All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 9 posts ] 
Author Message
 Post subject: Can I recover from chkdsk d: /x /f ?
PostPosted: February 6th, 2018, 17:00 
Offline

Joined: February 6th, 2018, 16:28
Posts: 5
Location: Europe
I have an Elements external USB drive that was corrupted. I ran this command to fix it. The problem is it deleted the index entry files I needed. Is there a way to recover the data from these two files below? I have not written to the HD since.

C:\Users\user>chkdsk d: /x /f

The type of the file system is NTFS.

Deleting index entry filename-here.txt in index $I30 of file 452.
Deleting index entry filename-2-here.txt in index $I30 of file 452.

Any suggestions would be greatly appreciated.

Thanks.

S


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 6th, 2018, 17:28 
Offline

Joined: October 16th, 2013, 13:21
Posts: 713
Location: Brazil
Try with Recuva, GetDataBack or R-Studio.


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 6th, 2018, 18:50 
Offline

Joined: February 6th, 2018, 16:28
Posts: 5
Location: Europe
I tried Recuva in the past and it didn't bring up the file I'm looking for. Maybe I'll try again with the latest version if R-studio doesn't work.

Currently scanning using R-studio which looks a bit more robust. Should I scan for all files or can I focus in on just the .txt files which I am after?

Since I'm after the data in "$I30 of file 452", how does that translate to the hex editor so I can see the data in that space? Or it doesn't work that way?

Deleting index entry filename-here.txt in index $I30 of file 452.
Deleting index entry filename-2-here.txt in index $I30 of file 452.

Thanks.

S


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 6th, 2018, 23:08 
Offline

Joined: June 17th, 2017, 18:30
Posts: 37
Location: Russia
Deleting index entries is a consequence of the problem, not the problem itself.

NTFS has an MFT entry for a file, and then in every directory containing that file (which may be more than one) it will store the index entry. If the file ceases to exist, index entries should be removed. This normally happens as a part of file deletion, but if there is a power failure or somethnig, or if the file is damaged instead of deleted, there is a stale index entry pointing to the file which does not exist any longer. These index entries are cleaned up during checkdisk.

Deleting index entry filename-here.txt in index $I30 of file 452.

translates into

Deleting index entry (a pointer to) filename-here.txt in index $I30 (normal directory index) of file 452 (of a directory which has MFT ID 452), because the file no longer exists.

You should look earlier in the log to see what happens with the file itself.


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 7th, 2018, 14:09 
Offline

Joined: February 6th, 2018, 16:28
Posts: 5
Location: Europe
"You should look earlier in the log to see what happens with the file itself."

There is nothing in the chkdsk log file with this filename before this entry. Just before the lines with the two files I'm trying to recover it displayed the following lines below. $130 matches but the file number is different.:

"Correcting error in index $I30 for file 441.
CHKDSK discovered free space marked as allocated in the bitmap for index $I30 for file 441.
Sorting index $I30 in file 441."

I've finished the scan. There are a bunch of .txt files with numbers for filenames. Is there a way to search for the old file name or contents of these files in R-studio?

Thanks.

S


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 7th, 2018, 14:30 
Offline
User avatar

Joined: February 9th, 2009, 16:13
Posts: 2520
Location: Ontario, Canada
Generally speaking, chkdsk causes irreversible damage and should never be run on a drive that isn't backed up.

_________________
Luke
Recovery Force Data Recovery


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 7th, 2018, 17:02 
Offline

Joined: February 6th, 2018, 16:28
Posts: 5
Location: Europe
Now the external drive is not booting and I'm getting a denied error. This is why I originally ran the chkdsk program to begin with so I could access the drive. I'm not going to do the chkdsk again. This occurred on Windows. I switched to the Linux computer and the drive shows up normally again. Now I have to re-install R-studio and run a scan again.


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 7th, 2018, 17:04 
Offline

Joined: February 6th, 2018, 16:28
Posts: 5
Location: Europe
This external WD Elements drive was supposed to be the main backup drive. My 2nd backup was a USB flash drive and that died too as well as the original SSD drive in my laptop which died first.


Top
 Profile  
 
 Post subject: Re: Can I recover from chkdsk d: /x /f ?
PostPosted: February 7th, 2018, 17:49 
Offline

Joined: May 21st, 2007, 16:10
Posts: 1592
Location: Gothenburg/ Sweden
Driver-21 wrote:
Now the external drive is not booting and I'm getting a denied error. This is why I originally ran the chkdsk program to begin with so I could access the drive. I'm not going to do the chkdsk again. This occurred on Windows. I switched to the Linux computer and the drive shows up normally again. Now I have to re-install R-studio and run a scan again.

First option should be to make a clone and work with that...not with the original drive.

_________________
Rescue IT Datarecovery service Sweden
Rescue IT Dataräddning Göteborg AB
http://www.rescue-it.se


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 9 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google [Bot] and 47 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group