07-06-2012, 03:07 PM
Join Date: Jun 2012
| | Re: anyone interested in evidence gathering thread?
Originally Posted by Thorburn
I am in. I have my wife's old computer (that crashed) and I know there are things in it that I would just like to have a look at. I am not ignorant of computers but would like some help.
Leave the computer alone.
Easiest thing for this is a program called active boot disk. it's 100 bucks. You download it and burn it to a cd/dvd. Then you start the computer with this cd in the drive. you may have to enter the one time boot menu. (dell is f12, gateway is del , not sure about the other manu. If you need to find it just google "boot menu for "enter your manufacturer here") Then select your cd drive with the active boot disk in the drive.
You with enter a windows like screen and you can run a HD scan and recover deleted files, or files that are hidden.
There are others but active is the easiest one I have ever used.
If you can't spare a hundred bucks there are some less user friendly linux tools you can use.
Also if the drive is not damaged and you already have an admin account you can change the password. IN control panel / user account
Last edited by badbane; 07-06-2012 at 03:19 PM.