Causes Of Low Ferritin Low Vitimin D
fell into my hands a USB memory 2 GB partitions damaged system files and therefore inaccessible. Previously, he had once accidentally deleted files recovered from a USB with the program PC Inspector smart recovery from Windows. So was the first thing I tried but the program only recovered images. So I decided to try the free forensic tools available for GNU / Linux. Foremost
Here are the steps I took to recover files
foremost :
Installation:
# aptitude install
foremost an image is generated in the drive which you want to retrieve information before taking any action:
$ dd if = / dev/sdc1 of = / path / to / la / imagen.dd
Then run the following to retrieve all possible file types supported by foremost:
$ foremost-t all-i / path / to / la / imagen.dd
To retrieve only documents, spreadsheets, presentations and images run the following command:
$ foremost-vd-t ole, zip, jpeg-i / path / to / la / imagen.dd
With the-t option specifies the types of formats to be recovered. ole refers to files (xls, doc, ppt, etc) Office. zip files referred to OpenOffice and Office 2007.
run: $ man
foremost
Testdisk
Another powerful tool for data recovery is
testdisk. Allows you to recover lost partitions and / or return non-booting disks bootable again. It supports multiple file systems including: FAT16, FAT32, NTFS, Ext2, Ext3, etc.. Includes a tool called testdisk photorec that is used to recover deleted files or lost by formatting a drive.
Here are the steps to follow to recover deleted files using photorec:
Optionally, you can generate an image of the drive where you want to retrieve files. Installing testdisk:
# aptitude install testdisk Run the following command to retrieve files from a disc without creating an image:
# photorec / d / some / where /
If you created an image of the unit, run the following command:
# photorec / d / some / where / / path / to / la / imagen.dd
"/ some / where /
" is the path where to save the recovered files.
the program is run, where you must select the disk where you want to retrieve the files, then the partition type (usually [Intel] Intel / PC partition) then specifies the partition where the files were, the type of partition and if you want to search the entire partition or just in the space.
If you want to retrieve only specific file types, you can change the file types (File Opt) to be recovered. If you want to recover files from OpenOffice, MSOffice 2007 and earlier versions must be selected doc and zip formats.
After a few minutes files will be recovered. For more information run: # man
photorec
Or read official documentation including a
step guide. Other applications
More applications that serve this purpose GNU / Linux environment, then list a few:
- Testdrive - Autopsy (the probe but fails to understand)
- Magicrescue
- Scalpel
- tct
0 comments:
Post a Comment