I had recently taken the hard drive out of my computer so that I could install a bigger one. But when I reconnected it to the computer, all the files on the E:\ partition and some of the files on the C:\ partition had strange names like TTv5yV5354$YVC5Wy on them. I did on one occasion move an electromagnet near the drive. Could that have caused this? Please help me, some of those files were valuable.
-
1The electromagnet more then likely wiped the data on the hdd. If this is the case not much can be done, the data at the very least is corrupt, so the intgrity of the files cannot be trusted. Why on earth would you move an electromagnet near your computer?– RamhoundJan 14, 2013 at 13:36
-
Can you open the files even if they have strange names?– user1301428Jan 14, 2013 at 14:08
-
Unrecognized file format error– Alfred1776Jan 14, 2013 at 18:29
-
@Alfred1776 - That would mean the files are gone forever.– RamhoundJan 14, 2013 at 18:47
-
Me and my friends were working on a project and moved the electromagnet near it by mistake.– Alfred1776Jan 16, 2013 at 12:06
Add a comment
|
1 Answer
Here is the check list on how to recover data from a harddisk:
How badly do you need your data?
Very!
Go to a Data Recovery Company, if possible one which has a good reputation and does not brag itself with a fast and cheap recovery.
Not very, but would be nice to have again...
If the filesystems are still intact you can try to run appropriate check tools (fsck.*) and recovery tools.
If the filesystem is gone, try to run a Linux Live CD with ddrescue and testdisk, and maybe photorec, that might work.
If the harddisk is not even recognized you could try to get the same (!!!) model again and swap out the controller, that at least would rule out that possibility (of a faulty controller, that is).
Not sure if I need it at all...
Well, check it, repair it, read from it, write to it, copy stuff, place it on the heater, in the freezer, tip it, swing it, punch it...might work at some point again.
My drive was encrypted...
...and that stinky Data Recovery Company will never get my key!
That's great...for you, that is. Encrypted data is not or hardly distinguishable from random data. So even if the company is able to copy stuff off the harddisk, they won't be able to tell you how successful that was until you're at home and try to decrypt whatever they got off the harddisk.
...and I guess I can trust that company.
That's great...also for you, because they might be able to help you in that case.
...and I've forgotten the key...how do I get my data?
Well...how do I put this? The whole point of encryption is that somebody without the key will not get your data...you don't have the key, you don't get the data!
What if all this does not work?
You do have a backup, right?
And in your special case?
I'd recommend a data recovery company. If the harddisk has been closed to a magnetic field, and the filesystem is still intact (read: it is recognized as filesystem), then there's a good possibility that random areas of the disk have been overwritten with random (and in this case it's really random) data. The files and directories you still see good be anything.
Though, as you describe it, there might a good chance that data is still intact and only the file table has been damaged (that's a long shot by the way). Copying the disk with ddrescue and trying different recovery strategies on that copy might return the original data. If you're lucky you get the data back without the correct filenames and you'll have to sort it by hand...if you're unlucky you get junk back.
Anyway, I'd recommend a professional in this case.