Recovering files micro sd

Is it possible to recover files from a micro sd? It’s 64 gig and was never near full. Files deleted with Windows delete.

Thanks
Bones

Note: i have added files since deleted.

Having added files after the fact makes it more unlikely to recover.

Afraid of that. Thanks.

Thanks. I did do a Google search, wondering what people used. Thanks for the pointer.

1 Like

Searching on here will get you a fair litany of past discussions, replete with the myriad suggestions from folks who’d attempted recovery in the past. Word of warning: most of them require Linux and/or runlives thereof.

https://talk.dallasmakerspace.org/search?q=data%20recovery

I’ve used recuva in the past with some success. If at all possible, make a copy of the drive with a block level copy. If that isn’t possible, don’t restore files back to the thumb drive, save them to a different place.

Thanks for links and advice.

Trying recuva and undelete.

Runtime Software makes GetDataBack for FAT and NTFS. I have used their software for years with decent success in recovering all kinds of data. It is fairly cheap to license. www.runtime.org

You will need another drive big enough to hold all the recovered data. I use the DiskExplorer program to image the drive then run the recover against the image files. Generally need 2-3x the size of the drive to be recovered on another hard drive as recovery workspace.

1 Like

Thanks for the advice.
Question
If a file is moved from one drive to another, can it be recovered on the original drive?

I believe it can be. Moving to another drive essentially deletes it off the source drive as the process runs. As long as the file system has not sustained too much use or writes you should be able to recover some if not most of the files. The longer you wait and the more you use the drive the lower your chances of successful recovery.

1 Like

Anytime there’s data recovery involved I tend to give my guys at https://www.drivesaversdatarecovery.com a call. They’re the best in the industry and worth every pound.

Now, if its not a mission critical recovery then sleuthkit inside linux would be an option then. But basically at the core of it when one “deletes” data from a block device (ssd/hdd) that data still exists meta data and all but the block allocation is not within the file system tables or index therefore the OS will treat it as empty space and thus write to random areas.

Best thing to do is always and i do mean ALWAYS backup and restore before looking at recovery.

file is moved from one drive to another

Any move operations within all operating systems is just two operations;

  1. copy blocks to destination
  2. free blocks from source (ie delete the file) file system tables.

So its basically the same as deleting on the file.

Best thing I can say here is stop using the drive all together and use something like windd to create a full block image of the drive then send me that image.I’ll scan through it with my tools (yes, same level tools that any pro service has) and see what I can recover. Would also need a list of files that are most important to help speed up the process.

EDIT:

FYI, for non-members of the space i do charge a regular fee.

1 Like