Computer Hope
Hardware => Hardware => Topic started by: ThatGuy11200 on October 20, 2014, 11:54:29 AM
-
Not sure if this is the correct place for this.
I had my external HDD plugged into my PC. I went away and did something else for a while and when I came back the computer had gone to sleep. When it came back on, I tried to go into a folder in the eHDD and a message appeared saying the filepath didn't exist. I unplugged it and plugged it back in and now the folder is gone completely. However, when I look at the drive, it seems that Windows is still detecting the data there, because the same amount of space is in use.
About 60GB is missing because of that one folder.
I'm using Windows 8.1 and the HDD is a Buffalo 1TB HD that's formatted as NTFS.
-
About 60GB is missing because of that one folder.
That sounds bad.
You may wish to check the manufacturers site for a suitable diagnostic program.
There have been reports of some users having trouble with external USB drives. Here is a link to another forum where a similar issue was considered.
http://www.tomshardware.com/forum/276751-32-buffalo-external-hard-drive-problem
Also, you may need to use a partition recovery program.
Here is one:
http://www.minitool-partitionrecovery.com/
Use of any recovery tool has risk involved. It is a free tool.
-
I found another forum where this problem was fixed for some people. But it didn't work for me.
http://www.makeuseof.com/answers/view-folders-external-hard-disk/
The first suggestion was:
"Go to Control Panel->Appearance and Personalization->Folder Options
In view tab check show hidden file and also show protect folder of system
on “Start” –>Run–>type cmd and click on OK.
if your hard drive as G:
Enter this command: attrib -h -r -s /s /d g:*.*
Then check if your real files will be showed"
When I tried that it didn't seem to do anything.
I even tried Recuva and TestDisk but neither found any deleted files. Even though I know I've deleted files on the eHDD.
This isn't actually the first time this has happened, although it was years ago, and only affected a few files.
-
I just tried copying the entire drive to my internal HDD. Despite the G: drive saying it has 85GB of used space, it only copied 28GB, which is the total size of the visible folders.
-
Another suggestion.
Use a 'Live' Linux CD to boot your computer. Then see if you can mount the USB drive. In some cases the Linux system can see the drive. Reason unknown.
Also, in Linux, start up GParted.
Or make a bookable CD kith GParted
http://gparted.org/
GParted is a free partition editor for graphically managing your disk partitions.
With GParted you can resize, copy, and move partitions without data loss, enabling you to:
Grow or shrink your C: drive
Create space for new operating systems
Attempt data rescue from lost partitions
Sometimes it works.
-
I'll try that but it isn't a case that the drive can't be seen by the computer. It's just that particular folder.
Can you suggest which version of Linux to use?
-
Hi there,
I believe the files are still there, but had gone invisible. The attrib command was a good option, because sometimes really solves the issue. Check the drive on another PC and with another USB cable. I would try to take ownership of that folder from the Security tab in Properties. I leave details below.
Using a Linux Live CD is another option, which may give you access to those files. I believe that versions here do not really matter. If you access your data, do a backup and format the drive.
http://technet.microsoft.com/en-us/library/cc753659.aspx – how to take ownership of a folder
Hope this helps
-
I'll try that later. I've currently got Recuva doing a deep scan which will take another 7 hours. Also I won't be able to try another cable, it has a usb at one end and a larger connector (one that I've never seen before or since) at the other end.
I've already taken ownership of the drive. I had to in order to get the attrib command to work.
-
Hi there,
I believe the files are still there, but had gone invisible. The attrib command was a good option, because sometimes really solves the issue. Check the drive on another PC and with another USB cable. I would try to take ownership of that folder from the Security tab in Properties. I leave details below.
Using a Linux Live CD is another option, which may give you access to those files. I believe that versions here do not really matter. If you access your data, do a backup and format the drive.
http://technet.microsoft.com/en-us/library/cc753659.aspx – how to take ownership of a folder
Hope this helps
1) How do files "go invisible"?
2) Taking ownership has nothing to do with files disappearing, only the ability to access the files.
-
Hi, Allan
I have seen many cases, where users can not see the content of their external drives/pen drives without any particular reason, but they can confirm that the space on the drive is used, meaning that the files are still on the drive, but can not be seen. Sometimes this happens after OS updates, because of HDD issues, software issues, anti virus restrictions (after an update) or ownership changes. Some of these may happen without the authorization of the user (like auto updates). I think the files are actually there. Some users report that taking ownership helps, so that is why I suggested it.
