Undelete from before Complete Recovery

Using TestDisk to undelete files
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
tommy2k10
Posts: 4
Joined: 27 Sep 2013, 12:20

Undelete from before Complete Recovery

#1 Post by tommy2k10 »

My friend had a problem which was getting to the point where I had to reinstall Windows. I had backed up his files before, and then I did a factory reset, which obviously wiped the data. Everything is back in working order now, but for some reason his documents didn't backup. As I have done Samsung Complete Recovery (restore to factory settings) is there a way that I can use TestDisk to get his Documents back, and if so, how do I accomplish this?

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Undelete from before Complete Recovery

#2 Post by cgrenier »

Run TestDisk, Advanced, Undelete, see http://www.cgsecurity.org/wiki/Undelete ... h_TestDisk for a step by step. If it doesn't work, use PhotoRec http://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

tommy2k10
Posts: 4
Joined: 27 Sep 2013, 12:20

Re: Undelete from before Complete Recovery

#3 Post by tommy2k10 »

I will try that - when I did the Complete Recovery, is that the equivalent of a format?
Won't TestDisk find files that on the disk currently?

User avatar
Fiona
Posts: 2835
Joined: 18 Feb 2012, 17:19
Location: Ludwigsburg/Stuttgart - Germany

Re: Undelete from before Complete Recovery

#4 Post by Fiona »

I will try that - when I did the Complete Recovery, is that the equivalent of a format?
It's usually not equivalent of a format.
You should recover your data to another healthy disk/partition.
Don't write anything to your affected disk or partition anymore.
It increases your damage.
After recovery and if you're satisfy with your result, you can reformat your disk and copy data from your recovery/backup back.

If you were setting back you computer to factory default, you probably were overridden al your data?
In case your data were on another disk/partition please let me know.
If not, you only can check what datarecovery software finds.
You can use PhotoRec and you should run Free and it doesn't scanthe whole space.
It's better because PhotoRec doesn't recover already available data.


Fiona

tommy2k10
Posts: 4
Joined: 27 Sep 2013, 12:20

Re: Undelete from before Complete Recovery

#5 Post by tommy2k10 »

I have got the files back that I wanted, but they are encoded, and I didn't enocde them. Is there any way I can decode them; they are in western iso format?

Locked