What happened:
- 2TB SATA drive connected to my machine via a SATA to USB dock
- The drive has 3 partitions lets say X, Y and Z
- For some reason the SATA to USB dock lost power
- When I powered it back, noticed that Partition X and Y had lost almost all data. Partition Z had data as is.
- In Partition X and Y, i see a few folders, but almost all empty. (long sub folder chains...visible, with no files)
What I did:
- Downloaded latest version of Recuva 1.29.429
- Ran Recuva using default settings on partition X - found files, but all files were ignored.
- Ran Recuva in Adv Mode, and turned ON option to search "Non deleted files" , "Zero sized files" etc.. Found files, but this time they were shown as recoverable. Almost all files are in Excellent status.
- Highlighted one file, and tried to recover it to a seperate USB disk.
- I get the following error message: "Recoverd 0 files in x.xx sec" and then I get another error message saying "Access is Denied."
- If its a JPG file, I can see the preview of the file in Recuva (but I get the same access is denied msg when I try to recover the file).
I ran Recuva as administrator & then in debug mode+admin; and I have attached the Log file.
The log file has the following text (also attached):
CODE
[2009-08-19 20:54:11] [INFO ] Recuva v1.29.429
[2009-08-19 20:54:11] [INFO ] System Info: MS Windows 7 Ultimate 64-bit, Intel Core2 Duo CPU T7500 @ 2.20GHz, 4.0GB
RAM, NVIDIA GeForce 8400M GS
[2009-08-19 20:54:11] [INFO ] No update available
[2009-08-19 20:54:20] [INFO ] Boot sector:
61KQTlRGUyAgICAAAggAAAAAAAAA+AAAPwD/AACA9D4AAAAAgACAAP+/3T4AAAAAAAAMAAAAAAACAAAAAAAAAPYAAAABAAAAGPFKSBxLSKAAAAAA
+jPAjtC8AHz7aMAHHx5oZgDLiBYOAGaBPgMATlRGU3UVtEG7qlXNE3IMgftVqnUG98EBAHUD6d0AHoPs
GGgaALRIihYOAIv0Fh/NE5+DxBieWB9y4Ts
GCwB126MPAMEuDwAEHloz27kAICvIZv8GEQADFg8AjsL/BhYA6EsAK8h377gAu80aZiPAdS1mgftUQ1BBdSSB
+QIBch4WaAe7FmhwDhZoCQBmU2ZTZlUWFhZouAFmYQ4HzRozwL8oELnYD/zzqulfAZCQZmAeBmahEQBmAwYcAB5maAAAAABmUAZTaAEAaBAAtEKKFg4
AFh+L9M0TZllbWmZZZlkfD4IWAGb/BhEAAxYPAI7C/w4WAHW8Bx9mYcOg+AHoCQCg
+wHoAwD06/20AYvwrDwAdAm0DrsHAM0Q6/LDDQpBIGRpc2sgcmVhZCBlcnJvciBvY2N1cnJlZAANCkJPT1RNR1IgaXMgbWlzc2luZwANCkJPT1RNR1
I
gaXMgY29tcHJlc3NlZAANClByZXNzIEN0cmwrQWx0K0RlbCB0byByZXN0YXJ0DQoAjKm+1gAAVao=
[2009-08-19 20:54:20] [INFO ] Reading MFT
[2009-08-19 20:54:20] [INFO ] Reading files
[2009-08-19 20:54:20] [INFO ] Building folders
[2009-08-19 20:54:20] [INFO ] Restoring tree
[2009-08-19 20:54:20] [INFO ] Analyzing damage
[2009-08-19 20:54:20] [INFO ] 12106 deleted files, 54 filesystem objects
[2009-08-19 20:54:20] [INFO ] Processing deleted emails
[2009-08-19 20:54:20] [INFO ] Processing recycle bin
[2009-08-19 20:54:20] [INFO ] Returning list
[2009-08-19 20:55:05] [INFO ] 45053 / 313
[2009-08-19 20:55:05] [INFO ] Exiting scan
[2009-08-19 20:55:23] [ERROR] Not a PNG file
[2009-08-19 20:55:36] [ERROR] COM exception: RecoverOperationImpl.cpp(114) : Access is denied. (0x80070005)
[2009-08-19 20:54:11] [INFO ] System Info: MS Windows 7 Ultimate 64-bit, Intel Core2 Duo CPU T7500 @ 2.20GHz, 4.0GB
RAM, NVIDIA GeForce 8400M GS
[2009-08-19 20:54:11] [INFO ] No update available
[2009-08-19 20:54:20] [INFO ] Boot sector:
61KQTlRGUyAgICAAAggAAAAAAAAA+AAAPwD/AACA9D4AAAAAgACAAP+/3T4AAAAAAAAMAAAAAAACAAAAAAAAAPYAAAABAAAAGPFKSBxLSKAAAAAA
+jPAjtC8AHz7aMAHHx5oZgDLiBYOAGaBPgMATlRGU3UVtEG7qlXNE3IMgftVqnUG98EBAHUD6d0AHoPs
GGgaALRIihYOAIv0Fh/NE5+DxBieWB9y4Ts
GCwB126MPAMEuDwAEHloz27kAICvIZv8GEQADFg8AjsL/BhYA6EsAK8h377gAu80aZiPAdS1mgftUQ1BBdSSB
+QIBch4WaAe7FmhwDhZoCQBmU2ZTZlUWFhZouAFmYQ4HzRozwL8oELnYD/zzqulfAZCQZmAeBmahEQBmAwYcAB5maAAAAABmUAZTaAEAaBAAtEKKFg4
AFh+L9M0TZllbWmZZZlkfD4IWAGb/BhEAAxYPAI7C/w4WAHW8Bx9mYcOg+AHoCQCg
+wHoAwD06/20AYvwrDwAdAm0DrsHAM0Q6/LDDQpBIGRpc2sgcmVhZCBlcnJvciBvY2N1cnJlZAANCkJPT1RNR1IgaXMgbWlzc2luZwANCkJPT1RNR1
I
gaXMgY29tcHJlc3NlZAANClByZXNzIEN0cmwrQWx0K0RlbCB0byByZXN0YXJ0DQoAjKm+1gAAVao=
[2009-08-19 20:54:20] [INFO ] Reading MFT
[2009-08-19 20:54:20] [INFO ] Reading files
[2009-08-19 20:54:20] [INFO ] Building folders
[2009-08-19 20:54:20] [INFO ] Restoring tree
[2009-08-19 20:54:20] [INFO ] Analyzing damage
[2009-08-19 20:54:20] [INFO ] 12106 deleted files, 54 filesystem objects
[2009-08-19 20:54:20] [INFO ] Processing deleted emails
[2009-08-19 20:54:20] [INFO ] Processing recycle bin
[2009-08-19 20:54:20] [INFO ] Returning list
[2009-08-19 20:55:05] [INFO ] 45053 / 313
[2009-08-19 20:55:05] [INFO ] Exiting scan
[2009-08-19 20:55:23] [ERROR] Not a PNG file
[2009-08-19 20:55:36] [ERROR] COM exception: RecoverOperationImpl.cpp(114) : Access is denied. (0x80070005)
It would be really helpful if someone can help me out here and guide me on how to get my files back.