davidoss
Content Type
Profiles
Forums
Events
Posts posted by davidoss
-
-
D:\dsfok>dsfo F:\usb\USB_full.img 0 512000 f:\usb\first100secs.img
OK, 512000 bytes, 0.047s, MD5 = 4975500c699fb72300856b1a19972eddI've uploaded the first100secs here: http://davidoss.net//first100secs.img
0 -
D:\dsfok>dsfo \\.\PHYSICALDRIVE1 0 0 f:\usb\USB_full.img
\\.\PHYSICALDRIVE1 - The request could not be performed because of an I/O device
error.
This error can probably be ignored.
OK, 99874111488 bytes, 8886.223s, MD5 = 1da3a922de229eaaf3b9df47b0965745D:\dsfok>dsfo \\.\PHYSICALDRIVE1 0 0 f:\usb\USB_full.img
0 -
Thanks Jaclaz! I've now made an image of the disk.
How should I proceed from here?
0 -
Thank you for your reply. I have been trying to use dsfok to create an image but I've stumbeld into a roadblock early on. I understand I'm meant to use it by typing this "dsfo \\.\PHYSICALDRIVEn 0 0 C:\dsfok\USB_full.img"
Unfortunately, I do not know what physical drive number my dead USB is. Any thoughts on how I could find it out?
This is the exact stick that I was using: http://www.techbuy.com.au/p/213414/FLASH_USB_FLASH_32GB/Verbatim/49174.asp
I am reasonably sure that I had not partitioned it and that it came as a standard FAT32. The main files of value are Microsoft Office word documents.I have attached a TESTDISK log below:
Mon Sep 16 19:15:09 2013
Command line: TestDiskTestDisk 6.14, Data Recovery Utility, July 2013
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7601) SP1
Compiler: GCC 4.7, Cygwin 1007.17
Compilation date: 2013-07-30T14:08:52
ext2fs lib: 1.42.2, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=61918150656
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000590401536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=62898831360
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=61918150656
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000590401536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=62898831360
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=125026959360
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=359351189504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=1658486784
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=3000589352960
filewin32_getfilesize(\\.\G:) GetFileSize err Incorrect function.filewin32_setfilepointer(\\.\G:) SetFilePointer err Incorrect function.
Warning: can't get size for \\.\G:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=1500300861440
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=1000202241024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=61918150656
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=62894702592
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - ST950032 5AS, S/N:V56EQ0FQ, FW:0002
Disk /dev/sdb - 61 GB / 57 GiB - CHS 7527 255 63, sector size=512 - Verbatim STORE N GO, S/N:0C79077420C0, FW:PMAP
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - WD Ext HDD 1021, S/N:WMC1T1299586, FW:2021
Disk /dev/sdd - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WD 10EADS External, S/N:WD-WCAU48299686, FW:1.75
Disk /dev/sde - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512 - WD 15EADS External, S/N:WD-WMAVU1693813, FW:1.75
Disk /dev/sdf - 62 GB / 58 GiB - CHS 7647 255 63, sector size=512 - Kingston DataTraveler 3.0, S/N:0B0D07F1E7A0, FW:PMAP
Disk \\.\PhysicalDrive2 - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - WD Ext HDD 1021, S/N:WMC1T1299586, FW:2021
Drive E: - 1658 MB / 1581 MiB - CHS 395 64 32, sector size=2048 - Optiarc DVD RW AD-7580S, S/N:TS49017460, FW:FX20
Drive F: - 3000 GB / 2794 GiB - CHS 45600 255 63, sector size=4096 - WD Ext HDD 1021, S/N:WMC1T1299586, FW:2021Partition table type default to Intel
Disk /dev/sdb - 61 GB / 57 GiB - Verbatim STORE N GO
Partition table type: IntelAnalyse Disk /dev/sdb - 61 GB / 57 GiB - CHS 7527 255 63
