Re: Wouldn't he have some pictures?
"(RE: the "empty recycle bin" thing - surely that removes the files from window's inodes? So the data is still there but it doesn't show in directories? Or does "unallocated" refer to a partition that was deleted or something?)"
You are correct. It very much sounds like they ran a raw scan on the drive for anything that looks like image data and found something that had been deleted but not overwritten by another file yet.