Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

we have a client with server 2008 r2 that deleted a file and we need to recover

Posted on 2014-07-23
6
Medium Priority
?
113 Views
Last Modified: 2014-08-09
we have a client with server 2008 r2 that deleted a file and we need to recover it for them since their backup system has been failing.  We do not have shadow copying enabled on the server so this isn't an option.  Please help
0
Comment
Question by:johnpatbullock
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 19

Expert Comment

by:helpfinder
ID: 40214175
Then probably only option is to use some file recovery software like Recuva or some profesional SW/service
0
 
LVL 25

Expert Comment

by:SStory
ID: 40214192
I agree. Windows/Dos doesn't really delete a file. They mark the space a free to be used. The next chuck on information that is written can go in that space. However, drives can have multiple layers of magnetic images and some forensic tools can possibly recover it, but it could be hazardous to the health of the rest of the data on that drive. I'd suggest they do a better job of backups in the future, as trying to recover these files may be difficult.

Also:
http://www.pandorarecovery.com/

http://undeleteplus.com/
0
 
LVL 47

Expert Comment

by:noxcho
ID: 40214202
If you did not write any big data amount to the partition after the file was deleted then you can still restore it.
The best tool for data recovery is GetDataBack at the moment: www.runtime.org
Have a try with it.
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 17

Expert Comment

by:pjam
ID: 40214211
Are they sure it was deleted and not moved.  when i have someone tell me they deleted a folder or file i first do a search.
Often it is moved to a nearby directory by an errant mouse.  Worth a shot.
0
 

Author Comment

by:johnpatbullock
ID: 40214698
after investigating further the file was not deleted itself, just the content of the file was deleted.
0
 
LVL 25

Accepted Solution

by:
SStory earned 2000 total points
ID: 40214712
bummer.  I'm not sure there is any way to get that back. However if it is a word doc or other type file, it may make a temp file before rewriting. I'd check %TEMP% to see if there might be a file of that name. If you are lucky it didn't get deleted. If the program saves to a new file and deletes the old one for edits (a sometimes common practice) and if the free space isn't already overwritten, an undelete app might still work.
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This is a little timesaver I have been using for setting up Microsoft Small Business Server (SBS) in the simplest possible way. It may not be appropriate for every customer. However, when you get a situation where the person who owns the server is i…
INTRODUCTION The purpose of this document is to demonstrate the Installation and configuration of the Data Protection Manager product. Note that this demonstration was prepared on the basis of Windows OS is 2008 R2 and DPM 2010. DATA PROTECTI…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question