-
on “Start” –>Run–>type cmd and click on OK.
if your hard drive as G:
Enter this command: attrib -h -r -s /s /d g:*.*
Then check if your real files will be showed"
When I tried that it didn't seem to do anything.
Try following the exact commands including run as administrator when opening cmd prompt
http://en.kioskea.net/forum/affich-623304-hidden-files-on-my-hard-disk
-
Try following the exact commands including run as administrator when opening cmd prompt
http://en.kioskea.net/forum/affich-623304-hidden-files-on-my-hard-disk
It didn't work.
The Recuva deep scan also didn't find the folder, and when I used the drive on another computer the folder still wasn't there, but the computer could still detect the space being used.
-
1) How do files "go invisible"?
2) Taking ownership has nothing to do with files disappearing, only the ability to access the files.
Malware can and does hide data on a USB drive. This has been documented.. ** The OP may need to go to the virus forum and get some needed help there.
** One one many references: http://www.v3.co.uk/v3-uk/the-frontline-blog/2253176/hidden-data-trick-could-be-malware-writers-boon
-
Did you try Tools - Folder Options - Unhide in Windows Explorer of the external drive?
-
After waiting all this time to get some CD-Rs delivered, it seems my computer can't even burn anything to disc.
I downloaded Puppy Linux, inserted the CD-R and tried to format it and it says "Windows was unable to complete the formatting", or I get the error 0xc0aa0402 when I try to burn it to the disc.
-
You need to burn the ISO image using a media software or if in Windows 7. the built-in burning feature.
-
I tried another cd and it worked. I booted up Puppy Linux and ... it didn't work.
It loaded to desktop and the cursor moved around but I couldn't select anything or do anything. I tried it a few times. The clock didn't even change so it must have crashed.
I'm not going to waste more of my time today. I'll try downloading some other Linux crap on Monday, to see if actaully works.
-
Try this in command prompt by copy-pasting and run as administrator. The external drive should be connected and recognized.
attrib -H -R -S G:\* /S /D
-
Do you recall any of the data file names? If so, I would try searching for one of those files. Instead of suspecting that something hid the files or the entire folder, I would suspect that the folder is actually within some folder and not where you thought it was.
-
Try this in command prompt by copy-pasting and run as administrator. The external drive should be connected and recognized.
attrib -H -R -S G:\* /S /D
It didn't work.
Do you recall any of the data file names? If so, I would try searching for one of those files. Instead of suspecting that something hid the files or the entire folder, I would suspect that the folder is actually within some folder and not where you thought it was.
It isn't in another folder. I previously copied the entire drive (i.e. right click on Drive G: in This Computer, then copy) to my desktop. But that only copied 28.2GB, rather than the 80 or so GB that This Computer is saying is on their.
-
Why would you copy that much data to the Desktop ? ?
I fear that's the issue right there....
-
I did that after I had the problem. I didn't want to lose anything else.
-
There is a virus/worm that hides your folders and while they are still there, they are unreachable. I iad that happen to me in a couple of USB drives before, what I did was open then on a Mac, got my information out, and deleted any .exe files that you don't recognize. That got rid of the problem for me. Good Luck.
-
I don't hav a Mac and I don't know anyone that has one, either.
I just tried Knoppix and that couldn't find the folder either.
A few of you have mentioned a virus but the folder only disappeared after Windows went to sleep. It also isn't the first time this has happened to this drive, though the last time was many years ago ( maybe 4 or 5 years ago).
-
See http://en.kioskea.net/faq/4210-how-to-remove-autorun-inf-file
-
Update: I just used Auslogics Disk Defrag to analyse the drive. It found the missing files in $Recycle.bin. The entire filepath is the same except for the initial folder (the one that vanished).
For example. The initial folder name was 'Games'. A file that was in G:\Games\KotOR\... is now in G:\$RECYCLE.BIN\S-1-5-21-3837688345-3605417749-2742955248-500\KotOR\...
It won't open the containing folder and neither Recuva nor TestDisk can see the files. When I open the Recycle Bin on the desktop, there appears to be no files there.
Any suggestions?
-
Hi,
Like Gonz said, there are some malwares that hide folder on your external drive. If you haven't tried yet, open my computer > Tools > Folder Options > click View Tab > under advanced settings, uncheck "Hide protected operating system files {Recommended}". and select "show hidden files and folders". Click Apply and then Ok to close the box.
In your external drive, you may see some hidden folders or drive with there icons fade out. Click on them, check to see if you can see the missing files?
-
I still can't see them.
I find it hard to believe that Auslogics Disk Defrag can see them (it can see their size, their filepath, their name) but I can't get to them.
As I understand the malware, it hides the files when the drive starts up. But that isn't what happened. The folder was there. I know it was there because I checked. I went away for a while and when I came back Windows was asleep. I woke it up, moved the cursor over the folder and it said 0kb. I double clicked on it and it said that the filepath didn't exist. I then unplugged it, plugged it back in and the folder was gone.
-
Have you tried SafeMode ? ?
-
It's one of the first things I tried and I just tried it again but it didn't work.
-
Malware can and does hide data on a USB drive. This has been documented.. ** The OP may need to go to the virus forum and get some needed help there.
** One one many references: http://www.v3.co.uk/v3-uk/the-frontline-blog/2253176/hidden-data-trick-could-be-malware-writers-boon
I didn't try that at the time but it seems it would have been locked anyway.
-
Hey,
I have into exact similar situation. I had some 1.5 TB of pics in seagate 2 TB HDD. Yesterday while I was working on the photos al of a sudden the folder disappeared. I have initiated stellar phoenix scan and hoping for the best.
Any idea why this happens?
Regards
Rohit
-
rohit_b,
You might have a different issue.
It would be better to start your own thread.
-
I'm facing similar situation on my 1TB ext HDD.
The problem is not fixed but I just to share some of my findings.
What causes this happen.
1) Improper removal of USB drive, makes an error flag to marked on the drive/certain folder/files. Sometimes Windows just doesn't allow the disc to be removed, even with all program shutdown. We used to unplug it without shutting down the system, normally in assignment or emergency file transfer situation.
2) Windows suggested to run a scan disc for the 2nd time you plug in the same drive.
3) For this case, due to the folder was marked as error, Windows created a HIDDEN FOUND.XXX (numbers of 000, 001, 002) folder to moves all suspected error files into FILEXXXX.CHK.
Due to the hidden folder, most users just able to see the HDD space being occupied but the files are missing. Showing all hidden and system files only do half of its work.
We need something to revert the .CHK files back to things we need. I'm still trying with some softwares which I found on google. Few I used are not much helpful....
I'm still working on some solutions.
You may consider moving these .CHK file into a new good HDD before starting the revert work.
-
Unfortunately, The .CHK files are practically useless. First you would need to identify which files they came from. Then you would need to identify where in that file they came from, and then you would have to slip them back into the file. They used to have limited utility when dealing with the ancient CHKDSK program since if you were working with text-based documents you could often patch your file back together.. beyond that most people just started making backups on other floppies, though.
the .CHK files are typically a single cluster (4K) and there can be multiple files from a single file. The data is from either clusters that were cross-linked (used by multiple files) or lost chains )(not associated with any file at all). In the first case, you cannot restore one of the files, since the cluster only has the data for one of the files that it was part of. For example if a text file and an executable somehow share a cluster, the last file to be written will be the "good" one. You might open a text file and see a bunch of garbage in the middle. So you delete it and rewrite that paragraph and save it. Later you run a program. it fails to start or crashes. Mystery? well, if it was cross-linked, you replaced part of the executable with text data. That executable data is gone, and you would need to reinstall the program.
A lost chain is similar- it simply isn't used by any file on the disk. Major file corruption can disassociate clusters from files, but with NTFS this is far less of a problem. Typically these disassociated clusters, and even cross-linked clusters are a result of disconnecting an external drive that has write-caching enabled. By default any disk that looks like a Fixed Disk has write-caching enabled. You can verify write cache settings in Device Manager. eg:
1. Right-click the Drive and choose properties
2. On the hardware tab, identify the appropriate disk drive in the list that maps to the drive.
3. Choose "Properties". This will open the Device Manager Properties.
4. Select "Change Settings"
5. In the "Policies" Tab, turn off "Enable Write-caching on this device". It's usually safe to use this for fixed, internal disks. For hot-swappable/USB devices you'll want this disabled, and a lot of external hard drives look like standard Fixed Disk Drives to the Operating System.
You would need to identify the file it came from by looking at the 4K block and somehow "knowing" which file it came from, particularly since that data is now missing from the original file so you cannot search for it- then you would have to know where in the file it came from as well as how to patch it into place.
-
This part worked for me:
"Go to Control Panel->Appearance and Personalization->Folder Options
In View tab, check show hidden file and also show protected system folders"
Mine were in folder marked "found.000, found.001" etc. I just went into those folders and copy-pasted into main folder. it will take an hour or so, but nothing else worked. Thanks!!!! I remember there being a disk check that happened and it must have chosen to erase what it saw as threats.
-
I've recovered the files now.
I formatted the drive and used TestDisk to undelete them.