Trying to recover delete files

[LoboX]

Sup guys

Ive been trying to recover some delete files, but for some reason i am unable to do it.

When the files got delete and i was told, i removed the computer right away, so nobody else could use it, removed the drive and image the drive with R-Studio, when i check the image i see the folder $Recycle.Bin i am only interested in the delete files, when i see that folder i see a list of folders, that i know are users i see the files delete but... they have a red X, if i choose a file and try to preview the file it says is damage even if i recover the file, its all gibberish.

Am I doing something wrong? or those files are dead already and i cant do nothing? If i try with get data back, would i have the same results?

Thanks all

[LoboX]

What about this errors.

thanks.

Attachments

MFT Errors

[LoboX]

Hey bro

Sure man check the PM or email.

[michael chiklis]

Before doing carving to search files metadata you can try to create regions in r-studio, if you know how to do it...

[digitalferret]

hey Lobox

you could try using the Sorted by Extension tab and also "Define file mask" and check Deleted box.

you can then skip to "Real" tab to find original locations.

If this fails do a "Full Scan " first.
this will pick up remnants of old file table entries as well as lost files in slack space.

If you get this far come back and let us know, then one of us can guide you for next steps.

feel free to DM if you feel the need

K

Attachments

[LoboX]

Heya digitalferret

thanks for info bro, right now doing a full scan to see whats comes up, will let you know thanks man.

cheers.