[sfxhewitt]

hi guys just wanna no whats the best data recovery i deleted all my songs by accident

[ComputerGuy]

I would like to know that too as my girlfriend's Mcafee delete a picture file which had just been put on her computer like a day before.

Jay

[evilfantasy]

From the makers of CCleaner.
http://www.recuva.com/

This one is supposed to be good also.
http://www.undelete-plus.com/

Both Free.

[Dave Hybrid]

Originally Posted by evilfantasy From the makers of CCleaner. http://www.recuva.com/ This one is supposed to be good also. http://www.undelete-plus.com/ Both Free.

Nice post mate, will have to remember these.

[ComputerGuy]

Thanks, Have downloaded both and will take them with me tomorrow.

Jay

[stugster]

If you're going to use either software, you're best installing it on another computer, and putting the compromised hard disk in as a slave.

If you install the software on the compromised hard drive / change data on that drive, you'll likely lose the data for good.

[evilfantasy]

All they are is programs that scan for deleted files. Why go through all that?

[stugster]

No, they're not.

You need to understand how the data is stored on the hard disk, and how the data is "deleted".

When you save a file, the file is broken up into smaller manageable sections, and each section is written to the hard disk with a unique memory address. This is known as location-addressable. The computer knows where to locate the data by the numerical address.

When you delete a file, you don't delete the file. You delete the numerical address that points the computer to the file on the hard drive. When the file has been "deleted", the computer no longer sees that address on that sector/section of the drive, and so knows that it is free-space for it to write more data to.

When you use the software, the software searches all of the addresses for the binary code, and ignores the fact the data isn't addressed.

If you install programs/edit files/ use the hard disk, theres a chance that the operating system will use those "free" addresses, and stick more data on.

Here's an example. Address 12345 has "Hello" stored.
It looks like this: 12344:My Text | 12345:Hello | 12346:My Name | 12347:Is Earl
I delete HELLO from the sectors.
It looks like this: 12344:My Text | 00000:Hello | 12346:My Name | 12347:Is Earl

The data still exists.

So, I decide I want it back... and i install the .exe file.

It looks like this: 12344:My Text | 12345:.EXE FILE| 12346:My Name | 12347:Is Earl

... "Hello" just got overwritten.

It's obviously more complicated than this, but at half three in the morning, that's all you're getting ;)

P.S. ANY good data recovery program will warn you of this.

[evilfantasy]

I get what you are saying. But these will only find (some) recently deleted files.
I have had success with what they are trying to do with these programs. Or I wouldn't recommend them.
Also not everyone has a second computer, or is equipped and has the knowledge to to pull a drive and slave to another.

Nice explanation. Will be good seeing your advice in the forums!

[ComputerGuy]

Stugster so how should i go about getting the files that were deleted by my girlfriends anti virus software back? Its Mcafee if that helps and no she don't have another computer to do what you said no what I no what that is anyway lol

Jay

[evilfantasy]

Originally Posted by evilfantasy Also not everyone has a second computer, or is equipped and has the knowledge to to pull a drive and slave to another.

Have you seen or tried anything I have posted?

Did you look in the virus quarantine?
Did you try the programs I mentioned that are for what you are trying to do?