• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Data recovery

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Beginners // Misc. Computer Questions

View previous topic :: View next topic  
Author Message
hishamkashan
Just Arrived
Just Arrived


Joined: 13 Mar 2005
Posts: 0


Offline

PostPosted: Sun May 15, 2005 2:33 am    Post subject: Data recovery Reply with quote

Hi everybody,
On the 13th of May I was writing a report about assignment, that I had done earlier, which i should have submitted at 12:00 on the same day. I shift deleted it (by mistake) fortunately my mate had it I just had to edit it.
HOW COULD I HAVE RECOVERED IT.
Your help is appreciated
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
webstuff
Just Arrived
Just Arrived


Joined: 10 Jul 2003
Posts: 0
Location: england yorkshire

Offline

PostPosted: Sun May 15, 2005 12:38 pm    Post subject: restoration Reply with quote

Hi There

There are quite a few file undelete utilities, restoration being one of them.

Restoration is an easy to use and straight forward tool to undelete files that were removed from the recycle bin or directly deleted from within Windows, and we were also able to recover photos from a Flash card that had been formatted. Upon start, you can scan for all files that may be recovered and also limit the results by entering a search term or extension. In addition, it also provides the option to wipe the found files beyond simple recovery. The program is small and standalone, it does not require installation and can also run from a Floppy disk. Restoration works with FAT and NTFS as well as digital cameras cards.

You can find it here. http://www.snapfiles.com/get/restoration.html

have fun
Back to top
View user's profile Send private message Visit poster's website
SideSwipe
Just Arrived
Just Arrived


Joined: 28 Oct 2004
Posts: 4
Location: Northen Ireland

Offline

PostPosted: Sun May 15, 2005 12:41 pm    Post subject: Reply with quote

well, if you did the delete in a word processing program, there is the undo button. if you are on a windows 95 or greater machine and you have the recycle bin turned on then you can recover it from there. if you are on a mac machine you can recover the file from the trash can too.

however if you have the recycle bin turned off, then it gets more complicated. to recover it then you would need a program like un-erase. the down side to this is that when you run it, it will give a list off all the deleted files it can find on the free space on your hard disk. so if you have a large hard disk with a lot of free space on it, then your list is going to be very large.
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
hishamkashan
Just Arrived
Just Arrived


Joined: 13 Mar 2005
Posts: 0


Offline

PostPosted: Mon May 16, 2005 12:40 am    Post subject: Reply with quote

Mr webstuff,
Thank you very much for your help. I downloaded the program, but it recovered the files that were in the recycle bin, my missing file was ( shift deleted ) it didn't go to the recycle bin. however, this program is really useful.

Mr RyanH001,
I'm trying to find the un-erase and I will inform you as soon I get any result.

What I like about this forum is that members are really helpful, thank you very much. Very Happy
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
ShaolinTiger
Forum Fanatic
Forum Fanatic


Joined: 18 Apr 2002
Posts: 16777215
Location: Kuala Lumpur, Malaysia

Offline

PostPosted: Mon May 16, 2005 6:04 am    Post subject: Reply with quote

I use Active UNDELETE, I find it pretty easy to use and reliable.
Back to top
View user's profile Send private message Visit poster's website
Siddhs
Just Arrived
Just Arrived


Joined: 04 Sep 2004
Posts: 0


Offline

PostPosted: Mon May 16, 2005 1:55 pm    Post subject: Reply with quote

Hellooo
I found this links for Unerase....

This
and this

Well, if thats not what you are looking for.... Sorry...

-Siddhs
Back to top
View user's profile Send private message
allservice
Trusted SF Member
Trusted SF Member


Joined: 24 Oct 2004
Posts: 5
Location: @your.service

Offline

PostPosted: Mon May 16, 2005 8:21 pm    Post subject: Reply with quote

You can recover a file only if is not overwritten specially first allocation unit (cluster). The O.S. mentains a pointer of recently erased space and usualy won't write there but to next clusters and so on. This is not generally valable but for the current work session. If you reboot the machine the system will write from the first available allocation unit and if this is happen to be your erased file's clusters then you will not be able to recover.
That's why the first condition is to not reboot the PC imediatelly after you accidentally delete a file - and you want to recover as well. Of course it is a difference between FAT and NTFS system and of course if your deleted files are located on the system partition or not.
A good professional tool for this kind of job is Stellar Phoenix Fat NTFS Tool http://www.stellarinfo.com
Back to top
View user's profile Send private message Visit poster's website
hishamkashan
Just Arrived
Just Arrived


Joined: 13 Mar 2005
Posts: 0


Offline

PostPosted: Tue May 17, 2005 1:20 am    Post subject: Reply with quote

ShaolinTiger wrote:
I use Active UNDELETE, I find it pretty easy to use and reliable.

How????
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
hishamkashan
Just Arrived
Just Arrived


Joined: 13 Mar 2005
Posts: 0


Offline

PostPosted: Sat May 21, 2005 4:50 am    Post subject: Reply with quote

Thank you everybody, I got really kind helps especially those with analysis which help me to understand the problem and others to increase their knowledge.
thanx again
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
Ex0dus
Just Arrived
Just Arrived


Joined: 18 Nov 2005
Posts: 0
Location: Down Under

Offline

PostPosted: Tue Dec 06, 2005 9:32 am    Post subject: Reply with quote

i agree totally on active undelete. works fantasticly

accidenly formated my whole storage drive, through my own stupidity though it was at 4am Embarassed . but still managed to recover almost everything. only things that couldn't were some large video files (in excess of 200mb)
Back to top
View user's profile Send private message
comrade
Just Arrived
Just Arrived


Joined: 15 Feb 2005
Posts: 0


Offline

PostPosted: Tue Dec 06, 2005 9:50 am    Post subject: Reply with quote

Not directly answering the question but this is what I do:

When writing assignments use a remote svn repo.

Accidental delete? Who cares, checkout the file again.

Wrote absolute crap for the last 30 minutes? Who cares, revert it.

Can't remember what changes you made last? Check the diff.

HD crash? It's still there, in the remote repo.

Repo explodes? It's still there, in the local copy.

Get acess to your work from anywhere? No prob, repo has a http frontend. (With authentication naturally)


Version control isn't just for code!
Back to top
View user's profile Send private message
hishamkashan
Just Arrived
Just Arrived


Joined: 13 Mar 2005
Posts: 0


Offline

PostPosted: Tue Dec 06, 2005 9:54 am    Post subject: Reply with quote

comrade wrote:
Not directly answering the question but this is what I do:

When writing assignments use a remote svn repo.

Accidental delete? Who cares, checkout the file again.

Wrote absolute cr@p for the last 30 minutes? Who cares, revert it.

Can't remember what changes you made last? Check the diff.

HD crash? It's still there, in the remote repo.

Repo explodes? It's still there, in the local copy.

Get acess to your work from anywhere? No prob, repo has a http frontend. (With authentication naturally)


Version control isn't just for code!

Thank you very mcuh for your help , but what remote svn repo is ? and where would I find it?
Thanks
Back to top
View user's profile Send private message Yahoo Messenger MSN Messenger
comrade
Just Arrived
Just Arrived


Joined: 15 Feb 2005
Posts: 0


Offline

PostPosted: Tue Dec 06, 2005 3:38 pm    Post subject: Reply with quote

Oh.

Well svn is a version control system.
What that means is its a way of tracking changes to files.

It generally works like this:

You "add" a file to the repo at which time it gets uploaded to a remote server.

Every now and again you "commit" the file your working on, that effectively copies the new file to the server.

The end result of this is that you can at any time have any revision of your file available to you, and its stored remotely.

Think of it as a mirror of the file your working on, but with the option to go back to a older copy of the file.

Such systems are used extensively in software development, *especially* in projects involving more then one person.

This wikipedia article probably explains it properly:
http://en.wikipedia.org/wiki/Version_control_system

(You can run svn/cvs..etc without a remote server, but then you lose the offsite backup part of things :)
Back to top
View user's profile Send private message
adampembs
Just Arrived
Just Arrived


Joined: 10 Nov 2009
Posts: 0
Location: Pembrokeshire, Wales

Offline

PostPosted: Sat Jan 29, 2011 12:08 pm    Post subject: Reply with quote

When you delete a file, the data is still there on the drive, but has been flagged as empty space (or sectors) and can be overwritten.

Most of these undelete programmes have to be installed first before they can recover anything. Unfortunately, when you install new software, you write over empty space on the hard drive. This space may include the sectors occupied by the deleted file, so you might lose the data. Also, the data could be written over by temporary files, the windows swap file, hibernation file, registry files, and system restore files.

Forensics specialists would use special techniques to get the data back. This can include inspecting RAM to see if data remains in active memory. They would then turn off the machine and make an exact copy (image) of the drive and inspect it from another machine using specialised tools that don't write to the target hard drive. You could employ a specialist company to get this back, but I doubt you would justify the budget of $1000s that they would charge.

lol - just read the date this question was asked - 2005! I think he may have given up by now!
Back to top
View user's profile Send private message Visit poster's website
Allnsmth
Just Arrived
Just Arrived


Joined: 15 Feb 2011
Posts: 0


Offline

PostPosted: Wed Feb 16, 2011 1:02 pm    Post subject: Reply with quote

Hi,
If you are lucky, a file recovery may still be possible by using the Windows search function, searching for the file by name, and then renaming it.
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Beginners // Misc. Computer Questions All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register