3 TB Data HD: harddisk seems too small

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
DiskTest
Posts: 3
Joined: 24 May 2017, 04:51

3 TB Data HD: harddisk seems too small

#1 Post by DiskTest »

Hello,

OS: Win10x64 (Just upgraded from Win7x64 when the problem started)
Disk:
Type Fixed Disk, Data disk (Not bootable)
System Name 81h
Partition Style GPT
Total Size 2.73 TB (3 TB)

The disk was working fine in Win7x64 desktop as a data disk, but when I upgraded the system to Win10x64, the disk really slowed down, and then and failed showing up as RAW.

During the run, TestDisk gives errors like "check_FAT: Bad jump in FAT partition" and then towards the end, the following:

Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (801 GB / 746 GiB) seems too small! (< 3000 GB / 2794 GiB)
The following partitions can't be recovered:
MS Data 2048 4294965247 4294963200
NTFS, blocksize=4096, 2199 GB / 2047 GiB
MS Data 264192 5860532223 5860268032 [Movie Backups]
NTFS, blocksize=4096, 3000 GB / 2794 GiB


The partition "Movie Backups" is the only partition, and it has over 2TB of data. I started running Deep Scan. What shoud be the next steps? Thanks for your help.

==== The log file content is listed below =====


Sun May 21 21:26:36 2017
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, May 2017
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin32 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=4000787029504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=4000787029504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=94538563584
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=104857600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\S:)=2000392552448
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=65394442240
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=2000392552448
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - INTEL SS DSA2M160G2GC, S/N:VCOP006500QU61A0NG, FW:2CV1
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20 EARS-00MVWB0, S/N:W -DCWZA1A701953, FW:51.0
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20 EARS-00MVWB0, S/N:W -DCWZA1A815142, FW:51.0
Disk /dev/sdd - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512 - WDC WD30 EZRX-00DC0B0, S/N:W -DCW1C0T645299, FW:80.0
Disk /dev/sde - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512 - WDC WD30 EZRX-00D8PB0, S/N:W -DMW4C0N434723, FW:80.0
Disk /dev/sdf - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - Seagate BUP BK, S/N:NA7P8W8E, FW:0304

Partition table type (auto): EFI GPT
Disk /dev/sde - 801 GB / 746 GiB - WDC WD30 EZRX-00D8PB0
Partition table type: EFI GPT

Analyse Disk /dev/sde - 801 GB / 746 GiB - CHS 97451 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 1565565871)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition] [Movie Backups]



Mon May 22 19:11:27 2017
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, May 2017
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 5.4, Cygwin32 2005.2
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdd)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sde)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdf)=4000787029504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=160041885696
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398934016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive3)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive4)=801569726464
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive5)=4000787029504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=94538563584
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=4000650887168
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=3000457232384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\S:)=2000392552448
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\T:)=65394442240
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\Z:)=2000392552448
Hard disk list
Disk /dev/sda - 160 GB / 149 GiB - CHS 19457 255 63, sector size=512 - INTEL SS DSA2M160G2GC, S/N:VCOP006500QU61A0NG, FW:2CV1
Disk /dev/sdb - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20 EARS-00MVWB0, S/N:W -DCWZA1A701953, FW:51.0
Disk /dev/sdc - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - WDC WD20 EARS-00MVWB0, S/N:W -DCWZA1A815142, FW:51.0
Disk /dev/sdd - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512 - WDC WD30 EZRX-00DC0B0, S/N:W -DCW1C0T645299, FW:80.0
Disk /dev/sde - 801 GB / 746 GiB - CHS 97451 255 63, sector size=512 - WDC WD30 EZRX-00D8PB0, S/N:W -DMW4C0N434723, FW:80.0
Disk /dev/sdf - 4000 GB / 3726 GiB - CHS 486401 255 63, sector size=512 - Seagate BUP BK, S/N:NA7P8W8E, FW:0304

Partition table type (auto): EFI GPT
Disk /dev/sde - 801 GB / 746 GiB - WDC WD30 EZRX-00D8PB0
Partition table type: EFI GPT

Interface Advanced
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 1565565871)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition] [Movie Backups]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
New options :
Dump : No
Align partition: Yes
Expert mode : No

Analyse Disk /dev/sde - 801 GB / 746 GiB - CHS 97451 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=5860533167 (expected 1565565871)
hdr_lba_start=34
hdr_lba_end=5860533134
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
Current partition structure:
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
1 P MS Reserved 34 262177 262144 [Microsoft reserved partition]
2 P MS Data 264192 5860532223 5860268032 [Basic data partition] [Movie Backups]
Backup partition structure
partition_save

search_part()
Disk /dev/sde - 801 GB / 746 GiB - CHS 97451 255 63
NTFS at 0/32/33
filesystem size 4294963200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=1048576, part_size=2199021158400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 0/32/33
filesystem size 4294963200
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 2048 4294965247 4294963200
NTFS, blocksize=4096, 2199 GB / 2047 GiB
This partition ends after the disk limits. (start=2048, size=4294963200, end=4294965247, disk end=1565565872)
NTFS at 16/113/34
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
NTFS part_offset=135266304, part_size=3000457232384, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 16/113/34
filesystem size 5860268032
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
MS Data 264192 5860532223 5860268032 [Movie Backups]
NTFS, blocksize=4096, 3000 GB / 2794 GiB
This partition ends after the disk limits. (start=264192, size=5860268032, end=5860532223, disk end=1565565872)

HFS+ magic value at 9191/160/58

HFS+ magic value at 9191/160/58
part_size 5528448
Mac HFS 147663552 153191999 5528448
HFS+ blocksize=4096 + Backup, 2830 MB / 2699 MiB

HFS+ magic value at 10957/80/12
part_size 1196480
Mac HFS 176029256 177225735 1196480
HFS+ blocksize=2048, 612 MB / 584 MiB

HFS+ magic value at 11344/213/18

HFS+ magic value at 11344/213/18
part_size 1235404
Mac HFS 182254796 183490199 1235404
HFS+ blocksize=2048 + Backup, 632 MB / 603 MiB

HFS+ magic value at 11421/200/40

HFS+ magic value at 11421/200/40
part_size 1315400
Mac HFS 183491004 184806403 1315400
HFS+ blocksize=2048 + Backup, 673 MB / 642 MiB

LVM magic value at 32836/49/35

HFS+ magic value at 41214/67/31
part_size 613432
Mac HFS 662107161 662720592 613432
HFS+ blocksize=4096, 314 MB / 299 MiB
check_FAT: Bad jump in FAT partition

LVM magic value at 60616/157/18
FAT32 at 62576/113/2
FAT1 : 32-641
FAT2 : 642-1251
start_rootdir : 1252 root cluster : 2
Data : 1252-624987
sectors : 624992
cluster_size : 8
no_of_cluster : 77967 (2 - 77968)
fat_length 610 calculated 610
set_FAT_info: name from BS used

FAT32 at 62576/113/2
FAT: cluster=2(0x2), pos=1005291812
MS Data 1005290560 1005915551 624992 [NO NAME]
FAT32, blocksize=4096, 319 MB / 305 MiB
check_FAT: Bad jump in FAT partition

recover_EXT2: s_block_group_nr=0/0, s_mnt_count=12/0, s_blocks_per_group=3268592533, s_inodes_per_group=117503883
recover_EXT2: s_blocksize=1024
recover_EXT2: s_blocks_count 1
recover_EXT2: part_size 2
Filesystem created: Thu Jan 1 09:01:09 1970
Last mount time: Mon Mar 22 09:16:25 1909
MS Data 1526588474 1526588475 2 [6íå]
ext4 blocksize=1024 Recover, 1024 B
file_pread(8,1,buffer,1565565873(97451/246/61)) lseek err Invalid argument
:( >>>>>>>> ====== (Nearly 2500 lines like these removed for readability) >>>>>> ======
file_pread(8,1,buffer,1565567921(97452/24/30)) lseek err Invalid argument
Disk /dev/sde - 801 GB / 746 GiB - CHS 97451 255 63
Check the harddisk size: HD jumper settings, BIOS detection...
The harddisk (801 GB / 746 GiB) seems too small! (< 3000 GB / 2794 GiB)
The following partitions can't be recovered:
MS Data 2048 4294965247 4294963200
NTFS, blocksize=4096, 2199 GB / 2047 GiB
MS Data 264192 5860532223 5860268032 [Movie Backups]
NTFS, blocksize=4096, 3000 GB / 2794 GiB

