All times are UTC - 5 hours [ DST ]


Forum rules


Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...



Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Strange case
PostPosted: November 18th, 2017, 9:53 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2785
Location: Kuwait
Hello guys,

I got a strange case here which i would like to share with you guys,,,

External USB3 drive when you Right-click (from My computer) the windows reports for example 1GB of USED data

BUT

Actually it contains more than this, estimated data size about 300GB

I tried the drive in many PC`s all reports the same (Win. , Lynx, MAC )

Any reason for this?

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 18th, 2017, 18:15 
Offline

Joined: October 16th, 2013, 13:21
Posts: 713
Location: Brazil
Was it removed from some computer without "ejecting" or while said computer was hibernating ?


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 18th, 2017, 18:20 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
Probably is a messed up or non-updated $BMP file. I've seen the opposite a few times, where a drive was reporting that it was almost full despite the size of actual data being nowhere close to full.

Sometimes chkdsk will fix it, other times you've got to just re-format to fix it.

Obviously after you recover all the data. :lol:

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 18th, 2017, 19:17 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15440
Location: Australia
Have you examined the "dirty bit"?

Locating the NTFS "dirty bit":
http://www.hddoracle.com/viewtopic.php?f=117&t=2126

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 19th, 2017, 1:38 
Offline

Joined: October 24th, 2014, 4:57
Posts: 219
Location: Remote Raid Help on planet Earth
looks like bitmap file is not correct. Probably, checkdisk will help you.

_________________
http://www.alfadatarecovery.com


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 19th, 2017, 3:45 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 15440
Location: Australia
Martin wrote:
looks like bitmap file is not correct. Probably, checkdisk will help you.

Did you actually read any of the replies in this thread?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 19th, 2017, 5:12 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2785
Location: Kuwait
Hi guys,

@ rogfanther , No, this drive is a CLONE of drive which i changed heads to

@ data-medics & Martin , cannot format it, i just took the data from it for my client, and chkdsk is always a bad idea

@ fzabkar , i think your reply explains alot here... thank you

and thank you all guys...

after changing heads the drive had few bads (maybe 100 bads) somewhere in the middle thats why am wondering why windows reports wrong used space while UFS for example reports it correct.

Thank you all for your replies guys.. appreciate it

:D :D

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 19th, 2017, 12:39 
Offline
User avatar

Joined: April 3rd, 2011, 0:19
Posts: 2003
Location: Providence, RI
einstein9 wrote:
@ data-medics & Martin , cannot format it, i just took the data from it for my client, and chkdsk is always a bad idea


Chkdsk isn't always a bad idea, if you've already recovered all the data as I suggested in my post.

Can't format the drive as in, it won't let you? Or can't as in, there's still data on it needing to be recovered?

I can't see how the drive reporting a wrong amount of free space will have any impact on getting the data recovered out. I'm just talking about fixing the drive afterward when it's all done.

_________________
Data Medics - Hard Drive, SSD, and RAID Data Recovery Service Company


Top
 Profile  
 
 Post subject: Re: Strange case
PostPosted: November 20th, 2017, 3:27 
Offline
User avatar

Joined: May 13th, 2010, 11:17
Posts: 2785
Location: Kuwait
@ data-medics

PM sent :wink:

Thank you guys

_________________
Kuwait Data Recovery - UNIX GTC
The only reason for time is so that everything doesn't happen at once. By: Albert Einstein


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: No registered users and 11 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group