PDA

View Full Version : PhotoRec data recovery help needed



Packrat1947
01-17-2009, 02:20 AM
Hi, I have a customer's XP hard drive that crashed. It won't reboot, and Knoppix shows that all that is left is an empty Windows folder, Recycle Bin and System Volume Information. All other folders are missing in action.

Anyhow, I'm tasked with recovering "tons" of photos and writings. First I want the photos. I tried PhotoRec, and following a tutorial it seemed to be finding them. It was saving them to the ramdisk - and after it was done there were some folders on the desktop called recup_.dir.1 . They had a lock on them and I couldn't move them or copy them to a HD or flash drive.

When setting up PhotoRec, I get to a page that says: "Do you want to save recovered files in /ramdisk/home/knoppix/ ? [Y/N].
The next line says "To select another directory, use the arrow keys. I don't see my devices - only Desktop, tmp, etc. So I'm stumpted.
I want to save them to either sdb1 or hda6, but I don't see that option. How can I do this?

I would certainly appreciate any help here. I tried several Windows based data recovery progs., but they cannot see the drive.

Right now I'm using an old Compact Flash card as a test "corrupted drive" until I get the process down.

Thanks,
Packrat1947

hal8000
01-18-2009, 12:02 AM
When using Photorec you are running as root, this is why you see a padlock on the drive.

Open a terminal type the following lines (enter at the end of each line)
su
chown -R knoppix:knoppix Desktop/recup_.dir.1


The above should change owner and group of all files to knoppix and allow you to copy them to your usb drive.

You can also try ntfsundelete
Open a terminal
su
apt-get update
apt-get install ntfsprogs
mkdir /home/knoppix/recovered
ntfsundelete -p100 -m '*jpg' -u /home/knoppix/recovered

this will create a folder called recovered. Seek out all jpg files that are 100% recoverable
and undelete them to the recovered folder

Packrat1947
01-18-2009, 12:21 AM
Hi Hal,
Thanks for the reply.

This is where I am. I downloaded the Windows XP version, and it is running as I type. I expirimented on my old Compact Flash card and worked out how to save to other directories.

One has to use the left and right arrow keys to drill to the desired location. Pressing the left arrow key several times takes me to the listing of all drives.

Right now it is reporting it will take about 40 hours. I hope it is not stuck.

But I will try your take ownership method. I have had drives in here that only Knoppix and Slax could see. Ubuntu was blind in this respect.

I have fan blowing on the drive, and hopefully things will work out OK.

Cheers,
Packrat1947