• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 236
  • Last Modified:

recover files ?

Silly Question, but If a user "moves" files from a HD to an external source, vs deleteing them, is there a way to recoved them ?

Had a employee leave a clients office and files are missing. I ran 2 undelete programs and no sign of missing files, just thinking that maybe they moved them.

thanks
0
PatrickMacC
Asked:
PatrickMacC
  • 3
  • 2
  • 2
  • +5
4 Solutions
 
Tyler LaczkoCommented:
a move acts the same as a delete.

If your undelete software is not working the disk has been over written.
0
 
PatrickMacCAuthor Commented:
its weird, several files (100's) were deleted, the undelete program shows lots of other files from the past but none of the documents that disappeared.

would there have been a way that the former employee could have scrubbed just those files after moving them ?
0
 
sysreq2000Commented:
Were the files all in folders that are gone? To be honest I haven't used undelete programs in a while, but in the old days if a folder was deleted the files would be unrecoverable, and in fact, as you describe, not even detected by the software.
0
Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

 
PatrickMacCAuthor Commented:
files were according to client, on desktop and in folders
0
 
BillDLCommented:
Hi Patrick.

Which "undelete" applications did you try?
0
 
BillDLCommented:
To stand any chance of file recovery your client should immediately stop using the affected computer.  Even normal Windows use is capable of overwriting the areas where the files were, and possibly still could be.  The best way to recover files is to remove the hard drive and temporarily attach it as a slave drive to another computer running Windows and with the recovery software installed.
0
 
johnb6767Commented:

Might need to use a stronger utility..... Works allot better than undelete software in some cases....

Free Data Recovery Software - EaseUS® Data Recovery Wizard® Free Edition
http://www.easeus.com/datarecoverywizard/free-data-recovery-software.htm

I would pull the HDD and slave it to another machine and give this a try..... And I would also stop using this machine until you can definitively say the files are not
recoverable.... And do NOT install the software on this drive...



0
 
Jim-RCommented:
To clarify "move".  This is simply copy first and delete upon finish of copy automatically.  The same way a file is deleted with out the copy process being done first.  The file isn't actually completely deleted, the area of the disk it is written on is just "marked" by the disk's file system as available.  Therefore, the very next time the hard drive is instructed to "store" something, it grabs the first "available" area on the disk and uses it.  

This is why the computer should not even be started up again.  Every time it is used, the chances of recovering deleted files decreases.  

Coincidentally, this is why hard drives also become "fragmented".  When the file is too large for the first spot available, the hard drive writes each part of a file on the next available spots.  Sometimes a file can be spread out on a drive in over a thousand spots or fragments.  To use the file, it must be regathered all together again into RAM memory off of the hard drive so you can work with it.
0
 
nobusCommented:
you can try these recovery softwares - BUT do not install it on the disk you want to recover from - you must attach it to another system for recovery ( to avoid overwriting the files) :
http://www.pcinspector.de/file_recovery/UK/welcome.htm      pc Inspector -FREE -
      http://www.piriform.com/recuva/download/standard            FREE  -  Recuva
http://www.stellarinfo.com/                              Stellar
http://www.runtime.org/                              GetDataBack
http://www.ontrack.com/                              Ontrack
0
 
LeeTutorretiredCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
 
BillDLCommented:
Thank you Lee
0
 
Jim-RCommented:
Thank you Lee
0

Featured Post

Important Lessons on Recovering from Petya

In their most recent webinar, Skyport Systems explores ways to isolate and protect critical databases to keep the core of your company safe from harm.

  • 3
  • 2
  • 2
  • +5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now