Recover 7z Archive (Password Protected)

Ajexpert
2013-12-01
2013-12-19
<< < 1 2 (Page 2 of 2)
  • Ajexpert

    Ajexpert - 2013-12-17

    Hi Igor,

    Thank you very much for detailed steps.

    Please let me know if you need additional details apart from below:

    I have attached the file as well.
    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

    0000000000: 37 7A BC AF 27 1C 00 03 │ CA 5F 7A E7 00 DE 7E E1 7z¼¯'∟ ♥Ê_zç Þ~á
    0000000010: 01 00 00 00 3A 00 00 00 │ 00 00 00 00 45 6D 49 B5 ☺ : EmIµ
    0000000020: 44 3C CD 1E 67 66 2D E9 │ CC 5C 71 BE BE F3 F4 10 D<Í▲gf-éÌ\q¾¾óô►
    0000000030: C6 4A 27 27 92 36 A3 DB │ 60 69 D8 D6 25 2B 17 15 ÆJ''’6£ÛiØÖ%+↨§ 0000000040: 01 9E F0 64 26 D0 57 8C │ 2F DF C0 7F 0B 15 E5 3B ☺žðd&ÐWŒ/ßÀ⌂♂§å; 0000000050: D1 96 3C 8D F9 44 6F C6 │ 8B D5 FC BE 1A 47 31 E7 Ñ–<ùDoÆ‹Õü¾→G1ç 0000000060: 82 71 91 87 62 2B 0B D2 │ 21 A3 C9 9A 97 68 86 B6 ‚q‘‡b+♂Ò!£Éš—h†¶ 0000000070: 70 2B 30 5B B6 D2 77 C6 │ 15 50 95 19 0E EC BA E8 p+0[¶ÒwƧP•↓♫ìºè 0000000080: 83 20 1A 73 26 5A AB 8E │ 79 76 C8 47 91 AD 4E 35 ƒ →s&Z«ŽyvÈG‘­N5 0000000090: 4D 38 7F F5 31 37 2C 9C │ 31 73 1F BA 69 35 08 66 M8⌂õ17,œ1s▼ºi5◘f 00000000A0: B8 AC E0 9F FA A0 81 F2 │ 72 7D 60 83 DC A8 B1 0D ¸¬àŸú òr}ƒÜ¨±♪
    00000000B0: FB C0 72 72 F2 30 DB 13 │ E0 02 4F A3 44 9F B2 92 ûÀrrò0Û‼à☻O£DŸ²’
    00000000C0: 05 0D 37 B7 5B 6E 10 2E │ 93 60 D5 16 7E 3A 42 B0 ♣♪7·[n►.“Õ▬~:B° 00000000D0: 0F 13 27 2D 0A A8 1F 3F │ E4 84 85 AE 66 49 93 B4 ☼‼'-◙¨▼?ä„…®fI“´ 00000000E0: 22 F2 D9 93 95 53 2A 61 │ 52 BE 7D DE BB 5D 8D 51 "òÙ“•S*aR¾}Þ»]Q 00000000F0: E0 C2 18 DB 85 FA 27 B3 │ 16 2F 7E 0C 9A A6 74 B1 àÂ↑Û…ú'³▬/~♀š¦t± 0000000100: C3 46 3D 08 50 64 34 A1 │ 3B E5 0B D7 1C 12 AE E0 ÃF=◘Pd4¡;å♂×∟↕®à 0000000110: 5C 64 B9 65 FA FC FC C5 │ 18 19 4F 2A 30 48 EA 0C \d¹eúüüÅ↑↓O*0Hê♀ 0000000120: 45 48 DB 89 75 5E 22 97 │ AC 5B 6E 26 2F BF E3 01 EHÛ‰u^"—¬[n&/¿ã☺ 0000000130: 92 A1 D7 2F 0B 14 84 9C │ F7 68 B7 92 5D B7 D8 D8 ’¡×/♂¶„œ÷h·’]·ØØ 0000000140: B4 78 3C B0 F2 CA D1 3E │ 2C C5 7B 39 85 12 9A C2 ´x<°òÊÑ>,Å{9…↕šÂ 0000000150: 99 AE 57 DC 0A B2 DE 5E │ 6C BF C7 E5 15 E3 5B AF ™®WÜ◙²Þ^l¿Çå§ã[¯ 0000000160: FA C6 53 A1 2D BA E5 88 │ 03 B9 7E 78 6F 2D 13 05 úÆS¡-ºåˆ♥¹~xo-‼♣ 0000000170: 64 60 4F 18 09 FC D9 54 │ 80 F4 B3 F1 11 96 79 4D dO↑○üÙT€ô³ñ◄–yM
    0000000180: 9B C0 D2 EF 5E 1F D6 F4 │ 19 5C 41 CA 01 C8 32 31 ›ÀÒï^▼Öô↓\AÊ☺È21
    0000000190: 68 65 73 F2 F0 96 C0 B5 │ 54 DF 63 F2 EE FC F9 A2 hesòð–ÀµTßcòîüù¢
    00000001A0: 8C 4D 8F 8B 0A 3E 12 07 │ C2 FC CD E7 2E 1B BD A0 ŒM‹◙>↕•ÂüÍç.←½ 
    00000001B0: 0E 73 EE 86 1F 4E 9B 58 │ 27 3D ED 53 18 8F 54 BE ♫sî†▼N›X'=íS↑T¾
    00000001C0: 87 CA FA 3E 47 05 35 99 │ 98 7D 72 63 B4 46 AE 37 ‡Êú>G♣5™˜}rc´F®7
    00000001D0: 13 50 FB 6E 4C 4B 89 93 │ E2 3D 51 20 E9 C1 47 BC ‼PûnLK‰“â=Q éÁG¼
    00000001E0: 22 D6 84 CE 6B 4A 71 CC │ 17 F2 A4 A6 1D 5A 4C DB "Ö„ÎkJqÌ↨ò¤¦↔ZLÛ
    00000001F0: 79 A6 D7 F2 46 9E 53 D8 │ DB 6A A6 AE 2D 3C C2 FB y¦×òFžSØÛj¦®-<Âû
    0000000200: 7A 48 C3 41 91 95 2E 86 │ 7A 7B 17 17 8E 2A E7 51 zHÃA‘•.†z{↨↨Ž*çQ
    1 2 3 4 5 6 7Prev

