FAT16 Invalid Boot Sector?

How to use TestDisk to recover lost partition
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
coolj8558
Posts: 3
Joined: 01 Aug 2022, 16:36

FAT16 Invalid Boot Sector?

#1 Post by coolj8558 »

I am trying to recover files from a flash drive at work. It is a SanDisk Cruzer Micro, 4gb. The drive has 1 partition, and it appears as raw in windows. Testdisk seems to recognize it as FAT16, but it fails to find the partition, or any files. I will attach the Log.




Mon Aug 1 11:50:16 2022
Command line: TestDisk

TestDisk 7.2-WIP, Data Recovery Utility, July 2022
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 11.2, Cygwin 3001.4
ext2fs lib: 1.45.3, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.1
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=256058064896
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=4016045568
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=254935286272
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=4013948928
filewin32_getfilesize(\\.\E:) GetFileSize err Incorrect function.

filewin32_setfilepointer(\\.\E:) SetFilePointer err Incorrect function.

Warning: can't get size for \\.\E:
Hard disk list
Disk \\.\PhysicalDrive0 - 256 GB / 238 GiB - CHS 31130 255 63, sector size=512 - Intel Raid 1 Volume, S/N:Volume1, FW:1.0.
Disk \\.\PhysicalDrive1 - 4016 MB / 3829 MiB - CHS 488 255 63, sector size=512 - SanDisk Cruzer, S/N:22430311AD816CAF, FW:8.01

Partition table type (auto): Intel
Disk \\.\PhysicalDrive1 - 4016 MB / 3829 MiB - SanDisk Cruzer
Partition table type: Intel

Analyse Disk \\.\PhysicalDrive1 - 4016 MB / 3829 MiB - CHS 488 255 63
Geometry from i386 MBR: head=255 sector=63


test_FAT()
1 P FAT16 >32M 0 2 3 488 2 26 7839744
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
Current partition structure:
Invalid FAT boot sector
1 P FAT16 >32M 0 2 3 488 2 26 7839744
1 P FAT16 >32M 0 2 3 488 2 26 7839744

Bad sector count.
No partition is bootable

search_part()
Disk \\.\PhysicalDrive1 - 4016 MB / 3829 MiB - CHS 488 255 63

Results

interface_write()

No partition found or selected for recovery

search_part()
Disk \\.\PhysicalDrive1 - 4016 MB / 3829 MiB - CHS 488 255 63

Results

interface_write()

No partition found or selected for recovery
simulate write!

write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition

Interface Advanced
Geometry from i386 MBR: head=255 sector=63


test_FAT()
1 P FAT16 >32M 0 2 3 488 2 26 7839744
sector_size 0
cluster_size 0
reserved 0
fats 0
dir_entries 0
sectors 0
media 00
fat_length 0
secs_track 0
heads 0
hidden 0
total_sect 0
check_part_i386 failed for partition type 06
1 P FAT16 >32M 0 2 3 488 2 26 7839744

fat1x_boot_sector
1 P FAT16 >32M 0 2 3 488 2 26 7839744
Boot sector
Bad

A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.

1 P FAT16 >32M 0 2 3 488 2 26 7839744
rebuild_FAT_BS p_fat12 0, p_fat16 0, p_fat32 1
fat_find_type(max_offset=61312, p_fat12=0, p_fat16=0, p_fat32=1, debug=1, dump_ind=0)
No FAT found, reserved=0, fat_length=0
find_sectors_per_cluster skip_sectors=358 (skip_offset=183296)
Can't find cluster size

fat1x_boot_sector
1 P FAT16 >32M 0 2 3 488 2 26 7839744
Boot sector
Bad

A valid FAT Boot sector must be present in order to access
any data; even if the partition is not bootable.

TestDisk exited normally.

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: FAT16 Invalid Boot Sector?

#2 Post by recuperation »

What exactly is your question?

coolj8558
Posts: 3
Joined: 01 Aug 2022, 16:36

Re: FAT16 Invalid Boot Sector?

#3 Post by coolj8558 »

Im wondering if recovery is possible. Ive follwed the other threads with the same issue, and it worked for them, but not for me. This sofware probably isnt enough, but I was really hoping to avoid paying for a sofware/service.

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: FAT16 Invalid Boot Sector?

#4 Post by recuperation »

Have you tried the deep search after the normal search?

coolj8558
Posts: 3
Joined: 01 Aug 2022, 16:36

Re: FAT16 Invalid Boot Sector?

#5 Post by coolj8558 »

Yes, it did not find anything.

recuperation
Posts: 2720
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: FAT16 Invalid Boot Sector?

#6 Post by recuperation »

What information was located on the stick?
Is the USB stick encrypted?

Locked