SOLVED The harddisk (120 GB / 111 GiB) seems too small!

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
sparvier
Posts: 2
Joined: 17 Feb 2016, 12:15

SOLVED The harddisk (120 GB / 111 GiB) seems too small!

#1 Post by sparvier »

I solved it.

I rebuilt the boot sector of *both* the lost partition *and* the boot partition and it worked!!!!

Now the partition is visible!!!! This software is DYNAMITE!!!

Thanks to all of you for this wonderful software.

Paolo

Here's a part of the log of the last session:

filesystem size 233615297 234434553
sectors_per_cluster 8 8
mft_lcn 786432 786432
mftmirr_lcn 2 2
clusters_per_mft_record -10 -10
clusters_per_index_record 1 1
Write new boot!

ntfs_boot_sector
2 P HPFS - NTFS 51 30 44 14592 254 63 233615297
NTFS at 51/30/44
NTFS at 51/30/44
filesystem size 233615297
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
NTFS Volume is dirty.


----------------------------------------------------------
I have a problem with my Samsung SSD 840 with Windows 7 64 bit Ultimate.

Three days ago, while I was working, the "Desktop" freezed and I could do nothing to bring it back.

I shutted down my PC keeping the power button pressed and then restarted it.

I got a blue screen with error UNMOUNTABLE BOOT DEVICE.

I analyzed with TestDisk and I got this error:
The harddisk (120 GB / 111 GiB) seems too small! (< 120 GB / 112 GiB)

I rebuilt the MBR and then tried to re-add the lost partition manually (using as start and end boundaries what testdisk suggested as the "real" disk size) but when I rebooted, the error was just the same.

Here's last two sessions log:


Wed Feb 17 12:09:43 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=320070483968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=161061273600
filewin32_getfilesize(\\.\E:) GetFileSize err Funzione non corretta.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Funzione non corretta.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=536870912000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=161061273600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=42949672960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=214748364800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=214748364800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=168855339008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=419430400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=119611032064
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk /dev/sdb - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive C: - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive D: - 161 GB / 150 GiB - CHS 19581 255 63, sector size=512
Drive F: - 536 GB / 500 GiB - CHS 65270 255 63, sector size=512
Drive H: - 42 GB / 40 GiB - CHS 5221 255 63, sector size=512
Drive I: - 214 GB / 200 GiB - CHS 26108 255 63, sector size=512
Drive K: - 168 GB / 157 GiB - CHS 20528 255 63, sector size=512
Drive L: - 419 MB / 400 MiB - CHS 50 255 63, sector size=512
Drive M: - 119 GB / 111 GiB - CHS 14541 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sda - 120 GB / 111 GiB
Partition table type: Intel

Analyse Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 51/30/44
Error: size boot_sector 234434553 > partition 233615297
check_part_i386 failed for partition type 07
Current partition structure:
1 P HPFS - NTFS 0 32 33 51 30 43 819200
Error: size boot_sector 234434553 > partition 233615297
Invalid NTFS or EXFAT boot
2 * HPFS - NTFS 51 30 44 14592 254 63 233615297
2 * HPFS - NTFS 51 30 44 14592 254 63 233615297

search_part()
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
NTFS at 0/32/33
filesystem size 819200
sectors_per_cluster 8
mft_lcn 45
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 51 30 43 819200
NTFS, blocksize=4096, 419 MB / 400 MiB
NTFS at 51/30/44
filesystem size 234434553
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 51 30 44 14643 254 4 234434553
NTFS, blocksize=4096, 120 GB / 111 GiB
This partition ends after the disk limits. (start=821248, size=234434553, end=235255800, disk end=234441648)
file_pread(4,2,buffer,234442752(14593/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,234442752(14593/98/34)) lseek err Invalid argument
file_pread(4,1,buffer,234442751(14593/98/33)) lseek err Invalid argument
file_pread(4,14,buffer,234442753(14593/98/35)) lseek err Invalid argument
file_pread(4,3,buffer,234442767(14593/98/49)) lseek err Invalid argument
file_pread(4,3,buffer,234442814(14593/99/33)) lseek err Invalid argument
file_pread(4,8,buffer,234442830(14593/99/49)) lseek err Invalid argument
file_pread(4,11,buffer,234442877(14593/100/33)) lseek err Invalid argument
file_pread(4,2,buffer,234444799(14593/131/2)) lseek err Invalid argument
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
(< 120 GB / 112 GiB)
The following partition can't be recovered:
HPFS - NTFS 51 30 44 14643 254 4 234434553
NTFS, blocksize=4096, 120 GB / 111 GiB

Results
* HPFS - NTFS 0 32 33 51 30 43 819200
NTFS, blocksize=4096, 419 MB / 400 MiB
Change partition type:
HPFS - NTFS 51 30 44 14592 254 63 233615297

interface_write()
1 * HPFS - NTFS 0 32 33 51 30 43 819200
2 P HPFS - NTFS 51 30 44 14592 254 63 233615297
write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
You will have to reboot for the change to take effect.

TestDisk exited normally.



Wed Feb 17 12:23:08 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 7 (7600)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=120034123776
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1500301910016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=320072933376
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=320070483968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=161061273600
filewin32_getfilesize(\\.\E:) GetFileSize err Funzione non corretta.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Funzione non corretta.

Warning: can't get size for \\.\E:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=536870912000
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=161061273600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=42949672960
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=214748364800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=214748364800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=168855339008
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=419430400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=119611032064
Hard disk list
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63, sector size=512
Disk /dev/sdb - 1500 GB / 1397 GiB - CHS 182401 255 63, sector size=512
Disk /dev/sdc - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive C: - 320 GB / 298 GiB - CHS 38913 255 63, sector size=512
Drive D: - 161 GB / 150 GiB - CHS 19581 255 63, sector size=512
Drive F: - 536 GB / 500 GiB - CHS 65270 255 63, sector size=512
Drive H: - 42 GB / 40 GiB - CHS 5221 255 63, sector size=512
Drive I: - 214 GB / 200 GiB - CHS 26108 255 63, sector size=512
Drive K: - 168 GB / 157 GiB - CHS 20528 255 63, sector size=512
Drive L: - 419 MB / 400 MiB - CHS 50 255 63, sector size=512
Drive M: - 119 GB / 111 GiB - CHS 14541 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sda - 120 GB / 111 GiB
Partition table type: Intel

Analyse Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
NTFS at 51/30/44
Error: size boot_sector 234434553 > partition 233615297
check_part_i386 failed for partition type 07
Current partition structure:
1 * HPFS - NTFS 0 32 33 51 30 43 819200
Error: size boot_sector 234434553 > partition 233615297
Invalid NTFS or EXFAT boot
2 P HPFS - NTFS 51 30 44 14592 254 63 233615297
2 P HPFS - NTFS 51 30 44 14592 254 63 233615297

search_part()
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
NTFS at 0/32/33
filesystem size 819200
sectors_per_cluster 8
mft_lcn 45
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 32 33 51 30 43 819200
NTFS, blocksize=4096, 419 MB / 400 MiB
NTFS at 51/30/44
filesystem size 234434553
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 51 30 44 14643 254 4 234434553
NTFS, blocksize=4096, 120 GB / 111 GiB
This partition ends after the disk limits. (start=821248, size=234434553, end=235255800, disk end=234441648)
file_pread(4,1,buffer,234442751(14593/98/33)) lseek err Invalid argument
file_pread(4,1,buffer,234442752(14593/98/34)) lseek err Invalid argument
file_pread(4,14,buffer,234442753(14593/98/35)) lseek err Invalid argument
file_pread(4,3,buffer,234442767(14593/98/49)) lseek err Invalid argument
file_pread(4,3,buffer,234442814(14593/99/33)) lseek err Invalid argument
file_pread(4,8,buffer,234442830(14593/99/49)) lseek err Invalid argument
file_pread(4,11,buffer,234442877(14593/100/33)) lseek err Invalid argument
file_pread(4,2,buffer,234444799(14593/131/2)) lseek err Invalid argument
Search for partition aborted
Disk /dev/sda - 120 GB / 111 GiB - CHS 14593 255 63
Check the harddisk size: HD jumpers settings, BIOS detection...
The harddisk (120 GB / 111 GiB) seems too small! (< 120 GB / 112 GiB)
The following partition can't be recovered:
HPFS - NTFS 51 30 44 14643 254 4 234434553
NTFS, blocksize=4096, 120 GB / 111 GiB
SIGHUP detected! TestDisk has been killed.


PS
I don't know if this can help. This "instance" of OS was originally on a magnetic classical disk.
When I bought a the Samsung 840 SSD (about three years ago), I "transferred" the OS into the new disk with their utility (Samsung Data Migration Software).
It had no problems at all until three days ago.

Thank you for your help

Paolo Sparvieri
Last edited by sparvier on 18 Feb 2016, 17:30, edited 1 time in total.

sparvier
Posts: 2
Joined: 17 Feb 2016, 12:15

Re: The harddisk (120 GB / 111 GiB) seems too small!

#2 Post by sparvier »

There are two other strange things:

1. Samsung Magician Software (Samsung Health Monitoring Software) says that HD health is GOOD!!! And SMART parameters (not in this screenshot) are OK, too! This makes me think that the HD is phisically OK but something is wrong in the "filesystem"...

2. I tried to recover all the files with TestDisk (I can apparently see all the files and folders inside this un-bootable partition). TestDisk said: xxxxxxx copied, 0 errors. However, among the recovered files, there are several 2KB files named such as ".._y8w3wfJHmlCLI9kmcRUxNfPc" full of strange characters (probably they're executable files)

I would like to know if there's something I can do to re-mount the partition...
Thanks again.
Paolo Sparvieri

Samsung Magician.png
Samsung Magician.png (126.81 KiB) Viewed 4936 times

Locked