LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices



Reply
 
Search this Thread
Old 10-29-2009, 07:00 PM   #1
katesfb
Member
 
Registered: Nov 2006
Posts: 58

Rep: Reputation: 15
data recovery software


Hi,
Can anybody suggest any good data recovery software that runs under linux and can recover data from linux partitions as well as fat and ntfs partitions.

Cheers.
 
Old 10-29-2009, 07:50 PM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,709
Blog Entries: 54

Rep: Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966
Searching LQ and looking at the bottom of this page in the "Similar Threads" will yield a ton of posts about 'photorec', its companion app 'testdisk' and much more. But maybe it would be best if you start by trying to explain what exactly happened. That makes it easier to post more specific information.
 
Old 10-29-2009, 08:17 PM   #3
onebuck
Moderator
 
Registered: Jan 2005
Location: Midwest USA, Central Illinois
Distribution: SlackwareŽ
Posts: 11,451
Blog Entries: 4

Rep: Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505
Hi,

'TestDisk' is a good utility to recover files or data when possible. Even if you formatted and did not write to the hdd then you possibly can recover some and possibly all of the data on the desired filesystem.

'TestDisk' is on 'SystemRescueCD', 'UBCD' and 'RIP' LiveCD to name a few.
'PhotoRec' is another recovery tool.

You can get other LiveCDs that may aid you from the 'Tools, Recovery, Diagnostic, Emergency' section of 'Slackware-Links'. More than just SlackwareŽ links!
 
Old 10-29-2009, 10:43 PM   #4
katesfb
Member
 
Registered: Nov 2006
Posts: 58

Original Poster
Rep: Reputation: 15
Hi,
Thanks for the replies. Basically, to cut a long story short, i accidentally, partially formatted a vfat partition to ntfs. I turned off the laptop just after i realised but by then the damage had been done. Although the drive is recognised (have set it up in a USB drive), it has no directory structure or anything. I have not written anything else to the drive since.

To get the drive recovered commercially is going to cost a lot of money and since i am a linux user i thought there must be a linux solution although i hadnt found one that seemed to work.

I will investigate "testdisk" - does this have the ability to resurect the original directory structure (aparently this is the best option) or take the files off in raw format (but then i have no idea how to get them back to the format they were in).

Cheers.
 
Old 10-30-2009, 01:48 PM   #5
unSpawn
Moderator
 
Registered: May 2001
Posts: 27,709
Blog Entries: 54

Rep: Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966Reputation: 2966
Searching LQ will yield some posts about accidentally formatted partitions. Basically formatting a filesystem overlays a mesh, a web-like structure, over disk contents (in contrast to zeroing out a partition which destroys filesystem contents). So everything not touched by the structure is more or less available. The problem is that entities are linked to their parent. For example a file is "linked" to it's parent (a directory) and a subdirectory is linked to its parent (a directory) as well. To confuse you even more, files which size exceeds a certain size will be broken up and "recorded" in different parts of the filesystem and those parts may be linked directly or indirectly. Removing the existing filesystem hierarchy and structure on disk (by formatting) destroys those links. Photorec (or foremost, scalpel, pyFLAG, et cetera) will try to determine the start and end of a file looking for distinct header and footer signatures (called carving). This is kind of a brute-force approach since not all files have distinct header and footer signatures and if there's files mixed in between they may be carved as part of the resultant file as well.

The best way to procede would be to boot a Live CD and make a bit-by-bit copy of the disk to another separate physical medium (removable USB storage?) before doing anything else with the machine. This way you always have a backup to fall back on might the need arise.
 
Old 10-30-2009, 02:35 PM   #6
themanwhowas
Member
 
Registered: Nov 2005
Distribution: CentOS 5, BT5, Slackware 12.0
Posts: 207

Rep: Reputation: 29
The first program i ever made in perl was for file recovery. It's not very good so I use foremost. You can recover specific filetypes with foremost such as all .doc files for example or a range of filetypes
 
Old 10-31-2009, 01:15 PM   #7
onebuck
Moderator
 
Registered: Jan 2005
Location: Midwest USA, Central Illinois
Distribution: SlackwareŽ
Posts: 11,451
Blog Entries: 4

Rep: Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505Reputation: 1505
Hi,

That's one of the basic reasons to have a LiveCD like 'UBCD' or 'SystemRecueCD' on hand whenever you need to boot. So you have utilities to perform recovery, fix or whatever on a 'unmounted filesystem.

I recommend that all users should download a Utility LiveCD before you have any kind of problem. Hopefully you will never need it in a emergency but use it to aid in maintenance of your system(s).

 
Old 10-31-2009, 03:32 PM   #8
thorkelljarl
Senior Member
 
Registered: Jun 2008
Posts: 1,743

Rep: Reputation: 196Reputation: 196
You too...

http://www.cgsecurity.org/wiki/TestDisk_Step_By_Step

Google for additional guidance.

Last edited by thorkelljarl; 10-31-2009 at 05:03 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Data Recovery Software linuxtreo LinuxQuestions.org Member Intro 1 05-29-2007 05:43 AM
LXer: Linux Data Recovery on Windows - Is possible through Disk Doctors Linux Recovery Software LXer Syndicated Linux News 0 10-22-2006 01:21 PM
Best Data Recovery Software. rvijay Linux - Software 6 03-08-2005 09:48 PM
data recovery software box_l Linux - Software 2 08-09-2004 11:41 AM
recovery data software starofflame Linux - Software 1 06-23-2004 02:18 PM


All times are GMT -5. The time now is 03:18 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration