They be fired for conversation rear legs to the owner of our company. Now she have granted to delete her .pst report. Looks as if zilch is within the recycle bin, and she have not turned system restore on. What might I try?
Answers:
If she know what she be doing after she delete the directory she probably delete other files and consequently did a defrag to overwrite those blocks. It is probably gone.
1.) try turning on "show disguised files" - I know that's one step I'd do.
2.) Google "undelete program" - at hand are tons out in attendance.
Unless they did the gov't horizontal wipe (and most population aren't that tolerant / picky), here's a lofty randomness you'll grasp it spinal column near a bit of work.
There are secure taking back softwares available for delete files taking back . check google serach for the same.
Log onto
http://tipsfromruby-internetsecurity.blo... for further abet to hold on to your computer protected near regular virus protection and other related updates and contemporary
First of adjectives... stop using the computer.
Document the scene near camera and within writing and verbs a cuff of custody on the evidence.
Then find someone who know how to use dd or dclfdd to dummy the drive... similar to a forensic analyst.
http://www.softpanorama.org/tools/dd.sht...
Then work beside the doll and do not touch the artistic evidence.
You can use The Sleuth Kit to find the delete files and rest them from unallocated space.
If you want to read what have be delete from the recycle bin...
The recycle bin creates a directory that is to say the SID number of the user.. it looks something similar to S-1-5-12334-482921-93283
unseal a command prompt and cd .. into the C:\RECYCLER folder... consequently type dir /ah
if the folder exists you will see it near the /ah switch which shows covered files.
so cd into the S-1-5. folder and do another dir /ah and you will see the INFO or INFO2 file...which should still be within after the recycle bin is empty.
There is a free program from Foundstone.com call Rifiuti
this will read the INFO or INFO2 files which are contained in that unobserved folder...
correct luck.