Accidental conversion from NTFS to FAT12

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Message
Author
sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Accidental conversion from NTFS to FAT12

#1 Post by sdjiricek »

Well I'm not sure exactly how this happened but the primary partition was accidentally converted to FAT12 from NTFS while I was cleaning the keyboard. The rest of the partition, however stayed as NTFS. It became unbootable as the operating system was on the primary (C) partition. I bought a second drive and installed the OS and am using the corrupted/unrecognized partition drive as a second drive. The corrupted partition was relabeled as (I) by WindowsXP but is unreadable and I can't seem to pull any Data. I am trying to use Easeus but seem to be getting nowhere very slowly and don't want to pay $70 for a program that doesn't seem to be getting anywhere . It's been deep scanning for 4 days now and isn't even half done. The Drive is a WD 500gb. Will Test disk do the job? I would like to reconstruct the data first and save it to a backup drive and then after that is done try and make the drive bootable again. It would be great if someone could walk me through the procedure or point me to a tutorial on how to do both opperations. I'd like to be able to keep the file structure intact as I have some cryptocurreny wallets and DAT files that I don't want to have to laboriously search for.
Attachments
Idrive
Idrive
IDRIVE.JPG (171.05 KiB) Viewed 3896 times

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Accidental conversion from NTFS to FAT12

#2 Post by cgrenier »

Run TestDisk, Advanced, select the partition, Type, force it to NTFS, Boot, RebuildBS, List.
If you can see your files, choose Write, confirm Quit and restart your computer.
If it doesn't work, please post the testdisk.log file content.

sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Re: Accidental conversion from NTFS to FAT12

#3 Post by sdjiricek »

So I ran Photorec because I didn't want to compromise the partition any further by trying to force it to NTFS from the FAT12 file system and it pulled up this (see Photo). All jumbled text and HTML files. What exactly am I looking at and why don't you think it recovered any files/photos/executables?

Image
Last edited by sdjiricek on 20 Jan 2018, 10:49, edited 5 times in total.

sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Re: Accidental conversion from NTFS to FAT12

#4 Post by sdjiricek »

I don't seem to be able to post the JPG?

sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Re: Accidental conversion from NTFS to FAT12

#5 Post by sdjiricek »

I don't see NTFS as an option to force the FAT12 to NTFS. The image shows the 3 file systems available.

Image

sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Re: Accidental conversion from NTFS to FAT12

#6 Post by sdjiricek »

cgrenier wrote: 18 Jan 2018, 18:12 Run TestDisk, Advanced, select the partition, Type, force it to NTFS, Boot, RebuildBS, List.
If you can see your files, choose Write, confirm Quit and restart your computer.
If it doesn't work, please post the testdisk.log file content.
I don't see NTFS as an option to force the FAT12 to NTFS. The image shows the 3 file systems available.


Image

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Accidental conversion from NTFS to FAT12

#7 Post by cgrenier »

If you select the partition I: you should select partition type None. There is no partitions inside a partition.

sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Re: Accidental conversion from NTFS to FAT12

#8 Post by sdjiricek »

cgrenier wrote: 18 Jan 2018, 18:12 Run TestDisk, Advanced, select the partition, Type, force it to NTFS, Boot, RebuildBS, List.
If you can see your files, choose Write, confirm Quit and restart your computer.
If it doesn't work, please post the testdisk.log file content.

Which one of these Do I choose. I don't see NTFS as a stand alone choice

Image

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Accidental conversion from NTFS to FAT12

#9 Post by cgrenier »

NTFS is number 7.

sdjiricek
Posts: 9
Joined: 17 Jan 2018, 21:41

Re: Accidental conversion from NTFS to FAT12

#10 Post by sdjiricek »

During RebuildBS the program just shut down. It looks like it generated a stackdump file. I'm trying to attatch the 2 files but don't seem to be able to.


Here's the stackdump


Exception: STATUS_ACCESS_VIOLATION at eip=0043E5A6
eax=00000000 ebx=20104718 ecx=0023ED66 edx=CA11BE9C esi=0037F62A edi=00000000
ebp=20102AB8 esp=0023B210 program=C:\Documents and Settings\Home\My Documents\Downloads\testdisk-7.0.win\testdisk-7.0\testdisk_win.exe, pid 2580, thread main
cs=001B ds=0023 es=0023 fs=003B gs=0000 ss=0023
Stack trace:
Frame Function Args
20102AB8 0043E5A6 (00000000, 00000000, 00000000, 00000000)
End of stack trace


And here's the log

Wed Jan 31 23:23:48 2018
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=209711706624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=110103565824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=107529053184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=213010043904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=254991873024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=63515579904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=46587953152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=85987044864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=90173712384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=108984927744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\P:)=500105740288
filewin32_getfilesize(\\.\Y:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\Y:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\Y:
filewin32_getfilesize(\\.\Z:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\Z:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 209 GB / 195 GiB - CHS 25495 255 63, sector size=512
Drive D: - 104 GB / 97 GiB - CHS 12747 255 63, sector size=512
Drive E: - 110 GB / 102 GiB - CHS 13385 255 63, sector size=512
Drive F: - 107 GB / 100 GiB - CHS 13072 255 63, sector size=512
Drive G: - 213 GB / 198 GiB - CHS 25896 255 63, sector size=512
Drive H: - 254 GB / 237 GiB - CHS 31000 255 63, sector size=512
Drive I: - 63 GB / 59 GiB - CHS 7721 255 63, sector size=512
Drive J: - 46 GB / 43 GiB - CHS 5663 255 63, sector size=512
Drive K: - 85 GB / 80 GiB - CHS 10453 255 63, sector size=512
Drive L: - 90 GB / 83 GiB - CHS 10962 255 63, sector size=512
Drive N: - 108 GB / 101 GiB - CHS 13249 255 63, sector size=512
Drive P: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 7722/1/2
NTFS at 13386/1/1
NTFS at 23840/1/1
NTFS at 34803/1/1
NTFS at 47551/1/1
get_geometry_from_list_part_aux head=255 nbr=18
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=4
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=3
get_geometry_from_list_part_aux head=255 nbr=18
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
2 E extended LBA 7722 0 2 60800 254 63 852714134
5 L HPFS - NTFS 7722 1 2 13385 254 63 90992096
NTFS, blocksize=4096, 46 GB / 43 GiB
X extended 13386 0 1 23839 254 63 167943510
6 L HPFS - NTFS 13386 1 1 23839 254 63 167943447
NTFS, blocksize=4096, 85 GB / 80 GiB
X extended 23840 0 1 34802 254 63 176120595
7 L HPFS - NTFS 23840 1 1 34802 254 63 176120532
NTFS, blocksize=4096, 90 GB / 83 GiB
X extended 34803 0 1 47550 254 63 204796620
8 L HPFS - NTFS 34803 1 1 47550 254 63 204796557
NTFS, blocksize=4096, 104 GB / 97 GiB
X extended 47551 0 1 60800 254 63 212861250
9 L HPFS - NTFS 47551 1 1 60800 254 63 212861187
NTFS, blocksize=4096, 108 GB / 101 GiB
Change partition type:
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867

ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
filesystem size 4705734185631875073 15087055580947150938
sectors_per_cluster 8 196
mft_lcn 538985805 2639431764
mftmirr_lcn 540160340 3887858461
clusters_per_mft_record -114 48
clusters_per_index_record 123 -106
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
3 [main] testdisk_win 2144 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump



Wed Jan 31 23:26:27 2018
Command line: TestDisk

TestDisk 7.0, Data Recovery Utility, April 2015
Christophe GRENIER <grenier@cgsecurity.org>
http://www.cgsecurity.org
OS: Windows XP SP3
Compiler: GCC 4.8, Cygwin 1007.34
Compilation date: 2015-04-18T13:01:55
ext2fs lib: 1.42.8, ntfs lib: 10:0:0, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.9
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdc)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive2)=500107862016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=209711706624
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\E:)=110103565824
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\F:)=107529053184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\G:)=213010043904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\H:)=254991873024
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\I:)=63515579904
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\J:)=46587953152
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\K:)=85987044864
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\L:)=90173712384
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\M:)=104855837184
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\N:)=108984927744
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\P:)=500105740288
filewin32_getfilesize(\\.\Y:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\Y:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\Y:
filewin32_getfilesize(\\.\Z:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\Z:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\Z:
Hard disk list
Disk /dev/sda - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512
Disk /dev/sdb - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Disk /dev/sdc - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512
Drive C: - 209 GB / 195 GiB - CHS 25495 255 63, sector size=512
Drive D: - 104 GB / 97 GiB - CHS 12747 255 63, sector size=512
Drive E: - 110 GB / 102 GiB - CHS 13385 255 63, sector size=512
Drive F: - 107 GB / 100 GiB - CHS 13072 255 63, sector size=512
Drive G: - 213 GB / 198 GiB - CHS 25896 255 63, sector size=512
Drive H: - 254 GB / 237 GiB - CHS 31000 255 63, sector size=512
Drive I: - 63 GB / 59 GiB - CHS 7721 255 63, sector size=512
Drive J: - 46 GB / 43 GiB - CHS 5663 255 63, sector size=512
Drive K: - 85 GB / 80 GiB - CHS 10453 255 63, sector size=512
Drive L: - 90 GB / 83 GiB - CHS 10962 255 63, sector size=512
Drive N: - 108 GB / 101 GiB - CHS 13249 255 63, sector size=512
Drive P: - 500 GB / 465 GiB - CHS 60801 255 63, sector size=512

Partition table type (auto): Intel
Disk /dev/sdc - 500 GB / 465 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
NTFS at 0/32/33
1 P HPFS - NTFS 0 32 33 60801 47 46 976769024
NTFS, blocksize=4096, 500 GB / 465 GiB

ntfs_boot_sector
1 P HPFS - NTFS 0 32 33 60801 47 46 976769024
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
rebuild_NTFS_BS
mft at 16
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: sectors_per_cluster 8
ntfs_find_mft: mft_lcn 786432
ntfs_find_mft: mftmirr_lcn 2
ntfs_find_mft: mft_record_size 1024
ntfs_find_mft: index_block_size 4096
Extrapolated boot sector and current boot sector are identical.
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1

Directory /
5 dr-xr-xr-x 0 0 0 21-Jan-2018 14:33 .
5 dr-xr-xr-x 0 0 0 21-Jan-2018 14:33 ..
40 dr-xr-xr-x 0 0 0 27-Apr-2015 18:06 $RECYCLE.BIN
65 dr-xr-xr-x 0 0 0 31-Dec-2016 16:01 @sharebin
64 dr-xr-xr-x 0 0 0 11-May-2017 21:44 @tmp
45899 dr-xr-xr-x 0 0 0 31-Jan-2018 20:58 IphotorecBackup
98228 dr-xr-xr-x 0 0 0 31-Jan-2018 21:17 Itestdiskbackup
45835 dr-xr-xr-x 0 0 0 28-Aug-2014 23:12 RECYCLER
37 dr-xr-xr-x 0 0 0 21-Jan-2018 17:45 System Volume Information
98217 dr-xr-xr-x 0 0 0 19-Nov-2009 00:23 transferwizard
53 dr-xr-xr-x 0 0 0 7-Jan-2018 23:08 winxpbackup
56 -r--r--r-- 0 0 36 7-Jan-2018 23:08 .tourocloudbackupid
35 -r--r--r-- 0 0 7539672 13-Oct-2014 00:20 SetupTouro3771.exe
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1

ntfs_boot_sector
1 P HPFS - NTFS 0 32 33 60801 47 46 976769024
NTFS, blocksize=4096, 500 GB / 465 GiB
NTFS at 0/32/33
NTFS at 0/32/33
filesystem size 976769024
sectors_per_cluster 8
mft_lcn 786432
mftmirr_lcn 2
clusters_per_mft_record -10
clusters_per_index_record 1
Boot sector
Status: OK

Backup boot sector
Status: OK

Sectors are identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
Partition table type (auto): Intel
Disk /dev/sdb - 500 GB / 465 GiB
Partition table type: Intel

Interface Advanced
Geometry from i386 MBR: head=255 sector=63
check_part_i386 failed for partition type 07
NTFS at 7722/1/2
NTFS at 13386/1/1
NTFS at 23840/1/1
NTFS at 34803/1/1
NTFS at 47551/1/1
get_geometry_from_list_part_aux head=255 nbr=18
get_geometry_from_list_part_aux head=8 nbr=4
get_geometry_from_list_part_aux head=16 nbr=4
get_geometry_from_list_part_aux head=32 nbr=4
get_geometry_from_list_part_aux head=64 nbr=2
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=3
get_geometry_from_list_part_aux head=255 nbr=18
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
2 E extended LBA 7722 0 2 60800 254 63 852714134
5 L HPFS - NTFS 7722 1 2 13385 254 63 90992096
NTFS, blocksize=4096, 46 GB / 43 GiB
X extended 13386 0 1 23839 254 63 167943510
6 L HPFS - NTFS 13386 1 1 23839 254 63 167943447
NTFS, blocksize=4096, 85 GB / 80 GiB
X extended 23840 0 1 34802 254 63 176120595
7 L HPFS - NTFS 23840 1 1 34802 254 63 176120532
NTFS, blocksize=4096, 90 GB / 83 GiB
X extended 34803 0 1 47550 254 63 204796620
8 L HPFS - NTFS 34803 1 1 47550 254 63 204796557
NTFS, blocksize=4096, 104 GB / 97 GiB
X extended 47551 0 1 60800 254 63 212861250
9 L HPFS - NTFS 47551 1 1 60800 254 63 212861187
NTFS, blocksize=4096, 108 GB / 101 GiB

ntfs_boot_sector
1 * HPFS - NTFS 0 1 1 7721 254 63 124053867
filesystem size 4705734185631875073 15087055580947150938
sectors_per_cluster 8 196
mft_lcn 538985805 2639431764
mftmirr_lcn 540160340 3887858461
clusters_per_mft_record -114 48
clusters_per_index_record 123 -106
Boot sector
Status: Bad

Backup boot sector
Status: Bad

Sectors are not identical.

A valid NTFS Boot sector must be present in order to access
any data; even if the partition is not bootable.
3 [main] testdisk_win 2580 cygwin_exception::open_stackdumpfile: Dumping stack trace to testdisk_win.exe.stackdump

Locked