Results 1 to 4 of 4
I am working on a laptop that had XP with a bad virus and a hard disc that does not power up from time to time... I wanted to recover ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
- 06-15-2008 #1
recover lost Data
I am working on a laptop that had XP with a bad virus and a hard disc that does not power up from time to time... I wanted to recover the Documents, Pictures and Music. I Thought I got all the data, but after I reformatted and installed Kubuntu I noticed that some of the picture files were not on the USB that I had backed them too...
#1 ? is there a way to get those picture now that Kubuntu is on the disk?
#2 ? I am assuming that since I was getting some errors when I was backing up some pictures that those pictures are the ones that I no longer have. So is it just plan impossible?
ps the hard disk still does not function consistently if that helps...
thank you
- 06-15-2008 #2
You formatted partitions and installed Kubuntu on it. Its not possible to recover data now.
It is amazing what you can accomplish if you do not care who gets the credit.
New Users: Read This First
- 06-15-2008 #3
ok... I guess it is not my fault that the owner of the computer never backed up any of these "important" pictures. Thank you!!!
- 06-15-2008 #4Linux Guru
- Join Date
- Nov 2007
- Location
- Córdoba (Spain)
- Posts
- 1,513
That's why it's not a good idea to plug an usb device off without using the "safely remove the device" option in windows, or unmounting it in linux.
Stop using the disk right now. Then use some tool to find patterns on raw files, maybe it can detect some of these files and extract them, but this is not going to be possible for big files unless they are not fragmented. Files that can fit on a single sector have a much better chance of being recovered.#1 ? is there a way to get those picture now that Kubuntu is on the disk?
I don't know of any tool to do so, but I know such tools do exist. For text files you could use a simple grep command on the device to search for fragments that you can remember (if any):
Some parts of the data might still be there. But the bits that have been overwritten are lost forever unless you can borrow technology from the NSA or the NASA :PCode:grep -n20 "your text" /dev/hda
Can Intelligence Agencies Read Overwritten Data?


Reply With Quote

