WD file system labelled 'RAW'

[monhinz]

Hello

My WD hard drive had been showing problems from quite some time. It would connect sporadically to my computer and even others.

Then suddenly it completely stopped working. The icon under 'Other Drives' in Device Manager was marked by the typical 'yellow-exclamation-mark'. I tried uninstalling, updating but to no avail.

Then I manually installed the updated WD SES driver.

After this the 'yellow exclamation mark' disappeared but my drive still didn't show up in my computer. When I opened DiskManagement, the drive was labelled as 'Unallocated' and so I assigned a letter L without formatting, which I believe was a mistake.

Now whenever I connect the device it asks me to format it, which I obviously don't want to. Also in DiskManagement, the file system for the drive is shown as 'RAW'.

Is there any way to get my precious, 5-year old data back?

Any help appreciated!

 

[rgd1101]

You suppose to backup your data when it start showing problem, not after it totally failed.

 

[Dogsnake]

Giving the drive a letter was ok and the right thing to do. There are a few causes for what has happened. It is most likely the MBR (master boot record) is damaged but all the data is safe. Before you go furter back up the RAW file if you can.

Ok try this one mount the drive as a slave inside the computer and see if you can repair the partition table:

Download the Windows version of TestDisk. http://www.cgsecurity.org/wiki/TestDisk
Unzip the downloaded file to your C: drive and open C:\testdisk-6.8\win > double click " testdisk_win" (the program doesn't have to installed).

A. At the first window select “No Log” and press the <Enter> key.
B. Select what drive to analyse, choose “Proceed” and <Enter>.
C. Select partition type – Intel if it’s a PC.
D. Select “Analyse” then <Enter>. The drive/partition will be analysed.
E. Select “Proceed” at the next screen, then <Enter>.
F. Press “Y” if the partitions were created under Vista – “N” if not.
G. TestDisk should say “Structure OK”. Choose the drive/partition to fix. Then press <Enter>.
H. Select “Write” and press <Enter>.
I. Press “Y”.
J. Press <Enter> and close TestDisk. Reboot the computer

 

[Saberus]

If the disk is showing as a RAW partition, it doesn't see any file system at all. You can try drive scanners to try and find the FAT/MBR/GPT and maybe recover your files, but any thing you do that creates a new file system may ruin your already slim chances. The hard part is most utilities that are free don't work on RAW. Recovery at this point may prove a lost cause.

 

[monhinz]

If the disk is showing as a RAW partition, it doesn't see any file system at all. You can try drive scanners to try and find the FAT/MBR/GPT and maybe recover your files, but any thing you do that creates a new file system may ruin your already slim chances. The hard part is most utilities that are free don't work on RAW. Recovery at this point may prove a lost cause.

Will a linux system be able to read a RAW file system?
Also will ZAR be of any help?

I don't really see how this drive can become useless and lose my data in a moment!

 

[Saberus]

RAW means what is says, a raw drive with no file table. I am not aware of any Linux utility that will try to read a RAW drive, but I am by no means an expert in Linux.

Drives can fail at any time, you can use a utility to pull the drive's SMART data and see if it's exceeded some variable. Some chip on the board could have failed and isn't reading the data from the disk.

 

[fzabkar]

Depending on the extent of file system damage, a Ubuntu Live CD may be able to mount it.

While TestDisk may work, I would first examine the structure of the drive with a disc editor, eg DMDE (freeware). The partition table lives in sector 0, so I would look there first. I would also examine DMDE's Partitions window.

BTW, the SES driver merely enables the specific features of the USB mass storage device (eg capacity LEDs, one-touch backup, etc). AIUI, it does not affect data access.

I would also examine the drive's SMART report with a tool such as CrystalDiskInfo or HD Sentinel. Look for reallocated, pending, or uncorrectable sectors.

 

[monhinz]

Depending on the extent of file system damage, a Ubuntu Live CD may be able to mount it.

While TestDisk may work, I would first examine the structure of the drive with a disc editor, eg DMDE (freeware). The partition table lives in sector 0, so I would look there first. I would also examine DMDE's Partitions window.

BTW, the SES driver merely enables the specific features of the USB mass storage device (eg capacity LEDs, one-touch backup, etc). AIUI, it does not affect data access.

I would also examine the drive's SMART report with a tool such as CrystalDiskInfo or HD Sentinel. Look for reallocated, pending, or uncorrectable sectors.

I looked at the S.M.A.R.T. report with HD Sentinel and other tools and it seems its in good health at 80% with 34 WEAK sectors. Also the relocated sector count is 0, however it shows 22 Current Pending Sectors.

Is there a way by which I can clear these pending sectors also get my data back?

Really thankful for your support.

 

[fzabkar]

"Pending" sectors are those that have been flagged as being due for replacement. They can only be cleared if the drive manages to read them again, or if the OS decides to rewrite them.

If you are not comfortable with probing the file system with a disc editor, then I would follow the advice given by others.

 

[monhinz]

"Pending" sectors are those that have been flagged as being due for replacement. They can only be cleared if the drive manages to read them again, or if the OS decides to rewrite them.

If you are not comfortable with probing the file system with a disc editor, then I would follow the advice given by others.

Hello again

I used DMDE to check the partition table.Is it possible to see and tell if everything is all right with the MBR or its messed up?

 

[Dogsnake]

Windows labels a disk file system RAW when it can not identify what type it is. It does not mean the disk in bad or the data corrupt. It may only be that the MBR has been corrupted. This is not uncommon with external drives when a power loss or other failure of connection between the system and the drive. The "house is still there and all it's contents" "only the address and directions to the house has been removed". Here is a link to the TestDisk page with step by step instructions. (http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step). I would expect that you can recover your data and disk function with it.

 

[fzabkar]

@monhinz, you have shown us the contents of sector #1953458175.

1953458175 sectors x 512 bytes-per-sector = 1 000 170 585 600 bytes

ISTM that you are showing us the backup boot sector at the end of a 1TB drive. You need to show us sector 0.

To display the contents in hexadecimal, select Mode -> Hexadecimal/Text.

To show the contents as a boot sector, select Mode -> FAT/FAT32/NTFS Boot record.

To show the contents as a partition table, select Mode -> Partition Table MBR/GPT.

 

[monhinz]

@monhinz, you have shown us the contents of sector #1953458175.

1953458175 sectors x 512 bytes-per-sector = 1 000 170 585 600 bytes

ISTM that you are showing us the backup boot sector at the end of a 1TB drive. You need to show us sector 0.

To display the contents in hexadecimal, select Mode -> Hexadecimal/Text.

To show the contents as a boot sector, select Mode -> FAT/FAT32/NTFS Boot record.

To show the contents as a partition table, select Mode -> Partition Table MBR/GPT.

Here are screenshots of what I presume contain the MBR/sector 0.

 

[fzabkar]

@monhinz, the partition table shows a partition ID of 06h (FAT16). This is clearly in error. It should be 07h (NTFS), or perhaps FAT32. It is not clear whether we are seeing the original damage, or whether this error has been introduced by your use of TestDisk.

Could you show us DMDE's Partitions window?

Could you also show us the contents of sector 2048? That's the location of the boot sector for the first partition.

 

[monhinz]

@monhinz, the partition table shows a partition ID of 06h (FAT16). This is clearly in error. It should be 07h (NTFS), or perhaps FAT32. It is not clear whether we are seeing the original damage, or whether this error has been introduced by your use of TestDisk.

Could you show us DMDE's Partitions window?

Could you also show us the contents of sector 2048? That's the location of the boot sector for the first partition.

Hello

The partition window is attached and also the sector 2048.

 

[fzabkar]

DMDE has found an old 1TB partition (MinhenZ) beginning at sector 2048 and ending at sector 1953458175. It appears to be your missing partition.

Normally there should be a boot record at sector 2048, but this has been zeroed. Fortunately DMDE has found a copy (indicator C) and a recognisable NTFS file system (indicator F).

If you double-click the MinhenZ partition, can you see your data? If so, and if you recover one of your files to another drive, is the file intact? If so, then try the following.

R-click the MSData (06) Primary (A) partition and select Remove the Partition.

R-click the MinhenZ partition and select Restore Boot Sector From the Copy.

R-click the MinhenZ partition and select Insert the Partition (Undelete).

Select Drive -> Apply Changes

You may need to select Edit -> Edit Mode beforehand.

Safely eject the drive as you normally would. Then reconnect it to force the OS to reexamine the file system.

Good luck.

BTW, it would safest to recover your files to another drive with DMDE before you edit your patient HDD. Cloning your patient and then working on the clone would be safer, too.

 

[monhinz]

DMDE has found an old 1TB partition (MinhenZ) beginning at sector 2048 and ending at sector 1953458175. It appears to be your missing partition.

Normally there should be a boot record at sector 2048, but this has been zeroed. Fortunately DMDE has found a copy (indicator C) and a recognisable NTFS file system (indicator F).

If you double-click the MinhenZ partition, can you see your data? If so, and if you recover one of your files to another drive, is the file intact? If so, then try the following.

R-click the MSData (06) Primary (A) partition and select Remove the Partition.

R-click the MinhenZ partition and select Restore Boot Sector From the Copy.

R-click the MinhenZ partition and select Insert the Partition (Undelete).

Select Drive -> Apply Changes

You may need to select Edit -> Edit Mode beforehand.

Safely eject the drive as you normally would. Then reconnect it to force the OS to reexamine the file system.

Good luck.

BTW, it would safest to recover your files to another drive with DMDE before you edit your patient HDD. Cloning your patient and then working on the clone would be safer, too.

Wowwy!

My HD is back in action. THanks a lot for your valuable help fzabkar. I have now successfully recovered my data. You are a pro!!

Further, I analysed the S.M.A.R.T. report again and it tells me that the health has been decreasing with pending sector count also increasing. I have attached the report for your perusal. My question is, can I do something about these sectors or the drive is too vulnerable to be used now?

Although it still has 2 more years of warranty period.
Thanks again!

 

[fzabkar]

If the bad sectors are increasing, then your drive cannot be trusted. The Raw Read Error Rate attribute has also degraded. I suspect that these bad sectors may have been the underlying cause of your file system corruption.

Congratulations anyway.

 

[SJGhosh]

Hi, @fzabkar and folks -

Hope you all are doing well!

I"m facing a similar issue with my external hard drive - 'whenever I connect the device it asks me to format it, which I obviously don't want to. Also in DiskManagement, the file system for the drive is shown as 'RAW'. '

With DMDE, I can browse through the folders and it looks all OK. I recovered one file in my local computer drive and it appeared fine as well.

Attaching a screeenshot of DMDE partition window for your perusal. Could you please help me to rectify it? Kindly guide and feel free to ask me any additional info you may need.

With a lot of hope, thanks in advance!

https://flic.kr/p/2mZbxUw

 

[USAFRet]

I"m facing a similar issue with my external hard drive

Please please start a NEW thread for your particular situation.

This one is 7 years old.