I'm looking for a recovery/undelete program that will recover as much of a file as possible if it's been partially overwritten since deletion.
Background - about a week ago my OH told me that her main browser wasn't working and hadn't been for a week. I found a malicious program that had found its way onto her machine and basically rendered the browser inaccessible. After removing the unwanted program the browser still wouldn't work, so I uninstalled and reinstalled it. No joy. Uninstalled it again, deleting the user profile; still no joy. So used System Restore to get back to before the unwanted software got onto the computer. The browser now works again, but she has no bookmarks. My fault for not backing them up.
So, an entire system restore has taken place since the bookmark database was deleted, which is quite a lot of disk writes. I'll be trying Restoration and Recuva tonight to see if the file is still there, but as it's fragmented it's unlikely, right? So I'm looking to go in armed with a program that will not just bomb out and say it's unrecoverable, but will say "here are the fragments I could find" and let me copy & paste the recovered text out to a new file. Anyone know of such a program? Preferably one that can be run as a portable app so that there's no installation to further reduce the chances of recovery.
Oh, and in case it's relevant, it's a mechanical HDD.
Background - about a week ago my OH told me that her main browser wasn't working and hadn't been for a week. I found a malicious program that had found its way onto her machine and basically rendered the browser inaccessible. After removing the unwanted program the browser still wouldn't work, so I uninstalled and reinstalled it. No joy. Uninstalled it again, deleting the user profile; still no joy. So used System Restore to get back to before the unwanted software got onto the computer. The browser now works again, but she has no bookmarks. My fault for not backing them up.
So, an entire system restore has taken place since the bookmark database was deleted, which is quite a lot of disk writes. I'll be trying Restoration and Recuva tonight to see if the file is still there, but as it's fragmented it's unlikely, right? So I'm looking to go in armed with a program that will not just bomb out and say it's unrecoverable, but will say "here are the fragments I could find" and let me copy & paste the recovered text out to a new file. Anyone know of such a program? Preferably one that can be run as a portable app so that there's no installation to further reduce the chances of recovery.
Oh, and in case it's relevant, it's a mechanical HDD.
