Hard disk seems to small / The following partition can't be recovered

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
lojciec
Posts: 2
Joined: 20 Nov 2023, 19:43

Hard disk seems to small / The following partition can't be recovered

#1 Post by lojciec »

Hi!
I have a problem with USB WD disk. By mistake I've done a quick format from NTFS to exFAT. After this i I've done quick format to NTFS and when I try to Analyse it shows only new NTFS partition. When I choose Deeper scan I 've got a "The following partition can't be recovered. This is probably partition which I looking for. Start of this partition is located on the last cylinder of a disk... But after choose Continue there is only partition new formated.
I've try to looking for a solutions on this forum and I found that maybe changing geometry->cylinders to 2 times more (from 243197 to 486394) could help, but when i change this parameter I cannot find this deleted partition... Is there any chance to see a files structure or recover partition?
Dysk-WD-Testdisk-Partition.png
Dysk-WD-Testdisk-Partition.png (27.81 KiB) Viewed 10938 times
This is what i have in a log file:

Code: Select all

Mon Nov 20 21:08:40 2023
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=180044684800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=179375501824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000363192320
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000397795328
Hard disk list
Disk \\.\PhysicalDrive0 - 180 GB / 167 GiB - CHS 21889 255 63, sector size=512 - INTEL SSDSC2CT180A3, S/N:CVMP2225068U180CGN, FW:300i
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Passport 25E1, S/N:WXV1E18A2ZYS, FW:1021
Disk \\.\PhysicalDrive2 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate Expansion HDD, S/N:00000000NACS4RFE, FW:1901

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - WD My Passport 25E1
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 P HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
No partition is bootable

search_part()
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63
NTFS at 0/32/33
filesystem size           3906959360
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

Results
   * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]

search_part()
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63
NTFS at 0/32/33
filesystem size           3906959360
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB
NTFS at 243197/25/28
filesystem size           3906959360
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS found using backup sector, blocksize=4096, 2000 GB / 1862 GiB
NTFS at 243197/25/28
filesystem size           3906959360
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS: Can't read MFT
     HPFS - NTFS          243197  25 28 486394  18 23 3906959360
     NTFS, blocksize=4096, 2000 GB / 1862 GiB
This partition ends after the disk limits. (start=3906961407, size=3906959360, end=7813920766, disk end=3906963456)
file_win32_pread(620,2,buffer,3906963455(243197/57/60)) read err: read after end of file
Search for partition aborted
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63
Check the hard disk size: HD jumper settings, BIOS detection...
The hard disk (2000 GB / 1862 GiB) seems too small! (< 4000 GB / 3725 GiB)
The following partition can't be recovered:
     HPFS - NTFS          243197  25 28 486394  18 23 3906959360
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

Results
   * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.



Mon Nov 20 21:09:36 2023
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, February 2023
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin32 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=180044684800
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=2000365289472
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=2000398933504
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=179375501824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=2000363192320
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=2000397795328
Hard disk list
Disk \\.\PhysicalDrive0 - 180 GB / 167 GiB - CHS 21889 255 63, sector size=512 - INTEL SSDSC2CT180A3, S/N:CVMP2225068U180CGN, FW:300i
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - CHS 243197 255 63, sector size=512 - WD My Passport 25E1, S/N:WXV1E18A2ZYS, FW:1021
Disk \\.\PhysicalDrive2 - 2000 GB / 1863 GiB - CHS 243201 255 63, sector size=512 - Seagate Expansion HDD, S/N:00000000NACS4RFE, FW:1901

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 2000 GB / 1862 GiB - WD My Passport 25E1
Partition table type: Intel
New geometry
Disk \\.\PhysicalDrive1 - 4000 GB / 3725 GiB - CHS 486394 255 63 sector_size=512

Analyse Disk \\.\PhysicalDrive1 - 4000 GB / 3725 GiB - CHS 486394 255 63
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
Current partition structure:
 1 P HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
No partition is bootable

search_part()
Disk \\.\PhysicalDrive1 - 4000 GB / 3725 GiB - CHS 486394 255 63
NTFS at 0/32/33
filesystem size           3906959360
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB
file_win32_pread(612,2,buffer,3906963456(243197/57/61)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963456(243197/57/61)) read err: read after end of file
file_win32_pread(612,2,buffer,3906963491(243197/58/33)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963491(243197/58/33)) read err: read after end of file
file_win32_pread(612,2,buffer,3906963519(243197/58/61)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963519(243197/58/61)) read err: read after end of file
file_win32_pread(612,2,buffer,3906963554(243197/59/33)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963554(243197/59/33)) read err: read after end of file
file_win32_pread(612,8,buffer,3906963456(243197/57/61)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963456(243197/57/61)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963457(243197/57/62)) read err: read after end of file
file_win32_pread(612,14,buffer,3906963458(243197/57/63)) read err: read after end of file
file_win32_pread(612,3,buffer,3906963472(243197/58/14)) read err: read after end of file
file_win32_pread(612,3,buffer,3906963519(243197/58/61)) read err: read after end of file
file_win32_pread(612,8,buffer,3906963535(243197/59/14)) read err: read after end of file
file_win32_pread(612,11,buffer,3906963582(243197/59/61)) read err: read after end of file
file_win32_pread(612,2,buffer,3906965504(243197/90/30)) read err: read after end of file

Results
   * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]

search_part()
Disk \\.\PhysicalDrive1 - 4000 GB / 3725 GiB - CHS 486394 255 63
NTFS at 0/32/33
filesystem size           3906959360
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB
file_win32_pread(612,2,buffer,3906963456(243197/57/61)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963456(243197/57/61)) read err: read after end of file
file_win32_pread(612,2,buffer,3906963491(243197/58/33)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963491(243197/58/33)) read err: read after end of file
file_win32_pread(612,2,buffer,3906963519(243197/58/61)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963519(243197/58/61)) read err: read after end of file
file_win32_pread(612,2,buffer,3906963554(243197/59/33)) read err: read after end of file
file_win32_pread(612,1,buffer,3906963554(243197/59/33)) read err: read after end of file
file_win32_pread(612,1,buffer,3518936248(486392/254/63)) read err: read after end of file
file_win32_pread(612,1,buffer,3518936249(486393/0/1)) read err: read after end of file
file_win32_pread(612,14,buffer,3518936250(486393/0/2)) read err: read after end of file
file_win32_pread(612,3,buffer,3518936264(486393/0/16)) read err: read after end of file
file_win32_pread(612,3,buffer,3518936311(486393/0/63)) read err: read after end of file
file_win32_pread(612,8,buffer,3518936327(486393/1/16)) read err: read after end of file
file_win32_pread(612,11,buffer,3518936374(486393/1/63)) read err: read after end of file
file_win32_pread(612,2,buffer,3518938296(486393/32/32)) read err: read after end of file
Search for partition aborted

Results
   * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
     NTFS, blocksize=4096, 2000 GB / 1862 GiB

interface_write()
 1 * HPFS - NTFS              0  32 33 243197  25 28 3906959360 [Nowy2]
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

TestDisk exited normally.
Last edited by lojciec on 21 Nov 2023, 19:50, edited 2 times in total.
Top
recuperation
Posts: 3032
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Hard disk seems to small / The following partition can't be recovered

#2 Post by recuperation »

Please upload your picture to this site.
Top
lojciec
Posts: 2
Joined: 20 Nov 2023, 19:43

Re: Hard disk seems to small / The following partition can't be recovered

#3 Post by lojciec »

recuperation wrote: 21 Nov 2023, 15:34 Please upload your picture to this site.
Done :-)
Top
Locked

Return to “Partition Recovery”