Old HD was copied, moved to new HD, old died, data saved, but most files gone?

teholdsedare

Distinguished
Nov 15, 2011
141
0
18,690
Using WIN 7 home 32, but I dont think that matters much, as I am pretty sure this is just a user security error/bug/hatemail deserving glitch that very few people have delt with to the extent I have.

Dell laptop 250 gb Sata drive, clicking cylinders, was able to get entire drive backed up onto external, sifted garbage out while computer was still on, and had 2.11 GB data saved from Documents and Settings folder of data that CAN NOT BE LOST. No issue when I was logged into the laptop, but the board was compromised, and HD is no longer bootable. Completely dead.

Now I have an old (I think it was windows vista, but it might have been win 7 - I backed it up 2 yrs ago cant remember) file system that I need to recover information off of. Attempted to burn this filesystem to DVD and send to person that needs them, and only 300MB shows up on the disk. WHY?

9168 Files, 1819 folders, 2.11 GB.
Inside directory, Users name was "Home"
Needed files are in this directory. Right click Home says 5842 files, 552 folders, 1.18 GB
However when I select ALL VISABLE FOLDERS in this directory and click properties, I only show 81 files, 21 folders, 233 MB.
I have done a manual inventory of all folders AND files, Everything is accounted for.

Where is the other 800MB of data that I need to be recovered?

1. I have attemped to use the takeown command (Takeown /f * /r)
No change. Nothing visable beyond 233MB.
2. I have used icacls * /grant:r everyone:f /t
It went on a rampage on my scroll bar, and manually changed 10kish files properties to be visable by everyone, but no change once again.

I need access to these files.
If there is not a way, I have to find one anyways.
 

teholdsedare

Distinguished
Nov 15, 2011
141
0
18,690
This is the drive we are talking about is my actual primary HD that I already retain permission on...? Right?
And also, it is only a small folder on my primary bootable partition that is restricting me access. Its only the file system that was taken from the other system/HD. Folder Permissions were already tweaked a couple hours ago and nothing changed.
 
Right-click on the folder.
Click on Advanced.
Click on Change Permissions
Ensure that "Enable inheritance" is selected.
Put a check mark in "Replace all child object entries...object." and click apply, even if it was already selected.
 

teholdsedare

Distinguished
Nov 15, 2011
141
0
18,690
Ok it went crazy with the setting security settings prompt window, and changed a ton of files, but there is still 800MB of files missing in the directory. I think I had already did that last night when I googled this issue.
 

teholdsedare

Distinguished
Nov 15, 2011
141
0
18,690
File system shows up like this on 3 different functional internal sata hard drives, and 1 external hard drives. All other files on these hard drives have no issues.

I have already completely ruled out hardware errors, so I posted this in Windows 7 issue.
 

teholdsedare

Distinguished
Nov 15, 2011
141
0
18,690
I have one going on the same file system upstairs. On a 40GB HD that will finish fast. But like I said, this is not a hardware issue.

It does not matter what Physical Drive I place this file system on, or what computer I put it on, there is 800MB of files missing.

If the folder has the information inside of it, and it is copied when you move the file system from one hard drive to the next, then the allocation table has no errors. What is missing is proper access to these files.
 
The idea is to try and fix the corrupted files. if you've already taken possession and ensured that proper permissions with full control are enabled/applied to those files, then it is not a file permission problem.

If you imaged the drive, you've also then copied the problems associated with that drive to the image and will be copied back down if you download the image to another hard drive. Being that you heard 'clicking' and such, it indicates a bad hard drive and a damaged partition and you might not be able to recover it.

 

teholdsedare

Distinguished
Nov 15, 2011
141
0
18,690
Chkdsk found no issues. I have not had issues with the files themselves. Like I have stated in almost every post since the original, I have multiple copies/images of this file system REMOVED SUCCESSFULLY from the bad HD. And in fact, before the HD died completely, I was ABLE TO BROWSE THE COPIED VERSION OF THE FILE SYSTEM ON MY EXTERNAL HARD DRIVE AND VIEW ALL THE FILES IN QUESTION. ON THE COPY. NOT ORIGINAL. Maybe that should clear up what the issue is.

I have been digging for a month, and just last night I found this... but I was not sure it applied, but I am beginning to think it DIRECTLY applies to what I am dealing with... since the files in question were in the Documents and Settings tree... and as the OP in this thread states... well... you might just have to read it. Because I am beginning to think possession is not the issue.

https://forums.malwarebytes.org/index.php?showtopic=114660
This guy in this post has the exact same issue (afaik).



(taken from one of the posts)
With the Exclude option, these three symbolic links are ignored
With the Direct option, they are treated as files, so relative to the Exclude option, the backup contains three more files
With the Follow option, they are treated as their targets, so again relative to the Exclude option, the backup contains three more folders, and 57 more files and 0.2 more GB (the contents of those folders). Because I was treating My Pictures as a separate folder, this option gives two copies of the contents of "My Pictures": one as a subfolder of "My Documents", and the other as a separate folder.




That was discovered using a specific backup program. So if windows assigns the My Documents file, inside of the Documents and Settings file, the follow option... then since the information that linked the file from the original file structure on the original HD, to the actual file, then there is lost data. It shows up on the allocation table, but the LINK information was attached to the OS.

Now... the crappy part.


HOW DO I REBUILD A LINK LIKE THAT?