GertJ, Of course you are right about encrypted files. However, provided the user has not written any data to the drive to be recovered there is a good chance of recovery, provided the drive itself is not damaged. It's also worth mentioning that the recovery software should not be installed on the drive you are attempting to recover. I've found that in general most data recovery programs do a decent job, some are slightly better than others, but they can only recover what's there, they can't magically pull data from nowhere.

Blackhat  –  4 years ago  –  War dieser Kommentar hilfreich? Ja | Nein (+9)

Übersetzen

"Many have of cause enabled encryption on their devices..."

I think most individual users [not corp.] use encryption mainly on their phones when/if they use them for banking &/or have stuff like credit card numbers stored, but I don't think Aiseesoft Data Recovery would help there anyway, because Android & iOS. For biz users with BitLocker encrypted drives, if you Google there are data recovery apps available, though Aiseesoft Data Recovery doesn't list this capability on their site.

"... even without encryption the data areas are often already overwritten so recovery chances are minimum."

That depends on several things, e.g. if there's very little storage space, new data has to overwrite old, deleted data, because there's no where else to write it. It also helps if you stop writing to the drive immediately when/if you discover you need to recover a file or files, to the point that if it's the system partition [the one with Windows on it] it's not a bad idea to power the PC/laptop off rather than shutting down normally. That sort of thing is more important if the lost data is on an SSD -- if the drive runs Trim that data's gone forever.

" It's also worth mentioning that the recovery software should not be installed on the drive you are attempting to recover. "

That common caution is mainly because installing the app on the partition with lost files might overwrite those lost files. That said, if the data you're after is on the system partition, along with most of your software, you're better off not running that copy of Windows at all, either doing a complete sector by sector backup from a bootable USB stick, then running file recovery on a restored copy of that backup, or running file recovery from another copy of Windows, e.g. WinPE or Windows to Go etc.

mike  –  4 years ago  –  War dieser Kommentar hilfreich? Ja | Nein (+8)

Übersetzen