[Wolves] NTFS deleted file recovery

[Morris, Simon]

I think the first thing to say is.... TURN THE PC OFF!

The more that you use that disk as the primary running OS system disk the more you are going to be writing to the disk and potentially overwriting areas of the disk.

Use that disk as a secondary disk and boot into a different OS

~sm

-----Original Message-----
From: wolves-bounces at mailman.lug.org.uk <wolves-bounces at mailman.lug.org.uk>
To: Wolverhampton Linux User Group <wolves at mailman.lug.org.uk>
Sent: Wed Oct 04 03:08:20 2006
Subject: [Wolves] NTFS deleted file recovery

Sorry, this may sound OT but I have really messed up and deleted most of my dads lecture notes and presentations from an NTFS partition.   Honest guv, if he hadn't moved them to my designated "open  target for space  saving"  area  then  it would have been OK. 

Has anyone got experience of recovering files in this situation?   I have used a 30quid solution (i think is called PC Tools) that identified over 130 of his files as being in 'excellent but deleted' condition, however it only succeeded in actually recovering about 1 in every 14 files. 

There appear to be several Knoppix based systems that come packed with forensic tools and purport to facilitate recovery from NTFS drives, however I am struggling to see the funny side of using them.

If anyone can help me to dig free of this hole, I will be very grateful.   I have no desire to send this disk of to an expensive "specialist" as it would bankrupt me just to get their initial appraisal.   That said, if anyone can make the time to actually succeed, I will pay a reward...... 

thanks in advance, Leo

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.lug.org.uk/pipermail/wolves/attachments/20061004/349b1a37/attachment.html