Category Archives: file recovery

File system corruption and USBC folder and files..

This is a quick write up after some initial research into occurrence of sectors that start with the string USBC or 0x55534243. These are common cause for data loss and can be hard to recover from. I think I see why data recovery software is often unsuccessful as these sectors appear to be ‘inserted’ causing… Read More »

USB Stick kapot – Gegevens redden

Ze zijn zo handig maar ook zo kwetsbaar, USB sticks. Om gegevens uit wisselen, de delen, op te sturen. Om je gegevens altijd bij je te hebben ongeacht op welke PC je werkt. Maar zoals gezegd ook kwetsbaar! Kwetsbaarheid USB Sticks USB Sticks zijn kwetsbaar juist als je ze veel gebruikt (maar het tegenovergestelde is… Read More »

WD MyBook Live drives wiped – Data Recovery

Earlier this week ‘rumors‘ started spreading about WD MyBook Live NAS devices were remotely instructed to return to factory settings. Well, this is no longer a rumor, it is happening. I write this blogpost as I learn new stuff about this issue so nothing of this is written in stone and I will update and… Read More »

Corrupt 7-Zip (7z) archive, a lucky break ..

I was looking through a 7-Zip file in an attempt to repair it using HxD. The archive was created by ZArchiver, an Android backup app. Once the backup was created the phone was reset. Repairing a corrupt 7z file. The maker of 7-Zip has some hints on repairing a corrupt .7z file. Header of the… Read More »

Recover lost or deleted Bitcoin Wallet.dat using R-Studio

While this blog post covers my initial ‘research’, intention of this blog is to give an easier to digest guide into recovering or undeleting a Bitcoin wallet.dat file. Note that if you delete files or lose files due to formatting on a SSD, they are beyond DIY Recovery!! In that case you increase chances of… Read More »

Can data be recovered from an erased or zero filled drive?

Overwriting Hard Drive Data: The Great Wiping Controversy Okay, this is another one that annoys me: The claim, the myth that certain three letter agencies can recover data from erased or zero filled hard drives. The claim that those can magically ‘read’ and reconstruct data from ‘latent magnetic residue’ (I am not making this up,… Read More »

JpegDigger’s JPEG repair feature explained

JpegDigger features a JPEG repair option. What is this and what can it do? Repair will not per se result in a perfect image. It can however repair JPEGs to a degree where they can be opened and viewed, including their flaws. JPEG structure Let’s first look at how a JPEG file is organized internally.… Read More »

RAW file recovery and duplicates

Recovery is resulting in duplicate photos One of the drawbacks of ‘raw recovery’ is that generally files are recovered with auto generated meaningless filenames. To conclusively identify files you have to open them although initial culling can be done by sorting by size, or with help of a tool that can sort files by creation date,… Read More »

Some thoughts on signature based file recovery

But first, file system based recovery I am A ‘Windows person’ and deal with data recovery on file systems that were for the most part designed by Microsoft. As a consequence I can predict with reasonable certainty the chances of successful data recovery after you formatted your NTFS drive. Because I understand what such a… Read More »

Physically broken SD Card – Data Recovery

Seems that many articles about ‘broken SD cards’ refer to software solutions. If a SD card is truly physically broken no software will be able to help. Suggestions to format the card, use DiskPart, run chkdsk are just bullshit (pardon my French). Broken SD Card Micro SD cards If we talk about the standard form… Read More »