LinuxQuestions.org
LinuxAnswers - the LQ Linux tutorial section.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices

Reply
 
Search this Thread
Old 04-21-2006, 07:30 PM   #1
Synesthesia
Member
 
Registered: Jan 2004
Location: the abyss
Posts: 205

Rep: Reputation: 30
data recovery methods or software?


Someone at work loaded windows on my linux file server because they thought no one was using the computer!!!!!!!!!
Anyway, there was about 200GB of data on the reiserfs3 partition before they let the windows installer automatically reformat my hard drive. I would really like to retrieve this data. Please recommend me data recovery methods or data recovery software I can utilize to recover my data. Thanks.
 
Old 04-21-2006, 07:34 PM   #2
pljvaldez
Guru
 
Registered: Dec 2005
Location: Somewhere on the String
Distribution: Debian Squeeze (x86)
Posts: 6,092

Rep: Reputation: 269Reputation: 269Reputation: 269
If it was a work machine as you say and the data is valuable, I would pay someone else to do it. Google for this type of service or look in the local phone book.

Now if you really want to do it yourself, use foremost. It's pretty easy to use, but it currently only defaults to recovering a limited number of filetypes (jpegs, gifs, wav, mov, doc, xls, ppt, pdf, and a few others). You can add more filetypes, but you have to manually figure out what the headers look like and then add them to the config file. I've used foremost and recovered 1500 digital photos and several documents from my parents machine after someone accidentally formatted it.

Note that formatting the drive this way leaves most of the data intact. It just wipes out the partition table. Now if they successfully installed Windows, you may have lost up to XX GB of data (however big the windows install was) because it would have overwritten that much data on the drive with Windows files.

Good Luck!

Last edited by pljvaldez; 04-21-2006 at 07:36 PM.
 
Old 04-22-2006, 10:40 PM   #3
Synesthesia
Member
 
Registered: Jan 2004
Location: the abyss
Posts: 205

Original Poster
Rep: Reputation: 30
What apps do the pro's have? I how its not that hard for them to retrieve even overwritten data. Thanks for your reply.
 
Old 04-22-2006, 11:23 PM   #4
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,974
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
Quote:
Originally Posted by pljvaldez
Note that formatting the drive this way leaves most of the data intact. It just wipes out the partition table.
How's that? There were Linux-partitions on there, it
got repartitioned and formatted with NTFS?


Cheers,
Tink
 
Old 04-23-2006, 11:32 AM   #5
pljvaldez
Guru
 
Registered: Dec 2005
Location: Somewhere on the String
Distribution: Debian Squeeze (x86)
Posts: 6,092

Rep: Reputation: 269Reputation: 269Reputation: 269
I glossed over the filesystem change part (my parents drive was NTFS to NTFS reformatting).

But I still assumed it would work the same, because isn't formatting just changing the the partition table and telling the OS how to use the blocks/sectors of the disk? I feel like you shouldn't lose data unless you write over a particular block (like when you shred a disk). Foremost actually scans the disk block by block and finds file headers and looks for a break as to where the end of file should be.
 
Old 04-23-2006, 01:49 PM   #6
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,974
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
I'm by no means an expert, but the last time I saw an XP/Win2K
installation and it said it was formatting NTFS it took an awful
long time for a change in the partition table, and the progress
bar didn't suggest a write to a single block ;}

That said: I have succesfully revcovered data from a machine
that had two partitions originally and was accidentally re-
imaged with ghost.


Cheers,
Tink
 
Old 04-23-2006, 03:55 PM   #7
Synesthesia
Member
 
Registered: Jan 2004
Location: the abyss
Posts: 205

Original Poster
Rep: Reputation: 30
When I guess my case is different them:
I had a reiserfs partition with files on it, and they reformatted the whole hard drive with ntfs.
 
Old 04-23-2006, 04:22 PM   #8
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,974
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
The question is whether the format was a quick or thorough
one ... in case of a quick format you MAY be lucky.

Here's a very nice live-CD with lots of tools that helped
me in the past:
http://www.tux.org/pub/people/kent-r...looplinux/rip/


Also have a look at the following tools:
http://www.cgsecurity.org/wiki/TestDisk
http://www.vanheusden.com/findfile/
http://jbj.rapanden.dk/magicrescue/

magic rescue is part of RIP if I recall correctly.


Cheers,
Tink
 
Old 04-24-2006, 01:29 AM   #9
Synesthesia
Member
 
Registered: Jan 2004
Location: the abyss
Posts: 205

Original Poster
Rep: Reputation: 30
Even if it was formatted over, the pro's can recover it without a problem. So they either have software, hardware, or methods of recovery I don't have. I'll have to do some searches and figure out what they use...
 
Old 04-24-2006, 01:37 AM   #10
Tinkster
Moderator
 
Registered: Apr 2002
Location: in a fallen world
Distribution: slackware by choice, others too :} ... android.
Posts: 22,974
Blog Entries: 11

Rep: Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879Reputation: 879
If the tools I mentioned above won't recover data (because the
formatting was actually writing blocks of 0s over the whole drive)
what they do is decouple the original electronics of the hdd so
they an read levels of magnetic charge other than an absolute 0
or 1 ... good luck ;}


Cheers,
Tink
 
  


Reply

Tags
recovery, reformat, reiserfs


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Best Data Recovery Software. rvijay Linux - Software 6 03-08-2005 08:48 PM
Data Recovery Software for Linux WarlockofVirgo Linux - Software 1 10-06-2004 05:23 PM
Data Recovery Software stabile007 General 1 08-18-2004 04:13 PM
data recovery software box_l Linux - Software 2 08-09-2004 10:41 AM
recovery data software starofflame Linux - Software 1 06-23-2004 01:18 PM


All times are GMT -5. The time now is 03:04 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration