Data recovery is a relatively unpopular industry in electronic stores, that is, store fuzzy pricing and private pricing. Therefore, you should be careful about your important data and make timely backups. If the data is lost, I am not afraid. Let's look at data recovery.
Those things about data recovery 1 Step 1: clarify the responsibilities first.
Users who can go to the step of finding someone to recover data are very urgent. Knowing that you are in a hurry, you have to poke at the most painful place to achieve the most obvious effect. Generally, you will be informed in advance that you can resume without opening the market, which may lead to incomplete data recovery;
You can also choose to resume trading, but there is no guarantee that 100% will fully resume trading. Make your own decisions! (PS: If it is not restored, there is no data at all. Recovery is your decision. Even if you don't get it all back, you can't blame me I have explained in advance, and the responsibility is quite clear. )
Step 2: Eliminate concerns.
If you are a little hesitant, he won't persuade you, but will tell you a success story. I'll tell you how many people have done data recovery, and now there are data piles on the table in the hard disk, which need to be exported. (PS: Who cares so much, here are the important data) Then, I will introduce their professional equipment: workshop, dust-free equipment, various opening tools, etc. (PS: I have the equipment and technology, I can help you recover the data), and finally reiterate: it's up to you!
Step 3: Only after determining the degree of damage can the cost be determined.
Regarding the price, this is the most headache and helpless place for users. At present, users usually call in advance for consultation, and they are generally told that if the market does not open, it depends on the degree of damage in 300 yuan. In addition, even if the market opens, there is no guarantee of full recovery. Please bring the plate here first.
Be careful, because the data is tight, you may be charged a higher price when you actually follow the order. What you don't know is that the testing and identification may be a cover at all. (PS: Online data recovery software can only recover data if your storage tools can work normally. If the tool is broken, you can only find the data recovery center. Because there is no standard for charging, many people can only admit it. )
If you finally decide to recover the data from him, congratulations: this high-risk gamble has begun. A burst of conscience, some moral people will tell you that you can track the whole process to prevent data leakage, but it will take some time.
Others will tell you that it will take a long time. You can go back and wait, and I will tell you when you recover. As soon as you leave, the hard disk will be transferred immediately. He is just a soliciting. Once the data is retrieved, there may be a wave of high prices waiting for you when copying (trap tip: the merchant will ask you to add money for various reasons, because the data has already fallen into the hands of the merchant, and the original disk is basically scrapped, so you can only let it kill you if you want to cry)! It is also a good thing to recover data completely and safely in this way. I am afraid that the disk will be destroyed for the second time, resulting in all data loss, and I can only bear the consequences.
Data recovery, those things 2. Problems needing attention in data recovery.
In the process of data recovery, the most feared thing is the secondary damage caused by misoperation, which makes it difficult to greatly improve the recovery. During data recovery, it is forbidden to write new data to the source disk.
Do not perform a DskChk disk check. After an error occurs in the general file system, when the system is turned on and enters the startup screen, it will automatically prompt whether it is necessary to check the disk. By default, the DskChk disk check will start after 10 seconds. This operation can sometimes repair some small damaged directory files, but it usually destroys data.
Because the directory structure is complex, it cannot be repaired. After the repair fails, a directory similar to FOUND.000 will be formed in the root directory, which contains a large number of files with extension. CHK。 Sometimes these files can be restored by changing their names, and sometimes they have been completed, especially for FAT32 partition or larger NTFS database files.
Do not format the partition again. After the user formats the partition for the first time, the partition type will change, resulting in data loss. For example, the original FAT32 partition is formatted as an NTFS partition, or the original NTFS partition is formatted as a FAT32 partition.
After the data is lost, ordinary software can't scan the original directory format, so it reformats the partition into the original type, and then scans the data. We point out that the original partition type of the second formatting meeting is serious. The wrong operation may destroy some large files that could have been recovered, resulting in permanent irrecoverability.
Do not restore data directly to the source disk. Many ordinary customers directly restore the files restored by ordinary software to the original directory after deleting the files, which is very likely to destroy the original data, so it is strictly forbidden to directly restore to the source disk.
Do not rebuild the partition. After the partition table is destroyed or the partition is deleted, if the partition is directly established or formatted by using the partition table reconstruction tool, it is easy to destroy important areas such as the file allocation table (FAT) or file record table (MFT) of the original partition, which greatly increases the difficulty of recovery. In the process of recovery, we met many customers. After the partition table is destroyed,
We tried several partition tools, but we couldn't recover the data, so we thought of seeking professional help. Results We found that after various partition tools, some important directory files were destroyed, resulting in incomplete file directory recovery and some large files could not be recovered. Unfortunately, the loss of these files according to the initial partition described by the customer is completely recoverable. Professional data repairers will locate the specific location (logical sector number) of the partition before rebuilding the partition table.
Then use the fan view tool to check several important parameters of the partition, such as DBR/ FAT /FDT/MFT, etc. , before and after modifying the partition table, the system will be prohibited from doing dskchk to destroy the partition directory during system startup to ensure that the data will not be destroyed.
Do not redo the array after it is lost. In the practice of saving the server array, we have met some network managers who forced the array to go online even if the hard disk was disconnected after the server crashed, or they directly rebuilt it. These operations are very dangerous, and any operation to write to disk may destroy data.
After data loss, it is forbidden to save new files in the partition that needs to be restored. It's best to close the download tool, don't surf the Internet, and close unnecessary applications before scanning and restoring data. If the partition to be restored is a system partition, when the data file is deleted and lost, if there is no important data such as database in this computer, we suggest that you directly turn off the computer and then hang the hard disk on another computer for recovery, because the operating system will write data into the system disk when it is turned off or turned on, which may destroy the data.
Problems that should be paid attention to when using data normally.
Don't cut the file. We often encounter customers cutting a directory to another disk, and there is an error in the middle. The source disk directory is not available, and the target disk is not copied to the data. This seems to be a systematic BUG, which occasionally appears. Therefore, we suggest that if the data is important, copy the data to the target disk first, and then delete the directory file in the source disk if there is no problem, so as to avoid data loss.
The directory file has many partitions, so don't organize the disk directly. Because there may be errors in the process of disk defragmentation, it is difficult to recover data once an error occurs. We suggest copying the data to another disk, then formatting the disk to be defragmented, and then copying the data back.
Do not resize partitions with third-party tools. In the process of adjusting the partition size, it is also easy to make mistakes (such as power failure, etc. ), and once an error occurs, it is difficult to recover, because the data is moved around and overwritten, which is very serious. It is recommended to back up the data before repartitioning, and then partition it with disk management inside Windows, which is safer.
Back up data regularly to ensure data security, preferably by engraving, which is safer than storing it in hard disk.
Some knowledge about the recovery success rate
In different situations, the recovery speed after data loss is different.
FAT or FAT32 partition, after deletion or formatting, larger files or frequently edited and modified files will be restored with lower power. For example, frequently edited and modified XLS or CDR files will be difficult to fully recover. Those files that don't move after being copied in have a high recovery success rate, such as PDF or JPG, MPG and other files that are not frequently modified.
The recovery rate is still relatively high. This is because FAT and FAT32 partitions use the file allocation table to record the cluster fragment information of each file, and the cluster fragment information will be emptied after deletion or formatting. Because their file length is growing dynamically, files that are frequently edited and modified will not be stored in the file system continuously, so file fragmentation information cannot be recovered, and file recovery will be incomplete.
The recovery probability of NTFS partition is relatively high, and most of them can be completely recovered after deletion or formatting. Some files are sometimes unrecoverable, for example, the file length is very long or the file has been edited and used for a long time, which will form a lot of fragmented information.
After deleting a file, the length of the file is unknown and it is difficult to recover. For example, some database files that have been used for many years, after being deleted, the file length scanned by data recovery software is 0, which cannot be recovered. Regular disk defragmentation can reduce this situation, but it is also risky to do disk defragmentation directly. Please refer to the questions that need attention above.
Re-partition or delete partition or partition table is damaged. Generally, the later partition can be completely restored, and the later partition is less likely to be damaged. Therefore, it is best to put important data in the back partition, not in disk C and D.
Files deleted by the recycle bin are sometimes not found. Under NTFS, the file name of the file deleted from the recycle bin will be automatically changed to the name of De00 1.doc, and the original file name will be destroyed. When your data is lost, you cannot find the file name directly. Remember not to miss these files renamed by the system. Direct Shift+Del deletion will not destroy the file name.
Some knowledge about Windows partition
What is a fat partition?
FAT is also called FAT 16 partition. The DOS and Windows95 we used before used the FAT 16 file system, and now the commonly used Windows 98/2000/xp system supports the FAT 16 file system. It can manage up to 2GB of partitions, but each partition can only have up to 65525 clusters (a cluster is a configuration unit of disk space). With the increase of hard disk or partition capacity, the space occupied by each cluster will become larger and larger, resulting in the waste of hard disk space.
What is the FAT32 partition?
With the appearance of large-capacity hard disk, FAT32 became popular from Windows 98. It is an enhanced version of FAT 16, which can support 2TB(2048GB) partition. The cluster used by FAT32 is smaller than FAT 16, which effectively saves hard disk space.
What is NTFS partition?
A disk format supported by a series of operating systems of Microsoft Windows NT kernel, specially designed for network and disk quota, file encryption and other management security features. With the popularity of Windows 2000/XP with NT as the kernel, many individual users began to partition with NTFS.
NTFS also stores data files in clusters, but the size of clusters in NTFS does not depend on the size of disks or partitions. The reduction of cluster size not only reduces the waste of disk space, but also reduces the possibility of disk fragmentation. NTFS supports file encryption management function, which can provide users with a higher level of security.
What system can support NTFS file system?
Only Windows NT/2000/XP/VISTA/7 can recognize the NTFS system, while Windows 9X/ME and DOS cannot support and recognize NTFS-formatted disks. Because DOS system does not support NTFS system, it is best not to make C: disk into NTFS system, which is convenient for the system to be repaired under DOS system after it crashes.
How to protect your own files and folders under NTFS system?
Because NTFS file partition format has good security, if you don't want the files on your hard disk to be called or viewed by others, it is a very effective method to encrypt them by using permission control. The setting method is simple: log in as a system administrator, right-click the folder to be encrypted, select "Properties" and switch to the "Security" tab.
Only the administrator and himself are allowed to access the User Name Group project. Delete all other users. Save the settings and exit. After that, other users will not be able to access the folder. What you need to pay attention to when using this function is to ensure that only you know the administrator password and set other users as non-administrators.
In addition, you can set permissions for each user in detail, including read permissions, write permissions, delete permissions, and so on. , so it is more flexible to use. You can also set permissions to control the disk, or partition the disk for your own use, so that others can't see any information about you.
Why is FAT less efficient than NTFS?
The file allocation table of FAT file system can only list the name and initial cluster of each file, which does not mean whether the file exists. It needs to be judged by the record of the folder, and the folder entries are included in the index of the file allocation table.
Therefore, when accessing a file, you should first read the file allocation table to make sure that the file already exists, then read the file allocation table to find the first cluster of the file, and then find all the storage clusters of the file through chain search before accessing.
FAT32 and NTFS are better?
FAT32 and NTFS are two partition formats of hard disk. According to the data tested by authoritative organizations, FAT32 is 5% faster than NTFS, but NTFS has the following advantages: 1). It can access files larger than 4GB. 2). It can better diagnose and modify hard disk errors. 3) It can manage single partition hard disks larger than 40GB. In addition, NTFS uses a smaller cluster size, so it can save hard disk space to some extent.
For data recovery, files frequently edited and modified in FAT32, such as DOC, XLS, AI, CDR, PSD files or larger files, such as databases, are difficult to recover, which are very effective in NTFS partition. Note: By default, Windows98/ME can't access NTFS partition format, and Linux can read NTFS partition, but can't write.