[Ledabsolute]

Hi ,

Yesterday one my friend asked me if I could help.
brought his computer to the store and asked him to remove all the unnecessary things, but unfortunately those of the shop have also deleted important documents and photos.

And is possible to recover the data? I think that it is not simple, but that something can be done.

With what software?
Which one is best for forensic work?

Thank you !

Regards

[Xycon]

its actualy fairly easy

just deleted, files = flagged as not there, so the space is open again to be used, file itself actualy still there aslong its not overwritten by new data

and even if tis overwritten its sometimes still possible to restore , or parts of the file
there are tons of software that can do this

personaly i like
http://www.wondershare.com/data-recovery/

as it not only scans for files and randomly lists them as file00001 file00002 ect(like most software does), but it actualy shows the full path of where the file was like c:\users\admin\documents\images
making its very easy to get the right file, between the masses

[Ledabsolute]

Thanks man for the reply !

Yeah i know , but can be better with something like LIVE DISTRO ?
Before the start of the o.s ..

Like , put the USB with distro for that and go to recover ..

There is something like that ?

If yes u can suggest me the better ?

Thanks !

Regards

[archangel.dmitry]

Recuva is a free utility for Windows that allows recovering of deleted information. It should work just fine for you.

[Xycon]

Thanks man for the reply !

Yeah i know , but can be better with something like LIVE DISTRO ?
Before the start of the o.s ..

Like , put the USB with distro for that and go to recover ..

There is something like that ?

If yes u can suggest me the better ?

Thanks !

Regards

look into hirens boot cd for that, might be a little hard to obtain though

[Ledabsolute]

look into hirens boot cd for that, might be a little hard to obtain though

Thanks for the help man !

I have tried with live USB and some tools , is better than install the software direct in the HDD with data lost.

Some files are back , and some no..

But not too bad results ..

Thanks !

Have a nice day !

Regards