FOUND.000 and FILE0000.CHK: What Do They Mean?
The FOUND.000 folder is a hidden system folder that Windows may create after a file system repair operation. Files named FILE0000.CHK, FILE0001.CHK, and similar are recovered file fragments or recovered chains saved by CHKDSK or another disk checking process.
FOUND.000 is a container folder. FILE0000.CHK is a recovered fragment that may contain part of an old document, photo, archive, video, database, or temporary file.
✦ Usually normal
- Often appears after
chkdskruns - Can be created after unsafe shutdown or unplugging a USB drive
- May contain recoverable data
- Usually not malware by itself
✦ Needs attention
- Can indicate file system damage
- CHK files may be incomplete or corrupted
- Do not delete before checking whether important data is inside
- Repeated appearance can signal drive problems
What Is the FOUND.000 Folder in Windows?
The FOUND.000 folder is a hidden, system-marked folder created on the root of a drive, for example C:\FOUND.000, D:\FOUND.000, or E:\FOUND.000. Its job is to store recovered file fragments after Windows finds orphaned file system records, lost clusters, or damaged directory entries.
The number can change. If another recovery folder is created later, Windows may use names such as FOUND.001, FOUND.002, and so on. The folder is usually hidden because it is not meant for everyday file storage.
Folder name
FOUND.000, FOUND.001, or a similar numbered folder.
Typical location
The root of the affected drive, such as C:\, D:\, or a USB drive letter.
Visibility
Usually hidden and marked as a protected system item.
Contents
One or more .CHK files saved after a disk check or repair operation.
What Is FILE0000.CHK and What Does a CHK File Contain?
A FILE0000.CHK file is a recovered file fragment created when Windows cannot restore the original file name, extension, or folder path. Instead of discarding the data immediately, Windows saves the fragment with a generic name and the .CHK extension.
A CHK file can contain many different kinds of data. It may be a complete file with the wrong extension, a partial file, several mixed fragments, or data that is no longer useful. That is why some CHK files can be recovered simply by renaming them, while others cannot be opened normally.
| CHK file situation | What it means | Recovery chance |
|---|---|---|
| Complete file with lost name | The data is mostly intact, but Windows lost the original name and extension. | Good |
| Partial file fragment | Only part of the original file was recovered. | Limited |
| Mixed fragments | The CHK file may contain data from more than one damaged file chain. | Uncertain |
| Temporary or cache data | The recovered data may not be a user document at all. | Low |
Why Does Windows Create FOUND.000 and FILE0000.CHK Files?
Windows creates FOUND.000 and .CHK files when a disk check finds data that appears to belong to files, but the file system metadata no longer points to it correctly. This can happen on internal drives, external HDDs, SSDs, USB flash drives, SD cards, and memory cards.
Unsafe removal
Unplugging a USB drive, SD card, or external disk while files are still being written can leave incomplete file system records.
Common on removable drivesPower loss or forced shutdown
If Windows stops during a write operation, the file contents and the file system table may no longer match.
Common after crashesCHKDSK repair
Running chkdsk /f or approving automatic repair can save recovered fragments as CHK files.
Failing storage device
Bad sectors, flash memory wear, cable problems, or controller errors can damage file system structures repeatedly.
Check drive healthIs the FOUND.000 Folder a Virus?
In most cases, FOUND.000 is not a virus. It is a normal recovery folder created by Windows file system checking. The folder name and .CHK files alone do not indicate infection.
However, malware can hide files on removable drives or create confusing folder names. Be careful if the folder contains executable files such as .exe, .scr, .bat, .cmd, .vbs, or suspicious shortcuts. Scan the drive before opening anything you do not recognize.
✓ Usually safe signs
- The folder is in the root of a drive
- It contains files such as
FILE0000.CHK - It appeared after
chkdsk, a crash, or unsafe removal - Files have generic CHK names and no executable behavior
✗ Suspicious signs
- Executable files are inside the folder
- Shortcuts replace your original folders
- The drive creates autorun-like files
- Antivirus detects threats on the same drive
Where Is the FOUND.000 Folder Located and Why Can’t You See It?
The folder is usually located at the root of the affected drive. For example, if the problem happened on drive E:, the folder may be E:\FOUND.000. You may not see it in File Explorer because it is hidden and can also be marked as a protected operating system folder.
Show hidden and protected files in File Explorer
- Open File Explorer.
- Open View options. In Windows 11, choose View → Show.
- Enable Hidden items.
- Open Folder Options → View.
- Temporarily clear Hide protected operating system files if you need to inspect the folder.
- After checking the folder, enable the protection option again.
Check from Command Prompt
Replace E: with the actual drive letter.
Command Promptdir /a E:\FOUND.000
To list all FOUND folders in the root of a drive, use:
Command Promptdir /a E:\FOUND.*
Can You Delete FOUND.000 and FILE0000.CHK Files?
Yes, you can usually delete FOUND.000 and .CHK files if you are sure you do not need anything inside them. They are not required for Windows to boot or run normally. But do not delete them immediately if the drive recently lost files, photos, documents, archives, or folders.
| Situation | Recommended action |
|---|---|
| No important files are missing | You can delete the folder after checking the drive. |
| Photos, documents, or videos disappeared | Copy the CHK files to another drive and try recovery first. |
| The folder is huge | Inspect the largest CHK files first; they are more likely to contain videos, archives, or disk images. |
| FOUND.000 keeps coming back | Back up the drive and check for file system, cable, USB port, or storage health problems. |
How to Recover Files from FILE0000.CHK Safely
Recovery is not guaranteed, but it is worth trying before cleanup. The safest approach is to copy CHK files away from the damaged drive and work only with the copies.
Step 1 — Stop writing to the affected drive
Do not save new files to the drive, do not format it, and do not run repeated repair attempts if important data is missing. New writes can overwrite recoverable data.
Step 2 — Copy the FOUND.000 folder to another drive
Create a recovery folder on another disk and copy the CHK files there. For example:
Command Promptmkdir D:\CHK-Recovery
copy E:\FOUND.000\*.CHK D:\CHK-Recovery\
Step 3 — Work with copies only
Never experiment on the only copy of a CHK file. If you rename, edit, or test extensions, do it in a separate working folder.
Step 4 — Try the most likely file extensions
If you know what disappeared, copy one CHK file and try renaming it to the likely extension. For example, a recovered JPEG photo can sometimes open after renaming FILE0000.CHK to photo.jpg. A recovered Word document may need .docx, while a recovered ZIP archive may need .zip.
FILE0000.CHK files unchanged until you know whether recovery is successful.
How to Identify What a FILE0000.CHK File Used to Be
A CHK file does not tell you its original type from the file name. You need to infer it from the file size, file signature, content preview, or by testing likely extensions on a copy.
Check the file size
Small CHK files may be text, configuration files, or fragments. Very large CHK files may be videos, archives, disk images, or databases.
Fast checkOpen a copy in a hex viewer
File signatures can reveal types: JPEG often starts with FF D8 FF, ZIP/DOCX with PK, PDF with %PDF.
Try specialized CHK recovery tools
Some utilities can scan CHK files, detect signatures, and rename recoverable files automatically. Always scan downloads and work with copies.
Useful for many filesCommon file signatures and extensions
| Original file type | Typical signature or clue | Extension to test on a copy |
|---|---|---|
| JPEG image | FF D8 FF |
.jpg or .jpeg |
| PNG image | 89 50 4E 47 |
.png |
| PDF document | %PDF |
.pdf |
| ZIP, DOCX, XLSX, PPTX | PK |
.zip, .docx, .xlsx, .pptx |
| MP3 audio | ID3 or MPEG frame data |
.mp3 |
How to Check the Drive After FOUND.000 Appears
After you copy important data and CHK files to a safe location, check the affected drive. The right command depends on whether the drive is internal, removable, healthy, or already showing signs of failure.
For the Windows system drive
Start with a non-destructive scan:
Command Prompt as Administratorchkdsk C: /scan
If Windows reports errors that require offline repair, it may ask you to schedule a repair at the next restart.
For a USB drive or external disk
Replace E: with the correct drive letter. Run this only after copying important data away from the drive.
Command Prompt as Administratorchkdsk E: /f
Check hardware and connection problems
- Try another USB port or another cable for external drives.
- Avoid cheap or unstable card readers for SD and microSD cards.
- Check S.M.A.R.T. health for HDDs and SSDs with a trusted disk health tool.
- Replace the drive if file system errors keep returning.
How to Prevent FOUND.000 and CHK Files in the Future
CHK files are usually a symptom of interrupted writes or storage problems. You can reduce the risk by changing how you disconnect, shut down, and back up drives.
- Use Safely Remove Hardware before unplugging USB drives, external disks, and card readers.
- Wait until file copying, downloads, backups, and exports are fully complete.
- Avoid forcing shutdown while updates, disk operations, or large file transfers are running.
- Keep at least one backup of important files on another drive or in cloud storage.
- Replace USB flash drives and memory cards that repeatedly lose files or ask for repair.
- Use a UPS for desktop PCs if power loss is common in your location.
Frequently Asked Questions About FOUND.000 and CHK Files
Q Can I simply delete FILE0000.CHK? ▼
Q Will deleting FOUND.000 damage Windows? ▼
FOUND.000 folder is a recovery output folder, not a core Windows folder. Deleting it only removes the recovered fragments stored inside it.
Q Why is FOUND.000 taking up a lot of space? ▼
Q Can I convert CHK files back to the original files? ▼
Q Why did FOUND.000 appear after CHKDSK? ▼
Q Why do I get FOUND.001 or FOUND.002 instead of FOUND.000? ▼
Q Should I run CHKDSK again if I see CHK files? ▼
Should You Keep or Delete FOUND.000?
The FOUND.000 folder and FILE0000.CHK files are usually created after Windows repairs file system problems. They are not normally dangerous, but they can contain recovered fragments of files that were lost during a crash, unsafe removal, power failure, or disk error.
🏁 Bottom Line
Do not delete FOUND.000 immediately if files are missing. Copy the CHK files to another drive, try recovery on the copies, and then check the disk. If nothing important is missing and the drive is healthy, you can delete the folder to free space.