| Author | Message | ||
     Chris Randle Username: narny Registered: 10-2005 |
I'm using WiHex 15.2 SR-2 with a Specialist licence. I have a disk and single partition drive with a deleted file structure. I can see most of it after having done a Refine Volume Snapshot. But recovering files sometimes generates errors. Here's an example: In WinHex's Directory Browser, I navigate into the drive's "\Path unknown" folder. I filter by name *.jpg. I right-click on "Directory with ID 22778" and select Recover/Copy... I recover to folder F:\Reco (a local disk). WinHex creates the folder F:\Reco\Directory with ID 22778" and reports the message: "Cannot create "F:\RECO\Path unknown\Directory with ID 22778\London 2007 [Mother's Day] 001.jpg". Make sure the folder exists and the file is not write-protected. The system cannot find the path specified." repeated for every deleted jpg in the 22778 folder - file name in message different each time, obviously. Finally, WinHex reports "0 files and 1 directories were recovered. (0 B)" At this point I thought my only option was to manually recover the files from each folder individually - there are hundreds of folders - as the recovery worked when I selected the files as opposed to the folders. But I then discovered (fortuitously) that if I repeat the same Recover/Copy... operation on the same folder, it works without error, and reports "82 files and 1 directories were recovered. (83.6 MB)". I've read a previous thread about invalid names with trailing spaces etc., but I can see no problem with these paths and names. It's reading/writing from/to NTFS file systems. Why does WinHex report the initial "Cannot create..." error? Why does it work second time around? Does it try to recover the files before the output folder has been created - anything to do with cacheing writes on the disk? | ||
| Don Camillo Username: willybilly Registered: N/A |
"F:\Reco\Directory with ID 22778" "F:\RECO\Path unknown\Directory with ID 22778\London 2007 [Mother's Day] 001.jpg" Did you report the first path correct? I just tested it and it worked fine. | ||
| Chris Randle Username: narny Registered: 10-2005 |
Thanks for trying it too. Before I discovered the trick of running the recovery twice, I tried all sorts of other combinations of outputting to different disks and folders. I copied & pasted and clipped some of the messages and paths and I think I must have clipped/copied a path or message from one of the other tests. To correct my previous post: When I do a Recover/Copy... of \Path unknown\Directory with ID 22778 to F:\RECO I get... Cannot create "F:\RECO\Directory with ID 22778\London 2007 [Mother's Day] 001.jpg". Make sure the folder exists and the file is not write-protected. The system cannot find the path specified. The folder in the message is created by WinHex after the first recovery, but no files. Repeating the recovery then works fine. Also, pre-creating the folder "F:\RECO\Directory with ID 22778" allows the recovery to work first go. In case it's relevant, I'm using Windows XP Pro SP3. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
I was able to reproduce this error. It occurs under special circumstances in WinHex except in the forensic version. It will be fixed now with v15.2 SR-10. | ||
| Chris Randle Username: narny Registered: 10-2005 |
Thank you Stefan. Any estimate on when that might be available? Web site still has SR-2. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
Now out. | ||
| Chris Randle Username: narny Registered: 10-2005 |
v15.2 SR-10 (Specialist) fixed the problem recovering files from Path unknown, but I now have another similar problem. Different job, different disk. Recovering both extant and deleted JPEG files from an NTFS volume. Using the directory browser, I've filtered by filename *.jpg & *.jpeg Highlighting a "My Documents" folder on the disk, I select Recover/Copy... and pick "F:\R" as the destination. I get the message, for example: 'Cannot open "D:\My Documents\Customers\Paul\AVG Results\AVG01.jpg". Please check the path and your access rights. The system cannot find the path specified.' repeated for each JPEG under My Documents. The final dialog box says "5 files and 112 directories were recovered". There were 5 deleted JPEGs. All the folders were created on the destination, but no extant JPEGs were copied. Unlike last time, re-running the Recover/Copy... doesn't retrieve the missed files. Also, with WinHex directory browser set to explore recursively and not show extant files, I highlight the 5 deleted JPEGs and do Recover/Copy... to "F:\R". WinHex reports "5 files and 0 directories were recovered. (4.0 MB)" but this time they're not recovered. Lastly, I don't know if this is a limitation/by design, but 2 of the 5 deleted files had the same path & filename. When they're recovered one duplicate overwrites the other. So although WinHex reports 5 files recovered, I only have 4. I can't see a way (a) to be informed that this has happened or (b) to ask for a rename if there's a clash or (c) easily to discover which files were involved if I know there was a clash. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
Please uncheck Options | Security | [ ] Open files thru operating system to avoid this error. > Lastly Yes, this is by design. Only with a forensic license, duplicate filenames will be changed to unique filenames by inserting incrementing numbers before the extension, and the new and original names are noted in copylog.html. |