Case:
When the customer reinstalls the system, forget the files of the desktop, the desktop file is placed on the C drive. As a result, all the files on the desktop after reinstalling the system are lost. There is a very important TXT document.It is very small, and there is no way to recover with a lot of data recovery software.
Solution:
There is no file header in the TXT file, and the bottom layer is stored with data, and this small TXT document content is generally stored directly in the MFT table. After reinstalling the system, if you want to recover, you can only rely on luck.If it is not covered, it can still be restored. You can use Winhex to find through the keywords of the document content. If the keyword is in Chinese, you can convert Chinese to Hex into a production code and find it.