Testdisk after the option P list no files but 2 directories

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
erichkho
Posts: 1
Joined: 12 Feb 2016, 04:42

Testdisk after the option P list no files but 2 directories

#1 Post by erichkho »

I am running TestDisk 7.1 32 bit on Windows 7 to try to recover files from a RAW harddisk.

When it comes to the step to List files, it shows only two directories. What should I do now. Thanks.

Eric

Below is the log file


Thu Feb 11 16:29:44 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204885504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204885504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=482299871232
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=1000202043392
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Q:)=16233029632
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 482 GB / 449 GiB - CHS 58636 255 63, sector size=512
Drive D: - 1000 GB / 931 GiB - CHS 121600 255 63, sector size=512
Drive Q: - 16 GB / 15 GiB - CHS 1973 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 1000 GB / 931 GiB
Partition table type: Intel

Analyse Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
1 P HPFS - NTFS 0 32 33 121601 25 24 1953519616
No partition is bootable
__ntfs_volume_release(): Inode 10 still have 1 references.
Failed to read index block: Input/output error.

search_part()
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63
file_pread(5,16,buffer,2111(0/33/33)) ReadFile Data error (cyclic redundancy check).

NTFS at 0/32/33
filesystem size 1953519616
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 121601 25 24 1953519616
NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,2,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,8,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,1,buffer,1953525248(121601/82/18)) lseek err Invalid argument
file_pread(5,8,buffer,1953525376(121601/84/20)) lseek err Invalid argument
file_pread(5,8,buffer,1953525504(121601/86/22)) lseek err Invalid argument
file_pread(5,8,buffer,1953525632(121601/88/24)) lseek err Invalid argument
file_pread(5,1,buffer,1953525759(121601/90/25)) lseek err Invalid argument
file_pread(5,1,buffer,1953525760(121601/90/26)) lseek err Invalid argument
file_pread(5,14,buffer,1953525761(121601/90/27)) lseek err Invalid argument
file_pread(5,3,buffer,1953525775(121601/90/41)) lseek err Invalid argument
file_pread(5,3,buffer,1953525822(121601/91/25)) lseek err Invalid argument
file_pread(5,8,buffer,1953525838(121601/91/41)) lseek err Invalid argument
file_pread(5,11,buffer,1953525885(121601/92/25)) lseek err Invalid argument
file_pread(5,2,buffer,1953527807(121601/122/57)) lseek err Invalid argument

Results
* HPFS - NTFS 0 32 33 121601 25 24 1953519616
NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,248,buffer,2080(0/33/2)) ReadFile Data error (cyclic redundancy check).

file_pread(5,1,buffer,2128(0/33/50)) ReadFile Data error (cyclic redundancy check).

file_pread(5,199,buffer,2129(0/33/51)) ReadFile Data error (cyclic redundancy check).

NTFS filesystem need to be repaired.


dir_partition inode=5
* HPFS - NTFS 0 32 33 121601 25 24 1953519616
NTFS, blocksize=4096, 1000 GB / 931 GiB
file_pread(5,16,buffer,2400(0/38/7)) ReadFile The device is not ready.

file_pread(5,1,buffer,2400(0/38/7)) ReadFile The device is not ready.

ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 3-Feb-2016 10:17 .
5 dr-xr-xr-x 0 0 0 3-Feb-2016 10:17 ..

interface_write()
1 * HPFS - NTFS 0 32 33 121601 25 24 1953519616

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Testdisk after the option P list no files but 2 director

#2 Post by cgrenier »

There are several CRC errors.
You should clone the disk using gnu rescue from a Linux LiveCD to a new empty disk (can be bigger)
Here is an old tutorial https://www.cgsecurity.org/wiki/Damaged_Hard_Disk
Once the copy is done, remove the original disk and try to access your data on the clone.

Locked