4

After my hard drive was formatted by a mistake, I used a data rescue software to recover some files, but when I tried to open my notes and bookmarks files, it just showed weird characters like these below:

°F /ø£#◊≠'P0Í9†‡q@¸≈«4Xb˚p>îºú˙SFsNëû‘AœÚ•Èÿ–)GZWª†uıÙ§†s÷èL˛5ZXh3ëä\ü÷åzP3RäûÙßø˝zL€°•èJv) å±æÁ•¡#⁄Üá4oπHLqÕ�qû‘´–qMPø¬x˙“-R·BÓœÆ8§é2xÔ@…fié ÁÒ°;êºÅÄ›{bì±Ë}(:}M*Ò€ìFΩHQ∆Oq…†rFXbìû<ÒKÚ졉„44ZCW=z`”â˘∞�—ÅëOsDÖÀtèjC˙ä3Ëip’€ı4XaÄy∆(9¿›◊∑“ìé„4{P∆Õä0)=vi9¸©z)¥fñÄ2~¥Äu<˙PìÄtߢg#fl“û±∑¶Tså‘âMπ˘zäæ[!\à!Ú≥Ç ß¶Â‰GNΩ L±∞]∏≈J™FÔîF:”D9ï|¨G}W9©∂ùÿŒN3≈L±ê~ˆ·¥ï"≈∏üóÊ«ZmÍ"±@y« pi w< ≥Â19$ëÈÈOXà9q“ôõ®UÚ˛^I#ΓùÂÒ€Ò´B/CÕ8E«9&ïå›R¢√ú±Áß‚úS�Ç3VÑ8ˆˆßX�TåıŒ)§K™Pt¿Á—‰Ûª8≠~(ÚÌCBˆÊkFY@'ßJâÌÅ#flüL÷ÚZO≤Á®‰PëKc,@N7

2
  • 2
    You won't. Besides, this question might be more suitable for SU.
    – bot47
    Sep 13, 2013 at 6:31
  • Is this the entire file?
    – bot47
    Sep 13, 2013 at 10:53

2 Answers 2

3

Given a uniform distribution of bytes in your file, and analyzing the data for entropy, the file looks random. The entropy (for 1-tuples) is 7.61 Shannon. This is really near 8 Shannon, the redundancy in your data is insignificant und looks like random error. Of course your file is way too small for proper analysis, but it looks as if

  1. Your file was compressed before, which is unlikely if the file extension was txt and no (known to me) compression header is present.
  2. Your file was encrypted.
  3. You chose to secure erase the disk while formatting.

I think it's most likely the third option. No way to restore it.

1
  • Down vote without comment?
    – bot47
    May 6, 2014 at 21:34
1

Depending on the level of corruption, I have had varying success using the strings command, which might or might not reveal some of your previously entered data in text format. For example, if I were interested in human readable strings stored in the kernel binary, I would use it as follows :

$ strings /mach_kernel | head -5
"%s[KERNEL]: %s"@/SourceCache/xnu/xnu-2050.22.13/osfmk/default_pager/default_pager.c:175
alloc pager thread
"%s[KERNEL]: %s"@/SourceCache/xnu/xnu-2050.22.13/osfmk/default_pager/default_pager.c:179
alloc thread buffer
"%s[KERNEL]: %s"@/SourceCache/xnu/xnu-2050.22.13/osfmk/default_pager/default_pager.c:186

Other than that, you could try other recovery tools from different vendors (for example Disk Drill, or any other of the half a dozen that show up on a regular google search) to see if they remedy your situation by generating a more suitable/readable data recovery file from your formatting the hard drive.

Some of the tools I have used with success in the past (helping fellow poor souls out) include software from the YoDot or iSkySoft.

All of which probably use the exact same mechanism to recover "lost" files

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .