Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
Issacar
Posts: 2
Joined: 25 Oct 2016, 13:18

Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

#1 Post by Issacar »

Hi there,

(First of all, if this post is in the wrong section, please move it to the right one.)

Despite reading wiki articles, I'm really not sure what to do in this current situation.

Details & History:
Windows partition became empty probably after a bad linux distro installation (even though it was specified to be installed on right drive and not to wipe detected OS). After that, Bootrec & Chkdsk may have 'worsen' it.
GetDataBack Simple shows some files (mostly chkdsk logs) but nothing like it should be (Windows folders and files). (Curious fact: during GBD recovery scanning, thumbnails of some image files (photos) which 'were' in this partition, were shown.)

Current situation:
TestDisk log should detail it better than I would.
PS: I added some comments at the end of the log.
Attachments
TestDisk.zip
(1.64 KiB) Downloaded 301 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

#2 Post by cgrenier »

If you select F:, choose None for the partition table type as there is no partitions inside a partition.
If you select the PhysicalDrive, choose PC/Intel or EFI GPT.

Issacar
Posts: 2
Joined: 25 Oct 2016, 13:18

Re: Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

#3 Post by Issacar »

Hello again.

I'm sorry about not replying this post for over a week.

At first I didn't understand the answer but then I looked at this guide (Undelete files from NTFS with TestDisk) and managed to recover most if not all the data I needed.

I did another recovery using Recuva to maintain folder structure and while looking at the state of the files, I bumped on this:
$ Files.PNG
$ Files.PNG (47.9 KiB) Viewed 1955 times
$BadClus has actually the size of the partition which 'became' empty. (Date is incorrect but I believe the data is there.)

My question now is: should I backup the entire disk before attempting to recover and/or rebuild NTFS boot sector/MFT of this partition or it's safe to do as it is?

I really appreciate any help you can provide.

Locked