the partition(s) found again.
I don't know if TestDisk needs disconnecting and reconnecting the failing external disk or even a restart after this repair. I would let TestDisk do the repair, exit TestDisk, disconnect the disk, reconnect and start TestDisk again.
When creating a new log file it should not contain the line
"$MFTMirr does not match $MFT (record 3)." anymore.
Then try TestDisk again using the p-key ("list files").
If that fails use commercial recovery software and try out those products.
If they fail, use PhotoRec as the last line of defense.
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
I appreciate the help so far, it will take me a while to try this so I have a few questions before I start this process.
If I remember correctly I started TestDisk as:"testdisk" but then with sudo as prompted by TestDisk, I think it shows in the log. Do I need to run "su" first and then run "testdisk"?
Do you think it's worth trying to repair either the clone or actual drive with fsck?
Should I analyze the disk again or go straight to trying to repair MFT?
After repairing MFT and I reconnect and start TestDisk again do I analyze the disk?
After the MFT repair I'm assuming that if the files are listed then I restore the partition or filesystem with TestDisk?
This might too far away but assuming that the MFT repair works on the clone should I backup the clone or would it better to apply the repair to the drive and backup it up? I would like to eventually format that drive to EXT4 if that helps.
Any recommendations on what commercial software to use?
If I remember correctly I started TestDisk as:"testdisk" but then with sudo as prompted by TestDisk, I think it shows in the log. Do I need to run "su" first and then run "testdisk"?
Do you think it's worth trying to repair either the clone or actual drive with fsck?
Should I analyze the disk again or go straight to trying to repair MFT?
After repairing MFT and I reconnect and start TestDisk again do I analyze the disk?
After the MFT repair I'm assuming that if the files are listed then I restore the partition or filesystem with TestDisk?
This might too far away but assuming that the MFT repair works on the clone should I backup the clone or would it better to apply the repair to the drive and backup it up? I would like to eventually format that drive to EXT4 if that helps.
Any recommendations on what commercial software to use?
-
recuperation
- Posts: 3129
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Can My Partition/Hard Drive Be Recovered? "Filesystem seems damaged."
Use "sudo" as its always available.crashtech wrote: Yesterday, 04:19 I appreciate the help so far, it will take me a while to try this so I have a few questions before I start this process.
If I remember correctly I started TestDisk as:"testdisk" but then with sudo as prompted by TestDisk, I think it shows in the log. Do I need to run "su" first and then run "testdisk"?
Just follow the advice already given.
Do you think it's worth trying to repair either the clone or actual drive with fsck?
Should I analyze the disk again or go straight to trying to repair MFT?
You need to try out if TestDisk can list files within the currently broken partition then.
After repairing MFT and I reconnect and start TestDisk again do I analyze the disk?
Read here to learn how to reach that point:
https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step
There is nothing to restore. You are trying to repair the content of an already existing partition that contained a NTFS file system.
After the MFT repair I'm assuming that if the files are listed then I restore the partition or filesystem with TestDisk?
I don't know what you mean by "restore".
See what the MFT repair gives. I don't want to answer lots of questions ahead.
This might too far away but assuming that the MFT repair works on the clone should I backup the clone or would it better to apply the repair to the drive and backup it up? I would like to eventually format that drive to EXT4 if that helps.
Any recommendations on what commercial software to use?