Where’s Potato Been?
August 16th, 2015 by PotatoYou may have noticed that the blog is even quieter than normal the past few weeks. To start with there’s the subject of the last two posts: my cat dying didn’t put me in much of a mood to write. Then last week my desktop computer died (hard disk failure), so I’ve been spending the past few days trying to rebuild it and recover some data.
First of course the public service message: back your stuff up. I’ve been very lax about backing up the last little while, and it’s biting me now. My last full system image is from December 2014 — eight months ago!! I have a partial backup of some important folders from June. Thankfully that means I won’t have to repeat all my year-end bookkeeping and taxes, but it still sucks that I’ve lost two months’ worth of work (plus eight months of whatever files weren’t important enough to include in the partial backup — things like media and saved games). I’ve been trying to think of what’s been lost and thankfully can’t come up with much. I know I totally reorganized my book business accounting excel file just last week to make it easier to track unit sales (before I was only tracking revenue and expenses), but given how much time I’ve spent on recovery at this point it’s just easier to re-do the work (and that was open at the time my drive blew up so I guess it’s gone for good).
I was greatly let down by the windows restore tools — my backup boot CD wasn’t able to restore windows, refresh windows, or reinstall windows. The drive had somehow become locked and many of the files were supposedly corrupt in the recovery command prompt environment, but I could still see the directory listings which gave me hope for recovery. So I popped in another hard drive and restored my December backup image (the one I thought I made in April — not much better — was unreadable) so I could boot to windows and see what was going on. I hooked up the original system drive as a secondary drive and fired up the computer. Before I knew what was happening, Windows was running chkdsk on the damaged drive, which wiped out most of the directory structure that I was able to see before. Ugh. Then I wasn’t able to access any of the contents because I wasn’t the “owner” of the folders. When I tried to take ownership the system bluescreened and I was back to the command prompt from the recovery CD. There was a very brief “if you don’t want chkdsk to run, press any key in 1 second” message, which is not enough time to actually hit the key. Given that I’m pretty sure chkdsk made my life more difficult here, I have to recommend that if you’re trying to repair a drive that you find a way to disable auto-chkdsk on startup.
So, days later now, I have a system that thinks it’s December 2014, with some of my files from the June backup. I still wanted to see if a more advanced recovery tool could pull anything from the borked drive, so I googled around and tried a few.
Pandora Recovery was able to scan the drive for document files (.doc, .xls, etc.), and found a lot of files and fragments of files. However, it was a lot of work to sort through the results — the original filenames and creation dates were gone, so Pandora created names based on header information (e.g. file creator). That let me cut out a few to search through, but I was still left with hundreds of documents to open and see what they were. I ended up finding a few invoices that I would need to rebuild my accounting spreadsheet, but no accounting spreadsheet. Most of the documents appeared multiple times, likely an artifact of how Windows saves a new version behind-the-scenes (or in some cases, an artifact of how I’ll go back to a website and re-download a document rather than try to find it in my recent downloads folder).
So I moved on to Recuva. This tool didn’t turn up as many potentially recoverable documents, but what it did pull out of the damaged drive had original filenames and dates modified, which greatly helped me exclude the ones I didn’t need to check in detail (for instance, anything before 2014 would already be on my xmas backup image — I was mostly hunting for recently completed documents). This helped turn up one other document file missed by Pandora (though I can’t say whether Pandora missed it, or if I missed it because the meta information wasn’t helpful), as well as some email files (eml) that Pandora doesn’t seem to check for.
It’s a few days later now and I still am not yet up and running on my desktop. I figured I would take advantage of this “opportunity” to upgrade to a solid-state drive as my boot drive, so I’ve got some more work to do on that (which I was hoping to finish tonight but looks like I will likely be offline until Wednesday).
To get the blog back on track, I have an exciting post coming up for tomorrow.