Computer hard disk data recovery method (1)

A lot of friends think that data recovery is a very professional job. You need to have a thorough understanding of the disk structure and file system. Is it really so mysterious? In fact, for some simple software data loss, We can solve the problem by ourselves, not only can save a lot of money, but also a rare opportunity for the improvement of our computer level. Hard disk data recovery method:

What is the right medicine? What data can be saved? There are two main types of data problems: logic problems and hardware problems. The corresponding recovery is also called software recovery and hardware recovery. Software recovery refers to data repair through software. The whole process does not involve hardware repair. The causes of data loss are often virus infection, misformatting, mis-partitioning, mis-cloning, accidental deletion, and power failure.

The characteristics of software faults are: unable to enter the operating system, files can not be read, files can not be associated with the application open, file loss, partition loss, garbled display. In fact, the causes of software-like data loss are complex, with specific symptoms in each case, or multiple symptoms at the same time. Under normal circumstances, as long as the data area is not completely covered, individual users can basically recover smoothly through some specific software.

Take the most common deletion operation as an example. In fact, the files saved on the hard disk at this time are not completely covered. According to some specific software methods, the main boot area, partition, DBR, FAT can be used. Finally, the order of file entity recovery is solved; of course, it should be objectively acknowledged that although software-like data recovery has many detailed techniques and experience that is difficult to express, there is indeed a situation in which existing software recovery techniques are powerless. If the data on the hard drive is completely covered or partially overwritten, it is likely to be fixed without any software.

One way to recover data from hard disk:

I believe many of my friends have suddenly experienced a power outage at boot time, unable to find the system after rebooting, and suddenly power off when we use the computer. The hard disk can be detected when rebooting, but it cannot enter the system, or the prompt "DISK BOOT FAILURE, INSERT SYSTEN DISK AND PRESS ENTER".

This kind of situation is generally the fault of the main boot area of ​​the hard disk. In fact, it only takes a few minutes to get it. Such failures account for more than 30% of the overall software failure, so learning to deal with such problems can be described as an effective killer. Another thing to remind everyone is that if the "Miss operation system" is prompted after the power-on self-test and the complete contents of the C drive can be seen under DOS, this is also a failure of the main boot area.

For this type of software failure, we can solve it ourselves. You can boot the system with a floppy disk. Then type "C:" to see if you can read the contents of the C drive. This situation is more complicated. According to the degree of damage of the main boot area, whether the C drive can be read or not can not be determined. If the data in the C drive can be read, then the Fdisk/mbr command can be used to unconditionally rewrite the main boot area, and the original data can be retained. It's worth noting that the system didn't respond when running the Fdisk/mbr command, but it actually worked, because the amount of data on the hard disk partition table is small and the write time is almost imperceptible.

Of course, even if you can't read the C drive, we can use the Fdisk/mbr command. In fact, the role of Fdisk /mbr is very obvious, can also deal with some of the main boot area virus, you can make good use of it, this is the first tool to deal with the hard disk can be recognized in the BIOS and can not be operated under DOS; in addition to Fdisk A hidden parameter, you can also use Fixmbr this DOS gadget. After executing the file directly under DOS, the system will automatically check the structure of the partition table. After the user confirms it, it will automatically repair it. Compared with the Fdisk/mbr command, Fixmbr has a better effect, and many of the main boot area problems that the Fdisk/mbr command cannot solve can be easily handled by it.

Two methods of hard disk data recovery:

Failure: Unreasonable allocation of hard disk space, use partition software to partition from new partition, or merge partition, resulting in file loss, or unable to open.

This kind of fault is generally caused by partition table error. Partition table fault is also common in various software faults. It is recommended to use DiskGenius software made by us. The software

can run directly in a pure DOS environment, and uses an intuitive Chinese interface, so it is the best choice for users with poor English.

After copying the DiskGenius software to the DOS boot disk, you can run it directly. After entering the main interface of DiskGenius, you can easily restore the hard disk partition table automatically by pressing F10, and this is very effective. DiskGenius will first search for the hidden sector starting from the 2 sector of the 0 cylinder 0 head, looking for the partition table that has been moved. The first sector of each head is then searched, where the search process can be performed in both "automatic" and "interactive" ways.

Automatic mode is suitable for most situations. It is recommended that you choose this option. Through the above repair of the main boot area and the partition table, it is possible for a hard disk that has been severely damaged to correctly see the partition under Windows, thereby laying a solid foundation for other operations.

Manual repair: In some cases, any software may not be able to find the backup partition table. In this case, you can only manually modify it. Manual modification will completely operate the partition table data directly under software such as WinHex. After using WinHex to open the disk. The DPT hard disk partition table from "80" to "55AA" is quite critical. The hard disk partition table shown in our screenshot is intact, so there is no need to modify it.

But for a partitioned table that has been destroyed, the end position may be completely confusing. At this point, you can determine by looking for the next "55AA" flag, because the position of the next partition starts to move forward. A sector is the end of the previous partition. According to the obtained head, sector and cylinder numbers, it is converted into hexadecimal, and then written back using WinHex. In addition, in the process of finding the next "55AA", there may be a lot of interference items. It is recommended to judge according to the capacity of the hard disk partition. The whole process of handwriting recovery of the partition table requires a lot of practical experience, and everyone can further study.