There's nothing wrong with the disk itself i.e. no read-errors or whatever.
I repartitioned, formatted and put a new install on it before I realized I forgot to backup this file.
It's highly likely it got overwritten in the process but I'm not going to give up that easy :D
Besides sleuthkit/autopsy I also been playing with R-Studio, RaiseDR for UFS, Stellar Phoenix (BSD) and UFS Explorer.
All very impressive programs, I did find other things that used to be on the 'old' filesystem. Quite shocking on one hand but hopeful on the other ;)
January 20th, 2008, 06:49 PM
Whilst the unstoppable copier will handle damaged media, it just attempts to recover everything, so long as it hasn't been overwritten.
It would be worth a try in my opinion ;)
January 20th, 2008, 06:52 PM
I'll give it a shot.. I don't care if it takes a week to scan..
Trying to find 64 bytes of random data on an 80GB disk really is like searching for a needle in a haystack :cry:
January 20th, 2008, 07:11 PM
Did the file have a name?
The unstoppable copier will attempt to reassemble all files........... so let it run then look for those that are 64 bytes long.
When I have used it in the past it has managed to recover partial text files, which is a lot better than nothing? Obviously, in your case you need the file intact, so if you cannot find a 64 byte file then I suppose you must have overwritten it?
January 20th, 2008, 07:27 PM
If the file has been overwritten not just deleted then according to this you can't recover it