Solved

Recover a file in Windows Server 2003

Posted on 2013-02-01
13
200 Views
Last Modified: 2013-08-28
I have found 8 corrupted files in my Windows Server hdd.  I have a Raid configuration set up (c:\ with programs and p:\ mirrored with data).  I can see the files in the directory, but cannot copy them.  A virus got through (I use Eset) and corrupted them, most likely.  When I try to copy those files, I get the message that they are corrupt and to run chkdsk.  Is there any way to get those files off since I can still see  them?
0
Comment
Question by:sypv_mullins
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
  • 2
  • +2
13 Comments
 
LVL 30

Expert Comment

by:IanTh
ID: 38843945
try ubcd or parted magic which are mini windows enviroments that run of the boot cd  

http://www.ubcd4win.com/

http://partedmagic.com/doku.php?id=downloads#.UQvdtx3ZY8I
0
 
LVL 17

Accepted Solution

by:
pjam earned 100 total points
ID: 38843948
If they are Windows files you can run:  SFC /scannow to replaced them.
If they are in a Share then shadowcopy is the answer perhaps.
Do you have Shadow Copy turned on?  That would allow you to restore a previous version.
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 38843958
When I try to copy those files, I get the message that they are corrupt and to run chkdsk

Just checking, have you rurn chkdsk /f ?
0
Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.

 
LVL 1

Author Comment

by:sypv_mullins
ID: 38843996
won't chkdsk possibly delete the files?  or make them unavailable by moving them or something.  I know it could fix them, but I run the risk of it getting rid of them too.
0
 
LVL 31

Assisted Solution

by:Scott C
Scott C earned 300 total points
ID: 38844050
What about restoring them from backups?
0
 
LVL 1

Author Comment

by:sypv_mullins
ID: 38844072
the virus ate my back up data on my usb harddrive all the way back to Jan 5!  The files are part of our software that we use and it's either every file or nothing.  I can't piece them together due to time stamps etc...
0
 
LVL 31

Assisted Solution

by:Scott C
Scott C earned 300 total points
ID: 38844088
If that's the case then even if you could copy the corrupted files off using some other method there's a high probability that your appliction wouldn't work as the files have been modified by the virus.

You may just end up bringing the virus along with the files and causing the same problem all over again.
0
 
LVL 1

Author Comment

by:sypv_mullins
ID: 38844112
I ran a status of the drive P:\ and it says that it's "dirty" and needs to be chkdsk.
0
 
LVL 1

Author Comment

by:sypv_mullins
ID: 38844114
I'm probably looking at a data recovery company at this point.  :-(
0
 
LVL 14

Expert Comment

by:BlueCompute
ID: 38844123
won't chkdsk possibly delete the files?  or make them unavailable by moving them or something.  I know it could fix them, but I run the risk of it getting rid of them too.

No, this is a myth.  Checkdisk will fix the file system corruption so that you can access those files.
0
 
LVL 31

Assisted Solution

by:Scott C
Scott C earned 300 total points
ID: 38844133
Try booting with a distro of Knoppix:

http://www.knopper.net/knoppix/index-en.html

You will be able to look at your drives in a read-only mode and copy them to a flash drive or other external device.

Knoppix doesn't care about Winodws rights and permissions.  If you can't get the files this way, then yes, you are most likely looking at a data recovery company.

Most large cities have these centers and have walk-up service.
0
 
LVL 1

Author Comment

by:sypv_mullins
ID: 38848952
I tried taking the drives out and they have to be in the Raid in order to be read for some reason.  Tried booting with Knoppix, Linux, and couldn't get the files off.
0
 
LVL 30

Assisted Solution

by:IanTh
IanTh earned 100 total points
ID: 38849104
why did you take the drives out they have to be in the exact same order as they where originally when you boot the raid controller runs before the boot cd so you wont be able to read anything unless they are back in the same arrangement.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

this article is a guided solution for most of the common server issues in server hardware tasks we are facing in our routine job works. the topics in the following article covered are, 1) dell hardware raidlevel (Perc) 2) adding HDD 3) how t…
This article shows how to use a free utility called 'Parkdale' to easily test the performance and benchmark any Hard Drive(s) installed in your computer. We also look at RAM Disks and their speed comparisons.
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

627 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question