Computer Forensics, Data Recovery and EDiscovery/Remotely Corrupted Flash Drive Data Recovery

Advertisement


Question
Hello. My name is Jon and I'm a researcher for the CBS television show CSI: Crime Scene Investigation. It's my job to make sure our show is as accurate as possible and I often get amazing help from experts here at Allexperts.

I'm writing you in the hopes you can help us with a question for our next episode about flash drives. This point is a big part of our story.

An attorney was secretly sent a flash drive with video footage on it.  Well, he is going to try to show that footage to another lawyer, yet the flash drive has been corrupted and the footage is gone.  

We were thinking it would be cool if someone had remotely corrupted it. Can you possibly give us some ways that someone could do this? Is that even possible?  

As a follow up to the above, if someone is able to remotely corrupt the drive and erase the footage, could a computer forensics person somehow get the video file back? Or, if the person who corrupted it was so good as to permanently erase the footage, could we extract other seemingly innocuous items that once existed on the drive and were erased, like a photo? We thought it would be interesting to find a random photo of something benign buried on that drive, and our computer forensics person could go into the metadata on the photo and find out where that shot was taken.  That would then lead us to the person who used to own that mystery flash drive.

Make sense? I appreciate any thoughts you may have here.

Best

Jon

Answer
Hi Jon,


It's rarely possible to corrupt any storage device remotely, If I'm not wrong. However, there is high probability to get your data back unless its overwritten or any new files were saved into that location.

Though, It seems that the person has injected some king of virus/trojan on the targetted system awhich later makes the flash drive corrupted or inaccessible.

You could try some professional recovery software which comes in try first and purchase only when satisfied module, so you could see the recoverable files in the preview pane and ensure that the video is still exist on the drive and can be recovered once you purcahsed the software.

Download this software and install on your PC:

http://www.stellarinfo.com/partition-recovery.htm

Start program from the all programs menu or from the shortcut created at the desktop screen. From the drive list menu, you could able to see the corrupted flash drive. Click to select it and choose 'RAW Recovery' from the pop up menu open at the right side of the software window.

As RAW recovery would performs sector by sector scan, this process could take some time so please have patience.

Note: If the desired flash drive is not listed in the software drive list screen, you'll need to take help of data recovery pros like Kroll on Track or Drive Savers Data Recovery.

Please Ping me back if you're facing any difficulties.

Good Luck Though!!

Thanks

Computer Forensics, Data Recovery and EDiscovery

All Answers


Ask Experts

Volunteer


Oliver Powell

Expertise

Hard Disk Drive Problems, Windows Errors, Hardware Failure, Recovery from system Crash, Forensics Data Recovery, Troubleshooting steps after hard drive failure, Recently introduced technology. Questions should be hardware related and possible about software for disaster recovery as well but not related to any gadgets or Adviser tool. http://www.stellarinfo.com

Experience

More than 12 Years of experience in the field of Computer hardware. Researching everyday about recovery steps when the hardware failure problem happens to any in my circle. Trying and implementing the new ways to make these things easier than ever before.

Organizations
California University

Publications
Wikipedia.org About.com Answerbag.com

Education/Credentials
B.E(Graduated From California University in 2002) Research and Development.

Awards and Honors
N/A

Past/Present Clients
N/A

©2016 About.com. All rights reserved.