Hard drive crashed - Now reading as FAT 12

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
madwizard78
Posts: 2
Joined: 12 May 2016, 22:43

Hard drive crashed - Now reading as FAT 12

#1 Post by madwizard78 »

I'm not sure the exact issue but I've got an older 1 Gig drive that just crashed. When I run TestDisk on it, it gets a number of errors and in particular it seems to be reading it as FAT 12. It was a windows 7 machine so think it was FAT32. I thought it only had one partition but there could have been more. So far no luck in getting any files but I'm not 100% sure I'm doing it all right. Below is the log file in case it helps.

BIG Thanks in advance for any help/tips/etc.

Code: Select all



Thu May 12 06:17:44 2016
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=512110190592
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=466608979968
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=26843545600
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=11762925568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=988398223360
Hard disk list
Disk /dev/sda - 512 GB / 476 GiB - CHS 62260 255 63, sector size=512
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Drive C: - 466 GB / 434 GiB - CHS 56728 255 63, sector size=512
Drive D: - 26 GB / 25 GiB - CHS 3263 255 63, sector size=512
Drive F: - 11 GB / 10 GiB - CHS 1430 255 63, sector size=512
Drive G: - 988 GB / 920 GiB - CHS 120165 255 63, sector size=512

Partition table type (auto): None
Drive G: - 988 GB / 920 GiB
Partition table type: Intel

Analyse Drive G: - 988 GB / 920 GiB - CHS 120165 255 63
Geometry from i386 MBR: head=115 sector=52
BAD_RS LBA=1936269394 5382406
check_part_i386 1 type 4F: no test
BAD_RS LBA=1917848077 5967333
check_part_i386 2 type 73: no test
BAD_RS LBA=1818575915 5855017
check_part_i386 3 type 2B: no test
BAD_RS LBA=2844524554 5982593
check_part_i386 4 type 61: no test
Current partition structure:
 1 * Sys=4F               120527  49 53 234813 237 34 1836016416

Bad relative sector.
 2 * Sys=73               119380 132 62 153270  41 37  544437093

Bad relative sector.
 3 * Sys=2B               113201  29 24 147074 114 59  544175136

Bad relative sector.
 4 * SpeedStor            177063 118 26 177066 225 63      54974

Bad relative sector.
Only one partition must be bootable
Space conflict between the following two partitions
 3 * Sys=2B               113201  29 24 147074 114 59  544175136
 2 * Sys=73               119380 132 62 153270  41 37  544437093
Space conflict between the following two partitions
 2 * Sys=73               119380 132 62 153270  41 37  544437093
 1 * Sys=4F               120527  49 53 234813 237 34 1836016416
Space conflict between the following two partitions
 1 * Sys=4F               120527  49 53 234813 237 34 1836016416
 4 * SpeedStor            177063 118 26 177066 225 63      54974

search_part()
Drive G: - 988 GB / 920 GiB - CHS 120165 255 63
FAT12 at 26162/163/50
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 26162/163/50
     FAT12                26162 163 50 26162 209 31       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
file_win32_pread(364,16,buffer,1559396431(97067/239/20)) read err: read after end of file
file_win32_pread(364,16,buffer,1905487872(118611/34/16)) read err: read after end of file
file_win32_pread(364,16,buffer,1905487874(118611/34/18)) read err: read after end of file
file_win32_pread(364,1,buffer,1905487878(118611/34/22)) read err: read after end of file
file_win32_pread(364,8,buffer,1905487880(118611/34/24)) read err: read after end of file
file_win32_pread(364,16,buffer,1905825918(118632/45/4)) read err: read after end of file
file_win32_pread(364,1,buffer,1905825918(118632/45/4)) read err: read after end of file
file_win32_pread(364,16,buffer,1905827903(118632/76/36)) read err: read after end of file
file_win32_pread(364,1,buffer,1905827903(118632/76/36)) read err: read after end of file
NTFS at 120165/231/2
filesystem size           1930465280
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   0  1 120165 231  2 1930465280
     NTFS found using backup sector, blocksize=4096, 988 GB / 920 GiB
Partition not added.

Results
   * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]
     FAT12, blocksize=512, 2097 KB / 2048 KiB

interface_write()
 1 * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]

search_part()
Drive G: - 988 GB / 920 GiB - CHS 120165 255 63
FAT12 at 26162/163/50
FAT1 : 1-9
FAT2 : 10-18
start_rootdir : 19
Data : 33-2879
sectors : 2880
cluster_size : 1
no_of_cluster : 2847 (2 - 2848)
fat_length 9 calculated 9
heads/cylinder 2 (FAT) != 255 (HD)
sect/track 18 (FAT) != 63 (HD)

FAT12 at 26162/163/50
     FAT12                26162 163 50 26162 209 31       2880 [EFISECTOR]
     FAT12, blocksize=512, 1474 KB / 1440 KiB
file_win32_pread(364,16,buffer,1559396431(97067/239/20)) read err: read after end of file
file_win32_pread(364,16,buffer,1905487872(118611/34/16)) read err: read after end of file
file_win32_pread(364,16,buffer,1905486800(118611/17/15)) read err: read after end of file
file_win32_pread(364,1,buffer,1905486800(118611/17/15)) read err: read after end of file
file_win32_pread(364,16,buffer,1905487874(118611/34/18)) read err: read after end of file
file_win32_pread(364,1,buffer,1905487878(118611/34/22)) read err: read after end of file
file_win32_pread(364,8,buffer,1905487880(118611/34/24)) read err: read after end of file
file_win32_pread(364,16,buffer,1905810843(118631/60/49)) read err: read after end of file
file_win32_pread(364,16,buffer,1905825918(118632/45/4)) read err: read after end of file
file_win32_pread(364,1,buffer,1905825918(118632/45/4)) read err: read after end of file
file_win32_pread(364,16,buffer,1905827903(118632/76/36)) read err: read after end of file
file_win32_pread(364,1,buffer,1905827903(118632/76/36)) read err: read after end of file
NTFS at 120165/231/2
filesystem size           1930465280
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     HPFS - NTFS              0   0  1 120165 231  2 1930465280
     NTFS found using backup sector, blocksize=4096, 988 GB / 920 GiB
Partition not added.

Results
   * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]
     FAT12, blocksize=512, 2097 KB / 2048 KiB


dir_partition inode=0
   * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]
     FAT12, blocksize=512, 2097 KB / 2048 KiB
Directory /
       2 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 EFI

dir_partition inode=2
   * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]
     FAT12, blocksize=512, 2097 KB / 2048 KiB
FAT: cluster=2(0x2), pos=420302881
Directory /EFI
       2 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 .
       0 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 ..
       3 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 BOOT

dir_partition inode=3
   * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]
     FAT12, blocksize=512, 2097 KB / 2048 KiB
FAT: cluster=3(0x3), pos=420302882
Directory /EFI/BOOT
       3 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 .
       2 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 ..
       4 -rwxr-xr-x     0      0    440832 20-Nov-2010 00:19 BOOTX64.EFI
FAT: cluster=2(0x2), pos=420302881
Directory /EFI
       2 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 .
       0 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 ..
       3 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 BOOT
Directory /
       2 drwxr-xr-x     0      0         0 19-Nov-2010 16:19 EFI

interface_write()
 1 * FAT12                26162 163 50 26162 228 50       4096 [EFISECTOR]

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Hard drive crashed - Now reading as FAT 12

#2 Post by cgrenier »

You are currently search partitions inside a partition (G:), it's useless.
Run TestDisk, select the physicaldisk, Advanced, select the partition corresponding to G:, Boot, RebuildBS, List.
If you can see your files, choose Write, confirm, Quit and restart your computer.
If it doesn't solve the problem, please copy/paste the testdisk.log file.

madwizard78
Posts: 2
Joined: 12 May 2016, 22:43

Re: Hard drive crashed - Now reading as FAT 12

#3 Post by madwizard78 »

Thanks so much. I feel like an idiot. I should have known that. Couldn't find write immediately but rather than dig I'm having it copy the key files I need off on to my other drive and then will see about finding it in the menu.

Locked