{"id":13279,"date":"2019-04-01T11:11:06","date_gmt":"2019-04-01T11:11:06","guid":{"rendered":"http:\/\/www.appservgrid.com\/paw92\/?p=13279"},"modified":"2019-04-01T11:11:06","modified_gmt":"2019-04-01T11:11:06","slug":"photorec-recover-deleted-or-lost-files-in-linux","status":"publish","type":"post","link":"https:\/\/www.appservgrid.com\/paw92\/index.php\/2019\/04\/01\/photorec-recover-deleted-or-lost-files-in-linux\/","title":{"rendered":"PhotoRec \u2013 Recover Deleted or Lost Files in Linux"},"content":{"rendered":"

When you delete a file accidentally or intentionally on your system using \u2018shift + delete<\/strong>\u2018 or delete option or empty Trash, the file content is not destroyed from the hard disk (or any storage media).<\/p>\n

It is simply removed from the the directory structure and you cannot see the file in the directory where you deleted it, but it still remains somewhere in your hard drive.<\/p>\n

If you have the appropriate tools and knowledge, you can\u00a0recover lost files from your computer<\/a>. However, as you store more files on your hard disk, the deleted files are overwritten, you may only recover recently deleted files.<\/p>\n

In this tutorial, we will explain how to recover lost or deleted files on a hard disk in Linux using\u00a0Testdisk<\/strong>, is a remarkable recovery tool ships in with a free tool called\u00a0PhotoRec<\/strong>.<\/p>\n

PhotoRec<\/strong>\u00a0is used to recover lost files from storage media such as hard drives, digital camera and cdrom.<\/p>\n

Install Testdisk (PhotoRec) in Linux Systems<\/h3>\n

To install\u00a0Testdisk<\/strong>\u00a0by running the relevant command below for your distribution:<\/p>\n

------- On Debian\/Ubuntu\/Linux Mint<\/strong> ------- \r\n$ sudo apt-get install testdisk\r\n\r\n------- On CentOS\/RHEL\/Fedora<\/strong> ------- \r\n$ sudo yum install testdisk\r\n\r\n------- On Fedora 22+<\/strong> ------- \r\n$ sudo dnf install testdisk   \r\n\r\n------- On Arch Linux<\/strong> ------- \r\n$ pacman -S testdisk             \r\n\r\n------- On Gentoo<\/strong> ------- \r\n$ emerge testdisk  \r\n<\/pre>\n
In case it is not available on your Linux distribution\u2019s repositories, download it from\u00a0here<\/a>\u00a0and run it on a Live CD.<\/p>\n
It can also be found in rescue CD such as\u00a0Gparted LiveCD<\/strong>,\u00a0Parted Magic<\/strong>,\u00a0Ubuntu Boot CD<\/strong>,\u00a0Ubuntu-Rescue-Remix<\/strong>\u00a0and many more.<\/p>\n
Once the installation is complete, start\u00a0PhotoRec<\/strong>\u00a0in a text window as follows with root privileges and specify the partition from which the files where deleted:<\/p>\n
$ sudo photorec \/dev\/sda3\r\n<\/pre>\n
You\u2019ll see the interface below:<\/p>\n
\n
\"PhotoRec<\/a><\/p>\n
PhotoRec Data Recovery Tool for Linux<\/p>\n<\/div>\n
Use the\u00a0right<\/code>\u00a0and\u00a0left<\/code>\u00a0arrow keys to select a menu item, and press\u00a0Enter<\/strong>. To continue with the recovery operation, select\u00a0[Proceed]<\/code>\u00a0and hit\u00a0Enter<\/strong>.<\/p>\n
You will be at the following interface:<\/p>\n
\n
\"Select<\/a><\/p>\n
Select Partition to Proceed File Recovery<\/p>\n<\/div>\n
Select\u00a0[Options]<\/code>\u00a0to view available recovery operation options as in the interface below:<\/p>\n
\n
\"Linux<\/a><\/p>\n
Linux File Recovery Options<\/p>\n<\/div>\n
Press\u00a0Q<\/code>\u00a0to move back, at the interface below, you can specify the file extensions you want to search and recover. Therefore, select\u00a0[File Opt]<\/code>\u00a0and press\u00a0Enter<\/strong>.<\/p>\n
Press\u00a0s<\/code>\u00a0to disable\/enable all file extensions, and in case you have disabled all file extensions, only choose types of files you want to recover by selecting them using\u00a0right<\/code>\u00a0arrow keys (or\u00a0left<\/code>\u00a0arrow key to deselect).<\/p>\n
For instance, I want to recover all\u00a0.mov<\/code>\u00a0files that I lost on my system.<\/p>\n
\n
\"Specify<\/a><\/p>\n
Specify Recovery File Type<\/p>\n<\/div>\n
Then press\u00a0b<\/code>\u00a0to save the setting, you should see the message below after pressing it. Move back by hitting\u00a0Enter<\/strong>\u00a0(or simply press\u00a0Q<\/code>\u00a0button), then press\u00a0Q<\/code>\u00a0again to go back to the main menu.<\/p>\n
\n
\"Save<\/a><\/p>\n
Save File Recovery Settings<\/p>\n<\/div>\n
Now select\u00a0[Search]<\/code>\u00a0to start the recovery process. In the interface below, choose the filesystem type where the file(s) were stored and hit\u00a0Enter<\/strong>.<\/p>\n
\n
\"Select<\/a><\/p>\n
Select Filesystem to Recover Deleted Files<\/p>\n<\/div>\n
Next, choose if only free space or the whole partition needs to be analyzed as below. Note that choosing whole partition will make the operation slower and longer. Once you have selected the appropriate option, press\u00a0Enter<\/strong>to proceed.<\/p>\n
\n
\"Choose<\/a><\/p>\n
Choose Filesystem to Analyze<\/p>\n<\/div>\n
Closely select a directory where recovered files will be stored, if the destination is correct, press\u00a0C<\/code>\u00a0button to continue. Choose a directory on a different partition to avoid deleted files being overwritten when more data is stored on the partition.<\/p>\n
To move back until the root partition, use the\u00a0left<\/code>\u00a0arrow key.<\/p>\n
\n
\"Select<\/a><\/p>\n
Select Directory to Save Recovered Files<\/p>\n<\/div>\n
The screenshot below shows deleted files of the specified type being recovered. You can stop the operation by pressing\u00a0Enter<\/strong>.<\/p>\n
Note<\/strong>: Your system may become slow, and possibly freeze at certain moments, so you need to be patient until when the process is complete.<\/p>\n
\n
\"Recovering<\/a><\/p>\n
Recovering Deleted Files in Linux<\/p>\n<\/div>\n
At the end of the operation,\u00a0Photorec<\/strong>\u00a0will show you the number and the location of files recovered.<\/p>\n
\n
\"Linux<\/a><\/p>\n
Linux File Recovery Summary<\/p>\n<\/div>\n
The recovered files will be stored with root privileges by default, therefore open your file manager with elevated privileges to access the files.<\/p>\n
Use the command below (specify your file manager):<\/p>\n
$ gksudo nemo\r\nor\r\n$ gksudo nautilus \r\n<\/pre>\n
For more information, visit PhotoRec homepage:\u00a0http:\/\/www.cgsecurity.org\/wiki\/PhotoRec<\/a>.<\/p>\n
That\u2019s all! In this tutorial, we explained the necessary steps to recover deleted or lost files from hard disk using PhotoRec. This is so far the most reliable and effective recovery tool I have ever used, if you know any other similar tool, do share with us in the comments.<\/p>\n
Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"
When you delete a file accidentally or intentionally on your system using \u2018shift + delete\u2018 or delete option or empty Trash, the file content is not destroyed from the hard disk (or any storage media). It is simply removed from the the directory structure and you cannot see the file in the directory where you … <\/p>\n
Continue reading “PhotoRec \u2013 Recover Deleted or Lost Files in Linux”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-13279","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/13279","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/comments?post=13279"}],"version-history":[{"count":1,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/13279\/revisions"}],"predecessor-version":[{"id":13280,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/posts\/13279\/revisions\/13280"}],"wp:attachment":[{"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/media?parent=13279"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/categories?post=13279"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.appservgrid.com\/paw92\/index.php\/wp-json\/wp\/v2\/tags?post=13279"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}