Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

Can I get the data off this 2.5" HDD?


  • Please log in to reply
38 replies to this topic

#31 Shplad

Shplad
  • Topic Starter

  •  Avatar image
  • Members
  • 6,554 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:41 AM

Posted 09 April 2024 - 12:04 PM

How do I stop the scan? There are no menu options showing on the screen.

 

I tried ESC. I tried "Q" for quit. Didn't work. PLEASE tell me there's a way to stop the current operation without quitting the program?

 

Better yet, How is that not in the documentation?

 

 

Also, while Testdisk is running, my Explorer can hang (not responding) on certain folders that are not on the drive under test. What's up with that? Windows memory isolation issue?


Edited by Shplad, 09 April 2024 - 12:34 PM.

- Use this to collect and post information about your PC hardware, software and configuration (Whether or not you have crashing).

 

Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 & Vista

https://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

 


BC AdBot (Login to Remove)

 


#32 JohnC_21

JohnC_21

  •  Avatar image
  • Members
  • 34,803 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:41 AM

Posted 09 April 2024 - 01:14 PM

Pressing Q should have quit the program. Does Ctrl+C work?  I can't say why  explorer is hanging unless it's because Testdisk is hogging memory. If Ctrl + C doesn't work I would simply close out Testdisk as  a scan is only doing a read on the drive. Nothing is written to the drive.

 

If you can't close the program open Task Manager and quit the Testdisk process.



#33 Shplad

Shplad
  • Topic Starter

  •  Avatar image
  • Members
  • 6,554 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:41 AM

Posted 09 April 2024 - 01:28 PM

Just tried Ctrl-C / Ctrl-Break. Neither worked. Only Task Manager worked.

 

Okay, it's showing some appropriate files on the partition in question. What next? Do I try to repair the boot sector/partition table?

 

 

 

 

 

 

On a separate note, skimming through the Testdisk docs, it reads: 

 

In some cases, especially after initiating a detailed search for lost partitions, TestDisk may show partition data which is from the remnants of a partition that had been deleted and overwritten long ago.

 

 

Does this apply to the Deeper Scan results screen, or only the screen where it summarizes the partitions it believes it's found?

 

I'm wondering if the person who sold this drive to my friend had HFS or FAT(32) partitions on it before selling it to him.


Edited by Shplad, 09 April 2024 - 02:24 PM.

- Use this to collect and post information about your PC hardware, software and configuration (Whether or not you have crashing).

 

Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 & Vista

https://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

 


#34 JohnC_21

JohnC_21

  •  Avatar image
  • Members
  • 34,803 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:41 AM

Posted 09 April 2024 - 02:28 PM

It's possible it had partitions previously.  I don't have that much experience with Testdisk but the Deeper Scan would likely find any partition remnants. Looking at your image in post #16 I you can see that there are partitions that have sector overlaps. I believe this is why your disk is labeled as RAW. I was hoping you could get the Quick Scan to complete. In post #14 you can see that the one partition had a sector overlap also. I was hoping simply pressing upper case P after highlighting the Acer partition would get show all the files.

 

If a Quick Search doesn't completet the next step would be to use PhotoRec which is in the Testdisk folder. The downside of PhotoRec is that all files recovered have generic names with the correct extension. A file would need to be opened to determine what it is. PhotoRec also recovers files in real time so the recovery drive needs to have the required space, enough to recover all the files on the problem drive. All the files recovered default to the Testdisk folder so if there isn't enough space on the drive you launched Testdisk from you can attach an external USB drive with enough free space and have the Testdisk folder on the external when launched.

 

There are paid programs that can recover data with the file names intact, those being Minitools Data Recover and Easeus Data Recovery.



#35 Shplad

Shplad
  • Topic Starter

  •  Avatar image
  • Members
  • 6,554 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:41 AM

Posted 09 April 2024 - 02:49 PM

John:

 

Thanks again. I futzed around with it, and Testdisk is now copying pictures to another, known good drive. Tons of them. I will then do the same for Docs, Contacts and maybe bookmarks. After all that, I'm wondering whether it would be worth the effort to repair the partition. I ask because the laptop this drive was in was dropped on the floor. Hence the damage.


- Use this to collect and post information about your PC hardware, software and configuration (Whether or not you have crashing).

 

Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 & Vista

https://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

 


#36 JohnC_21

JohnC_21

  •  Avatar image
  • Members
  • 34,803 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:01:41 AM

Posted 09 April 2024 - 03:13 PM

I wouldn't bother repairing the partition if you get all the required data off the drive especially since the laptop was dropped. I would reformat the drive and then run a chkdsk /r on the drive. Maybe a long scan using GsmartControl to see if the drive passes. I wouldn't be using the drive unless the data on it was backed up to another device. I wouldn't be using it for an OS drive.



#37 Shplad

Shplad
  • Topic Starter

  •  Avatar image
  • Members
  • 6,554 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:41 AM

Posted 09 April 2024 - 04:24 PM

Okay, I must say this has been a good learning experience. I was under the impression at the beginning of all this that Testdisk couldn't restore data until the partition table/boot sector was repaired. And boy, was I wrong. I'm glad I was.

 

Yes, I absolutely won't recommend my friend use this drive, as it's way too old and already has damage, mostly likely physical damage to the platters.

 

I'll post back if I have any more questions.

 

Thanks SO much, John and Dan.


Edited by Shplad, 09 April 2024 - 04:25 PM.

- Use this to collect and post information about your PC hardware, software and configuration (Whether or not you have crashing).

 

Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 & Vista

https://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

 


#38 Shplad

Shplad
  • Topic Starter

  •  Avatar image
  • Members
  • 6,554 posts
  • ONLINE
  •  
  • Gender:Not Telling
  • Location:Canada
  • Local time:01:41 AM

Posted 15 April 2024 - 02:03 PM

All needed data retrieved. Thanks again.


- Use this to collect and post information about your PC hardware, software and configuration (Whether or not you have crashing).

 

Blue Screen of Death (BSOD) Posting Instructions - Windows 10, 8.1, 8, 7 & Vista

https://www.bleepingcomputer.com/forums/t/576314/blue-screen-of-death-bsod-posting-instructions-windows-10-81-8-7-vista/

 

 


#39 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 34,434 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:41 AM

Posted 16 April 2024 - 01:10 PM

Just to note testdisk and photorec are tools that are allowed to be used in computer abd digital forensics to recover data from suspected clean drives.

https://www.cgsecurity.org/wiki/TestDisk_and_PhotoRec_in_various_digital_forensics_testcase

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users