Trying to recover partition: The harddisk (500 GB / 465 GiB) seems too small! (< 782 GB / 729 GiB)

[MysticXV]

Hi, this is my first time using TestDisk. My harddrive is a 500GB ssd and I only made one partition on it and had Win10 installed on it. I recently couldn't boot into Win10 anymore and have been troubleshooting it. I ran PhotoRec and have been able to recover some files. When I ran TestDisk I ran into some problems and need some advise on how to proceed. I ran quick search and deeper search and the log is shown below.

Thanks for the help.

Code: Select all

Thu May 14 11:52:42 2020
Command line: TestDisk

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=240057409536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=240057409536
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=3000592982016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=499560601600
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=240054697984
Hard disk list
Disk /dev/sda - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 850 EVO 500GB, S/N:S21HNEAFC06466K, FW:EMT01B6Q
Disk /dev/sdb - 240 GB / 223 GiB - CHS 29185 255 63, sector size=512 - CT240BX300SSD1, S/N:1736E102AD42, FW:M2CR010
Disk /dev/sdc - 3000 GB / 2794 GiB - CHS 364801 255 63, sector size=512 - ST3000DM001-1CH166, S/N:Z1F5LPGR, FW:CC27
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512 - Samsung SSD 850 EVO 500GB, S/N:S21HNXAG616532B, FW:EMT01B6Q

Partition table type (auto): Intel
Disk /dev/sdd - 500 GB / 465 GiB - Samsung SSD 850 EVO 500GB
Partition table type: Intel

Analyse Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63
Geometry from i386 MBR: head=126 sector=10
BAD_RS LBA=1342242815 13398241
check_part_i386 1 type 1D: no test
BAD_RS LBA=10878976 4112695
BAD_RS LBA=3080191 5172945
BAD_RS LBA=65535 5172945
Current partition structure:
 1 * Sys=1D               83550 191 33 83550 191 33          1

Warning: Bad starting head (CHS and LBA don't match)
 2 E extended LBA           677  47 11   677  50 13        192

Bad relative sector.
 3 P OpenBSD                191 186 59   191 187 41         46 [­tr@Ç’û‹ÿU‹ìQQS]

Bad relative sector.
 4 P OpenBSD                  4  20 16     4  20 15          0

Bad relative sector.

test_logical: 
Partition sector doesn't have the endmark 0xAA55

search_part()
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 34465/108/12
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size           975517930
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          34465 108 12 95188 154 48  975517930
     NTFS, blocksize=4096, 499 GB / 465 GiB
This partition ends after the disk limits. (start=553687040, size=975517930, end=1529204969, disk end=976773168)
NTFS at 60736/43/44
filesystem size           1044480
sectors_per_cluster       8
mft_lcn                   43520
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          60736  43 44 60801  47 46    1044480
     NTFS, blocksize=4096, 534 MB / 510 MiB
file_pread(7,2,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(7,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(7,2,buffer,976773200(60801/81/33)) lseek err Invalid argument
file_pread(7,1,buffer,976773200(60801/81/33)) lseek err Invalid argument
file_pread(7,3,buffer,976773182(60801/81/15)) lseek err Invalid argument
file_pread(7,1,buffer,976773182(60801/81/15)) lseek err Invalid argument
file_pread(7,8,buffer,976773198(60801/81/31)) lseek err Invalid argument
file_pread(7,11,buffer,976773245(60801/82/15)) lseek err Invalid argument
file_pread(7,2,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(7,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(7,1,buffer,976773206(60801/81/39)) lseek err Invalid argument
file_pread(7,1,buffer,976773256(60801/82/26)) lseek err Invalid argument
file_pread(7,1,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(7,8,buffer,976773376(60801/84/20)) lseek err Invalid argument
file_pread(7,8,buffer,976773504(60801/86/22)) lseek err Invalid argument
file_pread(7,8,buffer,976773632(60801/88/24)) lseek err Invalid argument
file_pread(7,8,buffer,976773760(60801/90/26)) lseek err Invalid argument
file_pread(7,8,buffer,976773888(60801/92/28)) lseek err Invalid argument
file_pread(7,8,buffer,976774016(60801/94/30)) lseek err Invalid argument
file_pread(7,8,buffer,976774144(60801/96/32)) lseek err Invalid argument
file_pread(7,8,buffer,976774272(60801/98/34)) lseek err Invalid argument
file_pread(7,8,buffer,976774400(60801/100/36)) lseek err Invalid argument
file_pread(7,8,buffer,976774528(60801/102/38)) lseek err Invalid argument
file_pread(7,8,buffer,976774656(60801/104/40)) lseek err Invalid argument
file_pread(7,8,buffer,976774784(60801/106/42)) lseek err Invalid argument
file_pread(7,8,buffer,976774912(60801/108/44)) lseek err Invalid argument
file_pread(7,8,buffer,976775040(60801/110/46)) lseek err Invalid argument
file_pread(7,8,buffer,976775168(60801/112/48)) lseek err Invalid argument
file_pread(7,8,buffer,976775176(60801/112/56)) lseek err Invalid argument
file_pread(7,3,buffer,976775184(60801/113/1)) lseek err Invalid argument
file_pread(7,3,buffer,976775231(60801/113/48)) lseek err Invalid argument
file_pread(7,8,buffer,976775247(60801/114/1)) lseek err Invalid argument
file_pread(7,11,buffer,976775294(60801/114/48)) lseek err Invalid argument
file_pread(7,2,buffer,976777216(60801/145/17)) lseek err Invalid argument
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 782 GB / 729 GiB)
The following partition can't be recovered:
     HPFS - NTFS          34465 108 12 95188 154 48  975517930
     NTFS, blocksize=4096, 499 GB / 465 GiB

