Page 1 of 8 123 ... LastLast
Results 1 to 10 of 74

Thread: Convert raw to NTFS

  1. #1
    Join Date
    Jun 2012
    Location
    Athens
    Beans
    55
    Distro
    Ubuntu 10.04 Lucid Lynx

    Convert raw to NTFS

    Hello to everyone!

    A few days ago my Seagate 2TB went to raw all of a sudden. At that point I was running Vista. I typed at a cmd

    Code:
    chkdsk F: /i
    and I got the information that my files are not NTFS but raw.
    I tried to mount the HDD on my Ubuntu 10.04 system in case it works. However I got the following message

    http://i.imgur.com/GNzA9.png

    I then tried to fix this issue using testdisk.
    The log from my first attempt is the following

    Code:
    Fri Oct 26 14:10:57 2012
    Command line: TestDisk
    
    TestDisk 6.11, Data Recovery Utility, April 2009
    Christophe GRENIER <grenier@cgsecurity.org>
    http://www.cgsecurity.org
    OS: Linux, kernel 2.6.32-43-generic (#97-Ubuntu SMP Wed Sep 5 16:42:26 UTC 2012)
    Compiler: GCC 4.4 - Jun 23 2009 17:48:38
    ext2fs lib: 1.41.11, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
    /dev/sda: LBA, HPA, LBA48, DCO support
    /dev/sda: size       488281250 sectors
    /dev/sda: user_max   488281250 sectors
    /dev/sda: native_max 488281250 sectors
    /dev/sda: dco        488281250 sectors
    /dev/sdb: LBA, HPA, LBA48, DCO support
    /dev/sdb: size       488281250 sectors
    /dev/sdb: user_max   488281250 sectors
    /dev/sdb: native_max 488281250 sectors
    /dev/sdb: dco        488281250 sectors
    Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
    Hard disk list
    Disk /dev/sda - 250 GB / 232 GiB - CHS 30394 255 63, sector size=512 - ATA WDC WD2500AAJS-7
    Disk /dev/sdb - 250 GB / 232 GiB - CHS 30394 255 63, sector size=512 - ATA WDC WD2500AAJS-7
    
    
    TestDisk exited normally.
    I unmounted it and mounted again while initialising testdisk. At that point I was able to see my HDD on the list.
    I pressed enter and then selected "Intel" in the "Partition Table Type". Next I pressed "Advanced" but there was a statement "No partition available". So I got back and selected "Analyse". A message was there stating that "Partition Read Error". Despite that I selected "Quick search". So something started to happening.

    I should mention that my HDD is 2000Gb while the total cylinders that testdisk could access were ~250Gb...

    When this ended there was a message saying "Strucrure OK" so I selected for a "Deeper search". When this came to an end another message was stating that "No partition found or selected for recovery".

    The log from this procedure is bery big ~3GB and I cannot copy it because while loading it kills itself.

    I tried another time with "Advanced". At that point I saw one partition. I entered using "list" and I saw only one folder of all. The log from the previous procedure is

    Code:
    Sat Oct 27 10:51:01 2012
    Command line: TestDisk
    
    TestDisk 6.11, Data Recovery Utility, April 2009
    Christophe GRENIER <grenier@cgsecurity.org>
    http://www.cgsecurity.org
    OS: Linux, kernel 2.6.32-42-generic (#95-Ubuntu SMP Wed Jul 25 15:56:09 UTC 2012)
    Compiler: GCC 4.4 - Jun 23 2009 17:48:38
    ext2fs lib: 1.41.11, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: none
    /dev/sda: LBA, HPA, LBA48, DCO support
    /dev/sda: size       488397168 sectors
    /dev/sda: user_max   488397168 sectors
    /dev/sda: native_max 488397168 sectors
    /dev/sda: dco        488397168 sectors
    Warning: can't get size for Disk /dev/mapper/control - 0 B - CHS 1 1 1, sector size=512
    Hard disk list
    Disk /dev/sda - 250 GB / 232 GiB - CHS 30401 255 63, sector size=512 - ATA WDC WD2500BEVS-2
    Disk /dev/sdd - 4009 MB / 3824 MiB - CHS 1018 124 62, sector size=512 - FLASH Drive SM_USB20
    Disk /dev/sde - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate Desktop
    
    Partition table type (auto): Intel
    Disk /dev/sde - 2000 GB / 1863 GiB - Seagate Desktop
    Partition table type: Intel
    
    Interface Advanced
    Geometry from i386 MBR: head=255 sector=63
    NTFS at 0/1/1
    get_geometry_from_list_part_aux head=255 nbr=2
    get_geometry_from_list_part_aux head=8 nbr=1
    get_geometry_from_list_part_aux head=16 nbr=1
    get_geometry_from_list_part_aux head=32 nbr=1
    get_geometry_from_list_part_aux head=64 nbr=1
    get_geometry_from_list_part_aux head=128 nbr=1
    get_geometry_from_list_part_aux head=240 nbr=1
    get_geometry_from_list_part_aux head=255 nbr=2
    1 P HPFS - NTFS              0   1  1 243200 254 63 3907024002 [Expansion Drive]
         NTFS, 2000 GB / 1863 GiB
    
    ntfs_boot_sector
    1 P HPFS - NTFS              0   1  1 243200 254 63 3907024002 [Expansion Drive]
         NTFS, 2000 GB / 1863 GiB
    NTFS at 0/1/1
    file_pread(6,16,buffer,3907024064(243200/254/63)) read err: Input/output error
    filesystem size           3907024002 1
    sectors_per_cluster       8 0
    mft_lcn                   786432 0
    mftmirr_lcn               244189000 0
    clusters_per_mft_record   -10 0
    clusters_per_index_record 1 0
    Boot sector
    Status: OK
    
    Backup boot sector
    ntfs_boot_sector: Can't read backup boot sector.
    Status: Bad
    
    Sectors are not identical.
    
    A valid NTFS Boot sector must be present in order to access
    any data; even if the partition is not bootable.
    Failed to read $MFTMirr: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    Failed to read index block: Input/output error.
    ntfs_device_testdisk_io_ioctl() unimplemented
    file_pread(6,8,buffer,1953512063(121600/127/63)) read err: Input/output error
    ntfs_device_testdisk_io_ioctl() unimplemented
    NTFS filesystem need to be repaired.
    
    file_pread(6,8,buffer,1953512143(121600/129/17)) read err: Input/output error
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    file_pread(6,8,buffer,660335(41/26/33)) read err: Input/output error
    ntfs_readdir failed
    Directory /ElectroMagnetism
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    ntfs_readdir failed
    Directory /ElectroMagnetism
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    ntfs_readdir failed
    Directory /ElectroMagnetism
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    ntfs_readdir failed
    Directory /ElectroMagnetism
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    ntfs_readdir failed
    Directory /ElectroMagnetism
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    ntfs_readdir failed
    Directory /ElectroMagnetism
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
    ntfs_readdir failed
    Directory /
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 .
           5 dr-xr-xr-x     0      0         0 25-May-2011 23:32 ..
          62 dr-xr-xr-x     0      0         0  5-Aug-2011 22:16 ElectroMagnetism
    
    ntfs_boot_sector
    1 P HPFS - NTFS              0   1  1 243200 254 63 3907024002 [Expansion Drive]
         NTFS, 2000 GB / 1863 GiB
    NTFS at 0/1/1
    filesystem size           3907024002 1
    sectors_per_cluster       8 0
    mft_lcn                   786432 0
    mftmirr_lcn               244189000 0
    clusters_per_mft_record   -10 0
    clusters_per_index_record 1 0
    Boot sector
    Status: OK
    
    Backup boot sector
    ntfs_boot_sector: Can't read backup boot sector.
    Status: Bad
    
    Sectors are not identical.
    
    A valid NTFS Boot sector must be present in order to access
    any data; even if the partition is not bootable.
    Failed to read $MFTMirr: Input/output error.
    I also wanted to try with foremost but while searching I saw that it needs to transfer "corrupted" files to another media. The thing is that my external HDD is my back-up so I don't have enough space to transfer my data...

    Is it possible to access my data again?

    Thank you in advance!
    Last edited by Wild Man; November 21st, 2012 at 09:37 PM. Reason: Remove large image.

  2. #2
    Join Date
    Jun 2009
    Location
    Chicago Suburbs
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Convert raw to NTFS

    Did you from Windows run chkdsk with the /p or /r options?

    chkdsk C: /r
    chkdsk /f c:
    Option 3: Adding the Windows Recovery Console as a startup option
    but replace "C:" by the drive letter of your Vista partition.

    You can use the following options:
    /p Does an exhaustive check of the drive and corrects any errors.
    /r Locates bad sectors and recovers readable information.

    http://www.microsoft.com/resources/d....mspx?mfr=true
    For info on UEFI boot install & repair:
    http://ubuntuforums.org/showthread.php?t=2147295
    Please use Thread Tools above first post to close thread when/if answered completely.




  3. #3
    Join Date
    Jun 2012
    Location
    Athens
    Beans
    55
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Convert raw to NTFS

    Thank you very much for your answer!
    The problem is that the drive is raw.

    When I try to use chkdsk I get the error

    `The type of the filesystem is RAW.
    CHKDSK is not available for RAW drives.`

  4. #4
    Join Date
    Jun 2009
    Location
    Chicago Suburbs
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Convert raw to NTFS

    In Windows RAW means it is not formated. Of course if you reformat it you lose all your data.

    NTFS partitions have a backup PBR - partition boot sector. Does testdisk say the backup is damaged also?

    These instructions are for those who accidentally wrote grub2's boot loader to the PBR of a NTFS partition. It uses testdisk to restore the backup PBR. so you can follow the same instrucions.

    Fix for most, a few have other issues, better than windows fix in many cases as it also fixes other parameters:
    If win7 use small 'system reserved' NTFS partition instead of the partition where windows was installed for win7
    This has instructions on using testdisk to repair the install of grub to the boot sector for windows from Ubuntu or Linux LiveCD.
    http://sourceforge.net/apps/mediawik...ms:Boot_Sector
    You want to get to this screen:
    http://www.cgsecurity.org/wiki/TestD...ector_recovery

    OR:
    [HowTo] Repair the bootsector of a Windows partition - YannBuntu
    https://help.ubuntu.com/community/BootSectorFix
    http://ubuntuforums.org/showthread.php?t=1926510

    Testdisk also has a function that will rebuild a basic NTFS boot sector - Rebuild BS. It is a XP type and needs to be converted to Windows Vista/7 type. But Windows Vista or 7 will not update if not already seen as NTFS as you have found out.

    How to use the Bootrec.exe tool in the Windows Recovery Environment to troubleshoot and repair startup issues in Windows
    http://support.microsoft.com/kb/927392
    http://www.sevenforums.com/tutorials...ot-record.html
    Use bootsect.exe to repair XP & older or Vista/7 bootsectors - Use diskpart, then list volumes to see which drive to use
    bootsect.exe /nt52 c: *compatible* with operating systems older (XP) than Windows Vista.
    bootsect.exe /nt60 c: *compatible* with Windows Vista, Windows Server 2008 or later
    For info on UEFI boot install & repair:
    http://ubuntuforums.org/showthread.php?t=2147295
    Please use Thread Tools above first post to close thread when/if answered completely.




  5. #5
    Join Date
    Jun 2012
    Location
    Athens
    Beans
    55
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Convert raw to NTFS

    Thank you for your time and answer!
    When I try to apply "Advanced" on testdisk I get that

    No partition available

    so I cannot apply a "Backup BS"

  6. #6
    Join Date
    Jun 2009
    Location
    Chicago Suburbs
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Convert raw to NTFS

    And testdisk is not showing any partitions to recover?

    Then the only option may be photorec. I used photorec on a smaller drive to find a couple of missing folders (not partitions) where I saved a lot of text files. Since partition was not very full, photorec found every old deleted copy of the text files, my backup was 6 months old and it took photo 6 hours to run on my drive. Then I had a huge number of files to sort thru as it only recovers extensions not full file names. It took me weeks to compare all the text files to my backup and sync data & I never was sure I ever found last saved version. (Oldfred backs up a lot more often.)

    http://www.cgsecurity.org/wiki/PhotoRec
    http://www.psychocats.net/ubuntucat/...rdeletedfiles/
    http://ubuntu4beginners.blogspot.com...otorec-in.html

    Use scripts to help sort and rename files:
    http://www.cgsecurity.org/wiki/After_Using_PhotoRec
    use flac tags to rename files
    http://lglinux.blogspot.com/2008/10/...ame-files.html
    http://system-tricks.com/index.php/d...overy-results/
    Best GUI Indexing/Search Tool for Local Files?
    http://ubuntuforums.org/showthread.php?t=1739701
    For info on UEFI boot install & repair:
    http://ubuntuforums.org/showthread.php?t=2147295
    Please use Thread Tools above first post to close thread when/if answered completely.




  7. #7
    Join Date
    Jun 2012
    Location
    Athens
    Beans
    55
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Convert raw to NTFS

    This could be a good idea!
    As soon as I borrow a HDD I will try it and I will let you know.
    Thank's!!!

  8. #8
    Join Date
    Jun 2012
    Location
    Athens
    Beans
    55
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Convert raw to NTFS

    I am back

    I just borrowed a HDD(sb borrowed me his laptop actually) and run photorec.

    But there are no good news...
    After some passes there are no files recovered.
    The report from the procedure is the following

    Code:
    <?xml version='1.0' encoding='UTF-8'?>
    <dfxml xmloutputversion='1.0'>
      <metadata 
      xmlns='http://www.forensicswiki.org/wiki/Category:Digital_Forensics_XML' 
      xmlns:xsi='http://www.w3.org/2001/XMLSchema-instance' 
      xmlns:dc='http://purl.org/dc/elements/1.1/'>
        <dc:type>Carve Report</dc:type>
      </metadata>
      <creator>
        <package>PhotoRec</package>
        <version>6.13</version>
        <build_environment>
          <compiler>GCC 4.6</compiler>
          <compilation_date>2012-02-05T07:15:52</compilation_date>
          <library name='libext2fs' version='1.42'/>
          <library name='libewf' version='none'/>
          <library name='libjpeg' version='80'/>
          <library name='libntfs' version='10:0:0'/>
        </build_environment>
        <execution_environment>
          <os_sysname>Linux</os_sysname>
          <os_release>3.2.0-33-generic</os_release>
          <os_version>#52-Ubuntu SMP Thu Oct 18 16:29:15 UTC 2012</os_version>
          <host>MITsMag</host>
          <arch>x86_64</arch>
          <uid>0</uid>
          <start_time>2012-11-19T19:04:17+0200</start_time>
        </execution_environment>
      </creator>
      <source>
        <image_filename>/dev/sdb</image_filename>
        <sectorsize>512</sectorsize>
        <device_model>Seagate Desktop</device_model>
        <image_size>2000398934016</image_size>
        <volume>
          <byte_runs>
            <byte_run offset='0' img_offset='32256' len='2000396289024'/>
          </byte_runs>
        </volume>
      </source>
      <configuration>
      </configuration>
    </dfxml>
    I don't know what else to try...

  9. #9
    Join Date
    Jun 2009
    Location
    Chicago Suburbs
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: Convert raw to NTFS

    Did you point it to the correct drive? It looks like it was looking at sdb?
    For info on UEFI boot install & repair:
    http://ubuntuforums.org/showthread.php?t=2147295
    Please use Thread Tools above first post to close thread when/if answered completely.




  10. #10
    Join Date
    Jun 2012
    Location
    Athens
    Beans
    55
    Distro
    Ubuntu 10.04 Lucid Lynx

    Re: Convert raw to NTFS

    The laptop I run photorec has only one HDD with one partition,sda that is...

    I also tried foremost using

    Code:
    sudo foremost -o /home/mitsmag/Rescue -t all -i /dev/sdb
    but it is stack at the beginning stating that

    Code:
    Processing: stdin
    |
    I took the address /dev/sdb as it was shown in disk utility.

Page 1 of 8 123 ... LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •