1, do not rebuild the partition operation
after the partition table destruction or partition is deleted, if you directly use the partition table reconstruction tool to directly create or format the partition, it is easy to destroy the original partition file allocation table or file record table, etc. Important areas, making recovery more difficult. Professional data recovery personnel will first locate the specific location of the partition before rebuilding the partition table. Use the sector view tool to check several important parameters of the partition such as dbr/fat/fdt /mft, etc., and then modify the partition table after confirming, and After modifying the partition table, the system will be prohibited from doing dskchk to destroy the partition directory during the startup process to ensure that the data will not be destroyed.
2, do not format the partition again
After the user first formatted the partition after the type change, it will cause data loss, such as the original fat32 partition into ntfs partition, or the original ntfs partition Formatted as a fat32 partition. The data will be lost, and the original directory format can not be scanned by the general software. The partition will be formatted again to the original type, and then the data will be scanned. It can be seen that the second format is the original partition type. The wrong operation, it is very likely to destroy some of the large files that could be recovered, which will cause permanent recovery, so pay attention.
3, do not redo the array after the array is lost
Some friends after the server crashes, they want to force the array to go online, even if the dropped hard drive is forced to go online, or directly do rebuilding. These operations are very dangerous, and any operation written to the disk may damage the data.
4, after the data is lost, it is strictly forbidden to save new files in the partition that needs to be restored.
The best way is to close the download tool, do not go online, unnecessary applications are also turned off, and then scan and restore data. If the partition to be restored is the system partition, if the data file is deleted, if there is no important data such as database in the computer, it is recommended to power off the computer directly, and then hang the hard disk on another computer to recover, because it is shut down. Or, in the boot state, the system will write data to the system disk, which may destroy the data.
5, do not do DskChk disk check
When the general file system error occurs, the system will automatically prompt whether you need to do disk check when booting into the startup screen, the default dskchk disk check operation starts after 10 seconds, this operation Sometimes you can fix some small damaged directory files, but in many cases it will destroy the data. Because of the complicated directory structure, it can't be repaired. After the repair fails, a directory like FOUND.000 will be formed in the root directory. A file with a .chk extension. Sometimes these files can be restored by changing their names. Sometimes they are finished, especially the fat32 partition or the larger database files of ntfs, so don't do DskChk disk check.
6. During the recovery process, it is forbidden to write new data to the source disk.
The data recovery process is most afraid of being mishandled and causing secondary damage, which will increase the difficulty of recovery, so do not recover during the recovery process. Then write new data to the source disk.
7, do not restore the data directly to the source disk
After deleting the file, the files recovered by the general software are directly restored to the original directory, so the possibility of destroying the original data is very large, so it is forbidden Restore directly to the source disk.