Deleted
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
-
recuperation
- Posts: 3026
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Chrome bookmarks lost
If the disk in question is a system disk you should not boot your operating system from there. If it is an SSD running a modern operating system, the missing data will most likely not be accessible anymore.
A quick google search suggests that those bookmarks are in JSON format. This is a supported format in Photorec.
The problem is that the last write operation caused your bookmarks-file to shorten. What might be left on a HDD (not SSD) are remains of your file that do not start with a file signature.
As windows operating systems might destroy evidence, duplicating your disk using ddrescue as described in the manual is a good idea.
Try out what Photorec gives.
If that fails, you might have to extract the remains of your file manually by searching keywords that only you know.
Use a tool such as HxD which can operate on disk level.
Be specific in selecting keywords or parts of them to reduce the number of sectors found.
When being not specific enough you get too many hits.
JSON is not a binary format. It is readable:
https://www.w3schools.com/js/js_json_syntax.asp
Good luck.
A quick google search suggests that those bookmarks are in JSON format. This is a supported format in Photorec.
The problem is that the last write operation caused your bookmarks-file to shorten. What might be left on a HDD (not SSD) are remains of your file that do not start with a file signature.
As windows operating systems might destroy evidence, duplicating your disk using ddrescue as described in the manual is a good idea.
Try out what Photorec gives.
If that fails, you might have to extract the remains of your file manually by searching keywords that only you know.
Use a tool such as HxD which can operate on disk level.
Be specific in selecting keywords or parts of them to reduce the number of sectors found.
When being not specific enough you get too many hits.
JSON is not a binary format. It is readable:
https://www.w3schools.com/js/js_json_syntax.asp
Good luck.
-
recuperation
- Posts: 3026
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Chrome bookmarks lost
Photorec requires seeing a decrypted disk/or volume.
-
recuperation
- Posts: 3026
- Joined: 04 Jan 2019, 09:48
- Location: Hannover, Deutschland (Germany, Allemagne)
Re: Chrome bookmarks lost
You can't.
Please contact a professional recovery lab.
Please contact a professional recovery lab.