Winhex Data Recovery Notes (i)

Winhex data recovery is powerful and can be recovered from the hardware cluster on the sector of the data scan. First, the various functions of Winhex are introduced. After the instance is logged, a Word document is deleted and then recovered.

1, Winhex data Recovery software edit area input as with other normal text input, select a start byte press the A key to enter a, the contents of the edit area are in hexadecimal. Clicking in the address offset area will turn into 16 binary. In the edit area of the low byte in front, the high byte in the back, in the calculation of the time itself to calculate backwards. In addition, the display of the byte and character encoding area of the edit area is displayed synchronously. When you edit one, the corresponding other changes as well.

2, in the "Rebirth--windows Data Recovery Limit Analysis" a book describes the model number resolution method of hard disk.

3, open the drive's C drive, click the Sector Control section, you can directly enter the sector to view the sectors. The common hard disk DBR is located in 63 sectors, of course different operating systems differ.

4. Click on the directory boot select the DBR to jump to the partition

5, file snapshot is the key to Winhex data recovery, each refresh is equivalent to a new scan of the file system.

6, how to recover the document after deletion, as long as the document is not overwritten on the disk, the disk will be recorded. Now suppose that there is a Word document on the E disk, open Winhex can see the file, delete it, from the new open Winhex see the document directory disappears, but through the disk sector query, the content of the document exists, so the document can still be recovered.

7, determine the sector location of the selected block, or according to the word format to determine the beginning of the hexadecimal, determine the beginning and end of the data byte selection after the entire selection of blocks copied to a new data block, save format docx, open file discovery document was restored.

8. Open the document, due to the bytes of the data block populated with 0 values, Office prompts to recover the document, click OK after the document is automatically loaded to revert to the previous document content. Here again, document Recovery must refer to the document is not overwritten, if it is overwritten by Winhex is not recoverable, so accidentally deleted the document should not be formatted disk, the operation of the store file.

9, Winhex Data recovery is the most rare in the program and the = level operation of data recovery. That means you write the underlying program.

Winhex Data Recovery Notes (i)