What Data Recovery software recovers partition(s) if drive has been formatted?
- Thread starter douche
- Start date
So, a format does NOT overwrite data, then? If a drive or partition is overwritten with data, how/what would be the best program to recover it?
well, if data is overwritten, i think you need a miracle to get it back
about the question, yes after a format you need a bit more work to get data back than deleting the partition.
What work would that be? So, can using something like Active@ Partition Recovery help at all following a format?
Last edited:
What is "the index"? Is data on there that a format overwrites? Or, is it the MBR? AFAIK, the MBR resides in area where NO data (i.e. files) are stored.
But, the previous poster mentioned "it can still sometimes be retrieved." How so?
The index is how the filesystem keeps track of all the files, where they are on the disk etc. The mbr holds the partition table on a normal disk. So deleting a partition is just a small modification to this table, and can easily be recreated.
I'm not sure how tlarkin will recover overwritten data. Not even professional recovery firms can do that
I'm not sure how tlarkin will recover overwritten data. Not even professional recovery firms can do that
tlarkin
VIP Member
There are data foot prints in cache, memory, and unwritten sectors. While, it may not be probable, its definitely not impossible. That is why when secure data on a failed drive or a drive that is replaced, is physically destroyed rather than zero'd out. I've take a few crow bars to HDs before that contained medical information on it.
tlarkin
VIP Member
Just because you haven't written any user data to a sector it doesn't mean the OS hasn't threaded or cached something there. Also, if you have many different copies of the same file an older version can be restored, well with other filing systems.
How are you going to put back together a cracked platter?
I'm not sure who feeds people these lines of nonsense. Harddrives can be recovered from three formats ago. I've done it, whether it was overwritten, partitioned, formatted or whatever. I have tools that enable me to do it.
The only way to prevent something like that is to do file shredding, minimum 7 passes. Otherwise, chances are decent that the data can be pulled. We even have the ability to pull data off of broken or burned platters in many cases.
The only way to prevent something like that is to do file shredding, minimum 7 passes. Otherwise, chances are decent that the data can be pulled. We even have the ability to pull data off of broken or burned platters in many cases.
You cannot possible recover data that has been overwritten.
First off, it requires very special equipment. The electronics in a harddrive is not capable of doing it, and therefore you cannot possible recover anything with simple software.
Second, the data density and precision of moderns harddrives makes it impossible for even specialists to recover a drive that has been overwritten just one time.
Overwriting a disk is not the same as formatting it.
First off, it requires very special equipment. The electronics in a harddrive is not capable of doing it, and therefore you cannot possible recover anything with simple software.
Second, the data density and precision of moderns harddrives makes it impossible for even specialists to recover a drive that has been overwritten just one time.
Overwriting a disk is not the same as formatting it.
Doesn't the OS cache also disappear when power is off? If not, where is it stored?
Just how old? Let's say i have 6 versions of a file, wouldn't it be MORE likely to restore the latest 3?
Well, unless it's in bits & pieces, i suppose it can't be too hard
SirKenin said:
How can you do file shredding?
That's quite an impressive claim. How do you even begin doing this? Yet, file shredding, as you call it, prevents this? How so? Apparently, you must be a Data Recovery-ONLY specialist, then, like SalvationData.com or something?
nyhk said:
What equipment would that be?
So, is Active@ Partition Recovery considered "simple?" What software, then, is able to recover partitions than have been formatted over? (I believe that's the title of this thread, anyway.) I haven't had time to try A@PR, yet. I'll report back here the results.
hermeslyre
VIP Member
There are a bunch of apps out there, and i believe with a bit of effort you can easily create your own file shredder.
http://www.fileshredder.org/
I personally use this on the earsing setting, 8 pass, but it sees' a 35 pass setting as well. It's also very unintrusive and resource light, a simple right click is that is required.
a magnetic force scanning tunneling microscope
tlarkin
VIP Member
Modern OSes are journaled filing systems. They leave bits and pieces of data all over the place. Not everything is always cleared out of memory, and when solid state becomes the standard it will be even more so the case.
I am not saying it is always possible, but I am also saying its not impossible either. It just depends on a case by case basis. It all depends on how much it has actually been overwritten. Which is why secure delete programs do random write 0s over 8 times in a row just to be sure.
I am not saying it is always possible, but I am also saying its not impossible either. It just depends on a case by case basis. It all depends on how much it has actually been overwritten. Which is why secure delete programs do random write 0s over 8 times in a row just to be sure.