Page 1 of 2 12 LastLast
Results 1 to 10 of 12

Thread: recovery of deleted files

  1. #1
    Join Date
    Jan 2010
    Location
    South Africa
    Beans
    38
    Distro
    Ubuntu

    Exclamation recovery of deleted files

    Hello

    I desperately need some help, over 40gb of files has been erased from my computer, I am currently running Ubuntu 12.04, is there a way of recovering these files, these files are very hard to get back and I regret not making a backup of all these files, can anyone help me asap, I tried extundelete and also recover and scalpel but they do not seem to find the deleted files,thanks in advance.

  2. #2
    Join Date
    Oct 2008
    Location
    Down Under
    Beans
    1,566
    Distro
    Xubuntu 12.10 Quantal Quetzal

    Re: Help with recovery of deleted files

    Do Not Use The Drive, that over writes your data.

    SpinRite is the only recover software I've heard of, that actually works.
    It will not give up, it's record is one year.
    It does cost though, depends how important the data is ?

    https://www.grc.com/sr/spinrite.htm

    Rodney
    Last edited by Rodney9; April 14th, 2012 at 08:45 PM.

  3. #3
    Join Date
    Oct 2009
    Location
    Reykjavík, Ísland
    Beans
    9,484
    Distro
    Lubuntu 14.04 Trusty Tahr

    Re: recovery of deleted files

    Photorec is another option.
    About problems due to upgrading
    Bringing old hardware back to life.
    Please visit Quick Links -> Unanswered Posts

  4. #4
    Join Date
    Mar 2011
    Location
    U.K.
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: recovery of deleted files

    You don't explain the format of the devices erased.

    ext3, ext4, ntfs ?

    Here is yet another data recovery utility.

    http://download.cnet.com/Stellar-Pho...-10204904.html

    As explained above don't install recovery utilities into the drive you're trying to recover.
    Safer to have another USB drive to clone into.


    Some other approaches which might help ..

    http://www2.opensourceforensics.org/tools/unix

    http://forensiccop.blogspot.com/2009...-recovery.html

    http://accessdata.com/products/computer-forensics/ftk

    http://www.ubuntugeek.com/recover-de...in-ubuntu.html

    install foremost from Synaptics Package Manager
    install scalpel from Synaptics Package Manager
    the target partition containing the deleted data to be recovered should not be mounted

    http://www.runtime.org/data-recovery-products.htm

  5. #5
    Join Date
    Jan 2010
    Location
    South Africa
    Beans
    38
    Distro
    Ubuntu

    Re: recovery of deleted files

    I tried Photorec, the files are music files the file formats are .mp3, .avi, .dat, .flv, .mpg, .wma, .wmv, Photorec gives too many results of files I do not need, ther are over 5000 songs that have been deleted and 300 music videos, I'm not so worried about the music videos, scalpel would work if it was possible to put mp3s into the configuration file. It is an ext4 file system that I am trying to recover from, it was all deleted from one main folder and there were various subfolders within the folder, is it possible to recover from just that folder instead of searching the whole partition and giving me back useless junk? Oh and the files deleted were only deleted yesterday. Thanks

  6. #6
    Join Date
    Mar 2011
    Location
    U.K.
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: recovery of deleted files

    Stellar Phoenix Linux (see link above) should help you recover ext4 (runs on Windows)

    Read also here http://ubuntuforums.org/showthread.php?t=1958153

  7. #7
    Join Date
    Jan 2010
    Location
    South Africa
    Beans
    38
    Distro
    Ubuntu

    Re: recovery of deleted files

    The problem is that I have now Windows system to use and I can only use this hard drive, is there no other way to recover the data using the hard drive currently mounted. Thanks.

  8. #8
    Join Date
    Mar 2011
    Location
    U.K.
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: recovery of deleted files

    This explains the Live CD data recovery options .. although you may have already tried some of these

    http://www.howtogeek.com/howto/15761...buntu-live-cd/

    [p.s.]

    that tutorial above warns you ..

    Note: Do not recover files to the hard drive you’re recovering from.
    Same warning from Rodey9 above

    Do Not Use The Drive, that over writes your data
    So you may have to invest in a external USB drive .. which will be useful/essential for backup.

    However if you have 40 GB of data to recover you could gamble that by installing Stellar Phoenix on Windows (or RecoverMyFiles) you won't lose too much data (you might lose some .. but not 40 GB).

    You will still need an external drive to save the recovered data into.
    Last edited by dragonfly41; April 15th, 2012 at 03:40 PM. Reason: added warning note ...

  9. #9
    Join Date
    Apr 2012
    Beans
    1

    Re: recovery of deleted files

    Recommendation: ext4magic

    on ubuntu you must compile it.
    Docu : see also: Scenarios-Site: Howto 1..3
    use: the histogram function to determine the begin of the deletion process and use it as "AFTER" time

    and recover
    Code:
    ext4magic DEVICE -m -a 127??????? -d /FREE/SPACE/FOR/RECOVER
    Of course, you need external drive space to save the recovered data.
    If extundelte can't find these files, no old inode copies of these files available,
    so you have to look through the whole file system to find the data blocks,
    and so you will find a lot files that you do not need.

    ext4magic looking and recover based on the journal data which were written during the deletion.

    It's a multistage recover process
    * First recover step: similar "extundete --recover-all"
    * Second recover step: is not included in any other program
    * Third step: works like Photorec but more accurately matched to ext4

    For a good result, the journal data of the filesystem should not be overwritten after deletion.
    Therefor a good idea immediately after the deletion, umount or
    or create a copy of the file system or save the journal data.

  10. #10
    Join Date
    Mar 2011
    Location
    U.K.
    Beans
    Hidden!
    Distro
    Ubuntu 12.04 Precise Pangolin

    Re: recovery of deleted files

    I forgot this one .. extundelete .. might be the same as above ..

    http://samiux.blogspot.co.uk/2011/04...tories-on.html

Page 1 of 2 12 LastLast

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •