We bought and installed Lumigent Log Explorer.
I think it's possible to explore logs taken before installation, so long as they are available e.g. extracted hourly to disk as part of a maintenance plan activity. What it can't do is relate spid's to user idents in logs from before installation (unless you have this recorded and can get the info into Lumigent database, but we never tried that). Lumigent has an option to record spid's and user idents, but we had problems with the quantity of data recorded. If the delete command/data is visible in Lumigent, it should be possible to get it back. However, if the data was truncated rather than deleted then it may not be possible.
In that case (or don't want to buy), you could try restoring a backup of the database (probably best to use another server), export the deleted table contents and then import, which is what we did in a similar situation.