Aller au contenu principal

Image

Thread needs solution

Dear All,

I have copied an image to an external HD which was encrytped with Bitlocker under Windows 8. Unfortunately all data on that drive was replaced by the image.

Is there a way to get to old data back?

Mandy thanks,

cheers

Protilos

0 Users found this helpful

I don't understand. A backup image is just a file, a .tib file. It can happily coexist with other Windows files and does not overwrite disks.

Perhaps you Cloned the disk instead of creating a backup?

I made a recovery with Acronis. And during that recovery (which was an image backup which I recoverd to a different HD) all existing data on that external and with Bitlocker encrypted HD were overwritten by the image files.

So, I need to get back to my old data....

When you recover a full disk image to a target drive, that target drive is erased as the disk image is written over it. So, data are gone.

If you thought you might want the contents of that disk, you should have created a backup of it prior to overwriting it with the disk image restoration.

That`s what I recognised, too. But prior to recovering the image to the target drive I recovered back-up files to the same target drive without any problems and unfortunately there was no warning by the Acronis software.

However, there are tools to recover deleted files. Do they work with Acronis as well? What did happend when I recovered the disk image to the target file? Did Acronis formated the targed drive prior to written the data on it? The recovered image file was smaller than the data on the targed drive.

When you recover a disk image, it overwrites the target disk. Previously-existing files are not "deleted" as in a Windows deletion. The disk is overwritten at the sector level.

As such, I doubt that normal deleted file recovery tools would work. What might work are the more powerful forensic tools that can examine various levels of a drive to find past overwritten data. But, it's a long shot.

If you had wanted the files from that drive, I don't understand why you would overwrite the drive with a disk image.

Thanks a lot. Do you have any recommandations for powerful forensic tools?

Sorry, it has been years since I used one. You want one that examines the disk deeply, rather than the simple ones that just undelete files.