Chkdsik wiped entire disk contents

[Matt Williamson]

I just finished copying about 40 gigs worth of data to a 120 gig drive,
which filled it to capacity during the copy with more data left to copy. I
just told it to cancel and tried to free up more space and copy the rest of
the files. I rebooted for another issue and when I did, it ran a chkdsk on
that volume and found a lot of inconsistencies. The log file in event viewer
is so long, that it truncated it, but I'll post what I have.

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 03/31/2007
Time: 8:26:24 AM
User: N/A
Computer: ITMATT2
Description:
Checking file system on E:
The type of the file system is NTFS.
Volume label is Storage.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
Unable to query LCN from VCN 0x4 for attribute of type 0x80.
The non resident attribute of type 0x80 is inconsistent. The valid data
length is 0x12a5bc000, file size 0x12a5bc000, and allocated length 0x4000.
The non resident attribute of type 0x80 is inconsistent. The valid data
length is 0x12a5bc000, file size 0x4000, and allocated length 0x4000.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x10 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x11 with sequence number 0x1.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to find child frs 0x12 with sequence number 0x1.
The attribute of type 0x80 and instance tag 0x1 in file 0x0
has allocated length of 0x12a5bc000 instead of 0x4000.
Deleted corrupt attribute list entry
with type code 128 in file 0.
Unable to locate attribute with instance tag 0x1 and segment
reference 0x1000000000000. The expected attribute type is 0x80.
Deleting corrupt attribute record (128, "")
from file record segment 0.
Deleted corrupt attribute list entry
with type code 160 in file 9.
Unable to find child frs 0x143e with sequence number 0x6.
Deleted corrupt attribute list entry
with type code 160 in file 9.
Unable to find child frs 0x143e with sequence number 0x6.
Deleted corrupt attribute list entry
with type code 176 in file 9.
Unable to find child frs 0x143e with sequence number 0x6.
Deleted corrupt attribute list entry
with type code 176 in file 9.
Unable to find child frs 0x143e with sequence number 0x6.
The index bitmap for index $SDH in file 0x9 is invalid or missing.
Correcting error in index $SDH for file 9.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff 20 00 6f 00 6e 00 20 00 ........ .o.n. .
45 00 3a 00 0d 00 0a 00 00 00 54 00 68 00 65 00 E.:.......T.h.e.
Sorting index $SDH in file 9.
The index bitmap for index $SII in file 0x9 is invalid or missing.
Correcting error in index $SII for file 9.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff 20 00 6f 00 6e 00 20 00 ........ .o.n. .
45 00 3a 00 0d 00 0a 00 00 00 54 00 68 00 65 00 E.:.......T.h.e.
Sorting index $SII in file 9.
Index entry $ObjId of index $I30 in file 0xb points to unused file 0x19.
Deleting index entry $ObjId in index $I30 of file 11.
Index entry $Quota of index $I30 in file 0xb points to unused file 0x18.
Deleting index entry $Quota in index $I30 of file 11.
Index entry $Reparse of index $I30 in file 0xb points to unused file 0x1a.
Deleting index entry $Reparse in index $I30 of file 11.
An index entry of index $I30 in file 0x5 points to file 0x176
which is beyond the MFT.
Deleting index entry 20060505_ottawa.wma in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x176
which is beyond the MFT.
Deleting index entry 200605~1.WMA in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x218ff3
which is beyond the MFT.
Deleting index entry a in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x33cc
which is beyond the MFT.
Deleting index entry Assentor in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x16ee
which is beyond the MFT.
Deleting index entry AUTOEXEC.BAT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x330e
which is beyond the MFT.
Deleting index entry AVLog in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x348d
which is beyond the MFT.
Deleting index entry Backup Tape Log.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x348d
which is beyond the MFT.
Deleting index entry BACKUP~1.TXT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xf5a6
which is beyond the MFT.
Deleting index entry Batch in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x9c32
which is beyond the MFT.
Deleting index entry Batchservers.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x9c32
which is beyond the MFT.
Deleting index entry BATCHS~1.TXT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xcfd
which is beyond the MFT.
Deleting index entry boot.ini in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x10277
which is beyond the MFT.
Deleting index entry BOOT.PCP in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1fe5a
which is beyond the MFT.
Deleting index entry bootdisk in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x8828
which is beyond the MFT.
Deleting index entry Cisco in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xf19c
which is beyond the MFT.
Deleting index entry code in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x24a9
which is beyond the MFT.
Deleting index entry Config.Msi in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x16ed
which is beyond the MFT.
Deleting index entry CONFIG.SYS in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x255
which is beyond the MFT.
Deleting index entry ContactData04.10.06.csv in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x255
which is beyond the MFT.
Deleting index entry CONTAC~1.CSV in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x8c5a
which is beyond the MFT.
Deleting index entry DCauth.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x2b3d
which is beyond the MFT.
Deleting index entry devicetable.log in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x2b3d
which is beyond the MFT.
Deleting index entry DEVICE~1.LOG in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xd03
which is beyond the MFT.
Deleting index entry Documents and Settings in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xd03
which is beyond the MFT.
Deleting index entry DOCUME~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xed2f
which is beyond the MFT.
Deleting index entry ERROR.HCB in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x263e
which is beyond the MFT.
Deleting index entry ErrorLog.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x8279
which is beyond the MFT.
Deleting index entry Exchange Server Setup.log in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x8279
which is beyond the MFT.
Deleting index entry EXCHAN~1.LOG in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x82c1
which is beyond the MFT.
Deleting index entry exchsrvr in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x50
which is beyond the MFT.
Deleting index entry ffastun.ffa in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x33b6
which is beyond the MFT.
Deleting index entry ffastun.ffl in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x74c
which is beyond the MFT.
Deleting index entry ffastun.ffo in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xa9e
which is beyond the MFT.
Deleting index entry ffastun0.ffx in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xa019
which is beyond the MFT.
Deleting index entry File Downloads in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xa019
which is beyond the MFT.
Deleting index entry FILEDO~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1fe57
which is beyond the MFT.
Deleting index entry Flashboot in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1fe57
which is beyond the MFT.
Deleting index entry FLASHB~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1bb
which is beyond the MFT.
Deleting index entry fpw in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x2188f3
which is beyond the MFT.
Deleting index entry GMON Import in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x2188f3
which is beyond the MFT.
Deleting index entry GMONIM~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x218716
which is beyond the MFT.
Deleting index entry GP9Client in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x218716
which is beyond the MFT.
Deleting index entry GP9CLI~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1feaf
which is beyond the MFT.
Deleting index entry HP Pavilion Drivers and Software in index $I30 of file
5.
An index entry of index $I30 in file 0x5 points to file 0x1feaf
which is beyond the MFT.
Deleting index entry HPPAVI~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x121
which is beyond the MFT.
Deleting index entry InstallLog.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x121
which is beyond the MFT.
Deleting index entry INSTAL~1.TXT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x25c
which is beyond the MFT.
Deleting index entry InvestigoTaskDataBuckGroup.csv in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x26b
which is beyond the MFT.
Deleting index entry InvestigoTaskDataBuckGroup.zip in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x25c
which is beyond the MFT.
Deleting index entry INVEST~1.CSV in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x26b
which is beyond the MFT.
Deleting index entry INVEST~1.ZIP in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1baa
which is beyond the MFT.
Deleting index entry IO.SYS in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1d0a69
which is beyond the MFT.
Deleting index entry java project in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1d0a69
which is beyond the MFT.
Deleting index entry JAVAPR~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1fe13
which is beyond the MFT.
Deleting index entry ModelLicense.log in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1fe13
which is beyond the MFT.
Deleting index entry MODELL~1.LOG in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1bab
which is beyond the MFT.
Deleting index entry MSDOS.SYS in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xd2c7
which is beyond the MFT.
Deleting index entry MSOCache in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1628d
which is beyond the MFT.
Deleting index entry My Stuff in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1628d
which is beyond the MFT.
Deleting index entry MYSTUF~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x8a23
which is beyond the MFT.
Deleting index entry MyWorks in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x118eb
which is beyond the MFT.
Deleting index entry Nero Compilations in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x118eb
which is beyond the MFT.
Deleting index entry NEROCO~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xce3
which is beyond the MFT.
Deleting index entry NTDETECT.COM in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xcdf
which is beyond the MFT.
Deleting index entry ntldr in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x2ee
which is beyond the MFT.
Deleting index entry ntreskit in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x16c01
which is beyond the MFT.
Deleting index entry Office10 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x830e
which is beyond the MFT.
Deleting index entry os405295.bin in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x216624
which is beyond the MFT.
Deleting index entry Pacer Import GACT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x216624
which is beyond the MFT.
Deleting index entry PACERI~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x4826
which is beyond the MFT.
Deleting index entry PEBuilder in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x4826
which is beyond the MFT.
Deleting index entry PEBUIL~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x479c
which is beyond the MFT.
Deleting index entry Perl in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x25b
which is beyond the MFT.
Deleting index entry perlre.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x25d
which is beyond the MFT.
Deleting index entry perlrequick.txt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x25d
which is beyond the MFT.
Deleting index entry PERLRE~1.TXT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x4f6
which is beyond the MFT.
Deleting index entry Pershing Conversion in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x4f6
which is beyond the MFT.
Deleting index entry PERSHI~1 in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x8873
which is beyond the MFT.
Deleting index entry philmont in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1ee82
which is beyond the MFT.
Deleting index entry PHP in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1e837
which is beyond the MFT.
Deleting index entry phpdebug in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x1d0b70
which is beyond the MFT.
Deleting index entry pictures in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xbe89
which is beyond the MFT.
Deleting index entry Portfolio.xlt in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xbe89
which is beyond the MFT.
Deleting index entry PORTFO~1.XLT in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xbf
which is beyond the MFT.
Deleting index entry ProcLib.html in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xbf
which is beyond the MFT.
Deleting index entry PROCLI~1.HTM in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xc2
which is beyond the MFT.
Deleting index entry ProcTest.html in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0xc2
which is beyond the MFT.
Deleting index entry PROCTE~1.HTM in index $I30 of file 5.
An index entry of index $I30 in file 0x5 points to file 0x3bfa
which is beyond the MFT.
Deleting i

