View topic - Help with DE

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Help with DE

Page 1 of 1

[ 5 posts ]

Previous topic | Next topic

Author

Message

mr_spokk

Post subject: Help with DE

Posted: July 28th, 2007, 13:38

Joined: May 21st, 2007, 16:10
Posts: 1592
Location: Gothenburg/ Sweden

Hi to you all ;-)

I need to get 3 documents out of a drive, the one marked in red on the picture.
The only place I can even see these documents are in DE...I have tryed GDB with no luck.
When I try to copy them from DE I only get a error, because there is no start and offset I'll think.
Is there any way to retrive those documents, any input is most welcome.

[img]

Best Regards

Bosse

Attachments:

DE.jpg [ 121.35 KiB | Viewed 3941 times ]

_________________
Rescue IT Datarecovery service Sweden
Rescue IT Dataräddning Göteborg AB
http://www.rescue-it.se

Top

darkforce1

Post subject: Re: Help with DE

Posted: July 28th, 2007, 15:00

Joined: June 27th, 2005, 8:27
Posts: 615
Location: India

Try Winhex.

DF

_________________
DF

www.datatracksystem.net

Top

Starling

Post subject: Re: Help with DE

Posted: July 28th, 2007, 17:00

Joined: January 29th, 2005, 22:58
Posts: 637
Location: Canada

I would advise you find documentation on structure of NTFS (here for example: http://downloads.sourceforge.net/linux- ... g_mirror=1) and see what's wrong with those MFT records you are trying to work with.

Top

sceggy

Post subject: Re: Help with DE

Posted: July 29th, 2007, 16:06

Joined: June 27th, 2007, 9:47
Posts: 63
Location: UK

Deleted files or corrupt $MFT!!!

$MFT sector results look interesting!!! Winhex would be a good starting point. Alternatively the post-ceding word files may have remnants or even "track changes" feature built-in, avoiding the need to recover?

scegs

Top

mr_spokk

Post subject: Re: Help with DE

Posted: July 29th, 2007, 19:58

Joined: May 21st, 2007, 16:10
Posts: 1592
Location: Gothenburg/ Sweden

Thanks for your replys.
I found the files in Winhex, but as i'm a total newbee on that progam I need some help and guidens.
What would be the next action?

[img][/img]

Best Regards

Bosse

Attachments:

winhex.jpg [ 142.49 KiB | Viewed 3922 times ]

_________________
Rescue IT Datarecovery service Sweden
Rescue IT Dataräddning Göteborg AB
http://www.rescue-it.se

Top

Page 1 of 1

[ 5 posts ]

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: Vipys113 and 63 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum