• RSS
  • Twitter
  • FaceBook

Security Forums

Log in

FAQ | Search | Usergroups | Profile | Register | RSS | Posting Guidelines | Recent Posts

Recover data from USB flash from deleted, formated partition

Users browsing this topic:0 Security Fans, 0 Stealth Security Fans
Registered Security Fans: None
Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Windows

View previous topic :: View next topic  
Author Message
wise_guy2002n
Just Arrived
Just Arrived


Joined: 14 Sep 2006
Posts: 0


Offline

PostPosted: Sat Aug 18, 2007 11:40 am    Post subject: Recover data from USB flash from deleted, formated partition Reply with quote

HI to all

Is there anyway to recover data from USB flash from deleted, formated partition.

Thanks
Back to top
View user's profile Send private message Send e-mail
SD
Just Arrived
Just Arrived


Joined: 06 Aug 2007
Posts: 0
Location: London - UK

Offline

PostPosted: Mon Aug 20, 2007 9:39 am    Post subject: Reply with quote

unfortunatley i dont think thats possible!
Back to top
View user's profile Send private message Visit poster's website MSN Messenger
ctrlaltphreak
Just Arrived
Just Arrived


Joined: 27 Jul 2007
Posts: 0


Offline

PostPosted: Mon Aug 20, 2007 12:51 pm    Post subject: Reply with quote

Your only real option is paying a data recorvery firm to have a go for you but that could be expensive.
Back to top
View user's profile Send private message
capi
SF Senior Mod
SF Senior Mod


Joined: 21 Sep 2003
Posts: 16777097
Location: Portugal

Offline

PostPosted: Mon Aug 20, 2007 2:46 pm    Post subject: Reply with quote

It is quite possible to recover data from a deleted (and even formatted) partition.

Deleting a partition only changes an entry in the device's partition table (which is an area located at the logical beginning of the device, inside the Master Boot Record). Formatting a partition depends on the filesystem used, but typically (e.g. in the case of FAT) it will only erase control metadata, not the actual file data.

Do not write new data into the drive, so as not to overwrite existing data. As I said, formatting only erases control metadata and marks previously occupied sectors as being free; think of it as writing "Empty" on a video cassette's label - that's just marking it so you can tape over later, it doesn't actually erase what's inside the tape.

What was the detailed sequence of events here? You had a partition with some data on it, then deleted it, created a new one, and subsequently formatted that new partition? Is the new partition the same size as the original one?

TestDisk is a very good partition recovery software, which is free both in terms of price and of freedom of knowledge. This would help you if you had to find and recover a deleted partition. If it was formatted, though, then the filesystem itself isn't very useful to you, you'll need to access the data sectors. For this, The Sleuth Kit should be quite helpful; it is a collection of forensics tools that allow you, among other things, to look at previously existing data in a partition, find and recover deleted files, and so on.


Last edited by capi on Fri Dec 18, 2009 2:28 pm; edited 1 time in total
Back to top
View user's profile Send private message
osama_b
Just Arrived
Just Arrived


Joined: 13 Mar 2007
Posts: 0


Offline

PostPosted: Mon Aug 20, 2007 3:13 pm    Post subject: Reply with quote

This is software recover deleted files in hard disk and USB

Recover My Files

Link : http://www.softpedia.com/get/System/Back-Up-and-Recovery/Recover-My-Files.shtml
Back to top
View user's profile Send private message
Display posts from previous:   

Post new topic   Reply to topic   Printer-friendly version    Networking/Security Forums Index -> Windows All times are GMT + 2 Hours
Page 1 of 1


 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum

Community Area

Log in | Register