Now, when I look at that drive in Windows it only has the System Volume info
folder on it and is showing with 111 of 111 gigs free as if there is no data
on the drive. I haven't written anything to it yet. Is there anything I can
do to recover the missing data?

TIA

Matt

 

[Poprivet]

I just finished copying about 40 gigs worth of data to a 120 gig
drive, which filled it to capacity during the copy with more data
left to copy. I just told it to cancel and tried to free up more
space and copy the rest of the files. I rebooted for another issue
and when I did, it ran a chkdsk on that volume and found a lot of
inconsistencies. The log file in event viewer is so long, that it
truncated it, but I'll post what I have. ....

Now, when I look at that drive in Windows it only has the System
Volume info folder on it and is showing with 111 of 111 gigs free as
if there is no data on the drive. I haven't written anything to it
yet. Is there anything I can do to recover the missing data?

TIA

Matt

Chkdsk ran automatically because the drive was trashed and it sought to
repair it; but it was unrepairable.
Chkdsk didn't trash the disk; it's simply reporting the trashing that
happened before you ran it.

You left out any details that might indicate how the trashing happened.

 

[Matt Williamson]

Chkdsk ran automatically because the drive was trashed and it sought to

repair it; but it was unrepairable.
Chkdsk didn't trash the disk; it's simply reporting the trashing that
happened before you ran it.

You left out any details that might indicate how the trashing happened.

I was able to access data on that disk with no issues just before the
reboot. I had just deleted some files to make additional room so I could
finish copying the files over. That was the last operation performed on the
drive. What details are you looking for?