Choose style:

Author Topic: How to Recover a File Permanently Deleted from the Windows Partition? (SOLVED)  (Read 74 times)

0 Members and 1 Guest are viewing this topic.

Offline completeidiot

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 1
  • New Forum User
    • View Profile
  • Peppermint version(s): 8
As the title asks. Is there any way to recover a file permanently deleted from the Windows partition (deleted through Linux)?

Thank you
« Last Edit: November 02, 2019, 06:37:06 am by completeidiot »

Offline completeidiot

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 1
  • New Forum User
    • View Profile
  • Peppermint version(s): 8
Re: How to Recover a File Permanently Deleted from the Windows Partition?
« Reply #1 on: November 02, 2019, 01:40:36 am »
To expound a little; the file was deleted in the middle of being moved from the Windows to the Linux partition.  I have found it using df -h and undeleted it, but it has 0 bytes  :'(

Offline emegra

  • Global Moderator
  • Veteran
  • *****
  • Posts: 1910
  • Karma: 412
  • New Forum User
    • View Profile
  • Peppermint version(s): Peppermint 9 64bit
Re: How to Recover a File Permanently Deleted from the Windows Partition?
« Reply #2 on: November 02, 2019, 02:19:49 am »
There's a couple of things I don't quite understand

(1) Can you explain how you managed to delete a file while in the process of moving it ?
(2) Can you tell us where you were moving it to ?
(3) df -h lists file usage how did you manage to find it using that command ?
(4) Can you explain how you "undeleted" it ?


As far as I'm aware if it's permanently deleted there's no easy way to recover it (if it's recoverable at all) whether it's a Windows partition or otherwise

Something like TestDisk or photorec would possibly recover it , however I would advise you if you intend to go down that road Do not write any files to that drive meantime  in fact if the lost file is super important to you I'd suggest you remove or disconnect it from the machine immediately

You would need another drive equal to or larger in size than the drive you want to recover files from

There are many tutorials online to guide you through the process but here's a couple to give you some idea whats involved


https://www.cgsecurity.org/wiki/TestDisk_Step_By_Step


https://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step


Good luck

Graeme

« Last Edit: November 02, 2019, 05:06:03 am by emegra »
If you can keep your head while all around are losing theirs then you're not quite grasping the situation

Offline completeidiot

  • Jr. Member
  • **
  • Posts: 43
  • Karma: 1
  • New Forum User
    • View Profile
  • Peppermint version(s): 8
Re: How to Recover a File Permanently Deleted from the Windows Partition?
« Reply #3 on: November 02, 2019, 05:21:02 am »
Hi,

thank you.

It's actually pretty simple if you follow this guide:

Undelete itself is done through the sudo ntfsundelete command after you list the file inodes.

https://www.maketecheasier.com/recover-deleted-windows-files-with-linux/

The problem is, my file was deleted in the process of being moved from one partition to another. I can recover it, but it's empty. And all I have left is the portion I moved before deleting it, which is useless.

Let's wait and see if the well versed folks have some ace up their sleeves.

EDIT and CORRECTION: Apparently, I was moving the file on the SD card and that's how the stuff happened. It was 5AM over here. Sorry.
« Last Edit: November 02, 2019, 06:36:17 am by completeidiot »