Hard raw format data recovery

Hard raw format data recovery

1. raw format reason
2. raw format Solution

Experience:

1. raw format reason

I searched the internet for the reasons for the formation, and I will not tell them one by one, but the results will have a cause.
The correct statement found on the internet is caused by DBR damage to the hard disk. If I do not understand the hardware, I will reference the explanation provided by my predecessors.

2. raw format Solution

In front of this article, I was able to say that I did not have any experience in hard disk data recovery. So this time, I just learned how to cross the river by feeling the stones and finally managed to conquer myself, it is a great fortune in the mid-year cool. Because the hard disk in raw format is my GB Data disk, which stores around GB of data, I was scared of a cold sweat when I saw it changed to raw format, several years of photos, N years of ISO collection, countless code written overnight. Assuming that the smoke has vanished, I doubt whether I have the energy to write all the code again... Now, let's get down to the truth. Format directly without data recovery. No more ~ _~

Start of recovery:

I have no experience. Just like me, it is a top priority to package the partition or the entire hard disk into a gho file using the ghost immediately, and then start the work on your own. If there is no backup, don't play with me, or your data won't be able to play. Pai_^

The following is a paradox found on the Internet:
1. Set raw partition permissions.
I don't know where to set the permission when the partition is changed to a raw format of 0 bytes? TMD's nonsense is a waste of time, but it's also a mistake!

2. Group microconfiguration.
It's a matter of partitioning, but it's still the system. Isn't it a matter of shrimp?

3. The drive letter is changed and restored. That is, the original drive letter is deleted and the drive letter is assigned again.
I tried it once and gave up immediately. Seriously suspect, is there such a simple solution?

4. Use Win98 to read the raw score format.
In itself, my drive letter is converted from NTFS partition to raw format. is 98 supported? In the same serious suspicion, I am not really interested in installing a 98 trial. I tried to read the drive letter with the msdos7.1 trial and gave up immediately.

 

Some people think it is the right way to try:
1. Access the PE to read the raw disk. I heard someone has succeeded. However, it seems that my disk does not work.

2. I used the 3.0 repair and Guidance Method of my Partition Table doctor to fix the problem. When I looked at the page, it seemed like a ptdd vest. I don't know what the relationship between the two. It's just that I tried both the table doctor and ptdd in my partition, but the error cannot be fixed when it is fixed to boot. I suggest you try it.

3. Go to DoS and load the DOS for NTFs software. If you check the drive letter in your raw format, congratulations. Then, I heard that I was able to identify it correctly.

4. Use chkdsk to fix the issue. I tried chkdsk/f x from chkdsk/r x. I don't know if my hard disk or my RP is worse or not. Just try. After all, it is the simplest.

5. Use PQ to adjust the partition as needed. Do not save the partition after exiting. This method also shows that someone has succeeded. I tried my hard drive, but the revolution was still unsuccessful. I continued to work hard.

6. Right-click the drive letter in raw format to bring up the format dialog box and start formatting. In half, click Cancel immediately and restart again. You can see that someone has succeeded. Do not hook up "high-speed formatting", or your hands are not fast enough, and if you do not have a ghost raw partition or hard disk, your hopes for data recovery will be very slim. Same. I still cannot use this method.

7. Use the diskgen partition repair function of the DOS version to fix the problem. The same is true. However, this method is immune to me. Depressed. After restoring four partitions, my data disk has never been used to dividing four partitions.

8. Partition merge method. Prepare another hard disk and divide it into two partitions. Generate a gho file from the raw partition and restore it to one partition of the other hard disk. Then, use PQ to merge the two partitions. I heard it is feasible, but I still cannot. NOTE: If it is an NTFS partition, NTFS is a version number, that is, the NTFS partition of XP and the NTFS partition of 2003 are different versions. Do not use raw format partitions, which are originally 2003 points. The new hard disk uses XP partitions and PQ for combination. This will make a mistake.

9. Use winhex for manual repair. We can see that some cool people have proposed it without worry. I just don't know if it is successful. Even though I don't understand it, I just thought that even if the number of successfully recovered projects is huge and the technical requirements are high, I would give up and I can't afford it. I only saw a moderator using C language to develop such a tool in the reply post, but I had nothing to do with PM, or I had to do it myself.

10. Assuming that the nine methods above cannot be used, your raw hard drive is expected to be almost identical, restore the gho file backed up in raw format to another hard disk, and start your hard-to-use data recovery journey. This is your best choice.

 

I tried the following data recovery software:

Finaldata
Finalrecovery
Easyrecovery
Easy data recovery wizard
Recover4all pro
Filerecoveryangel
Easyundelete
Recuva
Objectrescuepro

Finaldata recovery files can be recovered to some files, and many of them can be recovered only after being deleted, if the data disk is large, remember to find a computer with a partition greater than or equal to a raw data disk to restore the data disk. Otherwise, scanning time will be wasted and it will be cleaned up. practice is the only criterion to test the truth, I will not waste my water.

The easy data recovery wizard provides a dedicated raw format option to select and restore, but the individual cannot try it.

Easyrecovery should be a well-known data recovery software. I just tried to restore some files. If the file contains Chinese characters, the file content will become garbled. The reason for this is that I used ghost as the freetier "zizhu" brother, because my data disk gave me all the above methods, I don't have to worry about trying it out.

The King of finalrecovery appeared. After all the above methods, I finally relied on it to recover more than 70% of my data. It is indeed a powerful tool to deal with raw format. However, if there are many original directories in raw format, it will be exhausting. This software cannot restore directories. It will list directories one by one and manually select files for recovery. The file name will not change and the same content will be complete, I just scanned more than 7000 directories on my hard disk, and almost caught sight of it. The disadvantage of the software is that every time a certain file is recovered, that is, every time 1000 or several hundred files are recovered, the software will go wrong. Both the original version and the Chinese version have the same problem. I don't know if it is the reason for the 2003 platform, but I didn't try the XP license.

Postscript:

I used to have one hundred GB of data in front of me, but I didn't cherish it. I don't regret it until I lose it. Let's assume that God gives me another chance, I will say four words "daily backup" to the one hundred GB Data. If you have to add a backup period to the data, I hope 10 thousand years. It's a bit exaggerated, but fact data is always fragile. A lot of things can be cherished only when they are waiting, just like feelings. This is the King's path.

 

My computer is a dual-hard disk, the master disk is 160 GB, the slave disk is 20 GB, the one disk is two partitions, the two disks are divided into four partitions, the format of all partition files is NTFS, it contains software, songs, movies, and MTV downloaded from the Internet. Later, I did not know when and why. three partitions in the disk could not be opened, and the display shown as "the file or folder is damaged and cannot be read ." Right-click the property to find that the file system format is raw and the space is 0.
I want to know how to restore the data. The data has been accumulated and cannot be formatted.
I also searched the internet for the following solutions:
Solution 1: system permission problem 1 (the original system is in NTFS format and fails)

 

Right-click the drive letter in raw format, select "attribute", and then select "security" to delete useless users and add them? Your username. You can change the permission. If there is no security option, you can choose directory option (Open "my computer"-select "tool" menu-then select "directory, remove the check box before "use simple file sharing" to right-click a disk in NTFS format and display the security options in the properties menu.

Solution 2: system permission problem 2 (the original system is in NTFS format and fails)

Go to "Control Panel", find "Administrative Tools", open it, open "Local Security Policy", and open "Security Options, on the right side of the page, find "network sharing: Local Account Sharing and security mode", change "Guest only" to "classic", and exit and return to my computer, right-click the disk that is changed to raw and find the "Security" tag, remove the garbled characters, and then add the tag? Users of this computer can.

Solution 3: how to change the drive letter

Change the raw drive letter to C, D, E, F, and F, and change F to e to restore the drive letter.

Solution 4: Use easyrecovery Software

However, I did not succeed in the first three, and the "Security" label was never found in the second solution.
I have never tried the fourth solution, but I have never succeeded in easyrecovery.

 

Haha
I finally got it out. I saw a lot of such problems on the Internet and hope to share it with you.
R-STUDIO
:
Http://wx.onlinedown.net/down/HA-R-Studio30123025-LDR.zip
As for how to use it, it's not a very difficult thing.

Brief Introduction to the software:
R-studio is a powerful data recovery and anti-deletion tool.
Technology, for the use of fat12/16/32, NTFS, ntfs5 (Windows 2000 System)
And ext2fs (Linux System) Partition disk provides a complete data maintenance solution!
At the same time, it provides support for local and network disks. In addition, a large number of quota settings enable advanced
Users get the best recovery results. Detailed features include: using Windows Resource Manager for ghost
Interface; recover remote data through the network (the remote computer can run Win95/98/me
/NT/2000/XP, Linux, and Unix systems); supports fat12/16/32, NTFS,
Ntfs5 and ext2fs file systems; can reconstruct damaged raid arrays; for disks,
Partitions and folders generate image files; restore and delete files and encrypted files in the partition (
NTFS 5), data streams (NTFs, NTFS 5); restore fdisk or delete other disk tools
Divided data, virus-damaged data, and MBR-damaged data.
Component name; save data to whatever disk; browse, edit file or disk content.

--------------------------------------------------------
Solution for converting hard disk partitions into raw format
After I reinstall the system today, my F: the disk suddenly changes to raw mode. Double-click cannot open the disk and an error is prompted. You need to know that all my personal data and some learning materials downloaded are in vain. In desperation, I went online to check the information and asked the experts. After some efforts, I finally found a solution and wrote it to help my friends who experienced the same fault in the future.
Step 1: first go to "Control Panel" and switch to the classic view, find "Administrative Tools", double-click to open, and then double-click to open "Local Security Policy ", click the plus sign before "Local Policy", and then click "Security Options". In the right-side form, find the "Network region question: Local Account Sharing and security mode" item, then, change "guest-Local User-initiated Identity Authentication" to "classic-Local User-initiated Identity Authentication ".
Step 2: Open "my computer", right-click a raw partition, click Properties, find the "Security" tag in the pop-up attribute dialog box, and name "group or username: "Delete garbled characters in the list box, and then add? Users of the local machine can.
Tip: If you right-click the partition and there is no "security" label in the pop-up attribute dialog box, you can open "my computer ", click "Tools"> "DIRECTORY Options"> "View", and deselect the check box before "use simple file sharing (recommended.

 

Partitionmagic is a matter of life and online.

What is the raw file system?
I used partitionmagic (the software introduced in last year's 12-issue magazine that could not lose the file re-tune the partition size) to adjust the two hard disk partitions. As a result, the two file systems changed to raw, windows cannot be opened, but the files in the two partitions are not lost through partitionmagic check. What should I do ?!
Or which prawn teaches me how to convert the file system again without formatting in Windows or live dos?
Online, etc. Thanks

You have encountered a very classic problem. Raw doesn't mean partitioning, and there is no way to restore it perfectly temporarily. It just saves most files with easyrecovery.

Google search, without lab, use with caution

Method 1 (retain data ):
You can try it like this: Go to "Control Panel", find "Administrative Tools", open it, open "Local Security Policy", and open "Security Options, on the right side of the page, find "network sharing: Local Account Sharing and security mode", change "Guest only" to "classic", and exit and return to my computer, right-click on drive D and find the "Security" tag, remove the garbled characters, and then add the tag? Users of this computer can.

Note: This method may also target partitions in NTFS format. Similar to method 3.
Method 2 (unable to retain data ):
Use Control Panel-management tools-Computer Management-disk management
Delete, and create a partition again.
Method 3 (data can be retained. The original partition format is NTFS ):
Click "Tools" -- "DIRECTORY Options"-Remove "use simple file sharing". raw format partitions (originally in NTFS format) have "Security Options, then, set the permission again and then click OK.
Method 4 (theoretically, data should be retained without verification ):
Use the DM partition software to check whether there are Partition Table errors, or use the PQ software to restore the partition to FAT32 or NTFS format.
Method 5 (others' methods can retain data. PS: very troublesome ):
The detailed method is as follows:
1. Use easyrecovery pro 6.06 and select data recovery --- advanced recovery (select advanced options to customize data recovery );
2. Select a drive letter that has changed to raw format, and click the advanced option of feature;
3. In the file system scan, select "NTFS" for the file system, click Advanced scan, and select "advanced options" in the lower right corner to set the cluster size and data start position to 0;
4. Click partition settings and use the MFT method (this must not be an error). Then confirm;
5. Click Next to start scanning the file system, and then wait ~~~~~~~~~~~~~~~, It takes longer time than timeout, so be patient. After that, an NTFS drive letter is found. Click the drive letter to start scanning;
6. After scanning, you will find all the files have been found. Then, click Restore and select an available disk to store the recovered files;
7. format the problematic disk ~~~ Copy the recovered file back ~~~~~~ OK. Everything is perfect.

We can also use the "Rebuilding Partition Table" function of the domestic software "disk man" to retrieve partitions again. However, data may be lost. It is best to prepare the partition table for the backup.

 

What is the difference between raw recovery and original recovery?

Easyrecovery professional data recovery involves raw recovery and raw recovery. What are the differences between the two ???

The best answer is that raw is used when an error occurs in the hard disk partition table.
The hard disk partition is changed to raw format, and the size and available space are all 0. Of course, it cannot be opened. However, it may be read normally in DOS.

In general, there are several simple solutions for raw partitioning. You can try them first (different solutions vary depending on the cause of this error). It is not necessary to use easyrecovery professional for recovery, which is time-consuming.

Using "easy my Partition Table doctor" can solve the problem very easily (find a correct version, there are many online versions)

You can also try the following methods:

System permission Issue 1 (the original system is in NTFS format and fails)

Right-click the drive letter in raw format, select "attribute", and then select "security" to delete useless users and add them? Your username. You can change the permission. If there is no security option, you can choose directory option (Open "my computer"-select "tool" menu-then select "directory, remove the check box before "use simple file sharing" to right-click a disk in NTFS format and display the security options in the properties menu.

System permission Issue 2 (the original system is in NTFS format and fails)

Go to "Control Panel", find "Administrative Tools", open it, open "Local Security Policy", and open "Security Options, on the right side of the page, find "network sharing: Local Account Sharing and security mode", change "Guest only" to "classic", and exit and return to my computer, right-click the disk that is changed to raw and find the "Security" tag, remove the garbled characters, and then add the tag? Users of this computer can.

You need to format the D disk first, then install easyrecovery to drive C, and then restore the D disk in the format recovery mode.

 

I also met, even if you click to format it, it will be said that it cannot be completed, Baidu others also mentioned
1. Right-click My Computer Management
2. disk management under storage
3. Right-click to move the hard disk partition and delete the volume.
4. Create a simple volume again
5. Follow the steps to format the data.
This is what Hitachi's technical service department told me.

Use easyrecovery pro 6.04, select data recovery --- advanced recovery (select advanced options to customize data recovery );
2. Select a drive letter that has changed to raw format, and click the advanced option of feature;
3. In the file system scan, select NTFS for the file system, click Advanced scan, and select advanced options in the lower right corner to set the cluster size and data start position to 0;
4. Click partition settings and use the MFT method (this must not be an error). Then confirm;
5. Click Next to start scanning the file system, and then wait ~~~~~~, It takes longer time than timeout, so be patient. After that, an NTFS drive letter is found. Click the drive letter to start scanning;
6. After scanning, you will find all the files have been found. Then, click Restore and select an available disk to store the recovered files;
7. format the problematic disk ~~~ Copy the recovered file back ~~~~~~ OK. Everything is perfect.

Right-click the drive letter in raw format, select properties, and select Security. Delete useless users and add them? Change your username to the Administrator permission. If there is no security option, you can remove the check box before "use simple file sharing" in the directory option (open my computer, select the tool menu, and then select the directory option, you can right-click a raw disk, and the security options are displayed in the properties menu. Then you only need to format it. Be sure to choose high-speed formatting. The file system is the same as before the problem. It used to be fat/FAT32/NTFS, it is enough for high-speed formatting. If the data is really important, use finaldata to restore it.

