Question

Locked

HEX info for docx files

By JordanBryc ·
Tags: Windows, Software
My brother has a external drive full of docx documents that are corrupted. According to him, his office got hit by a trojan. I've tried 5 of the recovery programs online. None of them have worked. I was chatting with a support tech for one of the programs and he said the document header was corrupted. After a little more research I downloaded HxD and opened the file to view the hex. Can someone tell me what I should be looking for to fix the document header so I can open them? Unfortunately he does not have a backup for these files and they are pretty much every case he's ever worked on. Any help would be greatly appreciated.

This conversation is currently closed to new comments.

4 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Answers

Collapse -

If the files are RSA

by josephcols81 In reply to HEX info for docx files

If the files are RSA encrypted likely its symmetric key is protected by the RSA private keys but understand that it may also be hardcoded..The key is saved on a remote server, This key is required to get all keys used to encrypt individual files. In other words, each key is different and there is no way you can break this....

.wondering if it is embedded within the encrypted doc. can be tougher to reverse engineer when there is no real hint from here. Not sure if below tools can give any hints - but we already down to nothing to lose ...

Also look here: http://www.filerepairforum.com/forum/microsoft/microsoft-aa/word/919-office-documents-randomly-corrupting-possible-malware-issue

Or:

Word Repair Kit

An advanced Microsoft Word repair tool from Repair Kit that has been designed from ground up to match the skills and needs of the most inexperienced users looking to find out how to repair Word document data on their own. The program offers a sleek interface and full support of all Word document formats.

For more information: http://www.word.repair/

Collapse -

RSA

by josephcols81 In reply to HEX info for docx files

If the files are RSA encrypted likely its symmetric key is protected by the RSA private keys but understand that it may also be hardcoded..The key is saved on a remote server, This key is required to get all keys used to encrypt individual files. In other words, each key is different and there is no way you can break this....

.wondering if it is embedded within the encrypted doc. can be tougher to reverse engineer when there is no real hint from here. Not sure if below tools can give any hints - but we already down to nothing to lose ...

Also look here: http://www.filerepairforum.com/forum/microsoft/microsoft-aa/word/919-office-documents-randomly-corrupting-possible-malware-issue

Or:

Word Repair Kit
An advanced Microsoft Word repair tool from Repair Kit that has been designed from ground up to match the skills and needs of the most inexperienced users looking to find out how to repair Word document data on their own. The program offers a sleek interface and full support of all Word document formats.

For more information: http://www.word.repair/

Collapse -

Try Word file Recovery

by Timothyc.Ott In reply to HEX info for docx files

Word file recovery software is an advance software utility, embedded with a strong algorithm which can recover your data from corrupt or inaccessible Word document file that has been created in the version of Microsoft Word 2013, 2010, 2007, 2003, 2002 (XP), 2000, 97 & 95. Word file recovery software easily restore the original repaired or recovered Microsoft Word (.doc, .docx) files data without losing their original text, font, hyperlinks, headers/footers, images, charts, etc.

See more details:- http://www.recoverydeletedfiles.com/word-file-recovery-tool.html

Back to Windows Forum
4 total posts (Page 1 of 1)  

Related Discussions

Related Forums