     
    Last edit: Ajexpert 2013-12-17
  • Igor Pavlov

    Igor Pavlov - 2013-12-17

    attach also file with last bytes at the end of archive.

     
  • Ajexpert

    Ajexpert - 2013-12-17

    Hi Igor, my file is very huge, so please let me know if there is any way to extract the last bytes of archive.

    Thanks as always for your help Igor!

     
    Last edit: Ajexpert 2013-12-17
    • Shell

      Shell - 2013-12-18

      Press End while in hex view, and you will instantly go to the end of the file. You can find more hotkeys supported by Far by pressing F1.

       
  • Ajexpert

    Ajexpert - 2013-12-18

    Thank you so much Shell.

    Here is what I could see.

    +++++++++++++++++++++++++++++++++++++++++++++++++++++++++

    01E17EDC40: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDC50: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDC60: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDC70: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDC80: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDC90: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDCA0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDCB0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDCC0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDCD0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDCE0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDCF0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD00: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD10: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD20: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD30: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD40: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD50: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD60: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD70: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD80: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDD90: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDDA0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDDB0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDDC0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDDD0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDDE0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDDF0: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDE00: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDE10: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDE20: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDE30: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDE40: 00 00 00 00 00 00 00 00 │ 00 00 00 00 00 00 00 00
    01E17EDE50: 00 00 00 00 00 00 00 00 │ 00 00

     
  • Igor Pavlov

    Igor Pavlov - 2013-12-18

    So do you have zeros starting from 1300 MB to the end of archive?
    If so, it's pretty difficult to recover even data from start of archive (first 1300 MB).

     
  • Ajexpert

    Ajexpert - 2013-12-18

    Hi Igor,

    I see all zeros from 16% of the file, does this mean I won't be able to recover anything?

    Thanks!

     
  • Igor Pavlov

    Igor Pavlov - 2013-12-18

    There is some probability to recover these 16%, but it's not simple too.
    If that archive was encrypted, the recovering can require hours of work for sofware programmer. Also it can require investments to create cluster of computers (maybe 10000-100000 of USDs) to recover some data.
    There is some probability that some part of these 16% can be recovered simpler (without additional hardware). But it also requires some work.

     
    Last edit: Igor Pavlov 2013-12-18
  • Ajexpert

    Ajexpert - 2013-12-18

    Thanks a lot Igor and Shell for all your help!

    Really appreciate it.

     
  • Aytek Ustundag

    Aytek Ustundag - 2013-12-19

    Hi guys, I wanted to inform you about status of my problem. I recovered the password after 6 days of automatic trying the type of passwords I use using multicore CPU & GPU. (Thank god I am a developer)

    Firstly I thought that it was a bug in 7z because archive programs such as winrar gave me error messages like "corrupt archive?". So I thought there was a bug in 7z format. I still think this is an issue you should fix. 7z should give more specific error message.

    It was complete stupitidy of me to forget the password. Thank you for your support and responses.

     
<< < 1 2 (Page 2 of 2)

Log in to post a comment.

Get latest updates about Open Source Projects, Conferences and News.

Sign up for the SourceForge newsletter:





No, thanks