Undeleting files from a USB stick, FAT32

Josh000 · 04-29-2010, 02:20 PM

I accidentally did rm -rf /mnt/usbdisk while my usbdisk was mounted to that location. I then copied a 350mb file to that disk before I realized what I had done.

Now I wished to recover some files from there. I tried testdisk which shows some filenames, but none contain useful data after copying them. Or even remotely recognizable data.

My question is is it to late? Has copying the 350mb fiel already overwritten the smaller textfiles?

Otherwise, is there a better undelet program to use?

H_TeXMeX_H · 04-29-2010, 03:16 PM

Another program you can try is foremost:
http://foremost.sourceforge.net/

There is a reasonable chance that you have overwritten the smaller files and thus they are permanently lost.

Josh000 · 04-29-2010, 03:35 PM

Ahh I thought as much. I didn't know about foremost, thanks H_TeXMeX_H

In 2001/2 I remember using a program that allowed you ti display your hard-drive or storage device as raw data represented hexadecimaly. It had a curses interface and was quite useful, although I can't for the life of me remember what it was called. Would anyone have any idea?

H_TeXMeX_H · 04-30-2010, 05:42 AM

Well, you can use 'most' or 'hexdump' or 'od'.

Josh000 · 05-01-2010, 03:05 PM

No no.....it was a particular curses program...its really strange I can't find it now....hmmm

H_TeXMeX_H · 05-01-2010, 03:16 PM

Try sourceforge and freshmeat, it's bound to be listed in both.