Advanced File Recovery

So, a few weeks ago, someone made the mistake of upgrading a computer to Windows Vista from Windows XP. Besides the 8-hour upgrade process headache (what was it doing?), it also left the machine unusable. This person ended up reinstalling Windows XP and also installing Ubuntu. After the whole process was over, this person claimed to have lost important files. Excellent :-)

Since the partitions were completely destroyed and the OS reinstalled, file system level access software would not be helpful. So, I dug deep, and came up big. foremost. This GPL software seems to have been written by the US military, and as such, is in the Public Domain by default. It is now GPL software, and you can use it freely.

I read up on the docs, and here's how I got almost all the files back:

* Boot Ubuntu Live CD (never recover files from the HDD-installed system)

* Add extra software repositories to apt
$ sudo sed -i "s/main restricted$/main restricted universe multiverse/g" /etc/apt/sources.list

* Install the application 'foremost'
$ sudo aptitude install foremost

* Create a recovery directory (put this on USB, instead, if you have one)
$ sudo mkdir /root/recovery

* Search the drive for files!
$ sudo foremost -v -i /dev/hda -o /root/recovery

* Maybe you just want all those JPG files you lost and nothing else?
$ sudo foremost -v -i /dev/hda -o /root/recovery -t jpg

Finally, copy your files somewhere safe. If you don't have enough room in the live system, you could mount a remote partition over NFS, SSH,
etc.

Some of you may be asking yourself what to do if foremost does not support the file types you lost. Maybe you lost some precious OGG files? No worries! Why don't you give 'magicrescue' a try? magicrescue allows you to define the proper "magic bytes" that define the file type. Basically, it's what the 'file' command would check against. You can see all magic definitions in /usr/share/file/magic. You can define your own and use them as input when you run magicrescue. The possibilities are endless.

So, if you need to get your data back desperately, these are great options for you! Keep on hacking :-)

Comments

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

Ogv recovery

Mel's picture

Hey,
Is there any way to recover a .ogv file?

Webinar
One Click, Universal Protection: Implementing Centralized Security Policies on Linux Systems

As Linux continues to play an ever increasing role in corporate data centers and institutions, ensuring the integrity and protection of these systems must be a priority. With 60% of the world's websites and an increasing share of organization's mission-critical workloads running on Linux, failing to stop malware and other advanced threats on Linux can increasingly impact an organization's reputation and bottom line.

Learn More

Sponsored by Bit9

Webinar
Linux Backup and Recovery Webinar

Most companies incorporate backup procedures for critical data, which can be restored quickly if a loss occurs. However, fewer companies are prepared for catastrophic system failures, in which they lose all data, the entire operating system, applications, settings, patches and more, reducing their system(s) to “bare metal.” After all, before data can be restored to a system, there must be a system to restore it to.

In this one hour webinar, learn how to enhance your existing backup strategies for better disaster recovery preparedness using Storix System Backup Administrator (SBAdmin), a highly flexible bare-metal recovery solution for UNIX and Linux systems.

Learn More

Sponsored by Storix