HDD GURU FORUMS

After upgrading to Win 10 anniversary ed, I noticed that I had 2 hard driver issues. One drive was having partition issues and the other was missing folders. It was easy enough to fix the partition issue with one drive but the other one was missing files and a slight chance of missing folders but, it the top folder structure looks intact to the best of my recollection.

I used Parted Magic and Photorec to recover my files and check the drive health of the drive with missing files. After the recovery, the files appeared in 4 folder with strange names and with no apparent pattern to the organization. My question is, is there a way to recover those file names or make sense of the naming convention of the files recovered? It's about 2k+ files so manually going through them seems impractical.

Other notes that may be of importance:

1. The drive's in good condition. I even used a long drive diagnostic to confirm. No idea what happened.

2. Reverting to the previous version of windows only fixes the issue with the partition of the one drive but not the other drive with missing files.

3. The drive is still untouched so if there's another recovery software that I can try that will also restore file names, please suggest. The drive seems largely intact.

Thanks for taking the time to read.

Have you read this?
http://www.cgsecurity.org/wiki/After_Using_PhotoRec

You could also try DMDE:
http://dmde.com/

fzabkar wrote:Have you read this?
http://www.cgsecurity.org/wiki/After_Using_PhotoRec

You could also try DMDE:
http://dmde.com/

Thanks for the response.

Yes, I have. None of it describes retrieving my video files with the names intact.

Thanks for the suggestion of the DMDE. It may just be my not being able to set the proper parameters but, I am still not retrieving the files with the names. Would you know the proper settings of DMDE that'll retrieve the files with the original names?

Thanks for the previous suggestions.

Slystash wrote:Would you know the proper settings of DMDE that'll retrieve the files with the original names?

Depending on the damage to the MFT, it may not be possible to retrieve the original file/folder names. However, in DMDE you can perform a full "NTFS search". This should locate all the remaining MFT fragments. Then you can examine each fragment in turn.

If you can't retrieve the file names, then you could organise your files by searching for date and camera model.

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000080  00 00 F8 01 00 00 53 4F 4E 59 00 00 44 53 52 2D  ..ø...SONY..DSR-
00000090  50 44 31 35 30 50 20 00 48 00 00 00 01 00 00 00  PD150P .H.......
000000A0  48 00 00 00 01 00 00 00 32 30 31 33 3A 30 35 3A  H.......2013:05:
000000B0  33 30 20 31 36 3A 30 35 3A 30 36 00 11 00 9A 82  30 16:05:06...

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000000F0  00 00 23 23 68 07 00 00 44 49 47 49 54 41 4C 20  ..##h...DIGITAL
00000100  43 41 4D 45 52 41 20 20 20 20 20 20 20 20 20 20  CAMERA         
00000110  20 20 20 20 20 20 20 00 54 72 61 76 65 6C 65 72         .Traveler
00000120  20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20                 
00000130  20 20 20 20 20 20 20 00 49 53 20 31 32 20 20 20         .IS 12   
00000140  20 20 20 20 20 20 20 00 B4 00 00 00 01 00 00 00         .´.......
00000150  B4 00 00 00 01 00 00 00 56 31 2E 30 30 41 53 20  ´.......V1.00AS
00000160  20 20 20 20 20 20 20 20 20 20 20 00 32 30 31 34             .2014
00000170  3A 30 33 3A 32 32 20 30 32 3A 31 39 3A 35 36 00  :03:22 02:19:56.

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000000C0  03 00 01 00 00 00 00 00 77 77 78 0C 00 00 43 61  ........wwx...Ca
000000D0  6E 6F 6E 00 43 61 6E 6F 6E 20 50 6F 77 65 72 53  non.Canon PowerS
000000E0  68 6F 74 20 41 34 37 30 00 35 B4 00 00 00 01 00  hot A470.5´.....
000000F0  00 00 B4 00 00 00 01 00 00 00 32 30 31 33 3A 31  ..´.......2013:1
00000100  31 3A 30 34 20 31 32 3A 34 36 3A 30 33 00 00 0C  1:04 12:46:03...

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000000A0  00 00 B0 01 00 00 10 27 00 00 50 61 6E 61 73 6F  ..°....'..Panaso
000000B0  6E 69 63 00 44 4D 43 2D 54 5A 31 35 00 00 B4 00  nic.DMC-TZ15..´.
000000C0  00 00 01 00 00 00 B4 00 00 00 01 00 00 00 56 65  ......´.......Ve
000000D0  72 2E 31 2E 30 20 20 00 32 30 31 33 3A 30 38 3A  r.1.0  .2013:08:
000000E0  30 33 20 31 35 3A 30 36 3A 32 30 00 50 72 69 6E  03 15:06:20.Prin
000000F0  74 49 4D 00 30 32 35 30 00 00 0E 00 01 00 16 00  tIM.0250........

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000008C0  00 00 00 00 00 00 00 00 41 70 70 6C 65 00 69 50  ........Apple.iP
000008D0  68 6F 6E 65 20 35 00 00 00 00 00 48 00 00 00 01  hone 5.....H....
000008E0  00 00 00 48 00 00 00 01 4D 69 63 72 6F 73 6F 66  ...H....Microsof
000008F0  74 20 57 69 6E 64 6F 77 73 20 50 68 6F 74 6F 20  t Windows Photo
00000900  56 69 65 77 65 72 20 36 2E 31 2E 37 36 30 30 2E  Viewer 6.1.7600.
00000910  31 36 33 38 35 00 32 30 31 33 3A 30 38 3A 32 30  16385.2013:08:20
00000920  20 30 39 3A 30 30 3A 34 37 00 00 19 82 9A 00 05   09:00:47...

Code:

Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

000000B0  53 6F 6E 79 20 45 72 69 63 73 73 6F 6E 00 4C 54  Sony Ericsson.LT
000000C0  32 36 69 00 00 00 00 48 00 00 00 01 00 00 00 48  26i....H.......H
000000D0  00 00 00 01 36 2E 31 2E 41 2E 32 2E 34 35 5F 35  ....6.1.A.2.45_5
000000E0  33 5F 66 31 30 30 00 00 32 30 31 33 3A 30 33 3A  3_f100..2013:03:
000000F0  30 34 20 30 38 3A 34 35 3A 32 38 00 00 18 82 9A  04 08:45:28...