15 votes
Accepted

How can I find out which sectors are used by files on NTFS?

ddru_ntfsbitmap It will read in the NTFS bitmap and write out a ddrescue domain file with used blocks marked as finished. Next you should use this file with -m (--domain-mapfile=) option of ddrescue. ...
6 votes

Recover deleted file that was already overwritten

I deleted a pdf from the Trash about a month ago. That is a very long time to leave deleted file remnants on your system. It will have been over-written, likely many times. There is no hope at this ...
  • 43.3k
5 votes
Accepted

Recover deleted file that was already overwritten

While you might be able to see filenames and sizes that doesn't mean that you will be able to recover any actual data. Filesystem metadata is stored differently in the filesystem from actual file data ...
  • 87.5k
3 votes

ddrescue: How to restart from pass 1?

There seems to be an option for that: -A, --try-again mark non-trimmed, non-scraped as non-tried -M, --retrim mark all failed blocks as non-trimmed (Both ...
  • 407k
1 vote

ext4 disk modified by windows 10 and now lost all files on that drive

You did too much formats and partitioning so I am afraid the probability you can restore something is quite miniscule. You can try the utils for file recovery but be prepared they find nothing or ...
  • 4,264
1 vote
Accepted

File Contents Replaced with 0xFF (and a few 0x7F)

If a file is filled with byte pattern like FF FF FF then there's nothing you can recover from this file. However since this is happening on a USB flash drive I'd like to add the following: NAND memory ...
1 vote

Recover deleted file that was already overwritten

...I ran out of disk space using PhotoRec... Is it lost forever or is there some "better software" out there that might be able to find it? You've lost the file. That is, if you restored ...
1 vote

Recover deleted file that was already overwritten

It sounds like it is probably lost forever, although I can't guarantee that. The only way to be completely sure would be to exhaustively look through a copy of the drive, cross off everything that is ...
1 vote

How to retrieve files from a Microsoft Surface Go 2 with broken screen?

Just disconnect your internal screen and boot with your external screen connected. It worked with my Surface Go 1.
  • 11

Only top scored, non community-wiki answers of a minimum length are eligible