Restoring data from an overwritten file

Y

YujiTFD2011-09-16 06:58:45

TheBat

YujiTFD, 2011-09-16 06:58:45

Hello.

Given: TheBat! size >2Gb
Actions: the built-in procedure for archiving a large mailbox was used.

Received: TheBat! size 0Mb + no backup copy of the mail database. In other words, the built-in procedure worked out the database in /dev/null for some reason, the archive database file did not

appear ? Once again, I note that the container was not deleted, it remained with the same name, but was cleared.

Thanks in advance.

UPDATE . I'm sorry, flew out of my head: FS - NTFS.

UPDATE # 2 The moped, in fact, is not mine, the situation is on the computer of a colleague's client

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

I

Ivan Tikhonov, 2011-09-16
@YujiTFD

First, no action on a live system, if there is important data, we merge the sector-by-sector image of the disk, only then we start shamanism.
Well, then there is little information, you need to know which FS, as I understand it, there were no backups? I turn on shadow copying on servers and desktops, I highly recommend it, it helps a lot from such unexpected people.

U

Ura78, 2011-09-16
@Ura78

Try to restore the database using the WinHex program

U

ulego, 2011-09-16
@ulego

Connect the hard as passive and run testdisk, after checking P, in my opinion - a listing of directories, you can copy any file from there.

Y

YujiTFD, 2011-09-19
@YujiTFD

Thanks everyone for the replies, a colleague said he closed the question. Chose answerfor valuable advice with shadow copying.