can we recover lost data from pen drive due to virus

TyrOd

Honorable
Aug 16, 2013
527
0
11,160


You have a good chance if you stopped using it immediately after the data was deleted.

if you continued to use it you have a much lower chance. Either way you'll need a professional lab to look at it and possibly scavenge for the data.
 

TyrOd

Honorable
Aug 16, 2013
527
0
11,160


There's no such thing as "forensic equipment". Forensic refers to the process or purpose of data recovery for use in litigation.
There are data recovery hardware tools and software and there is forensic software used for the imaging/preparation of data for use in litigation.

in this case, either the data has been overwritten and cannot be recovered or it is at least partially still present and can be recovered with only software methods.
 

clutchc

Titan
Ambassador


I beg to differ...
http://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=1&ved=0CD8QFjAA&url=http%3A%2F%2Fwww.ssddfj.org%2Fpapers%2FSSDDFJ_V1_1_Breeuwsma_et_al.pdf&ei=eL8oU4_-DeSMyAHtrIG4BQ&usg=AFQjCNGPR6LXyHiDHAT7-goay3hYT2ItGQ&sig2=vowNh772ji27J9DTyP0Fog&bvm=bv.62922401,d.aWc
 

TyrOd

Honorable
Aug 16, 2013
527
0
11,160


Again..."Forensic" doesn't mean what you think it does.

Forensic Data Recovery used to be used synonymously with Physical Data Recovery on various devices because it was much more expensive even a few years ago and therefore considered uneconomical for anything but legal use because law firms could afford the huge costs.

"Forensic equipment" is an obsolete term that is a leftover from those days.

There are no tools exclusive to forensics and flash extraction tools are commercially available to anyone who wants to do this kind of "forensic" recovery.

 

TyrOd

Honorable
Aug 16, 2013
527
0
11,160


Sorry.

I didn't mean to be an ass, I was just clearing it up because there is soooo much misunderstanding of how data recovery labs actually operate internally and what they can do.

My overall point was that chip extraction tools are used for recovering data when the controller hardware is failed and the NAND is otherwise inaccessible through normal means.

If the device is not physically failed, then you can get a 100% dump with software only.

Best Regards,

Tyr
 

TRENDING THREADS