Home » Data Recovery » Data Recovery from a Formatted Hard Disk using EnCase Forensics

Data Recovery from a Formatted Hard Disk using EnCase Forensics

This is a school project, our theme was on computer forensics and we decided to recover data from a formatted Hard Disk. Our main objective is to prove that data recovery from a hard disk is possible. It can be used against you as evidence of illegal copyright files such as videos and music. Basically, formatting your drive doesn’t erase any thing at all.

Incoming PC Tutorial search:

Related PC Tutorial:

  1. Data Recovery on a Formatted Drive with TestDisk by Britec
  2. Recovering Data From Formatted Hard Drives Through Data Recovery Software
  3. Data Recovery: Recover Deleted Files and Lost Data for Free with PC Inspector by Britec
  4. Win Data Recovery: Free Data Recovery Software by Britec
  5. Can data recovery programs recover data when the drive has gone corrupt or when the drive is formatted?
Need help on PC problems? Ask us!

25 Comments

  1. shivanand08 says:

    @unholyernest

    dude just wanna ask u recovering files by this method i.e by using any recovery software but in case if u dont have internet then can we recover data manually..how does this software actually works on the system..Can you tell me where it searches and from which location in the system to searches for lost data and recovers it …is it possible to manually recover lost data without using any recovery software

  2. inaj2011 says:

    why use expensive software for forensics just to restore a formated harddisk, there are many free tools out there

  3. Techdude365 says:

    /watch?v=opdQrKXraV8
    its better
    and to get it for free enter
    /watch?v=gvi_t9nh71Q

  4. kawikatube says:

    The Windows XP setup music is so relaxing.

  5. Gangster240212 says:

    @unholyernest I love torrents ;)

  6. amemaitAustin says:

    @unholyernest A “blue screen” format does not wipe any data. It only does a sector-by-sector read to verify that the disk is readable. It marks any bad sectors it finds. It initializes the directory structure, so it will wipe out the root directory of the disk, but those contents are still recoverable by scanning for a directory signature. Only a multiple-pass, low-level format will truly wipe the data and prevent EnCase from recovering it.

  7. TheIceManBig says:

    Where to download free???

  8. taryra says:

    @unholyernest hallo, can you help me? because me unable to do ;((( and you can help me? me skype taryra

  9. taryra says:

    hallo, can you help me? because me unable to do ;((( and you can help me? me skype taryra

  10. mmar4281990 says:

    wats the name of the program

  11. SilentServiceCode says:

    @Recon777x a full “format” still doesn’t erase anything, it just checks for bad sectors, that’s why it takes so long.

  12. pater429 says:

    so if i delete my hard drive, and i will connect it on a other computer, it wil give me those files back?, even if i set my recycle bin to delete imediatly?

  13. sangr3azt3ca says:

    hey can u help me i formated a file from my mp3 and now the drive were i plug my mp3 won’t open cuse it keep sayin i need 2 formate but when it is done formatin it says erro

  14. xInspecteurClouseaux says:

    because I’m the sort of person who will pursue such a matter to the maximum possible extent. I’m heartened to learn that you’re studying this subject, the sort of cowardly sociopaths who perpetrate computer crime believing that they will get away with it need to be taught a lesson.

  15. xInspecteurClouseaux says:

    There are plenty of free and open source tools you can use to do compute forensics. For example Caine Live, DEFT and SIFT (from sans.org) I’ve been using caine to recover evidence from several hard drives in my possession that a certain other youtube user has insinuated contain what he termed illegal porn. I have informed the police about this and the forensic work I have done has given me a good idea as to who has been remotely accessing my computers. It’s best not to fuck with people like me.

  16. unholyernest says:

    I’ll be removing this video soon as i have long completed my project. Got a B grade and thanks everyone for the 10,000 views. its means a lot to me. Hopefully I have answered your questions with my limited knowledge on harddisk recovery.
    I would recommend everyone to backup your data many times. Harddisk recovery is for the forensics, not for commercial purposes. If you really need to recover lost data, bring it to the experts.. they deserve your money.. seriously.. =D

  17. unholyernest says:

    @Recon777x We have already done a format using the windows setup way.. the blue screen way.. if you get what i mean.. we were still able to recover PORTION of the data.. but we didn’t record down.. as for encrypting, I have not done any research on it so I’m in no position to comment..

  18. Recon777x says:

    About this video: You should have drawn attention to the fact that you did a QUICK FORMAT on the drive, which does not actually delete anything. A complete format will not be recoverable. Likewise, if you use TrueCrypt to encrypt an entire drive (which takes hours) your data will be completely 100% secure from programs like EnCase as long as they don’t have your key, which can be any combination of any words and/or files.

  19. unholyernest says:

    @guerocomico estimated 3000 pounds.

  20. guerocomico says:

    how much exactly does this cost to buy it?

  21. tigerintermusic says:

    @dragonkiller301 na i wouldnt bother to try ill just download them over plus my friend has all the songs that really cant get :D so i should be fine

  22. dragonkiller301 says:

    @tigerintermusic damn dude, u can get them back if they were on an ipod i got all mine back

  23. tigerintermusic says:

    @dragonkiller301 try having to lose about 6000:(((((((((

  24. sunny27jan says:

    @aliimalone mail me for that

  25. dragonkiller301 says:

    i accidently formatted my hard drive, there goes my 318 songs :(

Leave a Reply

Need help on PC problems? Ask us!
Copyright © 2006-2011 · Mediaphy Semiconductor Company · All Rights Reserved ·
Powered by INTEL