Link to home
Start Free TrialLog in
Avatar of OAC Technology
OAC TechnologyFlag for United States of America

asked on

Deleted files recovered from Windows 10 restore points are corrupt

Hi,

A Windows 10 Pro (1803) laptop had all of its local user files deleted due to a roaming profile synchronization problem. The laptop has a few restore points from a couple of days ago. If I use something like Shadow Explorer, I'm able to see all the files that were deleted from the two previous restore points. However, the problem is that someone had enabled file compression on the user's profile directory and the problem I'm currently running into is if I restore these files, about 90% of the files are corrupt. Word documents won't open and report that there is corruption, picture files either won't open or show tiny bands of what the picture should show. I've also tried restoring the laptop completely to the previous restore points, but I'm having the same problem. Of course, there are no backups of this laptop. I've run Recuva and Disk Drill, but they don't even show the deleted files in a deep scan. The drive is an SSD. Are there any other tricks that may work that I can try?

Thank you
Avatar of Jackie Man
Jackie Man
Flag of Hong Kong image

the problem is that someone had enabled file compression on the user's profile directory and the problem I'm currently running into is if I restore these files, about 90% of the files are corrupt.

There is nothing you can do as your symptom suggested that the deleted files are overwritten by new files.
I've run Recuva and Disk Drill, but they don't even show the deleted files in a deep scan.   <-- This confirms (as noted above) that the files have been lost (overwritten).
Avatar of OAC Technology

ASKER

I find it strange, though, that pulling from a shadow copy would bring over corrupt files. I've restored MANY things from many computers using shadow copies and I've never seen this before. I've seen this with recovery software such as recuva, but why is this happening with a built-in Windows function like shadow copies?

Thank you
It depends on what might have been written in the interim
ASKER CERTIFIED SOLUTION
Avatar of Jackie Man
Jackie Man
Flag of Hong Kong image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
As a small aside there are problems with Windows10 and roaming profiles - see:-

https://4sysops.com/archives/when-roaming-profiles-are-not-working-in-windows-10/

But it is also worth considering that the file may already be corrupted before the shadow copy is created or even during the process if the operating system is still loading a profile from the network,
Ok, Sorry I didn't get back to this sooner. Here is what went down:  We couldn't seem to get to the data on the drive, But then we found a flash drive drive where it had been backed up to and then deleted.  I already had Mini-tool installed on my computer so I decided to try that on the flash drive and was able to get just about all the data restored.  But I do thank all of you for you helping me on this as I was still able to learn some new things.