[SOLVED] TXT file corrupted or probably encrypted

[Robert1559]

Before I make a full reset on my Windows hard drive (C), I did a backup of all my important files to my second Hard Drive (D) and then, I executed the "chkdsk D: /r" command on CMD just because sometimes my Hard Drive (D) was having some kind of failures but I needed to do it. In the end, I reset it.

Finishing the Windows setup after the full reset, I opened my .txt and just one of them got corrupted or probably encrypted, they have a bunch of weird characters. No other .txt I have backed up don't have this problem, that's the only .txt file that happened it.

https://prnt.sc/moas0jwOqo3s

(text file preview)
It's pretty sure that the "chkdsk D: /r" command corrupted it and it's crazy that just one text file got corrupted and the others didn't.

https://prnt.sc/MWzwlpqcAuYt
P.S.: 52.6 KB is the original size of the .txt file, even before it corrupted.

https://prnt.sc/mJvbf6w1Ahhj
Even the document text owner name have changed to "S-1-5-21-3497...." and it's not my username anymore.


Any solution for this type of problem?!

 

[rgd1101]

restore from another backup

chkdsk doesn't corrupted data, they try to fix disk issue.
should have another storeage/backup if you know disk D is failing

the "S-1-5-21-3497...." mean it from a different account.

 

[Alabalcho]

Even the document text owner name have changed to "S-1-5-21-3497...." and it's not my username anymore.

This is expected. When you reset your PC, a new user was created, with different SID (even if the "visible" username is the same). What you see is the SID of the user who created this file (in the old life of your PC). Just take ownership of the folder.

As for data corruption - you should have copied your files with verify option (simple copy-paste does not do that, but there are utilities that do, even built-in RoboCopy). What has happened (most probably) is that your file got corrupted before you executed chkdsk. And chkdsk by itself only checks that the file system is OK, it does not check that your file is OK (because it does not know what "OK" is).

 

[johnbl]

the entire sid was not shown so
look at the list of well know sids and pattern match to see who made the change
https://support.microsoft.com/en-us/topic/0fdcaf87-ee5e-8929-e54c-65e04235a634
more on decoding sid

https://docs.microsoft.com/en-us/op.../ms-dtyp/81d92bba-d22b-4a8c-908a-554ab29148ab

looks like it is the administrator sid
(need to see the rest of it to be sure)

S-1-5-21domain-500

Administrator

A user account for the system administrator. By default, it is the only user account that is given full control over the system.