File structure seen but contents zeroed out.

Thanks for the advice. The MFT is present and appears intact. I'm finished for the day now and will have further look in the morning.

I am not sure what you mean.

There is an MFT entry for EVERY file - and some files have multiple MFTs. All MFTs are stored in the file $MFT that can be long, at least 0x400 (1K) for each file on the drive.

The file structure can be seen, files, folders, sizes, times and dates etc, however whenever I click on a file using EnCase all it sees are zeros.

Is every file like this? (except for the MFT of course).

There are a couple of intact files with data in them, I'm going to acquire another image and see if the same thing happens.

Could it be a bad drive where the bad sectors were written as zeros during imaging?