cgsecurity.org

Now, I my drive is dead. I removed it from the notebook and have it in an external enclosure with a usb connection to my other notebook.

I can see the root directory. But I can't access any of the files or folders.

I ran TestDisk, but I'm not sure I used the right drive geometry.
It is a Travelstar 5K1000-1000 Model HTS541010A9E680
I found the specs here: https://documents.westerndigital.com/co ... 5k1000.pdf

Any help in recovering at least my tax files would be greatly appreciated.

Here is part of the log:


Fri Dec 20 17:27:13 2019
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, December 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 7.4, Cygwin 3000.3
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=750156374016
filewin32_getfilesize(/dev/sdb) GetFileSize err Incorrect function.

filewin32_setfilepointer(/dev/sdb) SetFilePointer err Incorrect function.

Warning: can't get size for Disk /dev/sdb - 0 B - 0 sectors, sector size=512 - HGST HTS 541010A9E680
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=750156374016
filewin32_getfilesize(\\.\PhysicalDrive1) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\PhysicalDrive1) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\PhysicalDrive1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=722368003584
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=399554655744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=577454997504
Hard disk list
Disk /dev/sda - 750 GB / 698 GiB - CHS 91201 255 63, sector size=512 - ST9750423AS, S/N:5WS1E8KP, FW:0001SDM1
Drive E: - 399 GB / 372 GiB - CHS 780380187 1 1, sector size=512 - HGST HTS 541010A9E680

Partition table type defaults to None
Drive E: - 399 GB / 372 GiB - HGST HTS 541010A9E680
Partition table type: Intel
New geometry
Drive E: - 16 GB / 15 GiB - CHS 16383 4 63 sector_size=4096

Analyse Drive E: - 16 GB / 15 GiB - CHS 16383 4 63
Current partition structure:

Partition: Read error

search_part()
Drive E: - 16 GB / 15 GiB - CHS 16383 4 63
file_win32_pread(336,1,buffer,48(0/0/49)) read err: read after end of file
file_win32_pread(336,15,buffer,49(0/0/50)) read err: read after end of file
file_win32_pread(336,1,buffer,66(0/1/4)) read err: read after end of file
file_win32_pread(336,3,buffer,111(0/1/49)) read err: read after end of file
file_win32_pread(336,11,buffer,174(0/2/49)) read err: read after end of file
file_win32_pread(336,2,buffer,2096(8/1/18)) read err: read after end of file
file_win32_pread(336,16,buffer,256(1/0/5)) read err: read after end of file
file_win32_pread(336,3,buffer,272(1/0/21)) read err: read after end of file
file_win32_pread(336,3,buffer,319(1/1/5)) read err: read after end of file
file_win32_pread(336,8,buffer,335(1/1/21)) read err: read after end of file
file_win32_pread(336,11,buffer,382(1/2/5)) read err: read after end of file
file_win32_pread(336,2,buffer,2304(9/0/37)) read err: read after end of file
file_win32_pread(336,16,buffer,504(2/0/1)) read err: read after end of file
file_win32_pread(336,3,buffer,520(2/0/17)) read err: read after end of file
file_win32_pread(336,3,buffer,567(2/1/1)) read err: read after end of file
file_win32_pread(336,8,buffer,583(2/1/17)) read err: read after end of file

Can you try to clone your disk using ddrescue to a new empty disk as described in https://www.cgsecurity.org/testdisk.pdf ?
Once it's done, remove the orignal disk and try to recover your data from the clone.

I was able to recover some files with QPhotoRec. But the files I need are in the User folder under my account. But, since I am reading the drive from my other computer, I am not authorized to read that folder. Is there a way around that?

Thanks for your help/

Set rights accordingly.