I am seeing FAT32 and FAT12 EFI partitons in testdisk, how to recover my windows ssd?

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
tanmayk
Posts: 2
Joined: 31 Mar 2022, 04:04

I am seeing FAT32 and FAT12 EFI partitons in testdisk, how to recover my windows ssd?

#1 Post by tanmayk »

Hi everyone,
U
When I was trying to login to windows, it was showing me the Blue Screen of Death with KERNEL_INPAGE error. I tried to repair the device using WINDOWS image on USB but it did not work. Hence I am trying to recover
the SSD which has WINDOWS OS on it along with the data by using a USB bootable with linux to run testdisk. My laptop has only 1 USB port and that is being used by linux on a 16GB USB drive.


I am seeing the following options

Code: Select all

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org

Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32
     Partition               Start        End    Size in sectors
 * FAT32                    1   0  1   260  63 32     532480 [EFI System Partiti
 P HPFS - NTFS            277   0  1 217597  63 32  445073408 [Windows]
 D FAT12                66611   2  1 66612  27 32       2880 [EFI System Partiti
 D Linux                89213   1  1 146053  63 32  116410336
 D Linux                89290   1  1 146130  63 32  116410336
 D Linux                89315   2  1 146155   1 32  116408320
 D Linux                89333   1  1 146173  63 32  116410336
 P HPFS - NTFS          217598   0  1 243197  63 32   52428800 [LENOVO]
 P HPFS - NTFS          243198   0  1 244197  63 32    2048000 [WINRE_DRV]
When I go ahead, I get these options

Code: Select all

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org

Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32

     Partition                  Start        End    Size in sectors

 1 * FAT32                    1   0  1   260  63 32     532480 [EFI System Parti
 2 P HPFS - NTFS            277   0  1 217597  63 32  445073408 [Windows]
 3 P HPFS - NTFS          217598   0  1 243197  63 32   52428800 [LENOVO]
 4 P HPFS - NTFS          243198   0  1 244197  63 32    2048000 [WINRE_DRV]


 [  Quit  ] >[ Return ]  [ Write  ]
                         Return to partition selection
Why do I see the FAT32 and FAT12 EFI System partition?


How do I proceed with the recovery?


Here is the output for smartmontools

Code: Select all

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.13.0-30-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Number:                       INTEL SSDPEKKW256G7
Serial Number:                      BTPY7305165E256D
Firmware Version:                   PSF107C
PCI Vendor/Subsystem ID:            0x8086
IEEE OUI Identifier:                0x5cd2e4
Controller ID:                      1
Number of Namespaces:               1
Namespace 1 Size/Capacity:          256,060,514,304 [256 GB]
Namespace 1 Formatted LBA Size:     512
Local Time is:                      Thu Mar 31 02:57:25 2022 UTC
Firmware Updates (0x12):            1 Slot, no Reset required
Optional Admin Commands (0x0006):   Format Frmw_DL
Optional NVM Commands (0x001e):     Wr_Unc DS_Mngmt Wr_Zero Sav/Sel_Feat
Maximum Data Transfer Size:         32 Pages
Warning  Comp. Temp. Threshold:     70 Celsius
Critical Comp. Temp. Threshold:     80 Celsius

Supported Power States
St Op     Max   Active     Idle   RL RT WL WT  Ent_Lat  Ex_Lat
 0 +     9.00W       -        -    0  0  0  0        5       5
 1 +     4.60W       -        -    1  1  1  1       30      30
 2 +     3.80W       -        -    2  2  2  2       30      30
 3 -   0.0700W       -        -    3  3  3  3    10000     300
 4 -   0.0050W       -        -    4  4  4  4     2000   10000

Supported LBA Sizes (NSID 0x1)
Id Fmt  Data  Metadt  Rel_Perf
 0 +     512       0         0

=== START OF SMART DATA SECTION ===
SMART overall-health self-assessment test result: FAILED!
- available spare has fallen below threshold
- media has been placed in read only mode

SMART/Health Information (NVMe Log 0x02)
Critical Warning:                   0x09
Temperature:                        17 Celsius
Available Spare:                    0%
Available Spare Threshold:          10%
Percentage Used:                    7%
Data Units Read:                    40,841,957 [20.9 TB]
Data Units Written:                 28,667,175 [14.6 TB]
Host Read Commands:                 679,940,504
Host Write Commands:                425,943,356
Controller Busy Time:               7,075
Power Cycles:                       6,319
Power On Hours:                     5,372
Unsafe Shutdowns:                   95
Media and Data Integrity Errors:    5,986,851
Error Information Log Entries:      5,987,208
Warning  Comp. Temperature Time:    0
Critical Comp. Temperature Time:    0

