The Disk is too small

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Sierrab
Posts: 2
Joined: 30 Oct 2014, 22:34

The Disk is too small

#1 Post by Sierrab »

Hope that you can help

Background, I had a my C drive crash on Monday, leaving me with only 39gb of files visible in one partition rather than the approx 350 there should be in that partition which should be 500gb or so in size. The disk is 500gb with one partition

Test Disk is reporting that the hard disk was too small plus the message "The following partition can't be recovered"

The files it is reporting are the ones that I can see in Explorer. It is only seeing the 39 gb not the whole disk which is why it is I think it is reporting the disk is too small.

On the other hand windows is reporting that there whole drive is healthy and active and is the correct size

I would be grateful for idiot proof instructions (if there are any available) on how to proceed.

Sierrab
Posts: 2
Joined: 30 Oct 2014, 22:34

Re: The Disk is too small

#2 Post by Sierrab »

Many, many thanks for entry into the forum

This is ugly. Pleases see the lo and see if there is anything that you could advise.

The drive should contain 350gb of data, but only 30 or so are showing

Thu Oct 30 16:09:12 2014
Command line: TestDisk

TestDisk 7.0-WIP, Data Recovery Utility, October 2014
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows WorkStation 6.2.9200
Compiler: GCC 4.7, Cygwin 1007.25
Compilation date: 2014-10-23T06:49:34
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500103634432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500103634432
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=1000203091968
filewin32_getfilesize(\\.\D:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\D:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\D:
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=500096991744
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - WDC WD10EZEX-60M2NA0, S/N:WD-WCC3FA91CYRV, FW:01.01A01
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60800 255 63, sector size=512 - WDC WD5000AAKX-001CA0, S/N:WD-WMAYUX332578, FW:15.01H15

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB - WDC WD5000AAKX-001CA0
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
1 * HPFS - NTFS 0 1 1 60799 254 63 976751937
NTFS, blocksize=4096, 500 GB / 465 GiB
Change partition type:
1 * HPFS - NTFS 0 1 1 60799 254 63 976751937
NTFS, blocksize=4096, 500 GB / 465 GiB
New options :
Dump : No
Align partition: Yes
Expert mode : No

Analyse Disk /dev/sdb - 500 GB / 465 GiB - CHS 60800 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/1/1
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2
Current partition structure:
1 * HPFS - NTFS 0 1 1 60799 254 63 976751937

search_part()
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60800 255 63
NTFS at 0/1/1
filesystem size 976751937
sectors_per_cluster 8
mft_lcn 746478
mftmirr_lcn 29827446
clusters_per_mft_record -10
clusters_per_index_record 1
HPFS - NTFS 0 1 1 60799 254 63 976751937
NTFS, blocksize=4096, 500 GB / 465 GiB
file_pread(5,2,buffer,976764928(60800/205/14)) lseek err Invalid argument
file_pread(5,1,buffer,976764928(60800/205/14)) lseek err Invalid argument
file_pread(5,1,buffer,976764927(60800/205/13)) lseek err Invalid argument
file_pread(5,14,buffer,976764929(60800/205/15)) lseek err Invalid argument
file_pread(5,3,buffer,976764943(60800/205/29)) lseek err Invalid argument
file_pread(5,3,buffer,976764990(60800/206/13)) lseek err Invalid argument
file_pread(5,8,buffer,976765006(60800/206/29)) lseek err Invalid argument
file_pread(5,11,buffer,976765053(60800/207/13)) lseek err Invalid argument
file_pread(5,2,buffer,976766975(60800/237/45)) lseek err Invalid argument
get_geometry_from_list_part_aux head=255 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=2
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=2
get_geometry_from_list_part_aux head=240 nbr=2
get_geometry_from_list_part_aux head=255 nbr=2

Results
* HPFS - NTFS 0 1 1 60799 254 63 976751937
NTFS, blocksize=4096, 500 GB / 465 GiB

interface_write()
1 * HPFS - NTFS 0 1 1 60799 254 63 976751937


Many hopeful thanks in advance if you can take a look

have a good w/e

S

Locked