Also, how do I delete those output directories in my home folder in the long run. my permissions are blocked.

(using ubuntu 10.04 and installed scalpel_1.60-1_i386 PPA, should have done that from software centre, eh)

Do help, with some easy steps to ensure i am able to recover data.

$ identify *.jpg | grep 96×96 | cut -f1 -d’[‘ | xargs rm

Maybe you have to change the “cut” command according to your needs.

This may be useful when you want to delete aMSN avatar pics.

Cheers.

Try Testdisk.

http://www.cgsecurity.org/wiki/TestDisk

I use it when I need to recover files.

Please help! I’ve done file recovery in windows, but this laptop is the only one I have with an sd card reader.

Scalpel is one of the best command line tool to recover deleted files in Ubuntu Linux. It can recover almost all types of files.

Foremost is a console program to recover files based on their headers, footers, and internal data structures.

Thanks
Bonmaria

The longer a user keeps running their system, the less likely it is that this howto will work. I think it is a sensible addition.

I say “relatively” as there will always be certain dangers to your data if you’re unsure what you are doing. Partitioning can be a risk simply because you can annihilate partition tables, resulting in your hard disk appearing “empty.” Utilities like testdisk are a real blessing in that context.

But alas, there is dd, which is *nooooooot* a command you want to use unless you have no other choice. Unlike for deleting a partition or just files, dd *can* and *will* inflict permanent unrecoverable damage. Even data recovery professionals won’t be able to help you if dd manages to annihilate a great deal of data on your hard disk. This is why dd is useful for truly wiping your disk.

See, when you delete a file or a directory, the filesystem driver actually just marks it as unused. The data’s still there until overwritten PHYSICALLY by something else.

dd is not a filesystem tool. It bypasses any and all filesystems and their drivers for raw low-level usage of your hard disk. That means when it’s told to write to your hard disk, it really, truly means it, and will do so completely ignoring the boundaries of whatever filesystem present. Indeed, dd can actually perform writes across filesystems in one usage if you do /dev/sda as a target instead of, say, /dev/sda2.

dd has some handy usaged. It’s a great way to write images to a floppy or thumb drive (But NOT to an optical medium.).

If you hard disk is zeroed out (dd if=/dev/zero of=/dev/sda) by dd, the there’s nothing you can do.

So on a typical Ubuntu install, that means booting from a LiveCD and following this guide from there. Please make this adjustment so people reading this have a better chance of success.

I have just used this command
foremost -t doc -i /dev/sda1

mohit@gmb-india-ws-3:~$ foremost -t doc -i /dev/sda1
Processing: stdin
|
I am getting this for the past half an hour,yes folder output is created and its showing audit file and a folder name doc,but they both are empty.Will it take long time?

One more question

how can i recover my text file data?…..i mean the command for that

Thanks

Thought you couldn’t.

You can write random data over the drive through a variety of methods, but with fancy equipment any modestly sized government can see what was there before.

There are two real solutions, one is to overwrite the data over and over using different patterns, and the other is to shred the drive and melt the pieces.

I use the first choice with a program called “wipe”(apt-get install wipe).

One important thing to know is that many file systems such as journaled ones will make copies of information and store them elsewhere, wipe cannot securely erase files on these file systems.

However, when wipe is used on a block device such as /dev/sda1(just a partition) or /dev/sda(the whole disk) it is very effective at destroying information.

Thus, a complete format should do the trick (against these particular tools anyway).