so i used helix to image the drive.. it worked well it copied every sector of the drive<br>got the files recovered too ( imaged it so each test we could always go back to the original drive ^^ )<br><br><br><div class="gmail_quote">
On Jan 3, 2008 10:29 AM, Arron Lorenz <<a href="mailto:arronlorenz@gmail.com">arronlorenz@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Spinrite is more for total physical drive recovery not so much recovery of deleted files.<br><br><div class="gmail_quote"><div class="Ih2E3d">On Jan 3, 2008 10:21 AM, Baldy <<a href="mailto:baldy@mchsi.com" target="_blank">
baldy@mchsi.com</a>> wrote:<br>
</div><div><div></div><div class="Wj3C7c"><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div>Noah Norris wrote:<br>> Anyone good at recovering deleted files ?
<br>><br>> i got a person that accidentally deleted there mailbox from outlook<br>> and immediately killed there system (powered off)<br>> and wants to recover the files. files are on an NTFS file system drive
<br>> thats 250 GB<br>><br>> (i believe the exact way was the user draged there mailbox to the<br>> recycle bin and started to empty<br>> it and then stopped the process half way once they noticed what was
<br>
> going on and powered off )<br>><br>> anyone have any ideas involving linux and even paid for software that<br>> runs in linux or windows<br>><br>> I have been messing with some forensic distros lately i was maybe
<br>> hoping some tools from those could help.<br>> but my knowledge with them is not the best anyone point me in the<br>> right direction . ive been messing with helix<br>> but most of the distro's seem a little outdated.
<br></div></div>The best one on the market is Spin-Rite by Steve Gibson<br><a href="http://www.grc.com/sr/spinrite.htm" target="_blank">http://www.grc.com/sr/spinrite.htm</a><br><font color="#888888"><br>--<br><a href="http://www.baldysparadox.com" target="_blank">
http://www.baldysparadox.com</a><br>ICQ #899207<br>Skype Riverhack<br>Open 24 hours a day for your browsing ease!<br></font><div><div></div><div><br>_______________________________________________<br>QCLUG mailing list
<br><a href="mailto:QCLUG@qclug.org" target="_blank">QCLUG@qclug.org</a><br><a href="http://qclug.org/mailman/listinfo/qclug" target="_blank">http://qclug.org/mailman/listinfo/qclug</a><br></div></div></blockquote></div>
</div></div><font color="#888888"><br><br clear="all">
<br>-- <br>From:<br>Arron James Lorenz<br>Reach Global Networks LLC<br>MobileTek Inc<br>563-579-7046
</font></blockquote></div><br>