Lately we have seen a number of cases where people tried to recover a deleted file with various software (from DIY DataRecovery and others), but failed to do so: The deleted file simply didn’t show up.

One of the cases involved a Windows Vista reinstallation, during the process user data was deleted. The partition on which Vista was reinstalled was not re-formatted.

We were able to recover the data using iRescue, however not with the standard settings! It's in this type of situations where it pays off to have a NTFS data recovery solution at hand rather than a simple undelete tool. So how did we do it? Well it's, not very complicated:

Simply follow all steps as outlined in the iRescue undelete walkthrough. However, in addition click 'advanced configuration' > the 'NTFS engie TAB' > and the set iRescue to list 'in use' and deleted entries.