Recover Formatted Data

  • Thread starter Thread starter Trey Hunner
  • Start date Start date
T

Trey Hunner

Does anyone know of any software that can recorver large quantities of
data from a formatted drive. I have drive Restoration but it only does
one file at a time.
 
Trey said:
Does anyone know of any software that can recorver large quantities of
data from a formatted drive. I have drive Restoration but it only does
one file at a time.
Click to expand...

My message seems to have been skipped, possibly because it didn't have a
question mark at the end or there is no good freeware to accomplish this
goal. If anyone knows of _anything_ that could help it would be
*greatly* appreciated. ;)
 
Trey said:
My message seems to have been skipped, possibly because it didn't have a
question mark at the end or there is no good freeware to accomplish this
goal. If anyone knows of _anything_ that could help it would be
*greatly* appreciated. ;)
Click to expand...

What OS version/file system are you using? That's important to mention.
 
What OS version/file system are you using? That's important to mention.
Click to expand...

As John pointed out that's important (but from your headers I assume you
are running Linux) but even more important is what OS was used to write
the data and used to format the drive? If Windows was it a Quick Format or
an Unconditional Format ("Format C: /U")?

From a forensic point of view, if it's a Windows HD then clone the drive
(Norton Ghost, Drive Copy) then manually "walk" the FAT and use dd (man
dd) to recover blocks.

Effectively, any software in this category will be manually driven, one
file at a time. But if it was a Windows "Quick Format" then the whole
drive MAY (just maybe) be recoverable intact assuming nothing has been
done to it afterwards.

Regards
Gordon
 
Back
Top