Results
P Mac HFS 147663552 153191999 5528448
HFS+ blocksize=4096 + Backup, 2830 MB / 2699 MiB
P Mac HFS 176029256 177225735 1196480
HFS+ blocksize=2048, 612 MB / 584 MiB
P Mac HFS 182254796 183490199 1235404
HFS+ blocksize=2048 + Backup, 632 MB / 603 MiB
P Mac HFS 183491004 184806403 1315400
HFS+ blocksize=2048 + Backup, 673 MB / 642 MiB
P Mac HFS 662107161 662720592 613432
HFS+ blocksize=4096, 314 MB / 299 MiB
P MS Data 1005290560 1005915551 624992 [NO NAME]
FAT32, blocksize=4096, 319 MB / 305 MiB
P MS Data 1526588474 1526588475 2 [6íå]
ext4 blocksize=1024 Recover, 1024 B

P Mac HFS 147663552 153191999 5528448
HFS+ blocksize=4096 + Backup, 2830 MB / 2699 MiB
Support for this filesystem hasn't been implemented.


dir_partition inode=0
P MS Data 1005290560 1005915551 624992 [NO NAME]
FAT32, blocksize=4096, 319 MB / 305 MiB
FAT: cluster=2(0x2), pos=1005291812
Directory /
61 drwxr-xr-x 0 0 0 27-Jul-2012 14:14 GARAGE~2.APP
X 4 drwxr-xr-x 0 0 0 10-Mar-2012 09:56 _NTITL~1
X 56 drwxr-xr-x 0 0 0 10-Mar-2012 10:59 _P.TSH
65 drwxr-xr-x 0 0 0 27-Jul-2012 14:14 UNTITL~3

P MS Data 1526588474 1526588475 2 [6íå]
ext4 blocksize=1024 Recover, 1024 B
Can't open filesystem. Filesystem seems damaged.

P Mac HFS 147663552 153191999 5528448
HFS+ blocksize=4096 + Backup, 2830 MB / 2699 MiB
Support for this filesystem hasn't been implemented.

P MS Data 1526588474 1526588475 2 [6íå]
ext4 blocksize=1024 Recover, 1024 B
Can't open filesystem. Filesystem seems damaged.

interface_write()
1 P Mac HFS 147663552 153191999 5528448
2 P Mac HFS 176029256 177225735 1196480
3 P Mac HFS 182254796 183490199 1235404
4 P Mac HFS 183491004 184806403 1315400
5 P Mac HFS 662107161 662720592 613432
6 P MS Data 1005290560 1005915551 624992 [NO NAME]
7 P MS Data 1526588474 1526588475 2 [6íå]

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: 3 TB Data HD: harddisk seems too small

#2 Post by cgrenier »

The partition table is ok, your partition is listed, so there is no need to try to undelete it.
Run TestDisk, Advanced, select the partition "Movie Backups", Boot, RebuildBS, List.
If you can see your files, choose Write, confirm, Quit and restart your computer.

DiskTest
Posts: 3
Joined: 24 May 2017, 04:51

Re: 3 TB Data HD: harddisk seems too small

#3 Post by DiskTest »

Thanks!

I ran TestDisk, Advanced, select the partition "Movie Backups", Boot, RebuildBS, List.
I can see your files, but there is no Write option. How do I proceed from there?

(BTW, after RebuildBS, it says the sectors are identical, if that matters).

Thanks again for your help!

PS: If I go to Analyze screen, I see duplicate partition #1.
Image
Attachments
Screenshot from 2017-05-27 10-56-55.png
Screenshot from 2017-05-27 10-56-55.png (56.21 KiB) Viewed 2896 times

DiskTest
Posts: 3
Joined: 24 May 2017, 04:51

Re: 3 TB Data HD: harddisk seems too small

#4 Post by DiskTest »

Something else is interesting: I used ddrescue to copy the complete disk to a new disk. When I see the old and the new disk in the disk details screen, I see that the data partition size in both of them is just 746GB, while in reality the partition has over 2 TB of data. (The size of the overall disk is listed correctly).
Image

When I list the files in TestDisk, I am checking just the first top level directory listing. Is it recommended that I go through the complete hierarchy to see if any files are missing? And if I do find that some files are missing, what do I do to recover everything?

Finally, I see an option to select all files and copy to a different location. can I simply select all files, and copy everything to a new drive? Are the files copied just as they were, or are they copied in some kind of image format that requires mounting using a different tool?

Thanks.
Attachments
Screenshot 2.png
Screenshot 2.png (76.35 KiB) Viewed 2887 times

Locked