All fine but finally: Partition: Write error

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
lucanorillo
Posts: 4
Joined: 03 Jan 2020, 21:36

All fine but finally: Partition: Write error

#1 Post by lucanorillo »

Hello and happy new year!!!
I have a 3Tb disk that in windows disk management says Partition protected GPT and I cannt acces it.
I use TestDisk, i make a deep scan, but when i want to write it says (see photos). Any help? Thanks in advance.


Image
Image
Image

Log:

Thu Jan 2 22:11:07 2020
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, December 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 7.4, Cygwin32 3000.3
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1000203804160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=2000397852160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=250059350016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1000203804160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=2000397852160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=249495540224
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=500104691712
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1000202043392
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=1000200994816
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=2000395698176
filewin32_getfilesize(\\.\I:) GetFileSize err Función incorrecta.

filewin32_setfilepointer(\\.\I:) SetFilePointer err Función incorrecta.

Warning: can't get size for \\.\I:
Hard disk list
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - WDC WD30EZRX-00MMMB0, S/N:WD-WCAWZ2053745, FW:80.00A80
Disk /dev/sdb - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - Samsung SSD 850 EVO 250GB, S/N:S2R6NX0H717868P, FW:EMT02B6Q
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST3500320AS, S/N:9QM28RB2, FW:SD1A
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST31000528AS, S/N:9VP1CPVD, FW:CC46
Disk /dev/sde - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - ST31000528AS, S/N:5VP0GSKA, FW:CC46
Disk /dev/sdf - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - ST32000542AS, S/N:6XW1GC39, FW:CC34

Partition table type (auto): Intel
Disk /dev/sda - 3000 GB / 2794 GiB - WDC WD30EZRX-00MMMB0
Partition table type: Intel

Analyse Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
Geometry from i386 MBR: head=255 sector=63
check_part_i386 1 type EE: no test
Current partition structure:
1 P EFI GPT 0 0 2 267349 89 4 4294967295

Bad sector count.
No partition is bootable

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size 3907024896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,14,buffer,1565566978(364801/98/36)) lseek err Invalid argument
file_pread(4,3,buffer,1565566992(364801/98/50)) lseek err Invalid argument
file_pread(4,3,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,8,buffer,1565567055(364801/99/50)) lseek err Invalid argument
file_pread(4,11,buffer,1565567102(364801/100/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565569024(364801/131/3)) lseek err Invalid argument

Results
* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

P HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

* HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

L HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
Not an exFAT boot sector.

HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.

interface_write()
1 P HPFS - NTFS 0 32 33 243201 45 44 3907024896

search_part()
Disk /dev/sda - 3000 GB / 2794 GiB - CHS 364801 255 63
NTFS at 0/32/33
filesystem size 3907024896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
NTFS at 16/113/34
Warning: number of bytes per sector mismatches 4096 (NTFS) != 512 (HD)
filesystem size 732533504
sectors_per_cluster 1
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 16 113 34 364801 66 1 5860268032 [ARCHIVO_RAID1]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
NTFS at 243201/45/44
filesystem size 3907024896
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS found using backup sector, blocksize=4096, 2000 GB / 1863 GiB
file_pread(4,2,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565566976(364801/98/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567038(364801/99/33)) lseek err Invalid argument
file_pread(4,2,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,1,buffer,1565567039(364801/99/34)) lseek err Invalid argument
file_pread(4,2,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565567101(364801/100/33)) lseek err Invalid argument
file_pread(4,8,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,1,buffer,1565565952(364801/82/18)) lseek err Invalid argument
file_pread(4,8,buffer,1565566080(364801/84/20)) lseek err Invalid argument
file_pread(4,8,buffer,1565566208(364801/86/22)) lseek err Invalid argument
file_pread(4,8,buffer,1565566336(364801/88/24)) lseek err Invalid argument
file_pread(4,8,buffer,1565566464(364801/90/26)) lseek err Invalid argument
file_pread(4,8,buffer,1565566592(364801/92/28)) lseek err Invalid argument
file_pread(4,8,buffer,1565566720(364801/94/30)) lseek err Invalid argument
file_pread(4,8,buffer,1565566848(364801/96/32)) lseek err Invalid argument
file_pread(4,1,buffer,1565566975(364801/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,1565566976(364801/98/34)) lseek err Invalid argument

Results
HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
HPFS - NTFS 16 113 34 364801 66 1 5860268032 [ARCHIVO_RAID1]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Failed to startup volume: Input/output error.
$MFT has invalid magic.
ntfs_mft_load(): Failed.
Failed to load $MFT: Input/output error.
Not an exFAT boot sector.

HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
NTFS Volume is dirty.


dir_partition inode=5
HPFS - NTFS 16 113 34 364801 66 1 5860268032 [ARCHIVO_RAID1]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 24-Jul-2018 12:19 .
5 dr-xr-xr-x 0 0 0 24-Jul-2018 12:19 ..
NTFS Volume is dirty.


dir_partition inode=5
HPFS - NTFS 16 113 34 364801 66 1 5860268032 [ARCHIVO_RAID1]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 24-Jul-2018 12:19 .
5 dr-xr-xr-x 0 0 0 24-Jul-2018 12:19 ..
Can't open backup.log file: No such file or directory
interface_load
Not an exFAT boot sector.

P HPFS - NTFS 0 32 33 243201 45 44 3907024896
NTFS, blocksize=4096, 2000 GB / 1863 GiB
Can't open filesystem. Filesystem seems damaged.
NTFS Volume is dirty.


dir_partition inode=5
P HPFS - NTFS 16 113 34 364801 66 1 5860268032 [ARCHIVO_RAID1]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
ntfs_readdir failed for cluster 5: Input/output error
Directory /
5 dr-xr-xr-x 0 0 0 24-Jul-2018 12:19 .
5 dr-xr-xr-x 0 0 0 24-Jul-2018 12:19 ..
add_ext_part_i386: max
add_ext_part_i386: min

interface_write()
1 E extended LBA 16 81 2 364801 66 1 5860270080
5 L HPFS - NTFS 16 113 34 364801 66 1 5860268032 [ARCHIVO_RAID1]
write!

write_mbr_i386: starting...
file_pwrite(4,1,buffer,0(0/0/1)) write err Permission denied
write_all_log_i386: starting...
write_all_log_i386: CHS: 16/81/2,lba=262144
file_pwrite(4,1,buffer,262144(16/81/2)) write err Permission denied

Partition: Write error
Top
User avatar
cgrenier
Site Admin
Posts: 5440
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:
Contact cgrenier

Re: All fine but finally: Partition: Write error

#2 Post by cgrenier »

Your antivirus may prevent TestDisk to rewrite the partition table, disable it while TestDisk is running.
Use the arrow keys to switch the partition from L(ogical) to P(rimary) before trying to recover it.
Top
lucanorillo
Posts: 4
Joined: 03 Jan 2020, 21:36

Re: All fine but finally: Partition: Write error

#3 Post by lucanorillo »

Thanks for your answer.
I try stoping my Windows Defender Anti Virus in Windows 10, and I change L(logical) to P(primary)
Image
but it cant write

In disk management appears like this
Image

May be the gpt partition is protected?
Top
lucanorillo
Posts: 4
Joined: 03 Jan 2020, 21:36

Re: All fine but finally: Partition: Write error

#4 Post by lucanorillo »

Any help or do you think that´s imposible? Thanks
Top
recuperation
Posts: 3012
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: All fine but finally: Partition: Write error

#5 Post by recuperation »

There is lots of missing information in your post.

What is your operating system?
Under which operating system have you partitioned the drive?
What is the status ante that you want to recover?

With an external 512 Byte emulation regardless of its internal 4096 Bytes an old school intel style partition table cannot exceed a partition size of 2TB.
Use GPT if you are running an operating system that supports it.
GPT allows for a partition size that is larger than 2TB.
Top
lucanorillo
Posts: 4
Joined: 03 Jan 2020, 21:36

Re: All fine but finally: Partition: Write error

#6 Post by lucanorillo »

There is lots of missing information in your post. Sorry for my inexperience I will try to explain it better.

The operating system in my pc is windows 10, and the hdd that i want to recover, was mounted in a external box with two slots, Icy Box model, that makes the process of RAID1.
Prior to disaster, it was working well five years, connected to my pc with usb 3 cable.
Suddenly the pc stopped recognizing the box. I connect the hdd of the box to an internal bay on the pc. And in the administrator system it says Partition Protected GPT.
After that, i try with your system wth TestDisk.

I dont know if i can apport more information to help
Top
recuperation
Posts: 3012
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: All fine but finally: Partition: Write error

#7 Post by recuperation »

I did not find any technical definition of the "protective GPT partition" - I only was aware of protective MBRs.

You can try to access your data using a computer running linux or running linux from a DVD or USB stick.
Otherwise replace your external box.
Top
Locked

Return to “Partition Recovery”