Thrilling! Data Recovery after hard disk is raw

An ambiguous operation has suddenly lost many of my key data,
Hard work,
All are successfully restored.
Hey hey ~ The following is a summary of the experience and lessons learned:
Forced shutdown and boot discovered,
Originally, my three shards C/D/E and A Lenovo notebook used to restore the system's 1g hidden partition only left C and D,
Another is a blank partition with no drive letter allocated,
All the original file systems are NTFS,
Now, the e-disk and hidden partitions are converted into raw partitions with unassigned drive letters.
All my personal data, photos, videos, diaries, documents, and works are stored on an edisk,
How can I afford this?
I was so worried that I didn't even think about it. I allocated a drive letter e to this new partition.
Go back to my computer and double-click the drive,
In the displayed dialog box, a file system error occurs,
Format required!
Dizzy!
The formatting is complete.
Think about other methods,
Although I have several data recovery software on hand,
But I am afraid to use it. After all, it's all done when I lose my hand,
I can't afford it.
After asking several experts,
I used easyrecovery uncomfortably.
I didn't want to make such a big fuss,
It is certainly better to solve this problem simply,
Baidu gave me a try to solve the problem of converting partitions into raw format,
I found n methods,
Many of them are provided by idiots,
Therefore, do not be superstitious about the so-called experts on the Internet.
Of course, judging whether it is a master sometimes depends on eyesight,
However, eyesight is largely dependent on online immersion for many years.
I have this kind of eyesight. (Small narcissism)
The following solutions are available on the Internet:
1. If the drive letter is F, enter the CMD command prompt and run chkdsk F:/F
2. Control Panel-Administrative Tools-Local Security Policy-Security Options-network sharing Q: sharing and security modes of local accounts, change "guest-only local user-Guest Identity Authentication" to "classic-Local User Authentication ".
".
Right-click on the partition and select Properties, find the "Security" label, delete the garbled characters in the "Group or username:" list box, and add them? The local user can.
Tip: Right-click the partition and choose "security" from the displayed attribute dialog box. You can choose "directory"> "View" to cancel the check before "use simple file sharing (recommended.
3. Use easyrecovery and data recovery-advanced options to customize data recovery
Select a drive letter that has changed to raw format, and click the advanced option of feature;
In the file system scan, select "NTFS" for the file system, click Advanced scan, select "advanced options" in the lower right corner, set the cluster size and data start position to 0, and click "partition Settings, determined by MFT;
Click Next to start scanning the file system. It takes longer time and patience. After that, an NTFS drive letter is found. Click the drive letter to start scanning;
4. Use easyrecovery for raw recovery.
5. Enter the PE, use the disk Repair Tool, or partition tool such as PQ to change the partition, and then do not save it. Exit.
6. Use finaldata or easyrecovery to format and restore partitions at high speed.
7. Use other software to recover data. More than 10 types of data recovery software are introduced here. I will not elaborate on it.
The above method,
The first method is invalid.
The other method is invalid.
Third, if an error occurs, the drive must be fully scanned. Give up.
The fourth method is successful. However, the file name is renamed because all files are stored in different directories of different types. Some documents cannot be opened, and some images are damaged. I have many documents, but I do not know each one.
The channel name can only be opened one by one to know what it is. This is too troublesome. Finally, give up.
The fifth attempt is invalid.
Sixth, I did not dare to try it. Formatting is useless if it cannot be recovered. Be cautious.
In the seventh case, I downloaded 20 other recommended software. Either the token cannot be checked, or it is similar to the fourth type.
After so many attempts, I was desperate. It was three o'clock in the morning, and it seems that there was no perfect way to restore the data.
At this time, I suddenly remembered that I used to collect more than a dozen green software on d disk. Although I couldn't remember the name, I tried to use the idea of "dead horse as a live horse doctor, if it doesn't work, use the fourth method.
Haha, a miracle came along. I have two software in drive D, recovery4all and powerdatarecovery.
The previous one is the same as easyrecovery, And the execution is slower...
The other is a miracle,
On the main panel, select advanced recovery, select partitions, and click complete scan.
After about 12 minutes, a list is provided,
That is, the possibility of restoring each partition file,
The most likely is at the top, 99%,
And the partition size exactly matches.
So it is.
Then, select the recovery file storage folder,
The subsequent steps are sweet waiting.
After about two hours, all my files were recovered to D.
All the file names are correct, and the Directory levels are correct,
Including my QQ ghost records, some green software, indd/PSD/mid, more than photos, videos, DOC/PPT/XLS/docx/pptx/XLSX, all perfectly restored!
Haha. It's so nice.
The software I mentioned does not seem very famous,
Easyrecovery is recommended in various regions,
Instead of it.
But in my eyes, it is a first-class data recovery software!
Then I can see the moment when all my important documents are back to life,
I almost burst into tears!
I will not talk about the experience. Here is the lesson:
1. You cannot put your eggs in a basket! Remember to back up important documents!
2. Do not use the hard disk with your exclusive important documents as a software test site.
If you don't keep this, one day you will find that your information suddenly disappears, and you will never get back!

 

Reference 2:"

Method 1

I accidentally discovered a tool ptedit32.exe (Partition Table Editor) attached to Norton partitionmagic 8.0. I tried it casually. After opening it, I found the corresponding partition information and compared it with other partition information, we found that there was a very big difference. At this time, we could modify the information of the wrong partition against the information of other partitions (each hard disk partition had a different situation, so there was no standard number of partitions) to restore the operation, so you don't have to worry about it. It won't damage the data. After the changes are completed, you can save them!

Method 2:

CP ~ /. Bash_history ~ /Cmd_history: Back up the command you have run, and find out what command you have used in cmd_history.

"

I tried a few based on the above method, which won't help. If you want to use recovery to restore the file, you have also used this software. The overall effect is good, but some files still cannot be recovered. Therefore, before using it, the hard disk is mounted as a slave disk on another computer. As a result, the hard disk is displayed normally, indicating that the operating system is more likely to be faulty than the slave disk. Therefore, the system is reinstalled, and the result drive letter is displayed normally, and the data is completely restored!

The probability of such a situation on a USB flash disk is slightly higher. If such a situation occurs, the data in it is very important. You can use the above method to recover the data (of course, the method for reinstalling the system won't work ). If the data is not important and you only want to retrieve the disk space, you can use the "quantize" tool to recover or upgrade the disk firmware.

 

The disk price and data are priceless. Let's talk about "data recovery from the raw file system of the U disk". With the use of the U disk, various causes (incorrect operations, virus damage, etc) it causes a lot of irreparable data losses. We hope that you will use the USB flash drive as a temporary mobile storage and pay attention to data backup during use to reduce data loss.
Here I will talk about the repair of the raw file system on the U Disk:
The following is a disk error I experienced last summer:
Raw1

 

 

Some of my views:
The disk logical table (such as DBR, MBR, and fat table) is not damaged in many cases. Generally, the data area is not damaged or a small part is damaged, the vast majority of data still exists and can be recovered.

First, when a USB flash drive raw file system occurs, we first use winhex to back up the disk and place it in a safe place to prevent accidental recovery.
Note: In winhex, select tool-disk tool-clone disk for disk backup. In this way, the address and data of all blocks of the USB flash disk are backed up, it is about 4 times the original disk. Make sure that the target disk has sufficient space. In this case, you cannot use software similar to ghost that backs up data only. Due to disk errors, ghost cannot read or write to the disk.

The following are my personal solutions:
1. we recommend that you use winhex to open the disk to see which part of the error is. (because you are not familiar with the logical structure of the disk, we recommend that you compare it with a normal disk, we recommend that you use disks of the same brand capacity). If an error occurs in the previous section, you can directly copy the normal logical table for restoration.
Difficulty:★★★★★Strengths: it can be directly repaired and used directly after successful changes.
Disadvantage: it is difficult and requires relevant knowledge. Once an error occurs, this failure will occur.

2. easyrecovery professional is a powerful data recovery software developed by ontrack, if the above method is ineffective, you can use the "data recovery not based on the file system (data recovery-raw recovery)" section )". It can basically achieve the best data recovery. For detailed operation instructions, refer to relevant instructions. Here.
Difficulty:★★★☆☆Strengths: You can try it when other methods cannot recover data.
Disadvantage: The success rate is low. Even if the recovery is successful, the file may be damaged and must be used with the file repair tool. In addition, the entire file logic is lost, which is differentiated only based on the file type.

There is no very effective method for the USB flash drive raw file system. After several damages, the data recovery success rate is generally between 30% and ~ About 80%,

If you have critical data, go to the relevant data recovery center to obtain many other effective technical support.
We recommend that you back up data when using a USB flash drive.
==== Disk price, data priceless ====

 

Manual recovery in raw format !!
Recovery can be used in multiple forms. Not only in raw format, for example, what are the faults of a USB flash drive.

Use the USB flash drive as an example. Let's talk about the number of shards, And the BPB table will not be uploaded.

USB flash disk 64 m. Cluster size: 1 slice. FAT32 format. The number of fat sectors is 990. the reserved sector is 36. These can be obtained from DBR.

If you use winhex to open it, you cannot open it. The boot is ff. There is a word file in the USB flash drive. The file name is "data" and the content is in Chinese and English.

You must know the characters in the content or the file name before restoring the file. Use winhex to search for "data" results in

2016 slice is found. View

According to the FDT table, the file size is 5800 H, that is, 22 K, and the cluster number is 1 Dah, that is, 474 clusters. Calculate 36 + 990*2 + (474-2) = 2488 sectors. 22*1024/512 = 44 indicates that the file occupies 44 sectors. Starts from 2488 and ends with 2531. Jump to the 2488 sector and start marking, and end at 2531. Place a new file and save it. Then open the saved file in word, which is the original file.

From: http://hi.baidu.com/gzmh/blog/item/a08c870232b01e054bfb51c2.html

Hard raw format data recovery