chkdsk on W7 startup deleted files ??

monographix

New member
Local time
11:11 AM
Messages
28
Hello.

On windows (7, 64) startup i got (for the first time since i setup this Win 7 system in 2009) a chkdsk initiation on two different partitions ("E:" & "I:") on two different physical drives. "I:" was freshly recovered from accidental deletion so it makes sense. But "E:" is on a physical drive that i never had any issues with either the drive or the partitions nor ever had been subjected to any possibly messy activity.

I think though that , reading the report i attach, chkdsk deleted files from the so far flawless "E:". All the files i tried to find in "E:" from the report are not in the drive. Using GetDataBack didn't find them either ....

1. Is there a way to find out if files (and which ones exactly) were actually deleted from "E:" ? (unfortunately, i have no back up of this partition)
2. If they are deleted, is there a way to retrieve them ?


Thank you
 

Attachments

My Computer My Computer

At a glance

7 Ultimate x64i7 8608 GB DDR3 1600 (4x2GB G.Skill Ripjaws)Radeon HD 5850
Computer Manufacturer/Model Number
DIY
OS
7 Ultimate x64
CPU
i7 860
Motherboard
ECS P55H-A Black
Memory
8 GB DDR3 1600 (4x2GB G.Skill Ripjaws)
Graphics Card(s)
Radeon HD 5850
Monitor(s) Displays
HP ZR24w
Screen Resolution
1920x1200
Hard Drives
G.Skill Falcon 64 SSD | WD 320 AAKS | WD 500 AAKS | WD 20EARS | WD20EARX | WD10EALX | OCZ Vertex II 180
PSU
Enermax Liberty Eco 620 modular
Case
Xigmatek Midgard
Cooling
Xigmatek HDT S963
Keyboard
X6 Sidewinder
Mouse
MS Comfort Optical 3000
Hi,

You could try RECUVA to see, but there are no guarantees.

Regards,
Golden
 

My Computer My Computer

At a glance

Windows 10 Pro x64 ; Xubuntu x64Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz16GB Corsair Vengance DDR3 @ 661 MHz Dual Cha...EVGA NVidia GTX 560 1024MB
Computer type
PC/Desktop
Computer Manufacturer/Model Number
Golden Mk. I.4
OS
Windows 10 Pro x64 ; Xubuntu x64
CPU
Intel i7 860 @ 2.80 GHz O/C'ed to 4.0GHz
Motherboard
Gigabyte P55A-UD3R Rev.1. Award BIOS F13
Memory
16GB Corsair Vengance DDR3 @ 661 MHz Dual Channel (9-9-9-24)
Graphics Card(s)
EVGA NVidia GTX 560 1024MB
Sound Card
Realtek Integrated
Monitor(s) Displays
Dual Samsung SyncMaster 2494HS
Screen Resolution
1920*1080 and 1920*1080
Hard Drives
1*Samsung 840 EVO 120GB SSD;
1*OCZ Vertex 2 60GB SSD;
2*Samsung F3 SpinPoint 1TB in RAID0;
1*Samsung F1 SpinPoint 1TB;
2*Western Digital 1TB External USB 3.0
1*Western Digital 500GB External USB 3.0
1*Seagate 500GB External USB 2.0
PSU
Thermaltake ToughPower QFan 750W
Case
Thermaltake Element S VK60001W2Z
Cooling
Corsair H60 Water Cooling, 2*230mm and 2*80mm case fans
Keyboard
Logitech G110
Mouse
Logitech MX518
i just found the bootex.log file using Recuva. I dont know if its deleted or not, but i saw it only in the Recuva files list, i couldn't find it anywhere outside Recuva. And comparing it with the event log in Event Viewer, the bootex.log is the FULL log with more process information AND the FULL list of files that chkdsk DESTROYED yday .... I thought these would be all the files, reported in the Event Viewer and was some partial comfort to see that some good percentage of them i have copies of in another drive, but now i see in bootex.log the whole extend of damage freaking chkdsk has done and i need to eat a bucket of xanax ...

Any way of retrieving chkdsk wiped files? MFT restoration maybe ?


[ Can we confirm that the Event Viewer log information for some reason is shorter than its corresponding bootex.log ? In cases of large amount of edited files i guess ? ]

.
 
Last edited:

My Computer My Computer

At a glance

7 Ultimate x64i7 8608 GB DDR3 1600 (4x2GB G.Skill Ripjaws)Radeon HD 5850
Computer Manufacturer/Model Number
DIY
OS
7 Ultimate x64
CPU
i7 860
Motherboard
ECS P55H-A Black
Memory
8 GB DDR3 1600 (4x2GB G.Skill Ripjaws)
Graphics Card(s)
Radeon HD 5850
Monitor(s) Displays
HP ZR24w
Screen Resolution
1920x1200
Hard Drives
G.Skill Falcon 64 SSD | WD 320 AAKS | WD 500 AAKS | WD 20EARS | WD20EARX | WD10EALX | OCZ Vertex II 180
PSU
Enermax Liberty Eco 620 modular
Case
Xigmatek Midgard
Cooling
Xigmatek HDT S963
Keyboard
X6 Sidewinder
Mouse
MS Comfort Optical 3000
I suggest that you immediately make a backup of all data dear to your heart.

Your problem is not chkdsk, but rather either malware or hardware failing or corrupted system files.

Please run a FULL SCAN by the Microsoft Standalone System Sweeper. After completion, attach the log(s) mentioned in the following write-up to your next post.

PUT SYSTEM SWEEPER ON A USB STICK
System Sweeper, https://connect.microsoft.com/systemsweeper, allows you to start an infected PC and perform an offline scan to identify and remove viruses, rootkits and other advanced malware. System Sweeper is a free standalone, bootable malware and virus remover from Microsoft.

Safety Scanner, Microsoft Safety Scanner - Antivirus | Remove Spyware, Malware, Viruses Free, is free, downloadable, provides on-demand scanning and helps remove viruses, spyware, and other malicious software. It works with your existing antivirus software.

If the target computer has a working internet connection, then you may prefer to use the Safety Scanner.

NOTE: A fine tutorial on the System Sweeper is:
How to use the Microsoft Standalone System Sweeper


Download System Sweeper (about 576 kB):
https://connect.microsoft.com/systemsweeper

Insert 256 MB or larger USB stick into a usb port.

Run the downloaded program--mssstool64.exe or mssstool32.exe

Choose the option to install to USB.
Caution: The install program will format the usb stick.

The install program will download about 200 mB more.

After the install is finished, leave the stick in the usb slot.

Run the program you downloaded once again.

This 2nd run, and any subsequent runs, will download the very latest anti-virus definitions (about 60 mB).

To keep System Sweeper up-to-date, simply reinsert the usb stick and run the installation program, mssstool64.exe or mssstool32.exe, again.

The initial, full scan by System Sweeper can easily take several hours, but subsequent quick scans will be shorter.

Remember, your computer is being very thoroughly checked for all types of malware.

The results of System Sweeper will be in:
\Windows\Standalone System Sweeper\Support as one or more files with a LOG extension which can be viewed with Notepad.
 

My Computer My Computer

At a glance

MS Windows 7 Ultimate SP1 64-bitAMD A10-4600M6.00 GB Dual-Channel DDR3 @ 798MHz (11-11-12-28)AMD Radeon HD 7660G
Computer Manufacturer/Model Number
Toshiba Satellite S875D-S7239 laptop
OS
MS Windows 7 Ultimate SP1 64-bit
CPU
AMD A10-4600M
Motherboard
AMD Pumori (Socket FT1)
Memory
6.00 GB Dual-Channel DDR3 @ 798MHz (11-11-12-28)
Graphics Card(s)
AMD Radeon HD 7660G
Sound Card
High Definition Audio Device
Monitor(s) Displays
Generic PnP Monitor (1600x900@60Hz)
Screen Resolution
1600x900@60Hz
Hard Drives
SSD 119GB Corsair CSSD-V128GB2 ATA Device
Keyboard
Standard PS/2 Keyboard
Mouse
HP Wireless Optical Mobile Mouse Model FHA-3410
Internet Speed
What the local pub, local coffee shop offers.
Other Info
Optical Drive:MATSHITA BD-CMB UJ160B ATA Device


Also have an Asus ha1002xp netbook with Win 7 Ultimate installed.
Back
Top