Deleted Files Not Recovered

Using TestDisk to repair the filesystem
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
dondo
Posts: 3
Joined: 05 Mar 2019, 15:38

Deleted Files Not Recovered

#1 Post by dondo »

I have used both file undelete and photorec for recovery of my file but none of the deleted files I have wanted are recovered.I have contacted microsoft support and they say it might be due to some sector got corrupted.Here is the log for your perusal:

Code: Select all


Tue Mar  5 22:35:01 2019
Command line: TestDisk

TestDisk 7.1-WIP, Data Recovery Utility, December 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Windows 8 (9200)
Compiler: GCC 6.4, Cygwin32 2009.0
ext2fs lib: 1.43.1, ntfs lib: 10:0:0, reiserfs lib: none, ewf lib: 20140608, curses lib: ncurses 6.0
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sda)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(/dev/sdb)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive0)=128035676160
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\PhysicalDrive1)=1000204886016
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\C:)=126641766400
disk_get_size_win32 IOCTL_DISK_GET_LENGTH_INFO(\\.\D:)=977771954176
Hard disk list
Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63, sector size=512 - SAMSUNG MZVLW128HEGR-00000, S/N:0025_38B4_71B5_A6CB., FW:CXB7401Q
Disk /dev/sdb - 1000 GB / 931 GiB - CHS 121601 255 63, sector size=512 - HGST HTS541010B7E610, S/N:WX21A77RE52A, FW:01.01A01

Partition table type (auto): EFI GPT
Disk /dev/sda - 128 GB / 119 GiB - SAMSUNG MZVLW128HEGR-00000
Partition table type: EFI GPT

Analyse Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63
hdr_size=92
hdr_lba_self=1
hdr_lba_alt=250069679 (expected 250069679)
hdr_lba_start=34
hdr_lba_end=250069646
hdr_lba_table=2
hdr_entries=128
hdr_entsz=128
check_part_gpt failed for partition
 2 P MS Reserved               616448     878591     262144 [Microsoft reserved partition]
Current partition structure:
 1 P EFI System                  2048     616447     614400 [EFI system partition]
No FAT, NTFS, ext2, JFS, Reiser, cramfs or XFS marker
 2 P MS Reserved               616448     878591     262144 [Microsoft reserved partition]
 2 P MS Reserved               616448     878591     262144 [Microsoft reserved partition]
 3 P MS Data                   878592  248225791  247347200 [Basic data partition] [Windows]
 4 P Windows Recovery Env   248225792  250068991    1843200 [Basic data partition]

search_part()
Disk /dev/sda - 128 GB / 119 GiB - CHS 15566 255 63
FAT32 at 0/32/33
FAT1 : 7006-7598
FAT2 : 7599-8191
start_rootdir : 8192 root cluster : 2
Data : 8192-614399
sectors : 614400
cluster_size : 8
no_of_cluster : 75776 (2 - 75777)
fat_length 593 calculated 593

FAT32 at 0/32/33
FAT: cluster=2(0x2), pos=10240
     EFI System                  2048     616447     614400 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=4096, 314 MB / 300 MiB
NTFS at 54/175/58
filesystem size           247347200
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
NTFS part_offset=449839104, part_size=126641766400, sector_size=512
NTFS partition cannot be added (part_offset<part_size).
NTFS at 54/175/58
filesystem size           247347200
sectors_per_cluster       8
mft_lcn                   786432
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                   878592  248225791  247347200 [Windows]
     NTFS, blocksize=4096, 126 GB / 117 GiB
NTFS at 15451/86/60
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                246382593  248225792    1843200
     NTFS found using backup sector, blocksize=4096, 943 MB / 900 MiB
NTFS at 15451/86/60
filesystem size           1843200
sectors_per_cluster       8
mft_lcn                   76800
mftmirr_lcn               2
clusters_per_mft_record   -10
clusters_per_index_record 1
     MS Data                248225792  250068991    1843200 [WinRE tools]
     NTFS, blocksize=4096, 943 MB / 900 MiB
file_pread(4,2,buffer,250071040(15566/51/38)) lseek err Invalid argument
file_pread(4,1,buffer,250071040(15566/51/38)) lseek err Invalid argument
file_pread(4,2,buffer,250071041(15566/51/39)) lseek err Invalid argument
file_pread(4,1,buffer,250071043(15566/51/41)) lseek err Invalid argument
file_pread(4,1,buffer,250071044(15566/51/42)) lseek err Invalid argument
file_pread(4,1,buffer,250071045(15566/51/43)) lseek err Invalid argument
file_pread(4,1,buffer,250071046(15566/51/44)) lseek err Invalid argument
file_pread(4,1,buffer,250071047(15566/51/45)) lseek err Invalid argument
file_pread(4,1,buffer,250071048(15566/51/46)) lseek err Invalid argument
file_pread(4,1,buffer,250071049(15566/51/47)) lseek err Invalid argument
file_pread(4,1,buffer,250071050(15566/51/48)) lseek err Invalid argument
file_pread(4,1,buffer,250071051(15566/51/49)) lseek err Invalid argument
file_pread(4,1,buffer,250071052(15566/51/50)) lseek err Invalid argument
file_pread(4,1,buffer,250071053(15566/51/51)) lseek err Invalid argument
file_pread(4,1,buffer,250071054(15566/51/52)) lseek err Invalid argument
file_pread(4,1,buffer,250071055(15566/51/53)) lseek err Invalid argument
file_pread(4,1,buffer,250071056(15566/51/54)) lseek err Invalid argument
file_pread(4,1,buffer,250071057(15566/51/55)) lseek err Invalid argument
file_pread(4,1,buffer,250071058(15566/51/56)) lseek err Invalid argument
file_pread(4,1,buffer,250071059(15566/51/57)) lseek err Invalid argument
file_pread(4,1,buffer,250071060(15566/51/58)) lseek err Invalid argument
file_pread(4,1,buffer,250071061(15566/51/59)) lseek err Invalid argument
file_pread(4,1,buffer,250071062(15566/51/60)) lseek err Invalid argument
file_pread(4,1,buffer,250071063(15566/51/61)) lseek err Invalid argument
file_pread(4,1,buffer,250071064(15566/51/62)) lseek err Invalid argument
file_pread(4,1,buffer,250071065(15566/51/63)) lseek err Invalid argument
file_pread(4,1,buffer,250071066(15566/52/1)) lseek err Invalid argument
file_pread(4,1,buffer,250071067(15566/52/2)) lseek err Invalid argument
file_pread(4,1,buffer,250071068(15566/52/3)) lseek err Invalid argument
file_pread(4,1,buffer,250071069(15566/52/4)) lseek err Invalid argument
file_pread(4,1,buffer,250071070(15566/52/5)) lseek err Invalid argument
file_pread(4,1,buffer,250071071(15566/52/6)) lseek err Invalid argument
file_pread(4,1,buffer,250071072(15566/52/7)) lseek err Invalid argument
file_pread(4,1,buffer,250071073(15566/52/8)) lseek err Invalid argument
file_pread(4,1,buffer,250071074(15566/52/9)) lseek err Invalid argument
file_pread(4,1,buffer,250071075(15566/52/10)) lseek err Invalid argument
file_pread(4,1,buffer,250071076(15566/52/11)) lseek err Invalid argument
file_pread(4,1,buffer,250071077(15566/52/12)) lseek err Invalid argument
file_pread(4,1,buffer,250071078(15566/52/13)) lseek err Invalid argument
file_pread(4,1,buffer,250071079(15566/52/14)) lseek err Invalid argument
file_pread(4,1,buffer,250071080(15566/52/15)) lseek err Invalid argument
file_pread(4,1,buffer,250071081(15566/52/16)) lseek err Invalid argument
file_pread(4,1,buffer,250071082(15566/52/17)) lseek err Invalid argument
file_pread(4,1,buffer,250071083(15566/52/18)) lseek err Invalid argument
file_pread(4,1,buffer,250071084(15566/52/19)) lseek err Invalid argument
file_pread(4,1,buffer,250071085(15566/52/20)) lseek err Invalid argument
file_pread(4,1,buffer,250071086(15566/52/21)) lseek err Invalid argument
file_pread(4,1,buffer,250071087(15566/52/22)) lseek err Invalid argument
file_pread(4,1,buffer,250071088(15566/52/23)) lseek err Invalid argument
file_pread(4,1,buffer,250071089(15566/52/24)) lseek err Invalid argument
file_pread(4,1,buffer,250071090(15566/52/25)) lseek err Invalid argument
file_pread(4,1,buffer,250071091(15566/52/26)) lseek err Invalid argument
file_pread(4,1,buffer,250071092(15566/52/27)) lseek err Invalid argument
file_pread(4,1,buffer,250071093(15566/52/28)) lseek err Invalid argument
file_pread(4,1,buffer,250071094(15566/52/29)) lseek err Invalid argument
file_pread(4,1,buffer,250071095(15566/52/30)) lseek err Invalid argument
file_pread(4,1,buffer,250071096(15566/52/31)) lseek err Invalid argument
file_pread(4,1,buffer,250071097(15566/52/32)) lseek err Invalid argument
file_pread(4,1,buffer,250071098(15566/52/33)) lseek err Invalid argument

file_pread(4,1,buffer,250069768(15566/31/26)) lseek err Invalid argument
file_pread(4,1,buffer,250071681(15566/61/49)) lseek err Invalid argument
file_pread(4,1,buffer,250069698(15566/30/19)) lseek err Invalid argument
file_pread(4,1,buffer,250069719(15566/30/40)) lseek err Invalid argument
file_pread(4,1,buffer,250069769(15566/31/27)) lseek err Invalid argument
file_pread(4,1,buffer,250071682(15566/61/50)) lseek err Invalid argument
file_pread(4,1,buffer,250069699(15566/30/20)) lseek err Invalid argument
file_pread(4,1,buffer,250069720(15566/30/41)) lseek err Invalid argument
file_pread(4,1,buffer,250069770(15566/31/28)) lseek err Invalid argument
file_pread(4,1,buffer,250071683(15566/61/51)) lseek err Invalid argument
file_pread(4,1,buffer,250069700(15566/30/21)) lseek err Invalid argument
file_pread(4,8,buffer,250069714(15566/30/35)) lseek err Invalid argument
file_pread(4,11,buffer,250069761(15566/31/19)) lseek err Invalid argument
file_pread(4,1,buffer,250071684(15566/61/52)) lseek err Invalid argument
file_pread(4,1,buffer,250069701(15566/30/22)) lseek err Invalid argument



file_pread(4,1,buffer,250069813(15566/32/8)) lseek err Invalid argument
file_pread(4,1,buffer,250071726(15566/62/31)) lseek err Invalid argument
file_pread(4,1,buffer,250069696(15566/30/17)) lseek err Invalid argument
file_pread(4,1,buffer,250069743(15566/31/1)) lseek err Invalid argument
file_pread(4,1,buffer,250069764(15566/31/22)) lseek err Invalid argument
file_pread(4,1,buffer,250069814(15566/32/9)) lseek err Invalid argument
file_pread(4,1,buffer,250071727(15566/62/32)) lseek err Invalid argument
file_pread(4,1,buffer,250069680(15566/30/1)) ReadFile The drive cannot find the sector requested.

file_pread(4,2,buffer,250069693(15566/30/14)) lseek err Invalid argument
file_pread(4,1,buffer,250069697(15566/30/18)) lseek err Invalid argument
file_pread(4,1,buffer,250069744(15566/31/2)) lseek err Invalid argument
file_pread(4,8,buffer,250069758(15566/31/16)) lseek err Invalid argument
file_pread(4,11,buffer,250069805(15566/31/63)) lseek err Invalid argument
file_pread(4,1,buffer,250071728(15566/62/33)) lseek err Invalid argument
file_pread(4,1,buffer,250069681(15566/30/2)) lseek err Invalid argument
file_pread(4,14,buffer,250069682(15566/30/3)) lseek err Invalid argument
file_pread(4,1,buffer,250069698(15566/30/19)) lseek err Invalid argument
file_pread(4,1,buffer,250069745(15566/31/3)) lseek err Invalid argument
file_pread(4,1,buffer,250069766(15566/31/24)) lseek err Invalid argument
file_pread(4,1,buffer,250069816(15566/32/11)) lseek err Invalid argument
file_pread(4,1,buffer,250071729(15566/62/34)) lseek err Invalid argument

Results
   P EFI System                  2048     616447     614400 [EFI System Partition] [SYSTEM]
     FAT32, blocksize=4096, 314 MB / 300 MiB
     MS Data                   878592  248225791  247347200 [Windows]
     NTFS, blocksize=4096, 126 GB / 117 GiB
     MS Data                246382593  248225792    1843200
     NTFS found using backup sector, blocksize=4096, 943 MB / 900 MiB
     MS Data                248225792  250068991    1843200 [WinRE tools]
     NTFS, blocksize=4096, 943 MB / 900 MiB
May I know what consequences will I have if I chose to write the Windows disk?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Deleted Files Not Recovered

#2 Post by cgrenier »

Do not rewrite the partition table, it will not help to recover your deleted files.
Did you check Windows RecycleBin ?
TestDisk and PhotoRec will both failed to recover your deleted files if the lost data has been overwritten by new data/new files.

dondo
Posts: 3
Joined: 05 Mar 2019, 15:38

Re: Deleted Files Not Recovered

#3 Post by dondo »

Yep,I checked it's not there.It's not overwritten.The file went missing after I cancelled a Windows cleanup operation called compress my disk.

dondo
Posts: 3
Joined: 05 Mar 2019, 15:38

Re: Deleted Files Not Recovered

#4 Post by dondo »

So I used photorec to restore everything and apparently it recovered a html in .txt form.However,the file starts off this way:

Code: Select all

  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507328 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_installutil_b03f5f7f11d50a3a_10.0.16299.15_none_968b40917e602d19 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_installutil_b03f5f7f11d50a3a_10.0.16299.15_none_968b40917e602d19 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507329 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_10.0.16299.15_none_2d3b639d7f39a850 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-aspnet_regiis_exe_b03f5f7f11d50a3a_10.0.16299.15_none_2d3b639d7f39a850 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507330 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-weblowtrust_config_default_b03f5f7f11d50a3a_10.0.16299.15_none_db236c1781c15b85 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-weblowtrust_config_default_b03f5f7f11d50a3a_10.0.16299.15_none_db236c1781c15b85 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507331 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-aspnet_state_perf_h_b03f5f7f11d50a3a_10.0.16299.15_none_0146227683634adc 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-aspnet_state_perf_h_b03f5f7f11d50a3a_10.0.16299.15_none_0146227683634adc 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507332 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-uninstallsqlstate_sql_b03f5f7f11d50a3a_10.0.16299.15_none_bde43cd48538f13a 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-uninstallsqlstate_sql_b03f5f7f11d50a3a_10.0.16299.15_none_bde43cd48538f13a 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507334 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_10.0.16299.15_none_6b73025c8878878e 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-_vsavb7rtui_b03f5f7f11d50a3a_10.0.16299.15_none_6b73025c8878878e 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507336 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-normalization_dll_b03f5f7f11d50a3a_10.0.16299.15_none_f74419a08ae6513a 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-normalization_dll_b03f5f7f11d50a3a_10.0.16299.15_none_f74419a08ae6513a 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507337 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_10.0.16299.15_none_4d70fb8a8c22159c 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-mscorwks_dll_b03f5f7f11d50a3a_10.0.16299.15_none_4d70fb8a8c22159c 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507338 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_10.0.16299.15_none_da7051058e6eada2 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-mscorjit_dll_b03f5f7f11d50a3a_10.0.16299.15_none_da7051058e6eada2 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507339 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 
  INFO  | MFT record name --- x86_netfx-vsa_codedom_tlb_b03f5f7f11d50a3a_10.0.16299.15_none_3eb5d3819123cc79 
  INFO  | MFT record parent dir --- 426753 
  INFO  | MFT record file size --- 0 
  INFO  | MFT record first cluster --- 0 
  INFO  | MFT record is directory --- 1 
  INFO  | ------END OF MFT RECORD DUMP------ 
  INFO  | file name: x86_netfx-vsa_codedom_tlb_b03f5f7f11d50a3a_10.0.16299.15_none_3eb5d3819123cc79 
  INFO  | Constructing node entry for MFT entry 
  INFO  | Starting of putting deleted data for MFT entry 
  INFO  | Deleted data for MFT entry was generated 
  INFO  | Node entry for MFT entry was successfully constructed 
  INFO  | Start of getting file parametres(size, time, date) 
  INFO  | End of getting file parametres(size, time, date) 
  INFO  | !!!---Entering the parsing loop---!!! 
  INFO  | read MFT record 426753 - l 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | Constructing the object - l 
  INFO  | Object was successfully constructed - l 
  INFO  | _CMFTRecord::LocateRecordAttributes() - $ATTRIBUTE_LIST found! 
  INFO  | Passing the attribute assert - l 
  INFO  | Attribute assert was successfully passed - l 
  INFO  | !!!---End the parsing loop---!!! 
  INFO  | --> read MFT record 507340 
  INFO  | Mft read mode is FAST 
  INFO  | Try to apply Sector Fixups 
  INFO  | End of apply Sector Fixups 
  INFO  | ------MFT RECORD DUMP------ 

<head>
<base href>
<meta http-equiv=content-type content="text/html; charset=UTF-8">
<meta name=viewport content="width=device-width,initial-scale=1">
<title>(1) Congratulations!</title>

recuperation
Posts: 2719
Joined: 04 Jan 2019, 09:48
Location: Hannover, Deutschland (Germany, Allemagne)

Re: Deleted Files Not Recovered

#5 Post by recuperation »

This is a recovery log file.

Locked