My customer got a case for me. The case is about a data leakage by a resigned employee. He deleete every useful and important documents. When recovery was done, the documents are recovered. But when I opened the recovered document, i was shown a message saying that the document is corrupted.
is there any way or tool to repair the document? I use wordrepair.exe to repair but i can recover the images…
I expect the problem is that the disk was fragmented.
Was the disk FAT or NTFS. Normally for NTFS, the fragmentation details are retained in the MFT and so recovery is OK. For FAT, the FAT entries are deleted, and so recovery assumes a sequential file. The other problem with FAT32 is that the high 16 bits of the file cluster pointer is deleted, and many recovery programs do not allow for that.
In the first instance you need to concentrate of better data recovery rather than file repair. It may be necessary to manually search the disk for each cluster of the file you want to recover.
If you post details of the original disk, and your recovery process, I may be able advise a bit more.
I have this feeling that the file was corrupted uring recovery. The recovery was done by some 3rd party recovery tool, pandora( if i guessed it correctly).
My experience is that if I use encase of FTK, chances of getting a proper file is higher. Hence,I do agree with you on the better recovery is better than repair. I tried many repair and I give up. I even try to crack the words document, as the customers suspect they are password protected. But it turn out that the file are not properly recovered rather than password protected.
I expect the problem is that the disk was fragmented.
Was the disk FAT or NTFS. Normally for NTFS, the fragmentation details are retained in the MFT and so recovery is OK. For FAT, the FAT entries are deleted, and so recovery assumes a sequential file. The other problem with FAT32 is that the high 16 bits of the file cluster pointer is deleted, and many recovery programs do not allow for that.
In the first instance you need to concentrate of better data recovery rather than file repair. It may be necessary to manually search the disk for each cluster of the file you want to recover.
If you post details of the original disk, and your recovery process, I may be able advise a bit more.
What was ths disk format?
Do you still have the corrupted disk?