Author Topic: Oh how painful!  (Read 1921 times)

Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Oh how painful!
« on: February 04, 2011, 10:17:28 PM »
Hello everyone,

In attempting to repair a friend's computer, I seriously messed up our family's computer and found myself dishing out $80.00 for recovery software.

Well, the question is... Should I dump my friend or their computer? :D

Humor aside, I am facing quite a dilemma. I was attempting to low-level format an ATA password-protected hard-drive when it happened.... Yes, I made the most terrible mistake of all time, I failed to verify before pressing Enter. Well, 10 seconds later (or 15, whichever is longer :D) I realized my mistake and immediately aborted the procedure. Naturally, the damage was already done. The Partition was already affected rendering the disk as unpartitioned space. Not to worry... I was familiar with partition recovery software which I promptly purchased after realizing it would only show off it's muscle but wouldn't let me use it. Two days later (due to a few mistakes on my part), I finally found myself in a position to recover the partition. After a few clicks of the mouse, recovery was successful... to an extent.

After recovery, Windows could not access the partition. I figured this may be due to methods used by the recovery software to patch up the partition. So I proceeded to use the second half of my spanking-new recovery software to retrieve the files within my partition. The tool worked a miracle, except (of course, another twist :P) for some critical files. A few Microsoft Word documents were not readable after recovery. I came to three conclusions...

1. The documents were destroyed by the low-level format.
2. The documents were not recovered properly.
3. The MFT (Master File Table) was affected by the low-level format resulting in a faulty recovery of these Word documents (The File Recovery procedure I used located these Word Documents via the recovered partition's MFT).

Conclusions 1 and 2 seem prominent. To test them I'm currently running an in-depth scan of the disk in hopes it might produce better results. I must admit... I'm doubtful.


Does anyone have recommendations for software or methods which may result in a more successful recovery of these files? I'm attempting to save myself lots of work in recreating these files, I would much rather recover them. NOTE: The only change to this hard-drive since the low-level format was the partition-recovery.


Lessons learned:
Backup your information onto non-rewritable discs!
I backed these files onto rewritable disks and a few days down the road overwrote the information thinking I wouldn't need it.

Confirm before pressing Enter!
Would you rather spend days recovering your work or simply spend a few seconds to verify disk size, name, and type?

Burn the code to your gun-safe!
Self-explanatory.


 :cry
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.

Offline hyster

  • Copper Member
  • **
  • Posts: 227
Re: Oh how painful!
« Reply #1 on: February 05, 2011, 03:49:48 AM »
file recovery software.
you will notice that there are 2 main options on "good" software. fast and slow.
fast looks for the mft file. this will give you a file that will most likely work after recovery. does not search the hard drive though and you will not find as many files.
slow physically searches the hard drive for files. more chance of finding the file you want but more chance of corruption as well. when it finds data it tries to piece a file together from other bits it finds. if the file is fragmented then this is a huge task as the file has more chances of errors. a small chunk of file missing or added will corrupt the file.

recovery software is mainly for finding pics ,music that have been accidentally deleted rather than full blown hdd recovery.

if the documents you have that are corrupted are ms docs (word, excel) and they have a x in them (.docx, .xlsx...) they are container files like zip or rar files. they can be opened with winrar. you may be able to open the files inside and retrieve your data and copy paste into a new word doc and just reformat the text.

Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Re: Oh how painful!
« Reply #2 on: February 05, 2011, 09:49:50 AM »
I appreciate the information. I was already aware of this, thus why I mentioned I was running an in-depth scan. Unfortunately the most timely procedure in all this is attempting to identify the file after the scan is complete. Mainly because none of the files have names...
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.

Offline jocrp6

  • Copper Member
  • **
  • Posts: 128
Re: Oh how painful!
« Reply #3 on: February 06, 2011, 12:29:29 PM »
My opinion, should have spent a few more dollar's,  I know-but mistakes happen.  and got the same OP system and do an (upgrade)-not repair, dosn't always work,  but but just put the upgrade on top of the same OS,  every thing will fall right into place, and no data lost, and when your done, hey  you have a OS disc,  I've fixed onboard RAID-0 set up's like that that would not even boot!

Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Re: Oh how painful!
« Reply #4 on: February 06, 2011, 08:48:16 PM »
Not sure if you're talking about repair in the form of using Windows Installer or recovering the partition. My reasoning behind not repairing via Windows installer or upgrading is because it would have overwritten my files. Please keep in mind, the partition was destroyed the second 0's began tearing into the hard-drive meaning a Windows repair or upgrade would have been useless.

Question... I think I've found some strands of the file. Is there a file joining utility which combines two separate file streams? Basically, I have two separate Microsoft Word documents which, upon opening them, show strands of strange characters along with an occasional word. I'm figuring the original file was severed and if the two separate files are "combined," my document may return to its original state. Even if it doesn't work, I'd still like to give it a try.
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.

