Advanced File Recovery
December 16th, 2007 by khermans
So, a few weeks ago, someone made the mistake of upgrading a computer
to Windows Vista from Windows XP. Besides the 8-hour upgrade process
headache (what was it doing?), it also left the machine unusable.
This person ended up reinstalling Windows XP and also installing
Ubuntu. After the whole process was over, this person claimed to have
lost important files. Excellent :-)
Since the partitions were completely destroyed and the OS reinstalled,
file system level access software would not be helpful. So, I dug
deep, and came up big. foremost. This GPL software seems to have
been written by the US military, and as such, is in the Public Domain
by default. It is now GPL software, and you can use it freely.
I read up on the docs, and here's how I got almost all the files back:
* Boot Ubuntu Live CD (never recover files from the HDD-installed system)
* Add extra software repositories to apt
$ sudo sed -i "s/main restricted$/main restricted universe multiverse/g" /etc/apt/sources.list
* Install the application 'foremost'
$ sudo aptitude install foremost
* Create a recovery directory (put this on USB, instead, if you have one)
$ sudo mkdir /root/recovery
* Search the drive for files!
$ sudo foremost -v -i /dev/hda -o /root/recovery
* Maybe you just want all those JPG files you lost and nothing else?
$ sudo foremost -v -i /dev/hda -o /root/recovery -t jpg
Finally, copy your files somewhere safe. If you don't have enough room
in the live system, you could mount a remote partition over NFS, SSH,
etc.
Some of you may be asking yourself what to do if foremost does not support the file types you lost. Maybe you lost some precious OGG files? No worries! Why don't you give 'magicrescue' a try? magicrescue allows you to define the proper "magic bytes" that define the file type. Basically, it's what the 'file' command would check against. You can see all magic definitions in /usr/share/file/magic. You can define your own and use them as input when you run magicrescue. The possibilities are endless.
So, if you need to get your data back desperately, these are
great options for you! Keep on hacking :-)
__________________________
Kristian Erik Hermansen is a Linux Journal Reader Advisory Panelist. Track Me.
Special Magazine Offer -- 2 Free Trial Issues!
Receive 2 free trial issues of Linux Journal as well as instant online access to current and past issues. There's NO RISK and NO OBLIGATION to buy. CLICK HERE for offer
Linux Journal: delivering readers the advice and inspiration they need to get the most out of their Linux systems since 1994.
Sorry, offer available in the US only. International orders, click here.
Subscribe now!
The Latest
Featured Videos
In case you were wondering about the fun side of Linux World Expo, we thought we'd give you a peek at our shenanigans. We at Linux Journal love what we do so much, that we can't help but have a ball wherever we go.
The X Window System is a magnificent platform for many uses, but using it to run an application over a slow network is nearly impossible. This is an introduction to NX, a technology that makes remote applications fly even over commodity internet.
Recently Popular
From the Magazine
September 2008, #173
Feeling a bit like a Thermian? Never give up, never surrender! Someday, you could go from underdog to top dog. Just take a look at a few of the underdogs we highlight in this issue: Mutt, djbdns, Nginix, Gentoo, Xara and the program voted mostly likely to fail just a few years back—Firefox. If Firefox not radical enough for you, check out Chef Marcel's column for some more alternatives. Having trouble mapping your program data to your relational database? If so, Rueven Lerner shows you some tricks in his At The Forge column.
Need to run GUI applications on your server in the next state? In his Paranoid Penguin column, Mick Bauer shows you how to do it securely. Kyle Rankin keeps hacking and slashing and shows you a few split screen secrets you may not be familiar with. Finally, we all know what happens next February, but only Doc knows what happens afterward.
Delicious
Digg
Reddit
Newsvine
Technorati






