Hot answers tagged

4

Quite simply, its probably impossible if dd finished its work -if you stopped it partway, any data that wasn't overwritten should be recoverable. Testdisk is most useful when a system got formatted - and this usually involves 'marking' sectors as not in use, rather than erasing them. With modern drives, despite what the guttmann paper says, overwriting the ...


4

To begin with, proceed with caution. You don't want to write anything at all to this disk if you want to keep everything. Photorec is a great little program for this scenario. It will dump everything it can find on to another drive. Names of files might be garbled or useless, and directory structure and folder names will be lost, but at least everything ...


4

I just ran into this exact same problem and found a fix: Sort the list of recovered files alphabetically If a file ending in .mov is immediately followed by a much smaller file ending in _ftyp.mov, it can likely be fixed; the _ftyp.mov file apparently contains header information To fix the video, combine the two files, placing the header file first. For ...


3

As per the link you provided, PhotoRec ignores the file system. That's an advantage in some cases, since it can attempt to recover media even from badly damaged devices. However, it won't take file fragmentation into account. This explains why the smaller files work, but the bigger ones don't. I suggest you try another file recovery software to attempt to ...


3

Is there anyway to recover the data, short of going to a data recovery service That depends on what is broken, but first stop trying to rescue the data. Depending on what is broken your recovery attempt might worsen the changes of rescueing anything. So if you really need the data on that hard disk contact a data recovery service. Their prices are high. ...


3

Unfortunately, the migration to Windows 8.1 was permanent. You cannot go back to the old preview or anything, the data was removed after you upgraded. You will have to reinstall all your applications. The partition table has nothing to do with your apps, as the partition the preview was on will have been erased and replaced with the new 8.1 data.


2

I really believe that if you have really important information in your disk, you should try professional help from companies that recover data. They are experienced in this field and could help you more than tutorials on the internet. But if you want to go on by yourself: Do not write anything in your drive. Keep it intact; Use a file recover tool. I've ...


2

Once you know a file system is corrupted, I would not let anything write to it. First thing I would do is copy the disk byte for byte to an identical disk or perhaps to a file on another disk. Once that's done, you can try various tools to recover your data. If a recovery tool hasn't worked, but has written to the disk, then you can always copy from your ...


2

A friend dropped her Acer Aspire One KAV10 on the ground while it was still powered on and it restarted with "No boot device found" "PXE-M0F" etc. Your problem seems similar but your solution wasn't really that intuitive so I'd like to elaborate on what I did to fix it. I burnt a copy of UBCD511, booted into Parted Magic (using defaults), opened xterm and ...


2

Photorec does do that, its one of the more annoying things about it, but its meant to recover files in scenarios where its more important to get the data.It often is able to rebuild images from fragments in situation where commercial software can't. As such i tend to run recurva first (it preserves filenames) THEN testdisk in a recover scenario. (practically ...


2

the clue is in your second picture - the disk is a GPT Protective Partition. This means the data has been accessed on a system that does not properly understand GPT disks. The only Windows systems that understand GPT disks are XP (64 Biit only), Vista, Windows 7 and Windows 8 The only way I have seen to retrieve the data without cost is to boot using a ...


2

I am Alex who posted above. I fixed my problem so I figured I'd write out my solution in case anyone runs into the same thing. First, for completeness, I'll mention that the Ubuntu disk utility was giving me extremely weird information that I didn't include in my first post: it showed two 438GB partitions one after the other on a 500GB hard drive. After ...


2

Try the GPLv2 PhotoRec/TestDisk tools. It really helped me when I lost some important files. PhotoRec


2

After some brief testing and only with TestDisk and sfdisk in a virtual environment (I can't confirm that creating a new partition table in something like fdisk or gparted would leave it in tact) I'm inclined to say no, writing a partition table won't affect anything other than the first 512 bytes. Below are the test steps... I created a 100MB hard drive ...


2

Each of those is an alternate data stream (ADS), which, in general, is arbitrary extra data programs (or the OS) associates with a file in an NTFS file system. SkyDrive (now OneDrive) apparently uses an ADS called :ms-properties to store some sort of meta-data it uses about the file. See Brian's first comment on this thread. In a data recovery scenario, it ...


2

It's dead by the looks of it. I'm afraid this isn't uncommon, memory cards do die quite regularly. Always have a backup (it sounds like you have if you aren't worried about the contents).


2

I would run a (destructive) read-write test from linux. Consult the man page for all options, or run badblocks -v -s -w -t 0xff -t 0x00 /dev/sdb. It will leave the disk overwritten with 0 when its done.


2

It's a good general practice to make backup before you mess with the drive. I understand you do not suspect your drive to be faulty, so it is not really important whether you work with it or with its image. Still, working with one and not touching the other has one big advantage (over working without backup): if something goes wrong you will have an intact ...


2

Will ddrescue make recovering an overwritten partition easier? It will be "easier" only if the original drive is faulty, otherwise the difficulty won't change. ddrescue ensures that all of the readable data is copied on the bitstream copy (image drive). Recovery tools might freeze or crash while working on a damaged drive, hence working on a copy which "...


1

looks simply to be an outdated driver... try windows update or reformat the drive with the computer or if while transferring data you unplugged the drive it could have off set memory addressing on old drives this is more likely just one bit and the entire name file is shot.


1

First of all: If the MBR sector (sector 0) is BAD you can forget about this. After all the MBR must reside in sector 0. It can't be anywhere else. If the bad sectors could be remapped by using the Seagate tool the disk is still bad enough that you must ONLY attempt to copy the data of. Anything else with the disk is sheer folly. A disaster waiting to ...


1

The solution to get back the missing files was to use a commercial software from Windows. Create a disk image on a removable drive from Linux (without mounting the damaged file system). Recover the file structure from the image with GetDataBack. Copy back the recovered files to their original location. Rebuild grub.cfg with update-grub. (I still had a ...


1

I guess that your only option is a recovery utility such as the ones that you have used. I'd add the free Recuva from Piriform. There are also other freeware and commercial disk tools that can prove useful, but their success is not guaranteed. All the file bytes should be there on the disk, or at least a large parte of them. Unfortunately, the file names ...


1

You can use PhotoRec in sysresccd Live Distro. Read PhotoRec's manual fisrt. It's here. Download sysresccd here.


1

Some ideas Clean the CD - if necessary CD Cleaning If still no success copy the disc to disc/image and try to read it out from the copy (search the internet for the drivers/files)


1

I managed to manually edit disk entry about extended partition this allowed me to see it correctly under GParted. At this point problem is solved.


1

You need to hook the drive to a port that can be put into something to the effect of "Legacy" "IDE" mode. This is (usually) changeable within the motherboard's BIOS. Basically, no AHCI, no RAID, no Enhanced SATA controller options, as these would require additional drivers that the Seatools disk isn't going to contain, and probably couldn't support since ...


1

Turns out these are all sideaffects of the NVELO Dataplex cache drive installation in the laptop. When Dataplex was installed it did this munge to the partition table and fixes it with invisible driver magic in windows. We have to uninstall dataplex to use the drive from a non-dataplex aware operating system. They do not have linux drivers nor do they ...


1

There's a chance that your disk might be partitioned using GPT, in which case fdisk will only see the "protective MBR" with a big fake partition. Try using gdisk, or some other GPT-aware partitioning tool, instead.


1

Use a Linux Live CD to copy data off of the laptop drive to an external drive, once your data is safe use the Factory restore discs to recover the laptop to a factory state, then see this article on how to properly create a fifth partition without damaging the partition structure or making the OS unbootable.



Only top voted, non community-wiki answers of a minimum length are eligible