External WD 3TB Raw + Unallocated

[thaskasw]

Hello there,

First of all tyvm for the awesome tool.

Let me explain my situation. The External HDD had some problem with the power chip (or something) so I removed it from it's original case and moved it to another case. Now the thing is that move messed up the HDD and I see Raw + Unallocated space:


I've followed a couple of guides and I can see the files and all but I just can't seem to be able to fix this :/ After a lot of tries I've managed to see that if I change the sector size from 512 to 4096 I can see everything being OK but after the restart the sector size is back to 512 and in the same situation :/

Here are a few screens and log:



After that I go to Analyze -> Quick Search -> Write -> restart but the sector size is 512 and still raw after the restart..





Fri Mar 4 12:46:10 2016
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, February 2016
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.9, Cygwin32 2002.0
Compilation date: 2016-03-01T21:27:27
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
Failed to startup volume: Invalid argument.
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=41838182400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=118094823424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=118094823424
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=41943040000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=118094823424
filewin32_getfilesize(\\.\I:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\I:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\I:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=375073669120
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:2020202020202020202020205639325953584e53, FW:CC37
Disk /dev/sdb - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:2020202020202020202020205639325930595032, FW:CC37
Disk /dev/sdc - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - ST3160318AS, S/N:20202020202020202020202056393259345a4138, FW:CC37
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30 EZRX-00DC0B0, S/N:350000104102

Partition table type (auto): Intel
Disk /dev/sdd - 3000 GB / 2794 GiB - WDC WD30 EZRX-00DC0B0
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
Not an exFAT boot sector.

1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
Can't open filesystem. Filesystem seems damaged.

ntfs_boot_sector
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760
filesystem size 1 12131320475419809822
sectors_per_cluster 0 243
mft_lcn 0 3657397243
mftmirr_lcn 0 41078
clusters_per_mft_record 0 -97
clusters_per_index_record 0 31
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
New geometry
Disk /dev/sdd - 3000 GB / 2794 GiB - CHS 45601 255 63 sector_size=4096

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/4/5
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB


dir_partition inode=5
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
Directory /
5 dr-xr-xr-x 0 0 0 15-Oct-2014 02:06 .
5 dr-xr-xr-x 0 0 0 15-Oct-2014 02:06 ..
47674 dr-xr-xr-x 0 0 0 27-Dec-2013 17:54 $RECYCLE.BIN
116985 dr-xr-xr-x 0 0 0 15-Oct-2014 02:31 Back ups cameras
46249 dr-xr-xr-x 0 0 0 27-Dec-2013 18:12 My downloads
30 dr-xr-xr-x 0 0 0 7-Jan-2013 14:24 System Volume Information
27 dr-xr-xr-x 0 0 0 3-Sep-2011 11:00 autorun
60789 dr-xr-xr-x 0 0 0 15-Oct-2014 00:32 iTunes
5864 dr-xr-xr-x 0 0 0 19-Feb-2015 15:46 Οι φωτογραφίες μου
67940 dr-xr-xr-x 0 0 0 15-Oct-2014 00:50 Τα έγγραφά μου
28 -r--r--r-- 0 0 36 16-Oct-2002 15:56 autorun.inf

ntfs_boot_sector
1 * HPFS - NTFS 0 4 5 45600 31 63 732565760 [Elements]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS at 0/4/5
NTFS at 0/4/5
filesystem size 732565760
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 366282879
clusters_per_mft_record 1
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.

TestDisk exited normally.



Any ideas?

Thank you very much!

[thaskasw]

I've changed the partition table type into EFI GPT which made all the partitions to merge again.


I changed the sector size to 4096 again but I'm unable to write since I get a "Partition: Write error".

[cgrenier]

Run TestDisk, keep the same sector size, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write, confirm, Quit and reboot your computer.

If it works, you should run TestDisk again and this time, try EFI GPT, Analyse, Quick Search, List.
If you can see your files, choose Write and confirm, Quit and restart your computer

[thaskasw]

Thank you for the reply mate. I got an error when I tried that. Will upload a screenshot in a second.

[thetuckermcd]

I definitely had a chuckle when I read this post. I am currently having the same problem with the same HDD. Have a western digital 3tb and had a problem with the power adapter. the data transfer port broke, not allowing me to plug my usb data transfer cable into the HDD. ended up taking the HDD out of the case, and plugging sata cables directly into the HDD but now it was asking me to reformat. tried a data recovery program, and it recovered about 10k media files (i have over 50k). now i am running this program and it has been the only program to actually recognize how i had the HDD organized. recognizing file names such as "media, movies, tv shows, etc"... currently copying files and so far so good. everything has been able to be read by the program and has been successfully copied. although, only at about 4k files, so still a lot to go.

[cgrenier]

If nothing work, try PhotoRec
http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step