Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

Using TestDisk to repair the filesystem
Post Reply
Message
Author
Issacar
Posts: 2
Joined: 25 Oct 2016, 13:18

Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

#1 Post by Issacar » 25 Oct 2016, 16:57

Hi there,

(First of all, if this post is in the wrong section, please move it to the right one.)

Despite reading wiki articles, I'm really not sure what to do in this current situation.

Details & History:
Windows partition became empty probably after a bad linux distro installation (even though it was specified to be installed on right drive and not to wipe detected OS). After that, Bootrec & Chkdsk may have 'worsen' it.
GetDataBack Simple shows some files (mostly chkdsk logs) but nothing like it should be (Windows folders and files). (Curious fact: during GBD recovery scanning, thumbnails of some image files (photos) which 'were' in this partition, were shown.)

Current situation:
TestDisk log should detail it better than I would.
PS: I added some comments at the end of the log.
Attachments
TestDisk.zip
(1.64 KiB) Downloaded 43 times

Sponsored links

User avatar
cgrenier
Site Admin
Posts: 3757
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

#2 Post by cgrenier » 25 Oct 2016, 19:25

If you select F:, choose None for the partition table type as there is no partitions inside a partition.
If you select the PhysicalDrive, choose PC/Intel or EFI GPT.

Issacar
Posts: 2
Joined: 25 Oct 2016, 13:18

Re: Need guidance (Empty Windows Partition/NTFS recognized as FAT12)

#3 Post by Issacar » 03 Nov 2016, 20:10

Hello again.

I'm sorry about not replying this post for over a week.

At first I didn't understand the answer but then I looked at this guide (Undelete files from NTFS with TestDisk) and managed to recover most if not all the data I needed.

I did another recovery using Recuva to maintain folder structure and while looking at the state of the files, I bumped on this:
$ Files.PNG
$ Files.PNG (47.9 KiB) Viewed 343 times
$BadClus has actually the size of the partition which 'became' empty. (Date is incorrect but I believe the data is there.)

My question now is: should I backup the entire disk before attempting to recover and/or rebuild NTFS boot sector/MFT of this partition or it's safe to do as it is?

I really appreciate any help you can provide.

Post Reply

Who is online

Users browsing this forum: No registered users and 1 guest