I just re-writing up new thread with change question as more simply, because i could not get clear answer of this issue for months.





This is the screen just before exiting chkdsk. There were bad sectors on the disk. In that case some files, I heard, could be deleted when chkdsk is executed with /r switch, so I turned it off in haste. As you see, chkdsk didn't leave any messages that it deleted or modifed something. Still could there be any files already deleted? When I checked it out after the terminaton no found.xxx folder or chk file was found.

It is said that there could be losses in the data recorded on the sectors marked as bad in the recovery process using /r switch. What I'd like to know is if there could be any possibility that when the job occurred it proceeded without leaving any job history on the prompt screen.

1. Files are not deleted for just having bad sectors in them.
2. The content of the file may be lost/damaged when there is a bad sector. The bad sectors are just that - bad, cannot be read. /R switch just discovers the fact the sector is bad.
3. The copy of CHKDSK progress/job report can normally be found in the event log (System I recall).

Unfortunately log was not created in this time because of abort chkdsk by myself. after abort chkdsk, i moved all data to new disk by TeraCopy and some folder was in not able to copy so i deleted and replaced from back up data. also according to screenshot, chkdsk was checking 869 clusters and did not find any errors yet (judging by prompt, any error messages aren't leaved on prompt), so i assume chkdsk did not touch any data/sectors yet, and i canceled before something can happen with data/sectors by chkdsk. how do you think about this conclusion?

If you cancelled at the point shown on the screenshot, nothing happened (yet). I recall if there are bad sectors, this is indicated immediately (can't recall exact wording though).

Thank you so much for your certain answer. my screenshot is exactly last screen before cancel the chkdsk, then nothing happened (yet).

My English is not good enough... so am i understood your answer correctly? are you engineer of ReclaiMe software?

First, i apologize if i am bothering you to make same answer again. if not, i just wanted to verify that i understood your answer correctly or not. because i have English problem to understand your answer 100% perfectly.

As i said, my screenshot is exactly last screen before cancel the chkdsk, then nothing happened (yet).

I wondered about this conclusion is certainly right and it is from your professional based on fact, according to that you are developer of RecaliMe software.

So please, if you can leave me just one short answer again for verify... well, i can sleep without worries about this anymore.

So changing the question. "When chkdsk finds a bad sector, it 100% momentarily flashes a message like "recovering sector xxxx" while stage 4?"

I mean, are that kind of messages not 'left' on prompt, but just 'flashes' like that and just gone?

Then if there was bad sector while chkdsk running, how can i know it was recovered or removed by chkdsk job if just chkdsk only 'flashes' messages, no messages left on prompt?

I don't have logs about this chkdsk, so should to know how it works in this part. sigh.

"When chkdsk finds a bad sector/bad cluster, it 100% momentarily flashes a message like "recovering sector xxxx" while stage 4?"

It is difficult to answer as it is difficult to replicate the various scenarios of damage.
You could experiment on your own with another degraded drive. Run checkdisk and see what it does in the logs. Then run checkdisk and stop in the middle of it and see what it does in logs.

Ideally, you would want to have an image created of the disk prior to executing checkdisk. Then, after the changes, create a new image, and then compare before and after images. Software based imaging will likely not produce as good of a result as with hardware imaging.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts

I tried to figure out what chkdsk stage 4 exactly show and 'logging' with another failed drive which got some bad sectors. then i could see this message at real time, also stage 4 only left this message in the log.

Stage 4: Looking for bad clusters in user file data ...
Windows replaced bad clusters in file 250
of name \temp\~1.mkv
12218 files processed.
File data verification completed.

Then is this meaning chkdsk only touched ~1.mkv file because of bad sector, so did not touch any other data?

Check drive/image in hex editor before and after changes.

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts

I tried this method today with some failed drive, first when drive is clean with no bad sectors, i could make the image file by HDD Raw Copy Tool.

And... i touched drive enough while it is on, tried for a make bad sectors on purpose, it worked and now this drive got some bad sectors but... act like already dead, so could not make image file also or could not open with hex editor tools.

I think that only thing i want to verify is, chkdsk didn't do anything (yet) as last screen on screenshot. what actually can i do for prove this now?

PS. I just feel like over reacting, all people says... just same thing.

"If you cancelled at the point shown on the screenshot, nothing happened (yet)."

"If you canceled before it found any bad clusters then nothing was changed.

"Everything chkdsk does is reported on screen."

"The recovery stage happens at stage 5, the files to be recovered happen at stage 4, nothing was detected or recovered since you canceled the chkdsk operation."

So it is just wasting time already? i hope somebody me woke up from this stuck. -_-;