Case:
The customer said that the U disk was used normally the day before yesterday, and some data were copied to the U disk.When I opened the U disk partition on the computer the next day, I found that all the data in the U disk are all garbled. It is strange that it should be a virus, but the computer has a molcotic software (some rare, new virus, anti -virus, antivirus, virusThe software is still not detected).Hope to restore all the information in the U disk.
Solution:
The engineer of the Data Recovery Center first detected that there was no hardware failure in the U disk, and then used a copy of Winhex cloning, and then using Winhex to analyze the underlying data on the copy. After detailed calculations, it was found that EBR and EBR backups were normal.It is also normal. Finally, I jumped to the root directory position and found that it was a bit abnormal. Take a closer look. The directory items shifted down 16 bytes.Combined with the FAT record, the root directory items are corrected.Use Winhex to resolve the FAT32 structure, and the directory shows normal.Safety exit the U disk, re -connect the U disk to the computer, the U disk partition is opened to display the file, and then the structure is normal.After the customer acceptance of the data is complete, the data is restored to complete.