:: FINALDATA - World Class Mobile Forensic & Data Recovery Solution ::

	FINALDATA Standard 3.0	FINALDATA Enterprise 3.0	FINALDATA Enterprise Network 3.0
Undelete[1]	O	O	O
Delete Detection	O	O	O
Recover Physical Drive	O	O	O
Recover Lost File	O	O	O
Preview	O	O	O
File Viewer[2]	O	O	O
Delete Protection	O	O	O
Recover Office File	x	O	O
Save File System Information	x	O	O
Recover E-mail	x	O	O
Network Recovery	x	x	O
Save Sector (Dump)[3]	x	x	O
Print Report	x	x	O
Custom File Format	x	x	O

[1]Undeletion is a feature for restoring computer files which have been removed from a file system by file deletion.

[2]file viewer enables content to be viewed or printed on all supported operating-system platforms but does allow creation or editing of files.

[3]dump is a snapshot of an application at the point in time the dump is taken and shows what was executing, what modules are loaded etc. It is most often used for backing up a database so that its contents can be restored in the event of data loss. Corrupted databases can often be recovered by analysis of the dump.

No.

Question

Why does the file name of the recovered file have a # in front of it?

Diagnosis The file name recording system is a bit complex in the Windows environment. First, if the file name has more than 8 letters or if the letters are mixed (upper and lower case), Windows saves two types of information. One is a short file name for DOS and the other is a long file name for Windows. Second, if the file name has less than 8 letters and comprises only of one letter (upper or lower case), Windows only saves the short file name information for DOS. In the first situation, the first letter of the file name can be recovered, but in the latter situation, there is no information on the first letter of the file name and # is given to the file name as the first letter.

Should I install FINALDATA in advance?

Diagnosis Just because you haven't installed FINALDATA in advance doesn't mean that recovery is impossible. Even after a file is deleted, FINALDATA can be installed to recover lost files. However, since the [File Delete Manager] only becomes active when the software is installed in advance, the recovery rate will be much lower. This option helps raise the rate of recovery for a lost file by saving the file information of every file that is deleted. When installing FINALDATA after the data loss has occurred, it is recommended that you install it into a different drive from the drive of the deleted file. If your system contains only one drive, please connect that HDD, as a slave, to a computer with FINALDATA installed in it. This is because byinstalling FINALDATA in the drive of your deleted file, data in that drive could become overwritten. There should be little or no operation in the drive of the deleted file to have a better chance of recovering a deleted file.

My hard disk cannot be recognized.

Diagnosis
First, you must verify if your hard disk is logically damaged or physically damaged. If your hard disk is physically damaged this means that the CMOS setup or Fdisk cannot recognize your hard disk. In this case, recovery of data using a data recovery software is impossible.
If your hard disk is logically damaged, this simply means that your hard disk is either not booting or that there is damage to your MBR, FAT.

How to Recover
1.Please connect a HDD which is not recognized as a slave under a system in which FINALDATA is installed.

2. After Running FINALDATA, please select the [File]-[Open] menu

3. After selecting the physical drive tab, please select the HDD in which the desired deleted drive exists. Then select the [File Format] option.

4. FINALDATA will scan your HDD and find your original unformatted drive. If the right drive is found, please continue by selecting [Select Format]. If not, continue scanning by selecting [Continue].

5. FINALDATA will start the Directory Scan. After the Directory Entry search is completed, you will be asked to perform a Cluster Scan. Please start the Cluster Scan by selecting [OK].

6. After the Cluster Scan is completed, please refer to the [Lost Directory/Lost Files] folder, located under the [Deleted Directory/Deleted Files] folder and search for the deleted file you are looking for. Files can be found easily by selecting the [File]-[Find] option.

7. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

Due to the misuse of Partition Magic, I have lost data.

Diagnosis
PowerQuest's Partition Magic is a very useful software, but when in use there are some important things the user should be aware of. First, please refer to the recovery disk that Partition Magic provides for you. Partition Magic's recovery disk takes errored partitions and returns them to its original form. If you are unable to recover your data, FINALDATA is required. It is recommended that you download and test the demo version of FINALDATA on our website.

How to Recover
In order to recover data on a HDD which is damaged by Partition Magic, you should find the original partition of your formatted hard disk and then recover the desired data from that specific partition.
Please follow the procedures below..

1. Please connect a HDD which is damaged by a Partition Magic as a slave under a system in which FINALDATA is installed.

2. After Running FINALDATA, please select the [File]-[Open] menu

3. After selecting the physical drive tab, please select the HDD in which the desired deleted drive exists. Then select the [File Format] option.

4. FINALDATA will scan your HDD and find your original unformatted drive. If the right drive is found, please continue by selecting [Select Format]. If not, continue scanning by selecting [Continue].

5. FINALDATA will start the Directory Scan. After the Directory Scan is completed, you will be asked to perform a Cluster Scan, please start the Cluster Scan by selecting [OK].

6. After the scan is completed, please refer to the [Lost Directory/Lost Files] folder, located under the [Deleted Directory/Deleted Files] folder and search for the deleted file you are looking for. Files can be found easily by selecting the [File]-[Find] option.

7. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

Due to the misuse of a GHOST, I have lost all prior data.

Diagnosis
A Ghost program creates an image file which contains a partition or data information for the whole hard disk. This allows you to recover data.

If the present data is damaged by a previous ghost image file, it means that the overwritten harddisk is the same size as the image file. If the data you want to recover is in the range of the overwritten, recovery is not possible. However, if it is outside of this range, it has a chance to be recovered. Please download and test the demo version of FINALDATA.

How to Recover
When trying to recover files from a hard disk that was overwritten by a GHOST image file, you must first recover the original partition. Please follow the procedures below.

1.Please connect a HDD which is damaged by a Ghost image as a slave under a system in which FINALDATA is installed.

2. After Running FINALDATA, please select the [File]-[Open] menu

3. After selecting the physical drive tab, please select the HDD in which the desired deleted drive exists. Then select the [File Format] option.

4. FINALDATA will scan your HDD and find your original unformatted drive. If the right drive is found, please continue by selecting [Select Format]. If not, continue scanning by selecting [Continue].

5. FINALDATA will start the Directory Scan. After the Directory Scan is completed, you will be asked to perform a Cluster Scan. Please start the Cluster Scan by selecting [OK].

6. After the Scan is completed, please refer to the [Lost Directory/Lost Files] folder, located under the [Deleted Directory/Deleted Files] folder and search for the deleted file you are looking for. Files can be found easily by selecting the [File]-[Find] option.

7. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

I have accidently deleted an important email

Diagnosis
First of all, you must confirm what type of Email was deleted. Personal email services on the web which save information on the web server's HDD and not your personal HDD cannot be recovered from. However, if you are using a mail client program, in which files are saved on your personal HDD, recovery is possible. In order to recover lost Emails, it is recommended that you use an Email recovery program instead of a standard recovery program. Currently, FINALeMAIL 1.2 and FINALDATA Enterprise 2.0 support the recovery of deleted Email. There are many different types of Mail Client programs available today. Below are the Mail Client programs that FINALDATA can support.
- Outlook Express 4.0/5.0/6.0 (Currently, Office Outlook is not supported.)
- Netscape Mail, Eudora Mail, AOL Mail

How to Recover
Recovery of Email is divided into two categories : the deletion of Email by the Mail Client program and the deletion of Email data by the actual operating system.

The recovery example below is for the Outlook Express file recovery.

In case an Email was deleted from the Mail Client Program

1. After running FINALeMAIL, please select the [File]->[Start Email Recovery] menu.

2. Select the drive the Email was deleted from and select [OK].

3. FINALDATA will start the Directory scan. After the Directory scan is
complete, you will be asked to perform a Cluster scan. Please select
[Cancel].

4. Within the data files found in the scan, please select the file in
which the deleted Email is contained. FINALDATA will search for deleted
Emails within this file.

5. After searching the deleted Email, you can save it by selecting the [File]-[Recover] menu.

I would like to recover a program using the add or remove program option.