Current partition structure:Partition sector doesn't have the endmark 0xAA55
search_part()
Disk /dev/sdb - 61 GB / 57 GiB - CHS 7527 255 63
file_pread(5,2,buffer,120934400(7527/208/42)) lseek err Invalid argument
file_pread(5,1,buffer,120934400(7527/208/42)) lseek err Invalid argument
file_pread(5,1,buffer,120934399(7527/208/41)) lseek err Invalid argument
file_pread(5,14,buffer,120934401(7527/208/43)) lseek err Invalid argument
file_pread(5,3,buffer,120934415(7527/208/57)) lseek err Invalid argument
file_pread(5,3,buffer,120934462(7527/209/41)) lseek err Invalid argument
file_pread(5,8,buffer,120934478(7527/209/57)) lseek err Invalid argument
file_pread(5,11,buffer,120934525(7527/210/41)) lseek err Invalid argument
file_pread(5,2,buffer,120936447(7527/241/10)) lseek err Invalid argumentResults
interface_write()
No partition found or selected for recoverysearch_part()
Disk /dev/sdb - 61 GB / 57 GiB - CHS 7527 255 63
file_pread(5,2,buffer,120934400(7527/208/42)) lseek err Invalid argument
file_pread(5,1,buffer,120934400(7527/208/42)) lseek err Invalid argument
file_pread(5,1,buffer,120934399(7527/208/41)) lseek err Invalid argument
file_pread(5,14,buffer,120934401(7527/208/43)) lseek err Invalid argument
file_pread(5,3,buffer,120934415(7527/208/57)) lseek err Invalid argument
file_pread(5,3,buffer,120934462(7527/209/41)) lseek err Invalid argument
file_pread(5,8,buffer,120934478(7527/209/57)) lseek err Invalid argument
file_pread(5,11,buffer,120934525(7527/210/41)) lseek err Invalid argument
file_pread(5,2,buffer,120936447(7527/241/10)) lseek err Invalid argumentResults
interface_write()
No partition found or selected for recovery0 -
If someone would be kind enough to walk me through how I can go about recreating my partition table, that would be really, really appreciated!
0 -
It held around ~30GB before this happened.
0 -
I bought it from Australia, it's meant to be 60GB.
0 -
I have also tried running a deep analyse with TestDisk but it has not found any partitions.
0 -
Hello everyone, this is my first post here but sadly this is also something I have become quite desperate with.
I'm using Windows 7 and was access a USB drive with a lot of important research documents (including my thesis which I have been working on all year), and the Windows Explorer decided to hang on me.
After closing the window, I am now unable to access my USB. Attempts at accessing my USB stick drive yield "You need to format the disk in drive J: before you can use it."
I did a lot of digging around and stumbled about Testdisk. I have come to the conclusion that this could potentially be the underlying issue preventing me from accessing the files I need ever so badly on my USB stick - "Partition sector doesn't have the endmark 0xAA55".
From further digging around here (http://www.msfn.org/board/topic/133933-usb-access-problem/), I'm guessing it basically means that there might be an error causing loss of the partition or an inability for Windows to boot the partition. I've tried multiple different Partition Recovery Programs (even loading via this Linux boot disc in order to use a linux based explorer to access my files) with no success.
Unfortunately, a lot of the links in that link I've listed above are also broken. I would be greatly indebted to anyone who'd be able to walk me through exactly what I need to do in order to get my USB working. It's at least an entire year's woth of hard work that is on it which I cannot afford to lose.
Please help!
0
USB stick no longer working - Lost partition with value data
in Hard Drive and Removable Media
Posted
Photorec is actually recovering quite a few files from the disk image!
D:\dsfok>dsfo \\.\PHYSICALDRIVE1 0 512000 f:\usb\first100_2.img
OK, 512000 bytes, 0.141s, MD5 = 4975500c699fb72300856b1a19972edd
I've uploaded the new file to: http://davidoss.net//first100_2.img
jaclaz, thank you so much for your help so far.