Open Source and Free Software

RoccoR5955

(12,471 posts)

2. From the limited amount of information you give

Sun Apr 14, 2013, 01:38 PM

Apr 2013

The only way would be a bit by bit scan of the computer.
You should remember that files are not really deleted on a computer, until the storage (aka hard drive) is out of room. They are then overwritten.
Typically, when you delete a file, the file is marked as deleted, and eligible to be overwritten, if needed, on that part of the storage.
There is software that can read the raw data on a storage device, and this is what is necessary if one is to read a file that is "deleted."

Edit history

Please sign in to view edit histories.

Recommendations

0 members have recommended this reply (displayed in chronological order):

9 replies

= new reply since forum marked as read

Highlight:

Anyone know a computer forensics person to asks if someone wipes important info. off the internet [View all] midnight Apr 2013 OP

Need...more...input... TroglodyteScholar Apr 2013 #1

I need to recover the search history of a work computer... I have been told it is wiped clean midnight Apr 2013 #3

Read up on the index.dat file TroglodyteScholar Apr 2013 #5

Thanks for the two links... midnight Apr 2013 #6

From the limited amount of information you give RoccoR5955 Apr 2013 #2

Do you know the name of a software that could make available a search history on a particular midnight Apr 2013 #4

I don't know that, but RoccoR5955 Apr 2013 #7

I only know the a specific time period... Would that cut down on the time? Thank you for your midnight Apr 2013 #8

Not at all RoccoR5955 Apr 2013 #9