Friends, I am looking for help in recovering data lost.
What happened:
- 2TB SATA drive connected to my machine via a SATA to USB dock
- The drive has 3 partitions lets say X, Y and Z
- For some reason the SATA to USB dock lost power
- When I powered it back, noticed that Partition X and Y had lost almost all data. Partition Z had data as is.
- In Partition X and Y, i see a few folders, but almost all empty. (long sub folder chains...visible, with no files)
What I did:
- Downloaded latest version of Recuva 1.29.429
- Ran Recuva using default settings on partition X - found files, but all files were ignored.
- Ran Recuva in Adv Mode, and turned ON option to search "Non deleted files" , "Zero sized files" etc.. Found files, but this time they were shown as recoverable. Almost all files are in Excellent status.
- Highlighted one file, and tried to recover it to a seperate USB disk.
- I get the following error message: "Recoverd 0 files in x.xx sec" and then I get another error message saying "Access is Denied."
- If its a JPG file, I can see the preview of the file in Recuva (but I get the same access is denied msg when I try to recover the file).
I ran Recuva as administrator & then in debug mode+admin; and I have attached the Log file.
The log file has the following text (also attached):
[2009-08-19 20:54:11] [iNFO ] Recuva v1.29.429[2009-08-19 20:54:11] [iNFO ] System Info: MS Windows 7 Ultimate 64-bit, Intel Core2 Duo CPU T7500 @ 2.20GHz, 4.0GB RAM, NVIDIA GeForce 8400M GS[2009-08-19 20:54:11] [iNFO ] No update available[2009-08-19 20:54:20] [iNFO ] Boot sector:61KQTlRGUyAgICAAAggAAAAAAAAA+AAAPwD/AACA9D4AAAAAgACAAP+/3T4AAAAAAAAMAAAAAAACAAAAAAAAAPYAAAABAAAAGPFKSBxLSKAAAAAA+jPAjtC8AHz7aMAHHx5oZgDLiBYOAGaBPgMATlRGU3UVtEG7qlXNE3IMgftVqnUG98EBAHUD6d0AHoPsGGgaALRIihYOAIv0Fh/NE5+DxBieWB9y4TsGCwB126MPAMEuDwAEHloz27kAICvIZv8GEQADFg8AjsL/BhYA6EsAK8h377gAu80aZiPAdS1mgftUQ1BBdSSB+QIBch4WaAe7FmhwDhZoCQBmU2ZTZlUWFhZouAFmYQ4HzRozwL8oELnYD/zzqulfAZCQZmAeBmahEQBmAwYcAB5maAAAAABmUAZTaAEAaBAAtEKKFg4AFh+L9M0TZllbWmZZZlkfD4IWAGb/BhEAAxYPAI7C/w4WAHW8Bx9mYcOg+AHoCQCg+wHoAwD06/20AYvwrDwAdAm0DrsHAM0Q6/LDDQpBIGRpc2sgcmVhZCBlcnJvciBvY2N1cnJlZAANCkJPT1RNR1IgaXMgbWlzc2luZwANCkJPT1RNR1IgaXMgY29tcHJlc3NlZAANClByZXNzIEN0cmwrQWx0K0RlbCB0byByZXN0YXJ0DQoAjKm+1gAAVao=[2009-08-19 20:54:20] [iNFO ] Reading MFT[2009-08-19 20:54:20] [iNFO ] Reading files[2009-08-19 20:54:20] [iNFO ] Building folders[2009-08-19 20:54:20] [iNFO ] Restoring tree[2009-08-19 20:54:20] [iNFO ] Analyzing damage[2009-08-19 20:54:20] [iNFO ] 12106 deleted files, 54 filesystem objects[2009-08-19 20:54:20] [iNFO ] Processing deleted emails[2009-08-19 20:54:20] [iNFO ] Processing recycle bin[2009-08-19 20:54:20] [iNFO ] Returning list[2009-08-19 20:55:05] [iNFO ] 45053 / 313[2009-08-19 20:55:05] [iNFO ] Exiting scan[2009-08-19 20:55:23] [ERROR] Not a PNG file[2009-08-19 20:55:36] [ERROR] COM exception: RecoverOperationImpl.cpp(114) : Access is denied. (0x80070005)
It would be really helpful if someone can help me out here and guide me on how to get my files back.
Recuva_log_1_29_429__19_8_2009_20_54_.txt
Recuva_log_1_29_429__19_8_2009_20_54_.txt
