View Single Post
  #2 (permalink)  
Old 09-30-2008, 04:24 PM
GDH GDH is offline
Administrator
 
Join Date: Feb 2005
Posts: 2,718
Default Data Recovery

Hi,

Taking a DD image is a good move. It means that whatever happens, you cant make the situation worse, and have read only backup. You may like to download Mount Image Pro - Computer Forensics Software: Mount EnCase Images and DD images, which will enable to mount the DD image as a drive on your PC.

I suggest you download Recover My Files and run a "Complete Format Recover". You can follow the instructions in this thread: http://forums.getdata.com/computer-d...ard-drive.html

If the records in your MFT are corrupt or destroyed, then there is no way to get the file and folder structure back, because this is the only place where the file and folder names are held.

Recover My Files will search for individual MFT records - not just the complete MFT table - so let me know the results of your search as you still have a good chance of getting the file and folder structure back.

If you cannot find the file and folder structure, then your only option is to run a "Complete File Search" for specific file types. Part of this search looks for files by their header and footer and they are returned with names like "Recovered_Word_1". This is not as bad as it sounds, as there are a number of tools available when can help you auto rename files based on the meta data inside the file.
__________________
Graham Henley
GetData Support Staff
http://www.getdata.com
http://www.recovermyfiles.com
Reply With Quote