Results
   * HPFS - NTFS          60736  43 44 60801  47 46    1044480
     NTFS, blocksize=4096, 534 MB / 510 MiB

interface_write()
 1 * HPFS - NTFS          60736  43 44 60801  47 46    1044480

search_part()
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63
NTFS at 34465/108/12
heads/cylinder 240 (NTFS) != 255 (HD)
filesystem size           975517930
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          34465 108 12 95188 154 48  975517930
     NTFS, blocksize=4096, 499 GB / 465 GiB
This partition ends after the disk limits. (start=553687040, size=975517930, end=1529204969, disk end=976773168)
NTFS at 60736/43/44
filesystem size           1044480
sectors_per_cluster       8
mft_lcn                   43520
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          60736  43 44 60801  47 46    1044480
     NTFS, blocksize=4096, 534 MB / 510 MiB
NTFS at 60801/47/46
filesystem size           1044480
sectors_per_cluster       8
mft_lcn                   43520
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS          60736  43 44 60801  47 46    1044480
     NTFS found using backup sector, blocksize=4096, 534 MB / 510 MiB
file_pread(7,2,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(7,1,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(7,2,buffer,976773200(60801/81/33)) lseek err Invalid argument
file_pread(7,1,buffer,976773200(60801/81/33)) lseek err Invalid argument
file_pread(7,3,buffer,976773182(60801/81/15)) lseek err Invalid argument
file_pread(7,1,buffer,976773182(60801/81/15)) lseek err Invalid argument
file_pread(7,8,buffer,976773198(60801/81/31)) lseek err Invalid argument
file_pread(7,11,buffer,976773245(60801/82/15)) lseek err Invalid argument
file_pread(7,2,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(7,3,buffer,976773183(60801/81/16)) lseek err Invalid argument
file_pread(7,1,buffer,976773206(60801/81/39)) lseek err Invalid argument
file_pread(7,1,buffer,976773256(60801/82/26)) lseek err Invalid argument
file_pread(7,1,buffer,976775169(60801/112/49)) lseek err Invalid argument
file_pread(7,8,buffer,976773376(60801/84/20)) lseek err Invalid argument
file_pread(7,8,buffer,976773504(60801/86/22)) lseek err Invalid argument
file_pread(7,8,buffer,976773632(60801/88/24)) lseek err Invalid argument
file_pread(7,8,buffer,976773760(60801/90/26)) lseek err Invalid argument
file_pread(7,8,buffer,976773888(60801/92/28)) lseek err Invalid argument
file_pread(7,8,buffer,976774016(60801/94/30)) lseek err Invalid argument
file_pread(7,8,buffer,976774144(60801/96/32)) lseek err Invalid argument
file_pread(7,8,buffer,976774272(60801/98/34)) lseek err Invalid argument
file_pread(7,8,buffer,976774400(60801/100/36)) lseek err Invalid argument
file_pread(7,8,buffer,976774528(60801/102/38)) lseek err Invalid argument
file_pread(7,8,buffer,976774656(60801/104/40)) lseek err Invalid argument
file_pread(7,8,buffer,976774784(60801/106/42)) lseek err Invalid argument
file_pread(7,8,buffer,976774912(60801/108/44)) lseek err Invalid argument
file_pread(7,8,buffer,976775040(60801/110/46)) lseek err Invalid argument
file_pread(7,1,buffer,976775167(60801/112/47)) lseek err Invalid argument
file_pread(7,1,buffer,976775168(60801/112/48)) lseek err Invalid argument
Disk /dev/sdd - 500 GB / 465 GiB - CHS 60801 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (500 GB / 465 GiB) seems too small! (< 782 GB / 729 GiB)
The following partition can't be recovered:
     HPFS - NTFS          34465 108 12 95188 154 48  975517930
     NTFS, blocksize=4096, 499 GB / 465 GiB

Results
   * HPFS - NTFS          60736  43 44 60801  47 46    1044480
     NTFS, blocksize=4096, 534 MB / 510 MiB

interface_write()
 1 * HPFS - NTFS          60736  43 44 60801  47 46    1044480

[cgrenier]

Choose EFI GPT, Analyse, Quick Search, Stop, Deeper Search, use 'p' to list the files from each partition.
Use the arrow key to switch the partition to recover to P(rimary).
On next screen, choose Write, confirm.

[MysticXV]

I got to the point after doing a deep search and it shows a list of partitions. There are 38 partitions in the list. I checked the files in all the partitions and none of them had files I recognized. A bunch of them said they were corrupted or there was no partition. Out of the ones that had files there were barely any files. Do I just need to select one of the boot partitions and go with it. I'm not sure how to tell which one is the correct one. PhotoRec is able to see the files on the partition though since I was able to recover files using it.

[recuperation]

Even if you find the right boot partition you still need the partition with your operating system which you did not find.

Unfortunately there is not much more left than trying Photorec or any other third party software for better results.

[MysticXV]

For clarification i just wanted to confirm that I should see all the same directories I would normally have seen when the hard drive was working normally. The most I saw was either a partition would have a directory structure of Recovery->WindowsRE->(a few files but no more folders) and some just had a System Volume Information folder that was empty. I don't remember creating another partition but it sounds like windows possibly had a recovery partition. A note i tried a windows boot flash drive and it couldn't fix anything.