![]() ![]() Select which types to recover.Īs you can see in Figure 4, I have ‘unticked’ the last four file types, such as bmp, bkf, etc. You can also go to Options to select a specific type of file to recover (e.g., Figure 3). Next, select a partition, as shown in Figure 2. In my case, it is my HP pen drive, shown as /dev/sdb (Figure 1). Select the disk from which to recover data. ![]() Next, fire up the terminal, and navigate to the directory where it’s extracted. I will show you how to recover data from it, using my laptop that runs Ubuntu 11.10.įirst, download PhotoRec from the link mentioned earlier, and unpack it. Now, I have an 8 GB pen drive containing some data that I have formatted. Recover the files to a separate partition on the same hard drive.Recover the files to a networked storage drive.Recover the files to a separate hard drive.Also, PhotoRec will most likely recover a lot of files, so the partition/medium on which you are storing recovered data should ideally be at least as large as the partition/medium being recovered. PhotoRec recovers files by finding deleted files and copying them to another disk/medium (files should not be recovered to the partition/medium which has the deleted files because that could lead to data being overwritten, as explained before). In case TestDisk fails to do the job, use PhotoRec. This software claims to recover individual files, such as ZIP, Office, PDF, HTML, JPEG and 390 other file extensions. Copy files from the deleted FAT, exFAT, NTFS and ext2/ext3/ext4 partitions.Undelete files from the FAT, exFAT, NTFS and ext2 filesystem.Locate the ext2/ext3/ext4 backup superblock.Recover the NTFS boot sector from its back-up.Rebuild the FAT12/FAT16/FAT32 boot sector.Recover the FAT32 boot sector from its backup.Fix partition tables and recover deleted partitions.TestDisk claims to perform the following operations: This software should be used to recover lost partitions, or to make non-bootable disks bootable again. You could consider keeping a CD of one of these in your toolkit to guard against such emergencies. Tip: CGSecurity has a list of live CD images, which includes their utilities, here. Therefore, shutdown that OS immediately, and boot with a live CD or a live USB that does not write to that medium. This means you shouldn’t continue running the OS that is using that partition or medium in read-write mode even applications like a browser caching files, the OS downloading and applying updates in the background, or downloading new files and installing new packages, could cause the space of the deleted file to be overwritten. Thus, when you find that you have accidentally messed up and lost data that you want, you should avoid writing new data to the medium. Now, recovery of the old file becomes very difficult (though not impossible for experts). When a new file is written to the disk, and uses this “available” space, it replaces the previous data with new data. This indicates that the space previously used by the file can be used to store other data - it is now “available” space. When a file is “deleted”, its entry is removed from the table of contents. Only a pointer to the file is deleted as yet, not the data, which remains on the disk.ĭata stored on a medium as files has a “table of contents” indicating the storage location for each file (name) on the drive. If you have emptied the Recycle Bin, permanently deleted the file using Shift+Delete or an rm command at the command-line, you may think the file is irretrievable - it isn’t. Usually, when we delete a file, it goes to the Trash/Recycle Bin, provided the file is not larger than the bin’s capacity. Reboot the system with a live CD or other live version of Linux running off other media, like a USB thumb drive.ĭon’t attempt to perform a recovery on your own if you are a novice.ĭon’t mount the media that had lost data just yet.ĭownload TestDisk or PhotoRec if not available in the live CD.ĭon’t use any random software that claims to recover data. The don’tsĭon’t write any more data to the device. The following table lists the dos and don’ts that must be followed in case you have lost data (on external media, on the internal hard disk of your laptop, etc).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |