PC3K Won't Save Entire File

[Philip Shaw]

Good afternoon. I did a head exchange on a 5TB Seagate (ST5000LM000) and imaged about 1.5TB of data without a problem other than some platter damage. I saved off three of the files with no issues but the fourth file keeps dying out at exactly 550.1GB/900.0GB. It has done this at least five times in a row. It is a Windows 10 vhd file. It has 1,887,418,386 successfully read files with 40 errors (black) and 18,375 read with utility (orange). I am working with the copy only and I think the errors are well before where the copy stops. 

I have tried writing to a different drive, different USB ports and cables, and used SATA0 and SATA1, This is frustrating me because I put a lot of time into this and I want to get the data to the customer. Any thoughts?

Thanks.

[t...@desertdatarecovery.com]

Is the drive you saved the PC3000 image to bad?

I.e. the one you are copying from.

 

Tim Homer - Lead Engineer

Desert Data Recovery

+1 (602) 686 2622

t...@desertdatarecovery.com

www.desertdatarecovery.com

--
Data Recovery Certification Group / for issue with google group please email sc...@myharddrivedied.com
---
You received this message because you are subscribed to the Google Groups "DataRecoveryCertification" group.
To unsubscribe from this group and stop receiving emails from it, send an email to datarecoverycertif...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/datarecoverycertification/CAPG2QkYVE%3DFhNhtMGtRp1fmnUM0iJfsxFW9t6zJWFmGhNutoHQ%40mail.gmail.com.

[Philip Shaw]

I copied the entire 2.3TB to another drive and tried to save off the file and it just failed again. This is driving me crazy.

To view this discussion visit https://groups.google.com/d/msgid/datarecoverycertification/059601dc451d%24dcda3b90%24968eb2b0%24%40desertdatarecovery.com.

[Desert Data Recovery]

What file system is it being saved to?

To view this discussion visit https://groups.google.com/d/msgid/datarecoverycertification/CAPG2QkYQmQxf7vfGS_b2fOBdsVfwVCuj769CMYCzeqHSvtdbYg%40mail.gmail.com.

[wayne horner]

Could be that pc3k is having trouble processing the cluster list.

I wonder if this vhd is highly fragmented.

The base-mft file entry is 2 blocks. Does it have data filling the second block of the mft? NTFS used a run list to map the files fragments. A run is structured as starting cluster, cluster-count pair. Most files have 1 or 2 fragments so the second mft block is zeros. If the vhd was dynamically allocated then It could have filled the base-mfts 2 blocks. Then NTFS allocates extension mft records to handle the overflow run pairs. Could be that there is a problem with the run list at 550gb.

So In pc3k was your destination a physical drive? 

Use studio or ufs to open the destination. Navigate to the vhd.

Open in hex view. 

Can you see first and last sector, can you scroll to any place? 

RS has a right click file stat/info option that will show all the clusters in the run list. It allows you to click any run and he view there. Does that work? 

Can rs copy the file? 

Alandata Data Recovery -  (949)287-3282  
"Cleanroom Data Recovery of RAID, VMware, Network Attached Storage, Linux, Tape, Disk, Forensics"

www.AlanData.com   www.AlanDataRecovery.com

To view this discussion visit https://groups.google.com/d/msgid/datarecoverycertification/CAOasWzsu9d4UBg1y0ObctdNJH9ZePnOpy7ssTTdQtq%2B7RM6OhA%40mail.gmail.com.