Okay, I figured out why I was getting the zero-length files. The short reason is I was looking in the wrong place.
I appreciate both of you responses. I'm downloaded and run IEF without any luck, now I'm going to try Belkasoft's program.
I'm guessing now the real problem is what Jad mentioned...the swapfile/sleepimage files being encrypted. Any suggestions about how to tackle that? It seems like I'll have a greater chance of recovering something with IEF if I can access those files.
Thank you again for your help.
↧