Diagnosis FINALDATA cannot recover a deleted program. Of course, if the program is very basic and does not use the system registry, recovery is possible. However, if the program is composed of many different files and uses the system registry, recovery of that program will be difficult..

I would like to recover files which have been deleted long time ago.

Diagnosis Just because your data was deleted a long time ago, doesn’t mean recovery of that data is impossible. The rate of recovery depends on how active the drive in which the deleted folder was saved in. This is because the file, in a certain drive, can be overwritten by a newly saved file. However, you can see if your file has been overwritten by performing a scan of the drive. Please try the demo version of FINALDATA on our website..

I have formatted my floppy disk.

Diagnosis In order to save data on to a floppy disk, a file system is required, just as is required on an HDD. Formatting a floppy disk before saving data on it will initialize the disk. After this you can save and erase files on a floppy disk. However, the actual file allocation and information is left behind . When quick formatting a floppy disk, only the file allocation and information is initialized. As a result, recovery of this data is possible. When standard formatting a floppy disk, the whole file itself is initialized. As a result, recovery of data with a data recovery program is impossible. If you have Quick Formatted your floppy disk, please download and test the demo version of FINALDATA.

I have performed a low-level format on the HDD in which my data was saved on.

Diagnosis A quick or standard format initializes the file information. The actual data still exists on the drive. Therefore, recovery is possible with FINALDATA. However, a low level format initailizes not only the file or data information but the actual data itself. Therefore, recovery in this situation is impossible.

I have formatted a HDD with 2 partitions.

Diagnosis
The front part (first sector) of the HDD contains the boot loader and the file information regarding the partition of the HDD.
The front part (first sector) of the partition also contains the information about each partitions.
If an HDD has multiple divided partitions and the whole HDD is formatted, then the partition information located in the front part (first sector) will be initialized. This is why partitions from before formatting cannot be found in the future. However, the partition information of each partition still exists, which is what make recovery possible.

How to Recover
The recovery procedure for recovering the lost data would be to first recover the original partition (drive) and then to scan for the deleted data within this partition.

1. Please connect the system in which FINALDATA is installed and connect the formatted HDD as a slave.

2. After running FINALDATA, please select the [File]-.[Open] menu.

3. After selecting the physical drive tab, please select the HDD in which
the desired deleted drive exists. Then select [Find Format].

4. FINALDATA will scan your HDD and find the previous drive. If the right drive is found, please continue by selecting [Select Format].

5. FINALDATA will start the Directory Scan. After the Directory Scan is completed, you will be asked to perform a Cluster Scan. Please start the Cluster Scan by selecting [OK].

7. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

I have accidentally formatted a partition from the drive my data was saved on

Diagnosis
The data on a drive still exists, even after formatting, as long as the data has been saved in. However, since all the data information on the drive has been initialized, the recovery rate will not be very high. The recovery of files after formatting is different depending on whether the formatted file system is the same as the old file system or not. For example, if the original file system was FAT32 and formatted to FAT32, the operation would be different than if it was formatted to NTFS.

How to Recover
In case the formatted file system is the same as the original File system.

1. Please install FINALDATA. At this time, installing FINALDATA in the same drive as the drive of the deleted file can cause the file to be overwritten. It is recommended that the software is installed in a different drive from the drive of the deleted file or run FINALDATA directly from CD.

3. Select the logical drive in which the deleted data was located and select [OK].

4. FINALDATA will start the Directory Scan. After the Directory Scan is completed, you will be asked to perform a Cluster Scan. Please start the Cluster Scan by selecting [OK].

5. After the scan is completed, please refer to the [Lost Directory/Lost [Files] folder, located under the [Deleted Directory/Deleted [Files] folder and search for the deleted file you are looking for. Files can be found easily by selecting the [File] - [Find] option.

6. After searching in the deleted file, you can save it by selecting the [File]-[Recover] option.

I have accidentally deleted files from a folder used to share data on a network.

Diagnosis
This is a case when the deleted data is not located on my computer, but is located on a different computer's folder which is shared on a network connection.
The recovery will not be performed on my computer but on a different computer, using a network connection.
If FINALDATA was installed in advance, the recovery rate would be much higher.

How to Recover
The process of data recovery will differ according to whether or not you installed FINALDATA in advance. Please follow the procedures below..

1. In case FINALDATA was installed in advance.(File Delete Manager is active.)

1. After running FINALDATA, select the [File] ->[Open] menu

2. Select the logical drive in which the deleted data was located and select [OK].

3. FINALDATA will start the Directory Scan. Please select [Cancel].

4. After the scan is completed, you can search for the deleted file in the [Recently Deleted Files] folder. The files will be placed according to the date it was deleted.

5. After the scan is complete, refer to the [Deleted File] folder, located underneath the [Deleted Directory], in order to begin Searching for the deleted files. You can start the search easier by selecting the [File]-[Find] menu.

6. In case steps 1-4 does not provide you with the desired file please go back to step 3 and perform a cluster scan. After the cluster scan is complete, refer to the [Lost File] section and search in the [Lost Directory folder] in order to find your deleted file.

7. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

I have emptied the recycle bin after placing some data in it.

Diagnosis
This is a case when the data information of a file was deleted and the actual data is still available. File recovery is possible in this type of situation.

However, the recovery rate of an NTFS system could be lower than that of a FAT32 file system. By installing FINALDATA in advance, the file information of a deleted file is automatically saved, allowing a higher recovery rate.

How to Recover
The process of data recovery will differ according to whether or not you installed FINALDATA in advance. Please follow the procedures below..

1. In case FINALDATA was installed in advance.(File Delete Manager is active.)

1. After running FINALDATA, select the [File] ->[Open] menu

2. Select the logical drive in which the deleted data was located and select [OK]

3. FINALDATA will start the Directory Scan. Please select [Cancel].

4. After the scan is completed, you can search for the deleted file in the [Recently Deleted Files] folder. The files will be placed according to the date it was deleted.

5. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

6. In case steps 1-4 does not provide you with the desired file please go back to step 3 and perform a Cluster Scan. After the cluster scan is complete, refer to the [Lost File] section and search in the [Lost Directory folder] in order to find your deleted file.

7. After searching the deleted file, you can save it by selecting the [File]-[Recover]] option

I have deleted important files without utilizing the recycle bin.

Diagnosis

This is a case when the data information of a file was deleted and the actual data is still available. File recovery is possible in this type of situation.

However, the recovery rate of an NTFS system could be lower than that of an FAT32 file system. By installing FINALDATA in advance, the file information of a deleted file is automatically saved, allowing a higher recovery rate..

How to Recover

The process of data recovery will differ according to whether or not you installed FINALDATA in advance.
Please follow the procedures below.

1. In case FINALDATA was installed in advance.(File Delete Manager is active.)

1. After running FINALDATA, select the [File] ->[Open] menu

2. Select the logical drive in which the deleted data was located and select [OK].

3. FINALDATA will start the Directory Scan. Please select [Cancel].

4. After the scan is completed, you can search for the deleted file in the [Recently Deleted Files] folder. The files will be placed according to the date it was deleted.

5. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.

2. In case FINALDATA was not installed in advance.

1. Install FINALDATA. This time, installing the software in the same drive as the drive of the deleted file may cause the file to be overwritten. Install FINALDATA to another drive or run the FINALDATA directory from CD

2. After running FINALDATA, please select the [File]-[Open] menu.

3. Select the logical drive in which the deleted data was located and select [OK].

4. FINALDATA will start the Directory Scan. After the Directory Scan is completed, you will be asked to perform a cluster scan. Select [cancel].

5. After the scan is complete, refer to the [Deleted File] folder, located underneath the [Deleted Directory], in order to begin searching for the deleted files. You can start the search easier by selecting the [File]-[Find] menu.

6. In case steps 1-4 does not provide you with the desired file, please go back to step 3 and perform a cluster scan. After the cluster search is complete, refer to the [Lost File] section and search in the[ Lost Directory] folder in order to find your deleted file.

7. After searching the deleted file, you can save it by selecting the [File]-[Recover] option.