Corrupt File

[Anonymous]

I have a problem. I can't open my ACADfile & there is message : "Drawing file is not valid."

This is happen when I do drawing but the power is off. I 'v tried using recover but unsuccess.

Help me please.

[Alfred.NESWADBA]

Hi,

if _RECOVER does not help then upload the drawing, let's see what others can with their skills and tools.

And make sure to copy your BAK-file as soon as possible, not that this will be overwritten from the defect DWG now, it's your latest backup.

- alfred -

[Anonymous]

Hi Alfred.

This is my file. Thanks alot for your helping

[Alfred.NESWADBA]

Hi,

sorry, if you look to the content within the files you can see that they are completely wiped out (like some tools do to kill erased information on harddisks permanently).

No way to get anything back from these 2 files.

Start your backup-system and restore the files form previous dates.

Sorry, - alfred -

[wispoxy]

@Anonymous The real Uni-FEC File Size is 344 bytes. I retrieved its binary level and it seems you over written it twice. Recovery chance is zero by using the file externally because the second time it shifted it lost its registered address (which is standard), but can be relinked with the associating computer directly. If I was actually behind your computer I could recover it even after formatting, deletion, and locking. No one outside of your computer can recover that file. What state are you in?

[Alfred.NESWADBA]

Hi,

That is the hex view of one of that files, so no chance to do anything magic with that zero's.

- alfred -

[Alfred.NESWADBA]

Hi,

@wispoxy

You edited your answer after my previous post, so that crosses all a bit.

To that statement:

>> If I was actually behind your computer I could recover it even after formatting, deletion, and locking.

But you can not recover it when it was wiped out.

...and the files we got show the same content as wiped out. Not any chance to get that file back as it was not erased, it was overwritten, so it was not repositioned in the sectors of the drive, it was handled at the same harddisk address as it was stored previously.

- alfred -

[wispoxy]

Data is still there on your computer until you shut down or restart your computer. Doesn't matter if you overwrite a file 50 times. Computer forensic units can recover what most people call unimaginable. Recovery time can very.

The best way to destroy data is to literally throw it into fire and wait for it to condense into ashes.

[drjohn]

>>>Data is still there on your computer until you shut down or restart your computer. Doesn't matter if you overwrite a file 50 times. Computer forensic units can recover what most people call unimaginable.<<<

Unless it is an SSD drive.

>>>The best way to destroy data is to literally throw it into fire and wait for it to condense into ashes.<<<

I find that a 10 pound sledge or a metal shredder does the job nicely.

Regards,

DJ

[wispoxy]

The second you plug in a USB Memory stick the Operating System's registry logs its address. Yes, usb devices have addresses. A forensics team will see when and what usb memory stick you used. Usually the FBI will check the computer's (i)registry immediately outside in a van after confiscating your computer during a raid.

[drjohn]

---

@Anonymous wrote:
The second you plug in a USB Memory stick the Operating System's registry logs its address. Yes, usb devices have addresses. A forensics team will see when and what usb memory stick you used. Usually the FBI will check the computer's (i)registry immediately outside in a van after confiscating your computer during a raid.

---

... right ...

[wispoxy]

Well done @Alfred.NESWADBA on the hex analysis.