Image Creation .dd file CHKDSK capable?

Using TestDisk to repair the filesystem
Message
Author
wyckd
Posts: 4
Joined: 04 May 2012, 23:40

Image Creation .dd file CHKDSK capable?

#1 Postby wyckd » 05 May 2012, 00:21

i have an exFAT external (LaCiE) that recently became "dirty" after TuneUp Utilities tried to chkdsk and defrag it. I didn't realize until it was too late that TuneUp doesn't know how to handle FAT64....

anyway, there is 66GB free of 931GB, and i cannot complete a CHKDSK /r due to insufficient space... i also cannot delete any files off of it...using a tool called Unlocker doesn't help.

so i was wondering, if i were to plug this drive into a Mac, would I be able to delete files to free up space? is this advisable? if not...

if i created a .dd file using TestDisk, would I be able to recover sectors on that image and restore it onto the drive? i plan to format the drive as NTFS and recover the image onto it once cured of its bad sectors. basically, can i run a chkdsk on the image file?

also, the image file seems to result in a 976gb file...i have other spare drive (1TB) with 931gb usable space... what do i do!? i'm on a boat in the middle of the sea and i need the data recovered soon!!

Sponsored links

User avatar
Fiona
Posts: 2839
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Image Creation .dd file CHKDSK capable?

#2 Postby Fiona » 05 May 2012, 12:39

I don't recommend to delete files from a file system using another OS.
You can use Testdisk to diagnose it.
ExFAT has partition type NTFS but the boot sector is different.
It's an ExFAT boot sector.
So I'd need Infos from Analyse and Quick Search first.
Also, you can copy and paste the content from your testdisk.log.
If your partition is listed in Quick Search as a result, pleas mark it and press p to list your data.

Fiona

wyckd
Posts: 4
Joined: 04 May 2012, 23:40

Re: Image Creation .dd file CHKDSK capable?

#3 Postby wyckd » 07 May 2012, 05:05

i am not sure if i understood your instruction 100%...

Image

after Quick Search, at this screen...did you want me to Write partition structure to disk?

this is data from testdisk.log
the drive i am trying to recover is F:\

Code: Select all


Sun May  6 22:56:14 2012
Command line: TestDisk

TestDisk 6.14-WIP, Data Recovery Utility, April 2012
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.6, Cygwin 1007.9
Compilation date: 2012-04-21T15:07:46
ext2fs lib: 1.41.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20100226
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=8068792320
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=16008609792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=2044723200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=8068792320
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=16008609792
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=2044723200
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=299095855616
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000209449984
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=16006362624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=2044706816
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\R:)=8064598016
filewin32_getfilesize(\\.\S:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\S:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\S:
Hard disk list
Disk /dev/sda - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512 - ST932042 3AS, S/N:V53HM3TK, FW:0003
Disk /dev/sdb - 8068 MB / 7695 MiB - CHS 980 255 63, sector size=512 - Multiple Card  Reader, FW:1.00
Disk /dev/sdc - 16 GB / 14 GiB - CHS 1946 255 63, sector size=512 - SanDisk Cruzer, FW:1.10
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 953869 64 32, sector size=512 - SAMSUNG HN-M101MBB, FW:2AR1
Disk /dev/sde - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - TOSHIBA MK1059GSM, FW:GL00
Disk /dev/sdf - 2044 MB / 1950 MiB - CHS 248 255 63, sector size=512 - CBM Flash Disk, FW:5.00

Partition table type (auto): Intel
Disk /dev/sdd - 1000 GB / 931 GiB - SAMSUNG HN-M101MBB
Partition table type: Intel

Analyse Disk /dev/sdd - 1000 GB / 931 GiB - CHS 953869 64 32
Geometry from i386 MBR: head=255 sector=63
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
Current partition structure:
 1 P HPFS - NTFS              1   0  1 953867  63 32 1953519616

Warning: Bad ending sector (CHS and LBA don't match)
No partition is bootable
search_vista_part: 1

search_part()
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 953869 64 32
     HPFS - NTFS              1   0  1 953867  63 32 1953519616
     exFAT, 1000 GB / 931 GiB
file_pread(7,2,buffer,1953525760(953870/0/1)) lseek err Invalid argument
file_pread(7,1,buffer,1953525760(953870/0/1)) lseek err Invalid argument
file_pread(7,2,buffer,1953525792(953870/1/1)) lseek err Invalid argument
file_pread(7,1,buffer,1953525792(953870/1/1)) lseek err Invalid argument
file_pread(7,8,buffer,1953525248(953869/48/1)) lseek err Invalid argument
file_pread(7,1,buffer,1953525248(953869/48/1)) lseek err Invalid argument
file_pread(7,8,buffer,1953525376(953869/52/1)) lseek err Invalid argument
file_pread(7,8,buffer,1953525504(953869/56/1)) lseek err Invalid argument
file_pread(7,8,buffer,1953525632(953869/60/1)) lseek err Invalid argument
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2

Results
   * HPFS - NTFS              1   0  1 953867  63 32 1953519616
     exFAT, 1000 GB / 931 GiB

interface_write()
 1 * HPFS - NTFS              1   0  1 953867  63 32 1953519616

User avatar
Fiona
Posts: 2839
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Image Creation .dd file CHKDSK capable?

#4 Postby Fiona » 07 May 2012, 15:05

Currently there is no reason to write your partition to your partition table, because its already in your partition table available.
Geometry of your disk doesn't look as good.
In Quick Search if your partition is green colored and you press p on your keyboard, did you see your data or an error message?

Fiona

wyckd
Posts: 4
Joined: 04 May 2012, 23:40

Re: Image Creation .dd file CHKDSK capable?

#5 Postby wyckd » 08 May 2012, 02:36

it displays a list of my files.

i can still access my files through windows explorer.

some of these files are damaged, for example...video files that should be 350mb, some are displaying an incorrect file size. they either cannot be played by a media player, or large portions of the video are missing during playback.

i just want to be able to repair these parts...replacing these files will be will a terrible pain, so i would much rather try to recover/repair them.

User avatar
Fiona
Posts: 2839
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Image Creation .dd file CHKDSK capable?

#6 Postby Fiona » 08 May 2012, 07:25

If a file system is corrupted, often TestDidsk can copy files to another intact disk or partition.
If you list files in TestDisk, at the bottom of the screen you'll find the commands.
You can have a try to copy some files and test them (spot tests).
Standard path is your testdisk folder.
If you want to change directories (path);
To open a folder, use your right arrow key to get into a folder.
If you want to get one directory up, check these two dots and press enter.

Fiona

wyckd
Posts: 4
Joined: 04 May 2012, 23:40

Re: Image Creation .dd file CHKDSK capable?

#7 Postby wyckd » 08 May 2012, 10:20

copying a damaged file leaves them in their damaged condition.

i'm certain chkdsk can correct all this, but i can't run chkdsk because of insufficient disk space...

so back to my original question....can i run chkdsk on a .dd image? will it clear corruption and bad sectors as if it were on a regular disk?

User avatar
Fiona
Posts: 2839
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Image Creation .dd file CHKDSK capable?

#8 Postby Fiona » 11 May 2012, 06:44

As far as I know, it's not possible to run chkdsk directly on an dd-image.
The only thing to try might be using a Linux LiveCD and dd to restore an image back to another intact disk (not the affected one).
Disk should have the same size or bigger.
Some infos;
http://www.cgsecurity.org/wiki/Damaged_Hard_Disk
Then it would be possible to diagnose that disk and in case to write a partition table so that your disk will appear in windows.
The you might be able to have a try to use chkdsk.

Fiona


Return to “Filesystem repair”

Who is online

Users browsing this forum: No registered users and 0 guests