| Author | Message | ||
     hezry79 Username: hezry79 Registered: N/A |
1-my laptop is running xp with ntfs file system.( i have C drive and D drive ) 2- my laptop is connected to another spare disk with xp running and ntfs file system ( this will be E drive ) Question: I using Xways forensic to clone my laptop to the spare disk. Tools->Disk Tools->Clone Disk->Source Medium ( i put D drive ) and Destination: ( i accidently type E ).. my problem now seems D is overwrite the E drive. E drive size as shown same as D drive size. i cannot see my original system in E drive anymore. What I can see from E drive is what I can see from D drive. Please I need help | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
All the data that was overwritten is irreversibly lost, unfortunately. If D: is smaller than E:, some data at the end of E: might be recoverable manually. In order to return E: to its original size, it should be sufficient to reformat that partition, of course only after having recovered all recoverable data from E:. | ||
| hezry79 Username: hezry79 Registered: N/A |
thanks for the reply...in order to recover E drive. is it using the same method of recover the drive in xways? as it only can see the E drive is only few GB Visible Before D: 40GB E: 80GB Visible After D: 40GB E: 40GB | ||
| Stefan Fleischmann Username: admin Registered: 1-2001 |
In X-Ways Forensics, tosee the full 80 GB, you would open the partition from within the physical disk rather than the logical drive letter. Then you recover files by type/signature in the second half of that partition. For better results you need to make manual efforts. |