Originally Posted by mryuck
Tools like dd, ddresuce, dcfld, dd_rescue and linen are used to make bit-by-bit copies of hard disk space. Making a hard disk copy ensures data is kept stored and enables one to work more safely but these tools themselves do not perform any undeletion
. So if that's your only advice for undeleting files then you should read before you post. OK?
Originally Posted by fbsduser
The sectors doesn't get overwritten unless you actually make a new partition over the old ntfs partition.
Replaying a journal log on partition mount, writing a system event log on bootup, automagical system update checking and logging in are examples of (in)voluntary activity on the system
which all can cause freed blocks to get re-allocated.
Originally Posted by esc4p3
I started to copy my files to an external hard drive.
Do you have any previous backups?
What type(s) of files are we talking about?
From which main folder?
Did you ensure all files where still there when you tried to back them up?
How did you access the drive to back files up: from Linux or from Windows?
How much files percentage-wise did you estimate you copied to your external drive?
Did you power down the machine and the external drive immediately
after you noticed you removed the USB cable?
What is the file system of the partition you copied the files to?
Can you verify the integrity of that partition without mounting it?
Can you install testdisk and photorec in Mandriva, attach the external drive (but don't mount partitions) and see if running 'testdisk /debug /log' on the external drive shows the partition(s)?
If it does, can you list files (P key)?
Same for the Vista partition (no need to mount it)?
Please attach the testdisk log as plain text.