Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

My laptop has two os. one is windows vista. and other is Ubuntu. I am currently on ubuntu system, this is my primary OS.

There are 4 partitions of my hard disk

  1. Windows OS
  2. Linux(Ubuntu OS)
  3. Data

Now the problem part. The data partition is NTFS. I have mounted this partition on the location /media/windrive-a under ubuntu OS.

A little while back i decided to delete the mounting of the data partition and i fired command rm -r /media/windrive-a/. To give me a shock; all my data on data drive is gone.

Now, I know this is not the command to remove mounted partition. But I have committed the wrong. Is there any way i can get my data back. These are very important data for me.

Please suggest.

share|improve this question
add comment

2 Answers

up vote 4 down vote accepted

Your best bet would be to "freeze" the data filesystem and don't alter it. For recovery attempts, make a partition image with dd and try to recover files from there.

WARNING: dd is a dangerous command if you misuse it by mistake, so make sure you understand what it does, how it does it and double check the command line before hitting Enter.

You might want to try TestDisk, it claims to be able to recover stuff from NTFS. Can't vouch for it, because I've never had to deal with such situations (yau, I've never experienced loss of personal data, see below why).

Also, since you said that the data is very important to you, there's something else you must consider. If you would have a backup, that would save you. It seems you don't have one yet, so after dealing with data loss, it'll be a good idea to think about a backup strategy for really important data.

share|improve this answer
2  
I can vouch for TestDisk; best tool for this kind of thing, I'd say. –  squircle Apr 18 '10 at 14:54
add comment

In the old times I used to use undelete, a DOS command that usually required remembering the first letter of the archive list it showed you (?y_file.doc ) and required no alteration, no save or touch the disk (btw, an overwrite with the same name of the file will kill any possibility of recovering it, as far as I know). As all what can save you is a temporary memory, would be overwritten with new activity.

For NTFS, I have not needed to try, (I am on the same page as Geek, I'm paranoid with backups, so rarely lose something), but from time to time I end up at below site, I am curious if it really is useful. Probably it is, quite, and it is open source :

http://ntfsundelete.com

share|improve this answer
    
Dennis... You vote down just for finding small typos? is this allowed or a good habit? I am quite ok about you editing them so(not sure if some fixes are correct), I think it's quite a good thing to do(English is not my first language, though), but..I don't think it deserves down voting, if other users had found my answers useful, and I am finding you are doing this with a lot of my answers. Voting down, if it was you who did, so many answers, might have other purposes behind... I like your graphical stack proposal, but... Not that I care much about this points thing, but I just find it weird. –  S.gfx Aug 25 '10 at 10:22
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.