Breadcrumbs
Home / Data Recovery from a Formatted Hard Disk using encase ForensicsData Recovery from a Formatted Hard Disk using encase Forensics
Last Updated on Monday, 22 March 2010 03:36 Written by databank Monday, 22 March 2010 03:36
This is a school project, our theme was on computer forensics and we decided to recover data from a formatted Hard Disk. Our main objective is to prove that data recovery from a hard disk is possible. It can be used against you as evidence of illegal copyright files such as videos and music. Basically, formatting your drive doesn’t erase any thing at all.
Tags: Computer Forensics, Data, Data Recovery, Disk, encase, Encase Forensics, Forensics, Formatted, from, Hard, Hard Disk, Main Objective, Music, Recover Data, Recover Disk, Recovery, using
where can i get this software? :O
Like i said, data recovery is not always 100%, it is greatly affected by what you did after formatting.
If you format already but have not put in any data, there is a higher chance of data recovery.
But if you fill up your harddisk again and therefore resetting the binary codes, it is much harder to recover.
It is easier to recover smaller files as they remain intact. Things like videos gets harder as losing a small portion could mean corruption.
is there a way i can recover actual formatted drives with like over 500gb of lost storage thanks to reformated my pc
Well i can’t really give you a solution, but i seriously believe that your thumbdrive is somehow faulty. and that lowers the chance of recovering data.
Does this program fix this problem… I was transferring data from one pc to another. Then it seemed I was asked to format the thumbdrive(Centon DataStickPro 8GB). So I did. Now I still can see it in “Mycomputer”, but when I click to open it it tells me I need to format it. When I try now it never completes even after hours and has to cancel. Under its properties it shows 0% for used and unused space available. But says it’s working properly.
.
Thanx for reply to any smart guru.
There is 2 modes for this program, one is the enterprise version, which is without the USB dongle plugged in, you will only get to browse around the program, you can’t use the full function, which includes recovering the partition.
I was just looking at your vid and there’s a part where you right click and select recover file…on my program, that option is not available…actually it’s not there period. Do you know what’s wrong? I reformatted my hard drive recently and I so need to get some important files back!!!
yes of course, but the chance of recovering a file that is not corrupted is very difficult. if u delete and recover straight away, the chance of recovering is higher, but if you wan to recover a very old file, there is a chance that the binary sa be reset or your files u build up overtime.
Does this encase software always recover files that are not corrupt
lol..they can
HOLY SHIT! good thing i found another program i can use…
nope its not free.. 3000 euro pounds if i’ve not mistaken. my school bought it.
well… is this free? i NEED it! please tell me.
not enough words to explain, but i’ll do it simple.
when u delete a data, the binary combination have not been lost, not a single bit.
unless u attempt to change it on purpose, like overwriting and fully used up your harddisk.
when the old binary combinations are overwritten, i’m pretty sure it’s near impossible to get back already.
but would u have time to format and fill up 1TB of harddisk?
even so, there are experts who can read broken binary codes, those FBI perhaps.
no matter how many times u format or delete, slow or fast, there is still a possibility of getting the data back.
the only way to fully mess up the file is to change the binary combination of the harddisk, meaning to overwrite your old data in terms of 0s and 1s.
In theory, it is highly unlikely to get data back that way, but there are professionals who claims its still possible.
hello .. u can delete / format a hard drive to kill all data i have done it like 5 times i never did no slow format like what u did cuz what u did lets ppl get your data back what i do dont not even the fbi can find any data on one of the hard drives i formated
i had Encase a couple of months ago and i used it to just fool around but then i realized that this software is good, it gives you dates of deletion and can recover files easily (it depends how long the file was deleted from your dvice, it may have already been overwriten), but i think i deleted it when i re-installed win xp and opensuse, LOL
C:WINDOWSsystem32oobeimagestitle.wma
what is the name of the song ?
I heard it before during window XP installation.
i miss it so much
hhaha.. ya.. thats the file my friend was passing around..
hahah the movie has chinese sub
which version of encase are u using? there’s quite a few versions..
the program won’t work if u dun have the EnCase dongle.
did u choose your file location correctly?
i have that encase but its not working.
i lost every thing after format and then i get tht software i follow all the steps and all was well when i get the last one when its finish the recovery it dsnt appear any recovery in the hard can u help plz.
thx
EnCase is not a program entitled to anyone, u can google for it and guidance software is the company who “made” this. u can puchase at the price of $3000 pounds. and there are a lot of paper work to fill in. my team is using under our school name.
Can u please provide the link of this software i will be realy glad n ty for the video dude