From Jonsdocswiki

Data recovery is very hit and miss - not guaranteed at all. While you may get some data back it's possible that you won't retrieve all of it or the last saved version of that all important file.

Step 1 - explain to the user

Rather than get the user's hopes up too high, explain to them that data recovery isn't guaranteed and they may not get their data back. It's also worth discussing backup routines with them in case they ever have a problem in future. Unless they've saved somewhere they shouldn't, it's important to remember it's unlikely to be the user's fault.

Step 2 - gather your tools

For the purpose of this tutorial we're going to use Handy Recovery v1 (freeware). So you'll need to download that now if you've not already got it - the link goes to the download page.

• Install Handy Recovery
• Ensure the drive to recover files from (floppy disk, USB stick, hard disk) is connected to the machine you install Handy Recovery on.

Other data recovery tools for Windows

• Recuva (freeware)
• NTFS Get Data Back (commercial

Step 3 - begin recovery

1. Run Handy Recovery
2. From the drop down menu (top left) choose the drive to analyse.
3. Click the analyze button (top left), results will be shown in the right hand pane.
   • A file with a red x on it has been deleted.
   • A file represented by a white page is still on the device and accessible.
4. Select the files to recover
   • The left hand pane will allow you to navigate the device's directory (folder) structure.
   • Holding down ctrl will allow you to select multiple files.
5. Click the Recover button to launch the recover wizard.
6. Specify the location to restore data to.
7. Click OK
8. Browse to the specified location (C:\Recovered Files by default) and check the files.

Note: Files that have been recovered may not be what they appear - it's possible they'll have the right file name but the wrong contents. Additionally, files may be corrupt.

Handy Recovery screenshots, step by step.(Click for larger version)

Choose the drive to analyse.

Results of the drive analysis.

Running the recovery wizard

If the files haven't been recovered then you can try advanced file recovery but bear in mind this takes longer and it's still possible the files won't be restored.

Step 4 - clean up

1. Remove unwanted recovered files.
2. Place required recovered material in a sensible location.
3. Uninstall Handy Recovery if you don't plan to use it again on this computer.

See also

• Data Recovery part 2 (advanced)
• Post Incident Response Disk
• Useful Utilities
• Technicians' CD Toolkit