Case:
The customer said that the mobile hard disk was originally normal, and the copy of the company was copied on the company’s other computer. After torture and the computer, the computer popped up to ask if the window was formatted.At first I thought it was the problem of my own computer, and the operating system was restarted, and the fault was still.The mobile hard disk is connected to the computer of other colleagues, and the data in the mobile hard disk cannot be accessed.Later, the company seemed to understand the computer, and colleagues downloaded the data recovery software online to restore data, but most of the folder names and file names were garbled.Many company data is stored in the mobile hard disk, and helplessness has to seek professional data recovery companies for data recovery.Customers find a data recovery center through the Internet.
Solution:
The engineer of the data recovery center first detected the health status of mobile hard disk hardware, and found that the health status of mobile hard disk hardware was currently good. Through Winhex, the bottom layer of the mobile hard disk was conducted in detail and analyzed, and found that the partition table of the MBR was abnormal. The DBR partition information was normal (the mobile hard disk was used in the NTFS partition type), jumped to the MFT main file table record, and found that the first dozen MFT records were found The file header was tampered with, and the original normal file header was tampered with USBC. The diagnosis was that if the USBC virus was severely tampered with the USBC virus, the general data recovery software could not be restored or recovered. The scheme is caused by calculating the bottom parameters of the hard disk manually). The engineer of the Data Recovery Center, a copy of the mobile hard disk clone through Winhex. After detailed calculation, the MBR partition item record, MFT file header, etc. through Winhex combined with WINHEX to save the modification parameter to resume the mobile hard disk partition structure. Winhex did not prompt an error. The directory shows normal, the data is normal after CHKDSK, the data is perfectly recovered, and the customer accepts data satisfaction. So far, the data recovery is successful.