Recovery of 3 TB WD in RAW

[tblack]

Hello,

I have been working on this drive for about a week in between work and having little success. I have recovered a small portion of the files I need using GetDataBack. Running Testdisk 6.14 in windows was taking an extraordinary amount of time (more than 48 hours).

The drive should be NTFS with GPT with a single partition. I have the entire drive cloned using ddrescue from a LiveCD. I also starting running Testdisk 6.13 from a LiveCD. It works great from the LiveCDquick scan takes about 4 hours and deepscan a bit longer. The only problem is either I am dumb and cannot track down where the testdisk.log is going or one is not being created. I have attached the log from windows the last time but it did not complete.

I have a few questions:
How do I specify a path to put the testdisk.log if using a livecd? Ideally just in the root of my OS C:.

When running TestDisk in deeper scan it found multiple partitions. The top partition listed seems to be the one it was specified as D MS Data and the full size of the disk. Using list files it said disk appears to be damaged and it could not access. Where should I be going from here? Probably need the log to answer that I am guessing.

Is there a way to get TestDisk to run at the same rate in Windows vs using the LiveCD?

Thank you in advance for your assistance. I really need to recover the data if at all possible.

-----------------------------------


Fri Mar 21 17:43:20 2014
Command line: TestDisk

TestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=120031543296
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=244881408
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30EZRX-00DC0B0, S/N:2020202057202d44435731433154333238383639, FW:80.00A80
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30EZRX-00SPEB0, S/N:2020202057202d44435734433045393931383833, FW:80.00A80
Disk /dev/sdc - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512 - KINGSTON SVP200S3120G, S/N:3035323042363237363230304432433920202020, FW:501ABBF0
Drive G: - 244 MB / 233 MiB - CHS 58 64 32, sector size=2048 - ATAPI iHAS324 Y, FW:BL1W

Partition table type (auto): EFI GPT
Disk /dev/sdb - 3000 GB / 2794 GiB - WDC WD30EZRX-00SPEB0
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
check_part_gpt failed for partition
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
New options :
Dump : No
Align partition: Yes
Expert mode : No

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
check_part_gpt failed for partition
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]

Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
check_part_gpt failed for partition
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]

search_part()
Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
Search for partition aborted

Results

interface_write()

No partition found or selected for recovery
simulate write!

Analyse Disk /dev/sdb - 3000 GB / 2794 GiB - CHS 364801 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 5860533167)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
check_part_gpt failed for partition
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition]