Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Suddenly can't read from hard drive


  • Please log in to reply
19 replies to this topic

#1 Mackenkay

Mackenkay

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 04 May 2017 - 08:47 PM

Hello,

 

I have a newish (~ 2 yrs old) western digital usb hard drive that I can no longer access. In windows, when I plug in the drive I'm asked to reformat it to get it to work. I am also using linux (Fedora 25). When I try to access the drive there i get the following error message:

 

rhPkYZE.png

 

Nothing in particular happened when I started to get this message a few days ago. Prior to that, the drive has been working perfectly.

 

Can anyone please help me out with this?


Edited by hamluis, 06 May 2017 - 04:14 PM.
Moved from Internal Hardware to External Hardware - Hamluis.


BC AdBot (Login to Remove)

 


#2 JohnC_21

JohnC_21

  • Members
  • 24,841 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:00 PM

Posted 04 May 2017 - 09:12 PM

If your are using a live linux disk open terminal and type

ntfsfix /dev/sdb1

If shows as successful see if you can then mount the drive. It seems your MFT is corrupted. Hopefully ntfsfix can recover the backup.



#3 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 05 May 2017 - 06:39 AM

Hi, it doesn't seem to have worked:

> ntfsfix /dev/sdb1
Failed to determine whether /dev/sdb1 is mounted: No such file or directory
Mounting volume... Failed to access '/dev/sdb1': No such file or directory
Error opening '/dev/sdb1': No such file or directory
FAILED
Attempting to correct errors... Failed to access '/dev/sdb1': No such file or directory
Error opening '/dev/sdb1': No such file or directory
FAILED
Failed to startup volume: No such file or directory
Failed to access '/dev/sdb1': No such file or directory
Error opening '/dev/sdb1': No such file or directory
Volume is corrupt. You should run chkdsk.


#4 JohnC_21

JohnC_21

  • Members
  • 24,841 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:00 PM

Posted 05 May 2017 - 07:10 AM

Boot to Windows and attach the drive. Open Disk Management. How is the drive detected? Does it show as RAW?



#5 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 05 May 2017 - 07:52 AM

Yes, I see it as RAW.



#6 JohnC_21

JohnC_21

  • Members
  • 24,841 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:00 PM

Posted 05 May 2017 - 08:01 AM

Download Testdisk for Windows. Do not download the 64bit version. Unzip the file to your desktop. Run Testdisk. Do a Quick Search. Highlight any partition(s) found. Press the "p" key. Do you see your files? If no partitions are found do a deeper search. This will take some time. Highlight any partitions found. The priority is to recover your important files first. You can select your files using ":". Press uppercase "C" to copy and "C" again to confirm. The files will be recovered to the folder you unzipped Testdisk to. Open a few files recovered to verify if they are corrupted.

 

If you have enough free space on the drive you unzipped Testdisk to you can recover all files by selecting with lower case "a".

 

http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step



#7 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 05 May 2017 - 08:29 AM

The 'p' key doesn't seem to do anything. When I run testdisk_win, I am asked if I want to create a log. I said yes. then I'm asked to select a media. I see 3 relevant options:

 

Disk /dev/sdd - 4000 GB / 3725 GiB - WD My Book 1230

Disk \\.\PhysicalDrive3 - 4000 GB / 3725 Gib - WD My Book 1230

Drive I: - 4000 GB / 3725 Gib - WD My Book 1230

 

Which of these should I select?



#8 JohnC_21

JohnC_21

  • Members
  • 24,841 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:00 PM

Posted 05 May 2017 - 08:46 AM

The "P" key is used after a partition is detected using Quick or Deeper Search. 

 

Select 

 

Disk /dev/sdd - 4000 GB / 3725 GiB - WD My Book 1230



#9 dna9

dna9

  • Members
  • 96 posts
  • OFFLINE
  •  
  • Local time:03:00 PM

Posted 05 May 2017 - 11:37 AM

plug the USB drive in. boot back into windows and do a real shutdown and not stand-by or "hibernate".  sometimes "hiberfil.sys" will lock a HD.



#10 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 06 May 2017 - 02:49 PM

The "P" key is used after a partition is detected using Quick or Deeper Search. 

 

Select 

 

Disk /dev/sdd - 4000 GB / 3725 GiB - WD My Book 1230

 

OK, I ran a quick search and then a deep search. Both times afterwards I hit 'p' to list files, at which point the window just closed quickly.



#11 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 06 May 2017 - 02:50 PM

plug the USB drive in. boot back into windows and do a real shutdown and not stand-by or "hibernate".  sometimes "hiberfil.sys" will lock a HD.

 

I just tried this, but it didn't help.



#12 JohnC_21

JohnC_21

  • Members
  • 24,841 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:00 PM

Posted 06 May 2017 - 03:04 PM

Was any partition found after doing a quick search or deeper search? You may need to scan the disk with a program like PhotoRec, part of Testdisk, to recover your files but the recovery is done in real time so you need enough free space on the recovery drive. You have the option to select what file extensions to recover. The problem with PhotoRec is all recovered files have generic names with the correct extension.

 

Easeus Data Recovery can also scan drives but it will only let you recover 2gb for free.

 

Depending on the importance of the data you may want to consider a professional recovery service but this is not cheap. DriveSavers is one of the better services.

 

Run Testdisk and select Advanced, not Analyze. Use the arrow keys to select Boot at the bottom of the Window. Are both boot sectors listed as okay? 



#13 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 06 May 2017 - 03:22 PM

 

Run Testdisk and select Advanced, not Analyze. Use the arrow keys to select Boot at the bottom of the Window. Are both boot sectors listed as okay? 

Disk /dev/sdd - 4000 GB / 3725 GiB - CHS ...
    Partition                Start        End     Size in sectors
1 P HPFS - NTFS            0   4  5 60799 163 36  976745984 [My Book]

Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.


#14 JohnC_21

JohnC_21

  • Members
  • 24,841 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:00 PM

Posted 06 May 2017 - 03:33 PM

Can you post a screenshot after doing a quick search?



#15 Mackenkay

Mackenkay
  • Topic Starter

  • Members
  • 10 posts
  • OFFLINE
  •  
  • Local time:05:00 PM

Posted 06 May 2017 - 03:52 PM

You mean like this?

 

Attached File  scn1.png   31.76KB   0 downloads






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users