Question

Locked

chkdsk recovery

By buck weaver ·
I need to restore a file for a client running XP using quickbooks. The file was corrupt and computer prompted for a chkdsk. Now the file is gone and I can not locate it. Here is the winlog. By this log can you tell me if it is recoverable and where it is located. the file is consulting.qbw

THANKS

Event Type: Information
Event Source: Winlogon
Event Category: None
Event I 1001
Date: 3/13/2009
Time: 7:25:03 PM
User: N/A
Computer: DIANA
Description:
Checking file system on C:
The type of the file system is NTFS.


One of your disks needs to be checked for consistency. You
may cancel the disk check, but it is strongly recommended
that you continue.
Windows will now check the disk.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xca41d for possibly 0x2 clusters.
Attribute record of type 0x80 and instance tag 0x3 is cross linked
starting at 0xca41d for possibly 0x2 clusters.
Some clusters occupied by attribute of type 0x80 and instance tag 0x3
in file 0x145e7 is already in use.
Deleting corrupt attribute record (128, "")
from file record segment 83431.
The object id in file 0x145e6 does not appear in the object
id index in file 0x3e05.
Inserting an index entry into index $O of file 15877.
The VCN 0x6b5000000000000 of index $I30 in file 0x145e6 is already in use.
Correcting error in index $I30 for file 83430.
The index bitmap $I30 in file 0x145e6 is incorrect.
Correcting error in index $I30 for file 83430.
The down pointer of current index entry with length 0x18 is invalid.
00 00 00 00 00 00 00 00 18 00 00 00 03 00 00 00 ................
ff ff ff ff ff ff ff ff a0 59 ec 61 7c 9c c5 01 .........Y.a|...
a0 59 ec 61 7c 9c c5 01 f0 bd 1b 40 f4 9a c9 01 .Y.a|......@....
Sorting index $I30 in file 83430.
Index entry M0000006239.msg of index $I30 in file 0x1442 points to unused file 0x4b2f.
Deleting index entry M0000006239.msg in index $I30 of file 5186.
Index entry M0B289~1.MSG of index $I30 in file 0x1442 points to unused file 0x4b2f.
Deleting index entry M0B289~1.MSG in index $I30 of file 5186.
The file reference 0x16d000000004b2d of index entry 100_0535.jpg of index $I30
with parent 0x158e is not the same as 0x175000000004b2d.
Deleting index entry 100_0535.jpg in index $I30 of file 5518.
Index entry 100_0540.jpg of index $I30 in file 0x158e points to unused file 0x4b2e.
Deleting index entry 100_0540.jpg in index $I30 of file 5518.
Index entry Consulting.QBW of index $I30 in file 0x18cbf points to unused file 0xf64b.
Deleting index entry Consulting.QBW in index $I30 of file 101567.
Index entry CON~1.QBW of index $I30 in file 0x18cbf points to unused file 0xf64b.
Deleting index entry CON~1.QBW in index $I30 of file 101567.
Cleaning up minor inconsistencies on the drive.
CHKDSK is recovering lost files.
Recovering orphaned file PHILLI~1.XLS (83901) into directory file 83430.
Recovering orphaned file phillies2007.xls (83901) into directory file 83430.
Recovering orphaned file 20C94C~1.XLS (84897) into directory file 83430.
Recovering orphaned file 2007 tickets John.xls (84897) into directory file 83430.
Recovering orphaned file 2007TI~1.XLS (9189 into directory file 83430.
Recovering orphaned file 2007 tickets.xls (9189 into directory file 83430.
Recovering orphaned file 207F59~1.XLS (110482) into directory file 83430.
Recovering orphaned file 2007 tickets-final.xls (110482) into directory file 83430.
Recovering orphaned file 2007TI~2.XLS (111569) into directory file 83430.
Recovering orphaned file 2007ticketsMRS(1).xls (111569) into directory file 83430.
Recovering orphaned file 2007TI~4.XLS (111847) into directory file 83430.
Recovering orphaned file 2007 tickets-mike.xls (111847) into directory file 83430.
Recovering orphaned file 2007TI~3.XLS (111850) into directory file 83430.
Recovering orphaned file 2007 tickets-lee.xls (111850) into directory file 83430.
Cleaning up 12 unused index entries from index $SII of file 0x9.
Cleaning up 12 unused index entries from index $SDH of file 0x9.
Cleaning up 12 unused security descriptors.
Inserting data attribute into file 83431.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
Correcting errors in the master file table's (MFT) BITMAP attribute.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

29262397 KB total disk space.
20793452 KB in 103212 files.
44088 KB in 10500 indexes.
24 KB in bad sectors.
245629 KB in use by the system.
65536 KB occupied by the log file.
8179204 KB available on disk.

4096 bytes in each allocation unit.
7315599 total allocation units on disk.
2044801 allocation units available on disk.

Internal Info:
e0 29 02 00 3d bc 01 00 20 94 02 00 00 00 00 00 .)..=... .......
6b 0d 00 00 02 00 00 00 1c 08 00 00 00 00 00 00 k...............
c0 ea 1f 24 00 00 00 00 c0 62 dd c6 00 00 00 00 ...$.....b......
30 5c 53 3f 00 00 00 00 00 00 00 00 00 00 00 00 0\S?............
00 00 00 00 00 00 00 00 e0 fb bd 49 01 00 00 00 ...........I....
99 9e 36 00 00 00 00 00 78 38 07 00 2c 93 01 00 ..6.....x8..,...
00 00 00 00 00 b0 21 f5 04 00 00 00 04 29 00 00 ......!......)..

Windows has finished checking your disk.
Please wait while your computer restarts.


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

You can try one of these free recovery programs

by wanttocancel In reply to chkdsk recovery

You can find many on this Lifehacker post

http://lifehacker.com/393084/how-to-recover-deleted-files-with-free-software

Collapse -

thanks

by buck weaver In reply to You can try one of these ...

I tried that route but I believe those programs work only on user deleted files when chkdsk wipes them out. There are programs that work to restore chkdsk files but you need to point them to the right directory. At this point I can't locate the files. I appreciate the suggestion

Collapse -

CHK files should be in the root directctory

by seanferd In reply to thanks

if chkdsk was set to save fragments. If not, they don't become files.

If the system has been in use since the file loss, there is a chance that the disk space is overwritten, if the fragments were not saved to file. Most recovery utilities will, however, find all deleted files, even those that do not normally go into the recycle bin.

http://www.undeleteunerase.com/

They system wouldn't happen to have something like a Norton Utilities protected recycle bin, would it?

Also, you may not find the file with the expected name or extension - you may have to look for the data in several fragments, or in temp files that the original program uses. Does the original program store backups of any sort?

Back to Hardware Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums