| Author | Message | ||
     Anonymous |
Do you know of any company that can recover data that has been overwritten once or twice. Not recovering data that is still "on-the-disk", but "ghost" layers of previous data. http://www.cs.auckland.ac.nz/~pgut001/pubs/secure_del.html | ||
| Stefan Fleischmann (Admin) |
No. | ||
| Stefan Fleischmann (Admin) |
More information on this issue can be retrieved from ActionFront. | ||
| K. THILAGAN |
HI FRIEND, I HAVE ACIDENTALLY OVERWRITTEN A FILE. I WISH TO RECOVER THE INITIALLY SAVED VERSION OF THIS FILE. IS IT POSSIBLE? IS THERE A RECOVERY SOFTWARE FOR ME? I NEED YOUR PROFFESIONAL HELP ASAP!!! | ||
| Jens Kirschner (Admin3) |
What exactly do you mean by "overwritten"? Overwritten as in "changed and saved again" or really physically overwritten? What sort of file? | ||
| PMW |
Is it possible to recover a word document that has been overwritten and saved? I.e. to recover the original version | ||
| Stefan Fleischmann (Admin) |
Usually not because the new version is saved on the same location on the disk as the original one. Only if the new file is shorter than the original one, you may be able to find raw text fragments from the original version manually on the disk using WinHex, until they are overwritten by other files as well. | ||
| Anonymous |
The only way to recover overwritten files is with an MF Microscope/Spin stand MFM. Even then, expect terabytes of images that need to be converted. National defence only generally. | ||
| Joseph Schaffer |
I have overwritten my entire drive with 1's and 0's without realize that my backup failed. Is it possible for me to recover files that have been overwritten with 1's and 0's? Please help asap! | ||
| Stefan Fleischmann (Admin) |
I'm afraid no, it is not possible, sorry. | ||
| Matilda Crewe |
I have a Cyber-shot and I think I have over-written it, I used it many times to record movies, delete old ones and record new ones, see. Do I have any chance to recover some of it? | ||
| Stefan Fleischmann (Admin) |
A chance to recover movies that were not overwritten by new ones yet, yes. | ||
| Justin Escamilla |
I have accidentally saved over a .jpg photo in a program called Photo Explosion, I completely changed the original yet when I look at the thumbnails in "mycomputer" it shows the original picture, but when I open the file it shows as the changed version, is it possible for me to recover this overwritten file? | ||
| andrew mcguigan |
Justin I don't believe you will be able to recover the file.You can however probably get the image from the thumbs.db file which is a hidden file in the directory that the pictures where in. This file will only be present however if you had the "thumbnail" view selected in explorer. If you are able to see the picture in the thumbs.db file, it will unfortunately only be a fraction the size of the original as the thumbs.db file only caches a very small image of your folders contents to show as "thumbnails". Andrew- | ||
| Ann Chen |
I've accidentally overwritten my external hardrive with IBM laptop's creating a rescue media program. My original files in the external hardrive took about a quater of 160g space, but after the accidental overwritting, the hardrive only appears to be only used 4g (with the rescue program). Is there any chance for me to recover those lost files? Are they going to be anywhere near a good shape for adobe program use? such as .pdf | ||
| Stefan Fleischmann (Admin) |
You can try the data recovery methods in Davory. | ||
| Kevin McKee |
I record multi-track music via pro-tools LE software from Digidesig onto a Sony Vaio PIII. I recorded a session on 08/21/2005, the playback at the end was great.. soo the music was captured. I record on to a FAT 32 partition (D: Recording) within my drive. I had another recording project later in the week, before hand I begain to move recorded files from the FAT 32 partition to the storage partition to make room... Anyway, I went to work on the files from 08/21/2005... after aq few weeks And they are gone. No-where, I found some of the shortcuts with the names created on 08/21/2005. But, they are empty shortcuts. I am praying that thos *.wav file's have not been overwritten by new *.wav file's... I have not loaded any new software or anything like that. I only record music on this computer... Would anyone know if it sounds like the Audio files *.wav have been overwriten? I have searched every drive for every *.wav file and the ones from 08/21/2005 do not show. | ||
| Stefan Fleischmann (Admin) |
Sorry, this is certainly a situation that is difficult to judge from remote. I recommend someone experienced examines the partition with WinHex. | ||
| Paul Mullen (Pcguru) |
Kevin, I am trying to guess at what may have happened here. You say that you "moved" files from the D: partition to another storage partition. Did you actually use a move command (shift drag) which deletes each file after it has been copied, or did you copy the files and then delete the originals afterwards? The second possibility could account for the "short-cuts" if you accidentally created short-cuts instead of copying the files. Either way the file directory entries likely have been marked as deleted. The actual file data would remain on disk until overwritten by new files. If the files were actually copied, and then for some reason the new directory information did not get recorded, or was deleted, there may be a second chance to retrieve files from the storage partition. Be very careful not to add any new data to the partitions. Each time Windows starts, FAT32 always uses the first available location to store new files. If you have not rebooted Windows and you delete files, then save new files in the same session, they will most likely not overwrite the deleted data. Only when Windows is restarted and you write files will the erased space be reused. Winhex can be used to search for remnants of directory entries. These would be your best clue as to whether the data is still there. I imagine that your hard drive is full of remnants of ProTools files! I recommend making a bit image (replica) copy of these partitions before doing anything else. Paul PC Guru, Austin TX | ||
| Thomas Grant Username: darkstar Registered: N/A |
Hello SW specialists. Please can someone help? Application Norton Ghost. Problem: I have just overwritten my Partition E Data by mistake using Chost. Partions were C: D: E: I created and image of D which was my source data. The destination was D. Unfortunatly during this procedure I have overwritten the content of my partition E! How can I recover my data? | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
You can't recover data that was overwritten, unfortunately. | ||
| Bill Spernow Username: byteguy Registered: N/A |
Grant, Be advised that while overwritten data can't be recovered normally with the tools we have at our disposal (NSA/CIA does it all the time with electron microscope like devices) you may be in luck if the original size of the D: partition was SMALLER than the E: -- in that case you still might be able to recover original E: files that were not overwritten by the D: partition. Bill Spernow | ||
| Thomas Grant Username: darkstar Registered: N/A |
Hello Bill, Thanks for the prompt response. Here is some additional info which may help you to help me. Partition C: XP Pro 10 GB Okay Partition: D 9.77 GB Okay Partition E: 166,77GB overwritten with D data The aforementioned partition sizes have not changed since using Ghost. The data content D has unfortunately overwritten my data on E. Do you know of any SW tool that I can download or purchase to recover my data or return my E partition to the initial configuration? Thanks in advance. Thomas | ||
| Martijn Zomers Username: mazon Registered: N/A |
Ref.: Recover Moved Files Can someone give more information? I have moved 140GB of files from an external hard drive (H  to another external hard drive (G using the 'cut'- 'paste' command in Windows XP. Since then I have not written anything new to the H: drive. My G: drive now has physical damage and does not work anymore. When using demo versions of recovery software programs, I seem to only retrieve once deleted files from the H: drive, but not anything of the recently moved files. Is there any way of retrieving/recovering the moved files from the H: drive? To anyone who can offer a solution, many thanks in advance. Martin. | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
Please try and open the drive in WinHex. There is a good chance that these files are still found and listed by WinHex. | ||
| Martijn Zomers Username: mazon Registered: N/A |
Thanks Stefan, Is there any manual how to work with WinHex? Tried to use it, but do not want to make any mistakes and ruin my last chance to recover the data. Can I download or read it online somewhere? Thanks in advance, Martin | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
There is a PDF manual that describes almost all the functionality, downloadable from the main WinHex web page ( http://www.x-ways.net/winhex/ ). "How to work with WinHex", however, is difficult to describe in a manual, because there are thousands things that can be done with WinHex, due to the flexibility of the program. | ||
| Rene Lurion Username: rene Registered: N/A |
Hi there, I created an excel file for use as a master file to collect some information. Unfortunately I appear to have over-written it by saving another excel file in its place. The new file is the same structure but with no information, therefore smaller. Is there some easy, idiot-safe way to retrieve the original? I need urgent help on this one Rene | ||
| Terry Greenwood Username: greenwood Registered: 3-2006 |
'saving another excel file in its place' - Do you mean that you saved the newer file with the same name as the older file ? | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
> Is there some easy, idiot-safe way to retrieve the original? No, there isn't. | ||
| dante williams Username: bunga707 Registered: N/A |
I was wondering how to recover counterstrike source folder with all the info the texture files the sound files every thing because while i was creating a mod i over writen the folder that contains everything and now i dont have a folder to extract the mod to please help me out | ||
| Brian Chan Username: crashtec Registered: N/A |
this is not so much about data recovery from a file, but is it possible to recover data which was copied using the Ctrl-C button? for example, i copied something using the CTRL-C and accidently copied something else using the same command,is it possible to recover previous data without a clipboard?(it was unfortunately disabled when this occured) | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
Immediately after this happened, I think there is a good chance that you will find the previous contents of the clipboard in main memory or in the virtual memory of the process from where you copied that. Tools | Open RAM followed by e.g. Search | Find Text | ||
| A Kessler Username: andr1010 Registered: N/A |
I accidentally deleted all the data in my word document and then saved the document using the same name as before. How can I retrieve the original data or get back to how my document looked before my last revision? | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
You could try the following: Open the drive on which the document resided (in WinHex: Tools | Open Disk). Then search for some known text that you remember exactly (e.g. "Dear Mr. Smith"). If found in some of the disk sectors, use copy & paste to recover the text. | ||
| Chen Alan Username: fyz123 Registered: N/A |
Hi, You may try Advanced Word Repair at http://www.datanumen.com/awr/ This tool is rather useful in restoring damaged Word documents. You can just try the free demo. Alan | ||
| Geri Abrams Username: kibler Registered: N/A |
I had a program set up, operational with data entered. I reinstalled the program to have a "practice" program and it over-wrote the original program rather than installing a duplicate program. Is there any way to recover the original program that was operational, with data entered? Thanks. | ||
| Atul Username: sagi Registered: N/A |
I have a 20GB hard Disk with windows XP installed on it. Recently i was unable to boot from the same so i tried to access data from it using another hard disk making the earlier one as Slave and new one as Master. When i tried accessing the Drive, it says the drive is not accessible, door may be open. Also the file system is not known. I installed XP using NTFS file system. I checked the file system using Disk Management, but it does not show anything there.. Pls. suggest how to recover data from the drive. | ||
| Alfons Kramer Username: admin3 Registered: 4-2004 |
You can try either the demo version of Davory or WinHex in order to check for recoverable files. You have take into account that the particular hard drive is defective. If there are important files you like to recover, I suggest to turn to a professional data recovery service. | ||
| Don Camillo Username: willybilly Registered: N/A |
Hi, Windows often requires that you "initialize" the second HD first - the HD is not shown until this job is done. For security reasons I would recommend you to download a Knoppix (google for this) CD, boot from it and then try to find the old HD. It should be found by Knoppix automatically - you should see two or more HD symbols on the Knoppix desktop. If yes, click on it, add a USB HD (stick) if possible and make it writable (right mouse button - make writable). Copy the files you need to the external HD. If the old HD is not found by Knoppix you will have a bigger problem - post once again if it is so. | ||
| Atul Username: sagi Registered: N/A |
Hi, I tried to access my HDD using Knoppix and it detected my HDD but it was unable to read the contents of my HDD. It says Input/Output error on HDD. Pls. help. | ||
| Atul Username: sagi Registered: N/A |
It looked something like this: Error reading $MFT: Input/output error Failed to load $MFT: Input/output error Failed to mount '/dev/hdc1': Input/output error NTFS is either inconsistent, or you have hardware faults. In the first case run chkdsk /f on Windows then reboot into Windows TWICE. The usage of the /f parameter is very important! | ||
| Alfons Kramer Username: admin3 Registered: 4-2004 |
Your harddrive has a physical damage. If you can't do a recovery by yourself, I would recommend you turn to a professional data recovery service. If you like to do it with Linux, I like to recommend the ddrescue program in order to take an disk image, before starting the actual recovery. If you prefer an easy to use recovery program, try X-Ways' Davory. |