Skip to content
AS

Corrupted File System Recovery

A RAW volume or 'file or directory is corrupted' error means the file system structures are damaged, not the files. AS repairs or bypasses the structures from an image to get the data back.

When you need this

  • Volume shows as RAW or asks to be formatted
  • CHKDSK ran and files disappeared or moved to found.000
  • ReFS or Btrfs volume unmountable after power loss
  • macOS volume won't mount after an update
  • Linux volume fails fsck

What we do

Structure analysis

Damaged MFT, catalog, inode or B-tree structures are analysed and repaired in the image, never on the original.

Copy-on-write file systems

Btrfs, ReFS and APFS keep older metadata generations that can be used to recover a consistent earlier state.

Recovery and validation

Files are recovered with original paths where possible and validated before delivery.

How it works

  1. Step 1

    Consultation and scope

    We establish what failed, what has been tried, and which data matters most. This shapes a targeted plan rather than a generic one.

  2. Step 2

    Secure imaging and diagnosis

    Where possible the source media is imaged before any work, so the original is never altered. Diagnosis then determines the safest recovery method.

  3. Step 3

    Recovery

    Data is extracted from the image or source using methods matched to the failure — logical, structural or hardware-level as required.

  4. Step 4

    Verification

    Recovered data is checked for integrity and completeness, and a file list is shared so you can confirm what matters is there.

  5. Step 5

    Secure delivery

    Verified data is returned through an agreed secure method, with guidance on validation before it goes back into production.

What affects the outcome

Outcomes are never guaranteed. Every case is assessed on its own condition, and we tell you what is realistic before you commit.

  • Physical condition of the media and the extent of any damage
  • Whether the media has been written to, reformatted or re-initialised since the failure
  • Encryption, corruption or partial overwriting of the data
  • Availability of source data such as images, backups, logs or transaction records
  • Attempts made before assessment (rebuilds, repair tools, repeated reboots)

Frequently asked questions

Should I run CHKDSK or fsck?

Not on the original. Repair tools can discard damaged but recoverable structures. Image first, then assess.

What does 'RAW' mean?

The operating system cannot identify the file system, usually because its boot or root structures are damaged. The data is typically still present.

Request assessmentEmergency