Question about windows recovery console

[pyl2os]

Ok I have an issue and I have gotten great advice in the past from this site, so here it is. My brother apparently infected my mother's computer with malware last night. In his haste to fix the infection he apparently ran windows recovery console. Now I don't know anything about recovery console, but my mother is upset and thinks that all of her data that she had prior to him using windows recovery console is gone.

My question: Is this data really gone and can it be recovered? I do not know for sure what my brother did with recovery console, but from the way he talked to me it sounded like windows was restored to a previous state. Any information you could give me would be great because my mother is crying her eyes out thinking she may have lost pics and documents from years ago (and I know she should have backed them up, but she is computer illiterate). Thank you again for any help you can give me.

-David

[PhilliePhan]

My question: Is this data really gone and can it be recovered? I do not know for sure what my brother did with recovery console, but from the way he talked to me it sounded like windows was restored to a previous state.

Hi David,

It is hard to give you a definitive answer without more information. From what you describe, it sounds to me as if your brother used the recovery partition to restore the computer to its original state (right out of the box).

If this is the case, then ALL added programs and data will have been lost and you will need to reinstall all Windows updates, old programs, etc....

However, if he had taken this drastic a step, I would imagine you'd be able to tell from talking to him. Perhaps he only did a System Restore?

The recovery console is usually a last resort if Windows won't boot properly, so I'm a bit confused as to why he' start there - Perhaps he wanted to do a system restore and instead did system recovery?

I recently helped a friend restore her compy using steps similar to those outlined in the link below:
http://www.pctechbytes.com/hp-recovery.htm

If your brother did this, then you are not going to be able to recover any lost data without a specialized program or shop.

Best luck
PP

[itrush07]

I'm also interested with this kind of problem, I still remember when I ended up reformatting my hard drive because I already have run out of solution to fix the problem. Anyways, based on the problem above, what if 'the brother' uses Windows System Restore (restore to a previous state) are there still ways to recover important data? I would also love to hear any answer to this kind of problem.. thanks

[pyl2os]

Hi David,

It is hard to give you a definitive answer without more information. From what you describe, it sounds to me as if your brother used the recovery partition to restore the computer to its original state (right out of the box).

If this is the case, then ALL added programs and data will have been lost and you will need to reinstall all Windows updates, old programs, etc....

However, if he had taken this drastic a step, I would imagine you'd be able to tell from talking to him. Perhaps he only did a System Restore?

The recovery console is usually a last resort if Windows won't boot properly, so I'm a bit confused as to why he' start there - Perhaps he wanted to do a system restore and instead did system recovery?

I recently helped a friend restore her compy using steps similar to those outlined in the link below:
http://www.pctechbytes.com/hp-recovery.htm

If your brother did this, then you are not going to be able to recover any lost data without a specialized program or shop.

Best luck
PP

From my understanding he ran the Basic windows recovery option that he say under the boot menu. For some reason it was available as an option at start up and has been since my mother purchased the computer (I think). And if that is the case I guess I am going to have to use a data recovery program. Are there any that you reccommend I use? I currently have R-studio which I used when my last hard drive crashed on me. Will this be sufficient of is there a better program out there you can reccommend?

Also am I going to need to unplug the drive from her computer and put them into another computer in order to retrieve data? Because from my understanding you cannot recover data off a hard drive onto the same hard drive unless it was on a different partition, which I know my parents computer is not. Along those same lines what exactly would I be looking for with my recovery software because last time I used it for my crashed hard drive it was really straightforward. This time though I will probably be looking for data that isn't necessarily in the C drive that is present. Any suggestions you could give would be great.

Thanks for your help by the way and I would appreciate any further information you can give me.

-David

[pyl2os]

I went ahead and looked at your link in your original post and that is exactly what my brother did I think because he told me it ran for a while and returned to what appeared to be factory settings. So does that mean the data is lost for good or can I still hope to retrieve or salvage some of the data on the computer?

Thank you again for any help you can give me.

-David

[PhilliePhan]

Anyways, based on the problem above, what if 'the brother' uses Windows System Restore (restore to a previous state) are there still ways to recover important data?

That won't work - he already has re-formatted and reinstalled Windows from the recovery partition.

So does that mean the data is lost for good or can I still hope to retrieve or salvage some of the data on the computer?

Hi David,

I am not sure - I think this would depend on the "level" of format (for lack of a better word) and how completely the drive was wiped.... I would think that, with this type of re-install, you'd be able to recover some data.

R- Studio may do the job. There are tons of programs available that claim to work miracles, but I am not familiar with them.

You could look at these, but I wouldn't know which to recommend:

http://majorgeeks.com/download.php?id=38

http://www.file-recovery.net/
http://www.runtime.org/
http://www.recovermyfiles.com/
http://www.easeus.com/landing/format-recovery.htm?
http://www.diskdoctors.net/recover-d...l-windows.html

Some of these sites offer trials and instructions.

I'm a bit skeptical by nature - some of these programs claim "miracles" and I'd urge caution before spending cash on them.....

Here is a bit of a "how to," pushing another product....
http://www.buzzle.com/articles/how-t...ard-drive.html

Also am I going to need to unplug the drive from her computer and put them into another computer in order to retrieve data? Because from my understanding you cannot recover data off a hard drive onto the same hard drive unless it was on a different partition, which I know my parents computer is not.

That would seem logical to me - I doubt it is workable or advisable to try to create a partition on the existing disk for obvious reasons, LOL!

Frankly, if the data is really valuable to your mother, I'd advise taking the hard drive/computer to a shop that specializes in or at least has experience in recovering data. That would be my best advice to you.

Best Luck
PP

[pyl2os]

I went home this weekend and worked on the computer and for the most part was able to restore the computer to its previous state. The lone exception being Microsoft Office Suite 2007 which I was unable to salvage.

I do have a question about Office though. Can I possibly repair Office with the install CD or something else to save my parents the money of having to buy it all over again? The reason I think repair is feasible is because I can still read the data from the previous state of the computer as though it was data on the hard drive. Unfortunately I cannot run programs and what not because I believe the registry was changed when my brother ran the recovery console. Is there any hope in salvaging Office?

Anyway thank you for your help it really came in handing and I would appreciate any other help you could give me.

-David

[cauzomb]

If office came installed on the computer as new you should be able to re-install it via the recover/restore CD's, or find it manually on the CD's using windows explorer. If it's not on the CD's but the PC came preloaded with office suite, from the factory, see If there's an extra "hidden partition" on the hard drive; some MFG's use a hidden partition to store the OS and pre-loaded software. If it was preloaded, but not on the CD, the office install/setup exe may be located in the extra partition.