Can't open filesystem filesystem seems damaged on External HDD

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
raghav
Posts: 1
Joined: 12 Aug 2019, 12:49

Can't open filesystem filesystem seems damaged on External HDD

#1 Post by raghav »

I have Seagate 1TB external hard disk which has two partitions one is empty
The first partition of the disk seems corrupted due to power failure while plugged in my desktop which has all of my personal data
With testdisk, I did find partitions but can't able to list files on the first partition
Added testdisk.log below
Please help me recover data it has most of my personal files some of them don't even have an online backup
Thanks in advance



Tue Aug 13 22:38:24 2019
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Linux, kernel 5.0.0-23-generic (#24~18.04.1-Ubuntu SMP Mon Jul 29 16:12:28 UTC 2019) x86_64
Compiler: GCC 7.2
ext2fs lib: 1.44.1, ntfs lib: libntfs-3g, reiserfs lib: none, ewf lib: none, curses lib: ncurses 6.0
Warning: can't get size for Disk /dev/mapper/control - 0 B - 0 sectors, sector size=512
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - Seagate BUP Slim BK, FW:0304
Disk /dev/mapper/nvme0n1p1_crypt - 102 GB / 95 GiB - 200189952 sectors, sector size=512
Disk /dev/mapper/nvme0n1p4_crypt - 406 GB / 378 GiB - 794329088 sectors, sector size=512
Disk /dev/dm-0 - 102 GB / 95 GiB - 200189952 sectors, sector size=512
Disk /dev/dm-1 - 406 GB / 378 GiB - 794329088 sectors, sector size=512

Partition table type (auto): None
Disk /dev/sda - 1000 GB / 931 GiB - Seagate BUP Slim BK
Partition table type: Intel

Analyse Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Info: size boot_sector 1855868921, partition 1855868928
NTFS at 115522/159/30
Current partition structure:
1 * HPFS - NTFS 0 32 33 115522 159 29 1855868928
2 P HPFS - NTFS 115522 159 30 121601 57 56 97652736
Failed to open ntfs attribute: No such file or directory
Failed to load $MFT: No such file or directory
Failed to open ntfs attribute: No such file or directory
Failed to load $MFT: No such file or directory
Failed to open ntfs attribute: No such file or directory
Failed to load $MFT: No such file or directory
Failed to open ntfs attribute: No such file or directory
Failed to load $MFT: No such file or directory

search_part()
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63
NTFS at 0/32/33
filesystem size 1855868921
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 115522 159 22 1855868921
NTFS, blocksize=4096, 950 GB / 884 GiB
NTFS at 115522/159/30
filesystem size 97652736
sectors_per_cluster 8
mft_lcn 4
mftmirr_lcn 6103295
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 115522 159 30 121601 57 56 97652736
NTFS, blocksize=4096, 49 GB / 46 GiB

Results
* HPFS - NTFS 0 32 33 115522 159 29 1855868928
NTFS, blocksize=4096, 950 GB / 884 GiB
P HPFS - NTFS 115522 159 30 121601 57 56 97652736
NTFS, blocksize=4096, 49 GB / 46 GiB

Hint for advanced users. dmsetup may be used if you prefer to avoid to rewrite the partition table for the moment:
echo "0 1855868928 linear /dev/sda 2048" | dmsetup create test0
echo "0 97652736 linear /dev/sda 1855870976" | dmsetup create test1
ntfs_device_testdisk_io_ioctl() unimplemented


dir_partition inode=5
P HPFS - NTFS 115522 159 30 121601 57 56 97652736
NTFS, blocksize=4096, 49 GB / 46 GiB
Directory /
5 dr-xr-xr-x 0 0 0 23-Jun-2019 16:44 .
5 dr-xr-xr-x 0 0 0 23-Jun-2019 16:44 ..
36 dr-xr-xr-x 0 0 0 23-Jun-2019 16:44 System Volume Information
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented
Not an exFAT boot sector.
ntfs_device_testdisk_io_ioctl() unimplemented
ntfs_device_testdisk_io_ioctl() unimplemented

* HPFS - NTFS 0 32 33 115522 159 29 1855868928
NTFS, blocksize=4096, 950 GB / 884 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
1 * HPFS - NTFS 0 32 33 115522 159 29 1855868928
2 P HPFS - NTFS 115522 159 30 121601 57 56 97652736
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Can't open filesystem filesystem seems damaged on External HDD

#2 Post by cgrenier »

Try TestDisk, Advanced, Boot, RebuildBS, List. If you can see your files, choose Write, confirm, Quit and restart your computer.
If it doesn't work, try PhotoRec instead.

Locked