D
D
DWZ2019-10-12 12:31:36
NTFS
DWZ, 2019-10-12 12:31:36

How to recover missing TS files from NTFS USB drive crash?

There were 4 GB of ts-files in a directory on a portable USB disk with the NTFS file system, then another 8 GB was moved to it from another machine. (another part of the same transmission). Disconnected WITHOUT safe removal. On the first machine, there was a problem with a certain file from another directory - it cannot be read or deleted. Plus, on the second machine, the disk was not visible at all - windows offered to format it, they refused. On the first machine, a disk check was launched from the Win 7 disk properties, it hung at the end of the SID check step. As a result, the disk on the second machine became visible, but the second 8 GB of files were gone. chkdsk found nothing on the second machine.
Is it possible to somehow return these 8 GB files?
Are there special programs for restoring TS specifically? It would be desirable if the program could find TS-files with PCR in the specified range in the unallocated area of ​​the disk.

Answer the question

In order to leave comments, you need to log in

2 answer(s)
D
DWZ, 2019-10-13
@DWZ

> What are TS files I do not know, as well as the meaning of the abbreviation PCR.
It's a pity, because this is a SIGNIFICANT simplification of the task. Moreover, the package size is fixed, the disk is not yet fragmented, so the conditions are hothouse for specially sharpened programs. There used to be TS_Undelete and TS_Recover now something is not found.
> With such a shutdown, often some of the files are not corny written to disk, but are located in RAM allocated for disk cache.
1) For 4 hours, the cache should have been flushed to the disk for a long time.
2) It is unlikely that there were 8 gigs of files in the memory, which means that something must have remained on the disk anyway
3) Previously, both I and others had to unsafely pull out NTFS flash drives - and no problems. (It happened with FAT, yes). Although it may work differently with a Win7 USB drive.
> He should not find them!.
Under NTFS, chkdsk once found a lost chain of clusters, like on FAT, which surprised me a little. So sometimes it can.
> Isn't it too late to think about data recovery if you've already run chkdsk?
I don't think NTFS can play back 8 gigs of writes, so there must be something in the free space anyway.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question