Error Information (NVMe Log 0x01, max 64 entries)
Num   ErrCount  SQId   CmdId  Status  PELoc          LBA  NSID    VS
  0    5987208     2  0x0076  0x0281      -    492660784     1     -
  1    5987207     2  0xf076  0x0281      -    492660784     1     -
  2    5987206     2  0xe076  0x0281      -    492660784     1     -
  3    5987205     2  0xd076  0x0281      -    492660784     1     -
  4    5987204     2  0xc076  0x0281      -    492660784     1     -
  5    5987203     2  0xb076  0x0281      -    492660784     1     -
  6    5987202     2  0x8075  0x0281      -    492660784     1     -
  7    5987201     2  0x7075  0x0281      -    492660784     1     -
  8    5987200     2  0x6075  0x0281      -    492660784     1     -
  9    5987199     2  0x5075  0x0281      -    492660784     1     -
 10    5987198     2  0x4075  0x0281      -    492660784     1     -
 11    5987197     2  0x3075  0x0281      -    492660784     1     -
 12    5987196     2  0xe074  0x0281      -    492660784     1     -
 13    5987195     2  0x006c  0x0281      -    492660808     1     -
 14    5987194     2  0xf06c  0x0281      -    492660808     1     -
 15    5987193     2  0xe06c  0x0281      -    492660808     1     -
... (48 entries not shown)
Last edited by tanmayk on 31 Mar 2022, 21:52, edited 1 time in total.
Top
recuperation
Posts: 3078
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: I am seeing FAT32 and FAT12 EFI partitons in testdisk, how to recover my windows ssd?

#2 Post by recuperation »

tanmayk wrote: 31 Mar 2022, 04:28 Hi everyone,

I am trying to recover window ssd using a linux usb bootable to run testdisk. I am seeing the following options

Code: Select all

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org

Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32
     Partition               Start        End    Size in sectors
 * FAT32                    1   0  1   260  63 32     532480 [EFI System Partiti
 P HPFS - NTFS            277   0  1 217597  63 32  445073408 [Windows]
 D FAT12                66611   2  1 66612  27 32       2880 [EFI System Partiti
 D Linux                89213   1  1 146053  63 32  116410336
 D Linux                89290   1  1 146130  63 32  116410336
 D Linux                89315   2  1 146155   1 32  116408320
 D Linux                89333   1  1 146173  63 32  116410336
 P HPFS - NTFS          217598   0  1 243197  63 32   52428800 [LENOVO]
 P HPFS - NTFS          243198   0  1 244197  63 32    2048000 [WINRE_DRV]

 When I go ahead, I get these options
[code]

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org

Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32

     Partition                  Start        End    Size in sectors

 1 * FAT32                    1   0  1   260  63 32     532480 [EFI System Parti
 2 P HPFS - NTFS            277   0  1 217597  63 32  445073408 [Windows]
 3 P HPFS - NTFS          217598   0  1 243197  63 32   52428800 [LENOVO]
 4 P HPFS - NTFS          243198   0  1 244197  63 32    2048000 [WINRE_DRV]


 [  Quit  ] >[ Return ]  [ Write  ]
                         Return to partition selection
Why do I see the FAT32 and FAT12 EFI System partition?
I only see FAT32.


Do I need to flash FAT12 as well?
???

If I select anything other than D it shows Structure:Bad
What is "D"?
What do you mean by "recovering windows"?
People typically want to recover their personal data.
If you do not manage to express yourself so that I can understand you I will not be able to help!

Code: Select all

TestDisk 7.1, Data Recovery Utility, July 2019
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
     FAT12                66611   2  1 66612  27 32       2880 [EFI System Parti
Directory /EFI/BOOT

>drwxr-xr-x     0     0         0  2-Feb-2022 10:53 .
 drwxr-xr-x     0     0         0  2-Feb-2022 10:53 ..
 -rwxr-xr-x     0     0   1175400  2-Feb-2022 18:50 BOOTX64.EFI
How do I proceed with the recovery?



Here is the output for smartmontools

Code: Select all

smartctl 7.1 2019-12-30 r5022 [x86_64-linux-5.13.0-30-generic] (local build)
Copyright (C) 2002-19, Bruce Allen, Christian Franke, www.smartmontools.org

=== START OF INFORMATION SECTION ===
Model Number:                       INTEL SSDPEKKW256G7
Serial Number:                      BTPY7305165E256D
Firmware Version:                   PSF107C
PCI Vendor/Subsystem ID:            0x8086
IEEE OUI Identifier:                0x5cd2e4
Controller ID:                      1
Number of Namespaces:               1
Namespace 1 Size/Capacity:          256,060,514,304 [256 GB]
Namespace 1 Formatted LBA Size:     512
Local Time is:                      Thu Mar 31 02:57:25 2022 UTC
Firmware Updates (0x12):            1 Slot, no Reset required
Optional Admin Commands (0x0006):   Format Frmw_DL
Optional NVM Commands (0x001e):     Wr_Unc DS_Mngmt Wr_Zero Sav/Sel_Feat
Maximum Data Transfer Size:         32 Pages
Warning  Comp. Temp. Threshold:     70 Celsius
Critical Comp. Temp. Threshold:     80 Celsius

Supported Power States
St Op     Max   Active     Idle   RL RT WL WT  Ent_Lat  Ex_Lat
 0 +     9.00W       -        -    0  0  0  0        5       5
 1 +     4.60W       -        -    1  1  1  1       30      30
 2 +     3.80W       -        -    2  2  2  2       30      30
 3 -   0.0700W       -        -    3  3  3  3    10000     300
 4 -   0.0050W       -        -    4  4  4  4     2000   10000

Supported LBA Sizes (NSID 0x1)
Id Fmt  Data  Metadt  Rel_Perf
 0 +     512       0         0

=== START OF SMART DATA SECTION ===
SMART overall-health self-assessment test result: FAILED!
- available spare has fallen below threshold
- media has been placed in read only mode

SMART/Health Information (NVMe Log 0x02)
Critical Warning:                   0x09
Temperature:                        17 Celsius
Available Spare:                    0%
Available Spare Threshold:          10%
Percentage Used:                    7%
Data Units Read:                    40,841,957 [20.9 TB]
Data Units Written:                 28,667,175 [14.6 TB]
Host Read Commands:                 679,940,504
Host Write Commands:                425,943,356
Controller Busy Time:               7,075
Power Cycles:                       6,319
Power On Hours:                     5,372
Unsafe Shutdowns:                   95
Media and Data Integrity Errors:    5,986,851
Error Information Log Entries:      5,987,208
Warning  Comp. Temperature Time:    0
Critical Comp. Temperature Time:    0

Error Information (NVMe Log 0x01, max 64 entries)
Num   ErrCount  SQId   CmdId  Status  PELoc          LBA  NSID    VS
  0    5987208     2  0x0076  0x0281      -    492660784     1     -
  1    5987207     2  0xf076  0x0281      -    492660784     1     -
  2    5987206     2  0xe076  0x0281      -    492660784     1     -
  3    5987205     2  0xd076  0x0281      -    492660784     1     -
  4    5987204     2  0xc076  0x0281      -    492660784     1     -
  5    5987203     2  0xb076  0x0281      -    492660784     1     -
  6    5987202     2  0x8075  0x0281      -    492660784     1     -
  7    5987201     2  0x7075  0x0281      -    492660784     1     -
  8    5987200     2  0x6075  0x0281      -    492660784     1     -
  9    5987199     2  0x5075  0x0281      -    492660784     1     -
 10    5987198     2  0x4075  0x0281      -    492660784     1     -
 11    5987197     2  0x3075  0x0281      -    492660784     1     -
 12    5987196     2  0xe074  0x0281      -    492660784     1     -
 13    5987195     2  0x006c  0x0281      -    492660808     1     -
 14    5987194     2  0xf06c  0x0281      -    492660808     1     -
 15    5987193     2  0xe06c  0x0281      -    492660808     1     -
... (48 entries not shown)
Top
tanmayk
Posts: 2
Joined: 31 Mar 2022, 04:04

Re: I am seeing FAT32 and FAT12 EFI partitons in testdisk, how to recover my windows ssd?

#3 Post by tanmayk »

@recuperation
I am trying to understand why was it showing FAT12 and the Delete option before this line

>D FAT12 66611 2 1 66612 27 32 2880 [EFI System Partition] [EFISECTOR]

Should I analyze and then write as shown here

Code: Select all

Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32

     Partition                  Start        End    Size in sectors

 1 * FAT32                    1   0  1   260  63 32     532480 [EFI System Parti
 2 P HPFS - NTFS            277   0  1 217597  63 32  445073408 [Windows]
 3 P HPFS - NTFS          217598   0  1 243197  63 32   52428800 [LENOVO]
 4 P HPFS - NTFS          243198   0  1 244197  63 32    2048000 [WINRE_DRV]


 [  Quit  ] >[ Return ]  [ Write  ]
Can I copy data to a remote drive like google drive before I perform the write operation?
Top
recuperation
Posts: 3078
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: I am seeing FAT32 and FAT12 EFI partitons in testdisk, how to recover my windows ssd?

#4 Post by recuperation »

tanmayk wrote: 01 Apr 2022, 00:05 @recuperation
I am trying to understand why was it showing FAT12 and the Delete option before this line

>D FAT12 66611 2 1 66612 27 32 2880 [EFI System Partition] [EFISECTOR]
Testdisk found something that looked like a FAT12 partition.


Should I analyze and then write as shown here

Code: Select all

Disk /dev/nvme0n1 - 256 GB / 238 GiB - CHS 244198 64 32

     Partition                  Start        End    Size in sectors

 1 * FAT32                    1   0  1   260  63 32     532480 [EFI System Parti
 2 P HPFS - NTFS            277   0  1 217597  63 32  445073408 [Windows]
 3 P HPFS - NTFS          217598   0  1 243197  63 32   52428800 [LENOVO]
 4 P HPFS - NTFS          243198   0  1 244197  63 32    2048000 [WINRE_DRV]


 [  Quit  ] >[ Return ]  [ Write  ]
I have no idea. If I have a bluescreen of death I just reboot my computer. Why should I use Testdisk? Your documentation is extremely poor.

Can I copy data to a remote drive like google drive before I perform the write operation?
As long as that works you can copy data everywhere.
Top
Locked

Return to “Filesystem repair”