Date: 12/11/07 (Computer Help)    Keywords: no keywords

EDIT: I discovered that Vista does NOT store data in the "Documents and Settings" folder, but in the "Users" folder. I can access this folder using the Bart PE live CD and from Ubuntu. I am now copying the files to the server for short-term swap space.

This post only exists now for reference to others that may need it.


I have a user.
That user uses MS Vista on their laptop.
That user claims that the machine was shut off properly last night after a evening of normal use and that nothing else was done to it.... it was just shut down normally.
The machine would not boot this morning.
It gets to the black screen with the mouse cursor in the middle and then reboots. It gets to the same point regardless of boot mode (safe mode, safe mode with networking, normal mode, last know n good and even safe mode with command prompt).
The last known file to load successfully in each case is \Windows\Systems32\drivers\crcdisk.sys
Obviously a critical file is corrupted (I suspect the machine was shut off during a de-frag or something similar.... but I am not sure).

I have tried running a windows repair from external MS windows boot disks and the internal restore partition.
I was able to run checkdisk from the install disk and several errors were found and corrected.
I have tried an upgrade installation (but I cannot do that unless I am actually running windows).
I checked the memory (2 sticks, two slots) by removing a stick and playing musical slots. Each and every time (each stick, by itself, in each slot and in both dual-stick configurations) I stalled at the same spot.
I called the manufacturer and after a couple of quick troubleshooting items (basically stuff that I told them I had already done and resetting the BIOS to default settings) they said we needed to do a system restore (not acceptable until I have tried EVERYTHING I can think of to recover the user data).

I moved on to less conventional techniques:

I first examined to see if I could easily access the drive physically. I cannot. It is deep inside the chasis somewhere and the dissassembly would void the warranty (the laptop is less than a month old).

I have tried to boot into Knoppix, but that locks up.
I ran a memory test and everything checked out 100%.
I can boot to a Bart PE recovery disk...
I ran checkdisk and everything checked out.
I can load the explorer and I can see the C drive, but I cannot get into the "Documents and Settings" folder.
I have tried to load the upgrade installer from inside Bart, but when I eject the BART disk (even using the "Eject" command) the system locks up.... so much for loading everything onto the RAM disk.
I tried to access the data through Ubuntu Live, and received and error that, through its details, told me what I needed to know to mount the drive properly. I got it mounted and, alas, the "Documents and Settings" directory is showing 0 files. Vista has hidden the files well.
I had hoped to mount the drive and dump the "Documents and Settings" sub-folder for the user onto my file server for temporary storage... no such luck.

When I mounted the drive in Ubuntu the logfile for the volume said that the NTFS volume was in use and that there was not a proper shutdown.


If I knew which file was corrupted (any way to find out?) I would replace it from a Vista system that is working.... at least long enough to recover my user's files.




Is there ANY way at all that I can recover this user's data? Is there anything I have not tried?

Source: http://community.livejournal.com/computer_help/847992.html