[clug] OT: Windows hard drive recovery suggestions

[Michael James]

What I'd do in all trashed-disk cases is:
 Remove disk from machine and plug into an existing Linux box.
 Use dd-rescue to clone the disk or create an image.
Seal up the original disk in a zippy bag.
If disk hardware failure is suspected, make a 2nd copy of the image and
work only on that. If you're really confident you can re-clone the
original, skip this step.
There may be filesystem forensic tools developed for hack analysis that
help...

On Thu., 24 May 2018, 10:35 am Ian Matters via linux, <linux at lists.samba.org>
wrote:

> Good morning again.
>
> Thanks for everyone’s helpful suggestions. I will scratch my head and make
> a recommendation to my friend.
>
> Cheers, Ian Matters
> ---
> On 23/05/18 11:09, Ian Matters via linux wrote:
> > Good morning all.
> >
> > An American friend of mine living here in Canberra was yesterday scammed
> by one of those “Telstra† phone calls from South Asia. My friend is
> quite unwell. The end result of the scam is that he has had most of his
> important data files deleted from the hard drive on his Dell + Windows
> laptop and the external hard drive that was connected to at the time. I
> have suggested that he stop using
> > his computer until such time that he can take both the computer and the
> external hard drive to a data recovery specialist.
> >
> > My question to this group is for suggestions for the names of data
> recovery specialists that he could approach in order to recover as many
> files as possible. Any suggestions?
> >
> > Cheers, Ian Matters
> > ---
>
>
>
> --
> linux mailing list
> linux at lists.samba.org
> https://lists.samba.org/mailman/listinfo/linux
>