Chkdsk & Missing Files

[Guest]

I booted my PC this morning and the autocheck ran. It went fine through C:,
but when it hit D: it found a lot of corrupted files. During the repair
process it had no problem naming all the files. It said it was restoring the
files and then saving them.

Then the computer finished booting. Computer runs, but I'm missing an
entire directory (all all subdirectories) off of D:. How do I get those
files back?

 

[Alec S.]

I booted my PC this morning and the autocheck ran. It went fine through C:,
but when it hit D: it found a lot of corrupted files. During the repair
process it had no problem naming all the files. It said it was restoring the
files and then saving them.

Then the computer finished booting. Computer runs, but I'm missing an
entire directory (all all subdirectories) off of D:. How do I get those
files back?

Look for a directory named FOUND.* in the root of D:\. For example you should see D:\FOUND.000, D:\FOUND.001, etc. They will
contain files named FILE0001.CHK, FILE0002.CHK, etc.

 

[Guest]

That's what I thought as well, but nothing exists like that, even as hidden
files. I've recovered from an over-zealous chkdsk before, but normally there
is something to work with. It is just really odd as it said it was restoring
and saving the files, and poof, nothing left.

 

[WB]

I booted my PC this morning and the autocheck ran. It went fine through
C:,
but when it hit D: it found a lot of corrupted files. During the repair
process it had no problem naming all the files. It said it was restoring
the
files and then saving them.

Then the computer finished booting. Computer runs, but I'm missing an
entire directory (all all subdirectories) off of D:. How do I get those
files back?

The missing files have been renamed with .chk extension
If you examine Event Viewer (Run eventvwr.msc), under Application/winlogon
you will be able to see the results of the chkdsk scan.

As far as recovery, search your drive for *.chk files. You can then examine
the contents.
chkmate claims (never tried it) analysis and recovery:
http://www.diydatarecovery.nl/chkmate.htm

 

[Guest]

No .chk files appear on either volume (C,D). Here is the log from the
EventViewer:

Checking file system on D:
The type of the file system is NTFS.
Volume label is Mobius.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
Unable to locate the file name attribute of index entry Backups
of index $I30 with parent 0x5 in file 0x1499.
Deleting index entry Backups in index $I30 of file 5.
Unable to locate the file name attribute of index entry A0007336.ini
of index $I30 with parent 0x1496 in file 0x149a.
Deleting index entry A0007336.ini in index $I30 of file 5270.
Unable to locate the file name attribute of index entry A0007339.ini
of index $I30 with parent 0x1496 in file 0x149b.
Deleting index entry A0007339.ini in index $I30 of file 5270.
Unable to locate the file name attribute of index entry Folder.jpg
of index $I30 with parent 0x71e0 in file 0x71ec.
Deleting index entry Folder.jpg in index $I30 of file 29152.
Unable to locate the file name attribute of index entry If It Makes You
Happy-Sheryl Crow.mp3
of index $I30 with parent 0x71e0 in file 0x71ee.
Deleting index entry If It Makes You Happy-Sheryl Crow.mp3 in index $I30 of
file 29152.
Unable to locate the file name attribute of index entry IFITMA~1.MP3
of index $I30 with parent 0x71e0 in file 0x71ee.
Deleting index entry IFITMA~1.MP3 in index $I30 of file 29152.
Unable to locate the file name attribute of index entry Textures
of index $I30 with parent 0x9e42 in file 0x71ef.
Deleting index entry Textures in index $I30 of file 40514.
Cleaning up minor inconsistencies on the drive.
CHKDSK is recovering lost files.
Recovering orphaned file ZIPS (358) into directory file 5273.
Recovering orphaned file SERVER~1 (2994) into directory file 5273.
Recovering orphaned file Server Logs (2994) into directory file 5273.
Recovering orphaned file My Music (3309) into directory file 5273.
Recovering orphaned file MYMUSI~1 (3309) into directory file 5273.
Recovering orphaned file FONTSX~2 (18350) into directory file 5273.
Recovering orphaned file Fonts XPanded (18350) into directory file 5273.
Recovering orphaned file MISCBA~1 (20622) into directory file 5273.
Recovering orphaned file Misc Backups (20622) into directory file 5273.
Recovering orphaned file FAVORI~1 (20628) into directory file 5273.
Recovering orphaned file Favorites 082206 (20628) into directory file 5273.
Recovering orphaned file Games (37373) into directory file 5273.
Recovering orphaned file TS2PAS~1.TXT (53072) into directory file 5273.
Recovering orphaned file TS2 Passwords.txt (53072) into directory file 5273.
Recovering orphaned file REPORT~1.ZIP (65034) into directory file 5273.
Recovering orphaned file reportsserver.zip (65034) into directory file 5273.
Recovering orphaned file OUTLOO~1.PST (200605) into directory file 5273.
Recovering orphaned file Outlook082206.pst (200605) into directory file 5273.
Recovering orphaned file NBTSER~1 (204847) into directory file 5273.
Recovering orphaned file NBT Server Setups (204847) into directory file 5273.
Cleaning up 1 unused index entries from index $SII of file 0x9.
Cleaning up 1 unused index entries from index $SDH of file 0x9.
Cleaning up 1 unused security descriptors.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

