ComputerSecurityStudent (CSS) [Login] [Join Now]




|FORENSICS >> File Recovery >> Recuva >> Current Page |Views: 19046

(Recuva File Recovery: Lesson 1)

{ How to Download and Install Recuva }


Section 0. Background Information
  • What is Recuva?
    • Is free software that allows you to recover deleted files even when they have been deleted from the recycle bin.
    • After personally testing over 20+ file recovery tools, only Autopsy and Recuva have been able to retrieve deleted files from not only physical machines, but also VMware platforms.

     

  • Overview 
    • In this lab, we will show you how to do the following:
      1. Download Recuva File Recovery software.
      2. Install Recuva.
Section 1. Login to your Windows XP Server
  1. Booting up WindowsVulerable01
    • Instructions:
      1. Start up VMware Player
      2. Select WindowsVulerable01
      3. Play Virtual Machine
    • Note:
      • WindowsVulerable01 is a Windows XP machine running SP2.

     

  2. WindowsVulerable01 Authentication
    • Instructions:
      1. Login as administrator

     

Section 2. Download Recuva File Recovery
  1. Open a Internet Explorer
    • Instructions:
      1. Start --> Internet Explorer

     

  2. Click on the Download link

     

  3. Information Bar Message
    • Instructions:
      1. Click OK.

     

  4. To help protect message
    • Instructions:
      1. Click on the "To Help Protect Message"
      2. Click on Download File.

     

  5. File Download - Security Warning
    • Instructions:
      1. Click on the Save Button

     

  6. Save As
    • Instructions:
      1. Navigate to C:\tools\Recuva
        • You will need to create this directory, since it will most likely not exist.
      2. Click the Save Button.

     

  7. Download complete
    • Instructions:
      1. Click on Run

     

  8. Internet Explorer - Security Warning
    • Instructions:
      1. Click on Run

     

  9. Installer Language
    • Instructions:
      1. Select English
      2. Click on OK.

     

  10. Recuva Setup
    • Instructions:
      1. Click Next.

     

  11. Recuva Setup
    • Instructions:
      1. Click I Agree.

     

  12. Recuva Setup
    • Instructions:
      1. Click Install.

     

  13. Recuva Setup
    • Instructions:
      1. Do not check (1) run Recuva or (2) View Release Notes.
      2. Click Finish.

 

Section 3. Proof of Lab
  1. Open a Command Prompt
    • Instructions:
      1. Start --> All Programs --> Accessories --> Command Prompt
      2. dir "C:\Program Files\Recuva\Recuva.exe"
      3. date
      4. Press <Enter> Twice
      5. echo "Your Name"
        • Replace the string "Your Name" with your actual name.
        • E.g., echo "John Gray"
    • Proof of Lab Instructions:
      1. Do a PrtScn
      2. Paste into a word document.
      3. Upload to Moodle.

 



Help ComputerSecurityStudent
pay for continued research,
resources & bandwidth