Scan for Deleted SQL file

[dobrevjetser]

Hi,

Does anyone know if it is possible to recover a SQL (.mdf) file by signature.
A client of mine deleted it, worked on the system for several days, and now needs it urgently back

The file was about 2 G in size on a 20 G disk, with only a few gig left.

I'm getting more and more convinced this is a lost case, but you never know offcourse.

Dobre

[beto]

Hello friend

doesnt help u the SQL sintax code, wich we talking for restore the bak??

Best Regards

Sinceraly

Alberto

[sceggy]

The main issue here is going to be fragmentation and filesystem type.

Do you know if the client created the "container" (mdf) file in one single shot, or has it organically grown since the database has been running?

Also, are we taling MS SQL Server 2005, MS SQL Desktop Engine, MySQL, SQlite here and which version?

scegs

[dobrevjetser]

Hi Beto,

Unfortunately , the bak we restored was created after the file was deleted, so no use

Dobre

[beto]

bad news

maybe u can try to check the good header from a good MDF file and programed a search of this header but maybe not works, its hard

[dmarques]

If it's not a lost case, it's very close to it, as you'll have much trouble and very few chances of sucess.

[acforensics]

Try photorec:

http://www.cgsecurity.org/wiki/TestDisk_6.6_Release

Andy

[hddbug]

Hi

I know a file signature analysis program .Please visit - http://www.filesig.co.uk
Thanks
Hddbug

[dobrevjetser]

Thanks for the replies, guys.

Unfortunately my clients harddisk was filled to over 29 GB of 30 GB available.

After deleting the file and installing new software, they creates a new file with the same name as the deleted file. Since the original file was 2 Gb and only 1GB is left on the disk, i think this recovery is impossible.

Regards,

Dobre