Offline jocrp6

  • Copper Member
  • **
  • Posts: 128
Re: Oh how painful!
« Reply #5 on: February 06, 2011, 09:51:33 PM »
Keep in mind!  he,he It's not gone anywhere,  It's there! and what OS is it on?  XP Office? And doing an upgrade will not lose anything!
« Last Edit: February 06, 2011, 10:04:05 PM by jocrp6 »

Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Re: Oh how painful!
« Reply #6 on: February 06, 2011, 10:04:26 PM »
Jocrp6, I know it's there, why do you think I started this topic? I don't always enjoy asking this, but I kindly request you re-read the topic.
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.

Offline jocrp6

  • Copper Member
  • **
  • Posts: 128
Re: Oh how painful!
« Reply #7 on: February 07, 2011, 08:33:56 AM »
Oh, my bad! and what OS is that again? never mind
« Last Edit: February 07, 2011, 08:35:45 AM by jocrp6 »

Offline SectorNine50

  • Silver Member
  • ****
  • Posts: 1331
Re: Oh how painful!
« Reply #8 on: February 07, 2011, 11:29:15 AM »
I think your SOL Denholm... :(

I'm actually surprised you got Windows to run at all using the recovery software after a low-level... :confused:
I'm Sector95 in-game! :-D

Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Re: Oh how painful!
« Reply #9 on: February 09, 2011, 11:08:41 AM »
Oh, my bad! and what OS is that again? never mind

Windows XP Professional, SP3. However, I think the Operating System is irrelevant as I'm simply attempting to extract some files.

I think your SOL Denholm... :(

I'm actually surprised you got Windows to run at all using the recovery software after a low-level... :confused:

I didn't get Windows XP running. In fact, neither Windows nor Linux can open the restored partition as it's so messed up. I was simply attempting to extract my files from the dead partition, which I successfully managed with the exception of a few files which I think have fragments missing.

I'm starting to agree that the low-level format may have reached some of my files. I'm still trying, though.
« Last Edit: February 09, 2011, 11:10:25 AM by Denholm »
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.

Offline SectorNine50

  • Silver Member
  • ****
  • Posts: 1331
Re: Oh how painful!
« Reply #10 on: February 09, 2011, 11:19:21 AM »
Ah rgr.

Best of luck!
I'm Sector95 in-game! :-D

Offline gpwurzel

  • Gold Member
  • *****
  • Posts: 3836
Re: Oh how painful!
« Reply #11 on: February 09, 2011, 11:21:37 AM »
Denholm,

Low level and attempting to recover, good luck fella. Not sure of the efficiency of any of these, but link attached to freebie data recovery software.

http://free-backup.info/data-recovery-software.htm

Hopefully one of these might help. Take the usual steps to protect yourself just in case bud.

Wurzel
I'm the worst pilot ingame ya know!!!

It's all unrealistic crap requested by people who want pie in the sky actions performed without an understanding of how things work and who can't grasp reality.


Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Re: Oh how painful!
« Reply #12 on: February 09, 2011, 11:28:29 AM »
Okay.... Once again....

The low level ran for 10-15 seconds at best until I aborted the procedure. I have already used a recovery tool to recover the majority of my data after restoring the partition. What I'm attempting to accomplish now is a combination of two things.

1. Use a tool that not only scans the raw-disk for files, but also matches file fragments to recreate files which may have been lost when the MFT got shredded. I already have a tool which accomplishes this. However, I would like to try another to see if I get better results.

2. Find a utility which can pair two files and "combine" them. Reasoning behind this, some of my recovery tools found the files which I need, However, upon recovering and opening them, I see undecipherable lines of code spread amongst hundreds of pages. Since the recovery tool found two if not more copies of these files on different parts of the disc, I'm guessing putting the fragments together (again, "combining" them) may result in a truly recovered file. NOTE: I'm aware defragmenting a disk can result in multiple copies of the same file appearing on the same disc. However, I would still like to combine the files in an attempt to recover some of the information in these files.
« Last Edit: February 09, 2011, 11:31:35 AM by Denholm »
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.

Offline gpwurzel

  • Gold Member
  • *****
  • Posts: 3836
Re: Oh how painful!
« Reply #13 on: February 09, 2011, 11:30:05 AM »
Yup, read that, thats why I included the links  ;)

Wurzel
I'm the worst pilot ingame ya know!!!

It's all unrealistic crap requested by people who want pie in the sky actions performed without an understanding of how things work and who can't grasp reality.


Offline Denholm

  • Plutonium Member
  • *******
  • Posts: 9667
      • No. 603 Squadron
Re: Oh how painful!
« Reply #14 on: February 09, 2011, 11:34:32 AM »
My apologies. As you no doubt know, I figured it was another link to some MFT-scanning software.
Get your Daily Dose of Flame!
FlameThink.com
No. 603 Squadron... Visit us on the web, if you dare.

Drug addicts are always disappointed after eating Pot Pies.