199141708 KB total disk space.
149571928 KB in 275189 files.
115452 KB in 13570 indexes.
40 KB in bad sectors.
391976 KB in use by the system.
65536 KB occupied by the log file.
49062312 KB available on disk.

4096 bytes in each allocation unit.
49785427 total allocation units on disk.
12265578 allocation units available on disk.

Internal Info:
70 e1 04 00 00 68 04 00 33 f0 07 00 00 00 00 00 p....h..3.......
da 03 00 00 00 00 00 00 59 00 00 00 00 00 00 00 ........Y.......
c4 f2 76 13 00 00 00 00 bc e2 e7 a5 00 00 00 00 ..v.............
36 e9 9b 17 00 00 00 00 00 00 00 00 00 00 00 00 6...............
00 00 00 00 00 00 00 00 0c 1b d6 d9 00 00 00 00 ................
90 8f 7a a6 00 00 00 00 88 39 07 00 f5 32 04 00 ..z......9...2..

 

[Gerry Cornell]

To investigate how you are using hard disk space you need to make sure that
you can see all files. Go to Start, Control Panel, Folder Options, View,
Advanced Settings and verify that the box before "Show hidden files and
folders" is checked and "Hide protected operating system files " is
unchecked. You may need to scroll down to see the second item. You should
also make certain that the box before "Hide extensions for known file types"
is not checked. Next in Windows Explorer make sure View, Details is selected
and then select View, Choose Details and check before Name, Type, Total
Size, and Free Space.

You still will not see the System Volume Information folder.
How to Gain Access to the System Volume Information Folder
http://support.microsoft.com/default.aspx?scid=kb;en-us;309531

I would also try HD Tune (freeware).
Download and run it and see what it turns up.
http://www.hdtune.com/

Select the Info tabs and place the cursor on C:\ under Drive letter
and then double click the two page icon ( copy to
Clipboard ) and copy into a further message.

Select the Health tab and then double click the two page icon ( copy to
Clipboard ) and copy into a further message.

Also do a full surface scan with HD Tune.


--

Hope this helps.

Gerry
~~~~
FCA
Stourport, England

Enquire, plan and execute
~~~~~~~~~~~~~~~~~~~

 

[Alec S.]

That's what I thought as well, but nothing exists like that, even as hidden
files. I've recovered from an over-zealous chkdsk before, but normally there
is something to work with. It is just really odd as it said it was restoring
and saving the files, and poof, nothing left.

Check the event log (Run->eventvwr). Look for an event whose source is "WinLogon". Open it's properties and look at the
description. It should have a transcript of the text that you saw during the disk check. Maybe you missed something, or it wrote
something else then quickly erased it.