chkdsk recovery

[pik4chu]

Well Im still fighting to restore data lost a month or so ago thanks to chkdsk. The data is there because the used space of the drive is still the same but the files are not displayed (thanks to chkdsk "fixing" the MFT. and while rumaging through file recovery progs I came across files that were in the usual chdsk folders (the dirXXXX.chk, etc) they were labeled "change.log.X" and "restorepointsize" Is it possible to use these files to get chkdsk to put my file table back how it was? or anything similar to this? This is extremely important data, as I now realised when I couldnt find something.

Programs Ive tried to recover data with:
Winternals Disk Commander - didnt help at all
Ontrack Easy Recovery Pro - worked at one point, now keeps crashing, reinstalling it now.
R-Studio: What I used to find the .chk files, trying to recover them now so they can be read.

please help, I need this stuff badly as its irreplacable, but I cant afford a 1grand or whatever to have it recovered by some company :cry:

*edit* Easy Recovery Pro still wont work, crashes when its "scanning system"
And I found the changelog file that contains info about the data I need, here is an excerpt from it

\ D e v i c e \ H a r d d i s k V o l u m e 4 \ S y s t e m V o l u m e I n f o r m a t i o n \ _ r e s t o r e { 7 B 1 7 4 4 C 3 - F D F B - 4 6 F D - A 2 D 6 - 9 1 6 6 A 2 5 C 6 2 5 F } \ R P 1 8 \ c h a n g e . l o g þ ~
ïÍ« ìÂ
:  \ B a c k u p s \ C \ m I R C \ m i r c . i n i ~ ~
ïÍ« íÂ
:  \ B a c k u p s \ C \ m I R C \

The bold item is the p0ath I had it stored, but now its not there at all (but as I said, disk usage hasnt changed) Now there is another 60 some gigs that I need to recover elsewhere on this drivce but the few hundred megs of data in that folder mean everything to me, if I have to manually edit the MFT to put the entries back in there I will, please, Im begging for help :cry: :cry:

[powerme]

Ontrack Easy Recovery Pro should allow you to create a EMERGENCY floppy disk so that you can recover from DOS.

try that?????

[pik4chu]

Its a 200gig NTFS drive....but ill try it anyways..


Another question.. Can you take HEX of a file and use it to recreate that file so that file is readable?

for clarification. in R-studio there are some chkdsk log files that I cant recover, says they are corrupted, but I can view them in direct hex and export them as binary files, is there a way to use these to recreate the original? Since Im not all that good at reading HEX :D

*edit* Side note: the MFT is scary looking :eek:

[powerme]

i am not an expert on HEX . I can't answer that question but my guess is You can LOOK at them for FUN and CAN'T CREATE anything.

you can TRY your luck by RENAME it but do not suprise when it doesn't give you what you want

general rule is when you did something wrong with your disk and if you want to recover files IMMEDIATELY, you should shut down computer IMMEDIATE and DO nothing else and use EMERGENCY disk to recover files from that disk

if you did something on the disk such as format and install another app , your chance of recovering a file decreases because other data are written in that disk.

i feel your pain because i lost 3 beloved 120 gb of music, video, software and document and couldn't recover all of them because 2 partitions were written....

i have 3 software you mentioned and still didn't help me with 120 gb of *goods* and years of *collection*

but i'm glad i BACKED UP my goods and start from 80% forward which is not BAD

good luck with your RECOVERY

i hope you RECOVER soon LOL:D :D :D

[pik4chu]

nothing has been done to the drive, the installed apps were not installed to this drive, and it has not been formatted, hence why it still shows the correct amount of used space. a lot of what Ive lost is software and movie backups but who cares about that... this stuff was extremely important to me.. and it was THE backup, it just was never restored (which I wasnt aware of) so, the bakup was killed and there was no original, one hell of a switch isnt it?. :cry:

*edit* im letting r-studio do a "raw" scan or something...going to bed while it runs... maybe Ill get lucky :cry:

[powerme]

if it is still showing the correct amount of used space, you can try to IMAGE or DISKCOPY to RECOVER by using utility disk come with your hard drive

perhaps, you could use utility disk come with your hard drive (maxtor or WD) to see if you see any DATA from this *drive*

if you see it, use this utility disk CAREFULLY to recover files to a another hard drive.

good luck.
in this recovery business, i don't guarantee anything.....

if i were you, i will do RECOVERY by using floppy disk in DOS NOT from windows

you don't know MS do your disk in the background

[powerme]

oh boy, i have the same problem as you have right now. I try to recover 35 gb of dataa from 1 of my partitions.

Partition magic 8+ winxp pro= No responding.........bad thing happens

exactly in the same situation. If i successfully do that, i'll show you step by step how to do that.

In the mean time, stay tune for good news

UPDATE:

i'm using easyrecovery pro version to retrieve my data now. Everything is so far so good.

i will need to test each file to make sure everything works.

i'll let you know in the end of the day, If i get what i want


i'm using "advance recovery" in easyrecovery pro version to do the job

you should try to do the same to see if you get a good result.

[powerme]

I AM SO LUCKY

EVERYTHING IS FINE

CHKDSK ROCKS

[pik4chu]

Originally posted by powerme
I AM SO LUCKY

EVERYTHING IS FINE

CHKDSK ROCKS

CHKDSK will never rock.... Im going to try the boot disk today when I reboot to take out the HDD Im selling.

[pik4chu]

ok, thats very strange, I can find the files that I lost (yay!) I can recover them to a drive (yay!) but in windows....they are no where to be found.... :eh?: im going back and trying again using raw scan, to ignore the MFT to see if that helps. All it did was create some large invalid files on a random drive. It seems it cant read my drives right... it thinks c:\ is the one SATA drive but when I write to it it rights to F:\ which is neither the boot, nor the SATA drive...ugggh, wqhy does it have to be so aggravating :bang head:

[powerme]

you can find files with the emergency book disk????

[pik4chu]

yes.. and I can choose to recover them to the "C:\" drive, which I have discovered is the F drive beause its the only one that is FAT32... but when I recover there is nothing but junk files there

*edit* looks like Ill be reformatting this drive now...
http://www.theforumisdown.com/uploadfiles/users/jenkins/files/damndrive.GIF

[powerme]

emergency boot disk from easyrecovery pro or R-STUDIO ?????

how is your recovery right now ???? so far so good???

[powerme]

did you try to *image* this drive (F drive ) by using ghost or drive image 7 ?????

after *image* it, try to use ghost or drive image 7 viewer to see if you can locate the files. If yes, you 1 step closer to your dream.

and format F drive and run chkdsk /r and RESTORE this image back to F drive. If you are lucky, you will have ALL your data back

good luck.

i don't guarantee you anything in this kind of business

EDIT: are you chinese ??? because of your screen

all your files has chinese character.

[pik4chu]

no Im not chinese, and Im using the Easy recovery pro bootdisk.. those files where created by ERP when "recovering" files from the other drive... aka, it ****ed it up and didnt work. I would image it but I have no place to store the image..... :( upon looking at the contents of the fodlers I lost, Im thinking of just puting my tail between my legs and walking off in defeat...

[powerme]

you have any luck with r-studio NTFS or FAT32 ????

you can't trust easyrecovery pro completely.

[pik4chu]

r-studio works less than easy recov does... there are a few other things I will try but not until I have my RAID setup.

[powerme]

i have 1 important question for you

do you successfully RECOVER your lost files ????

[pik4chu]

Originally posted by powerme
i have 1 important question for you

do you successfully RECOVER your lost files ????

no, not yet. now im working on "restoring" my F drive thanks to easy recov pro, the corrupted/invalid files are spreading it seems

[powerme]

let me know when you recover all your files

if you want your data that bad, 2000 should be spent

[JigPu]

Ugg.. Sounds bad. Depending on just what happened, some of the data can end up totaly corrupted. When my drive died a while ago, I ended up recovering my files, along with a few dozen corrupt files that were basically parts of three or four files squished into one (noticed this with my MP3s since they would play parts of different songs :rolleyes: ).

For hex, you should be able to export them as binary files (I think...) and have them be readable. I don't understand how a text file could be detected as corrupt (...by a computer anyway :D), so you should be able to save them and view the contents. Wether they contain usefull and uncorrupt log entries is another problem though.

Sorry to hear about your bad luck on this issue!
JigPu