Ubuntu: Recover data from a formatted windows hard drive [duplicate]


This question already has an answer here:

dont know if its right to post on here but i have a bit of problem.

I had a windows 8 laptop and partitioned it into 4 partitions. Now i had reserved one partition for a linux installation. I had a disc of linux mint and installed it on the laptop selecting the partition. when i restarted my machine i found out that all the 4 partitions had been wiped and linux mint had all my disc space. now i am trying to recover the data.

My windows PC does not recognise the hard drive, is there any way to get this data? i have some windows programs to recover data but the hard drive just wont get detected. please help!

how can i recover this data.



I am sorry to inform you that your data is most likely corrupted. May I suggest looking for computer shops in the area see if they can recover any of your data.

Hope this help


I have already written about data recovery here: Recovering Very Important Lost Data From Ntfs Partition Have a look here as well http://help.ubuntu.com/community/DataRecovery and here http://forensicswiki.org/wiki/Tools:Data_Recovery

First of all, if you lost an important file, stop using the file system the file was on NOW. The data you lost might still be on the disk, but the longer you use the file system, the higher the chances are that the data gets destroyed. So unmount that file system or switch the system off now.

I will show how data can be recovered that was on a 2GB USB stick, but in principle that works for HDs as well. It just takes much longer, and you need much more disk space for recovery.

First thing I do is that I create a disk image of the disk. That way I do not accidentally destroy any data that might still be there.

I have stored files on this stick and then reformatted the stick:



Now the file system does not know anything about the files anymore. However the data has not been overwritten and is still on the stick.

Lets try to recover them. I need to recover them the hard way, a simple undelete will not work.

I dump all data from the USB stick /dev/sdi to a file. This Step is essential. I am now working on a copy of the data and am not in danger to destroy the original data.

dd if=/dev/sdi of=USBimage.raw

OK, the data is in a secure place now.

No I try to recover the file. I use the carving tool foremost. Foremost scans the disk for known start and end markers of several file types.

I will now use foremost to reconstruct the file

foremost -i USBimage.raw -o foremostout

And like a miracle the file was reconstructed in foremostout/jpg/00007750.jpg

This works quite well for all files with a clear start and end marker. Look into the foremost man pages for more info.

A bit more effort is needed to restore a simple txt file. Here we have no clear start and end markers.

My favorite way is to extract the strings from the diskimage and then restore the files manually.

strings USBimage.raw > strings.txt

I open strings.txt with vi and find the text I was looking for “This text is very important to me.”

Good luck with recovering your data!

Note:If u also have question or solution just comment us below or mail us on toontricks1994@gmail.com
Next Post »