Data Loss

[KM@ Dave]

Ok, can someone fathom any reason why Windows would delete 85GB of data specifically from my documents folder upon starting up the system after ELEVEN days of it being switched off.

The system hasn't been touched prior to that period.

AV is up-to-date; Even though viruses do lurk undetected sometimes, obviously. But nothing detected.

EDIT: I am not actually using AVDefender 2011. I think maybe a Signature change is in order.

 

[Vicenarian]

It's because you are using AVDefender 2011.

/thread

 

[Bryce W]

Tried any data recovery/check for bad sectors? Could be a corruption of some kind.

 

[JosephLeo]

It would probably help us a little better if we knew what operating system you're running, and what is the exact hard drive model and manufacturer.

I've had this happen to me before, and I found that it's a problem with the hard drive's index. Simple solution, just run a bit-by-bit data recovery program and ditch the hard drive.

 

[KM@ Dave]

It would probably help us a little better if we knew what operating system you're running, and what is the exact hard drive model and manufacturer.

I've had this happen to me before, and I found that it's a problem with the hard drive's index. Simple solution, just run a bit-by-bit data recovery program and ditch the hard drive.

I know, sorry dude I didn't even realise I missed that out. It's Windows 7 Ultimate x64 Build 7600, but yes I'm thinking defective hard drive, because Windows doesn't just decide to obliterate 85GB of data. And I will also add the model number and hard drive later as I'm not presently near the PC.

Also to Bryce W, chkdsk /f /r was run, but nothing seems to be wrong, hell I even ran a sfc /scannow and nothing.

 

[wimwauters]

Also to Bryce W, chkdsk /f /r was run, but nothing seems to be wrong, hell I even ran a sfc /scannow and nothing.

Ouch! Do NOT run any chkdsk/scandisk/fsck utility before you try and get the data back...

If the data has any value, you should duplicate the disc/partition first. Then run a soft data recovery app to go look for partitions, file system bits and file bits.

Once you got the duplicate, you can test the hardware and run the OS's file system check.

 

[iptech]

Ok, can someone fathom any reason why Windows would delete 85GB of data specifically from my documents folder upon starting up the system after ELEVEN days of it being switched off.

The system hasn't been touched prior to that period.

AV is up-to-date; Even though viruses do lurk undetected sometimes, obviously. But nothing detected.

EDIT: I am not actually using AVDefender 2011. I think maybe a Signature change is in order.

Is the 85Gb the entire contents of my documents? If so I would suggest it's die to a corrupt user profile. Depending on which version of Windows you are using, have a look user the user profiles to see if any new ones have been created by the system.

 

[KM@ Dave]

Ouch! Do NOT run any chkdsk/scandisk/fsck utility before you try and get the data back...

If the data has any value, you should duplicate the disc/partition first. Then run a soft data recovery app to go look for partitions, file system bits and file bits.

Once you got the duplicate, you can test the hardware and run the OS's file system check.

Don't worry, the whole Hard Disk was cloned before anything. Anyhow running GetDataBack, seems this will go unanswered TBH

 

[Martyn]

Is the 85Gb the entire contents of my documents? If so I would suggest it's die to a corrupt user profile. Depending on which version of Windows you are using, have a look user the user profiles to see if any new ones have been created by the system.

Yes had this a couple of months ago

 

[iptech]

Don't worry, the whole Hard Disk was cloned before anything. Anyhow running GetDataBack, seems this will go unanswered TBH

There is always an answer, diagnosis should always proceed one-size-fixes-all software 'solutions'.

I can almost guarantee that data will still be on the hard drive.

 

[KM@ Dave]

Is the 85Gb the entire contents of my documents? If so I would suggest it's die to a corrupt user profile. Depending on which version of Windows you are using, have a look user the user profiles to see if any new ones have been created by the system.

Sorry Pal, I didn't see your post, I feel so ignorent.

Yes, for a straight answer. The entire contents of the 'My Documents' folder has literally dissapeared.

I was recently told also that he had his Windows password recovered because when he entered it, even though it hadn't been changed, Windows wouldn't let him logon. So somehow it sounds like his 'SAM' corrupted itself, or was attacked by a virus, even though there are no traces of viruses at all. Even to be on the safe side I did a Bootkit/Rootkit scan, to no avail.

 

[iptech]

Sorry Pal, I didn't see your post, I feel so ignorent.

Yes, for a straight answer. The entire contents of the 'My Documents' folder has literally dissapeared.

I was recently told also that he had his Windows password recovered because when he entered it, even though it hadn't been changed, Windows wouldn't let him logon. So somehow it sounds like his 'SAM' corrupted itself, or was attacked by a virus, even though there are no traces of viruses at all. Even to be on the safe side I did a Bootkit/Rootkit scan, to no avail.

85Gb of data cannot simply disappear. To completely delete such a large amount of data would require a significant amount of disc activity and would take some time. Have you seen if there have been any new user profiles created?

I still believe that data is still on the disk somewhere albeit not visisble in explorer.

 

[KM@ Dave]

85Gb of data cannot simply disappear. To completely delete such a large amount of data would require a significant amount of disc activity and would take some time. Have you seen if there have been any new user profiles created?

I still believe that data is still on the disk somewhere albeit not visisble in explorer.

I don't believe there are, I checked under Control Panel > User Profiles, only shows him.

Also quoted for the user profiles %userprofile% under the start menu, and again, just him.

Also looked in System Properties > Advanced > User profiles and two show up...

1. Default Profile 1.5MB Type: Local
2. 'User'-PC 6.9GB Type: Local

 

[iptech]

I don't believe there are, I checked under Control Panel > User Profiles, only shows him.

Also quoted for the user profiles %userprofile% under the start menu, and again, just him.

Also looked in System Properties > Advanced > User profiles and two show up...

1. Default Profile 1.5MB Type: Local
2. 'User'-PC 6.9GB Type: Local

You won't find them listed under installed user profiles as the OS will have marked them as bad. You need to look for them directly on the hard disk: documents & settings folders for XP and the Users folders for Vista/Win 7.

 

[KM@ Dave]

You won't find them listed under installed user profiles as the OS will have marked them as bad. You need to look for them directly on the hard disk: documents & settings folders for XP and the Users folders for Vista/Win 7.

No, nothing. Even unchecked show/hide protected OS files/folders, and clicked show Hidden files, folders & drives.

This is a pain in the arse. And from earlier, yes you're right the data cannot just disappear without some sign of disk, on screen activity.

 

[wimwauters]

No, nothing. Even unchecked show/hide protected OS files/folders, and clicked show Hidden files, folders & drives.

This is a pain in the arse. And from earlier, yes you're right the data cannot just disappear without some sign of disk, on screen activity.

Have you tried any data recovery software? There must be at least remnants left of the old data?

 

[KM@]

Turned out to be a corrupted user profile in the end didn't it?

What did you use to fix it?


Sent from my iPhone using Tapatalk

 

[KM@ Dave]

Hi guys, and girls. Apologies for my late reply.

Problem solved, it was due to a corrupt user profile, I sent the person requesting help to this link http://support.M$.com/kb/811151 and it solved the problem after following instructions.

So kudos to iptech! Thank you a bunch.

 

[iptech]

Thanks for the feedback. Many problems that are reported as viruses, irrecoverable operating systems, failing hard drives and all manner of dramatical "I've never seen this before" errors are simple file system errors that require simple logical fixes.

Get to know how the operating/file system works and you'll soon get to know which tools to use when something goes wrong.