LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Hardware
User Name
Password
Linux - Hardware This forum is for Hardware issues.
Having trouble installing a piece of hardware? Want to know if that peripheral is compatible with Linux?

Notices


Reply
 
Search this Thread
Old 10-30-2008, 08:24 AM   #1
kresho
LQ Newbie
 
Registered: Jan 2006
Posts: 3

Rep: Reputation: 0
Recovering deleted files from vfat partition on damaged disk


I have the following situation: on a vfat partition some important files have been deleted. I tried to undelete them using some undelete tools for windows, but it turns out that the disk has bad sectors, and the undelete tools get stuck on these bad sectors.

Linux to the rescue. I connected the bad disk to my linux box and using ddrescue copied the bad partition to a file. Now I can mount this image file as a loop device.

This is how far I got. I can't find a good tool for linux that would find and undelete the needed files from the image.

The first idea I had was to dump the image onto a physical disk, connect the disk to a windows box and use an undelete tool on it. Unfortunately, I don't have a disk big enough for this.

The next idea was to somehow attach the image to windows in a VMWare VM. I could create another virtual disk image and dump the image file onto the VDI, but again, I don't have enough disk space for a VDI this big.

VMWare can also attach disk devices directly - but only physical disks that the host OS (linux) sees as /dev/sd*.

Finally the question: is there a way to create a loop device mapped to my image file that would look like a physical disk to VMWare? I know mount -o loop does something similar, and I have found examples of creating loop devices, but not how to map them to a image file.

If you can think of an unrelated solution to my problem (recovering deleted files from image file), that would also be helpful.
 
Old 10-30-2008, 12:34 PM   #2
pljvaldez
Guru
 
Registered: Dec 2005
Location: Somewhere on the String
Distribution: Debian Wheezy (x86)
Posts: 6,094

Rep: Reputation: 269Reputation: 269Reputation: 269
You could try using foremost and/or photorec to recover certain filetypes from the image file. Be aware that you need a good amount of space for the recovered documents, images, mp3's, movies, etc, because it will find EVERYTHING that has ever been on the hard disk (unless someone secure wiped it or that block has been overwritten).

I usually recover one type of file (jpg, mp3, doc, etc) at a time. Then I weed through the results. There's some scripts and whatnot that can help you remove duplicates, etc. The file names won't match up, of course, but you may find the file you're looking for...

Is there any particular type of file you're trying to recover? How much space do you have available and how big is the source drive?
 
Old 10-31-2008, 03:06 AM   #3
kresho
LQ Newbie
 
Registered: Jan 2006
Posts: 3

Original Poster
Rep: Reputation: 0
Thanks for your reply.

The image file of the source disk is 75G, and I have about 15G of free space. Around my network I have another 50G in pieces. The 15G I have are the largest piece in the network.

The lost files are Outlook Express mailboxes, about 50 of them, and I expect them to be in total about 20-25G. The largest probably is not larger than 2G.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Strategies for recovering JPEG files from a damaged filesystem yello Linux - General 2 12-17-2007 03:22 PM
Help recovering damaged partition matheusleite Linux - Newbie 1 10-10-2007 12:48 PM
Recovering a deleted and formatted over ext3 partition? Soniku Linux - General 4 04-02-2007 07:12 PM
Recovering deleted files on vfat partition finferflu Linux - General 9 06-25-2006 03:31 PM
Recovering Deleted Files Brian of Gep Linux - Newbie 1 03-02-2004 02:26 AM


All times are GMT -5. The time now is 11:11 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration