i have the same problem...

ive used several data recovery tools and none of them was able to show me the data i accidentally removed with a kubuntu 9.04 loaded from a liveCD.

I am searching for a file with .p12 extension (exported certificate) and havent been able to find it.

Currently I am browsing my NTFS partitioned disk with foremost from the same LiveCD (carving to be more exact) but nothing seems to be happening (I have the same problem as this fella - http://ubuntuforums.org/showthread.php?t=706500)

If anyone has a brihgt idea, I and the fella before me as well i think would appreciate it very much (=

KEnik: From what I understand, you mounted a windows partition in Ubuntu and then deleted files from it. You want those files back. Is this correct? What filesystem is it? Is it NTFS or FAT?

I would suggest using photorec and telling it to only look through the unallocated space. You will need to have another drive or partition mounted and ready to save the recovered files to, since you cannot use file carving to recover files in-place - you have to save them elsewhere.

Anonymous: To recover .p12 files, I suggest looking at a few of them in a hex editor. Do they have a distinctive header and footer? If so, edit the /etc/foremost.conf file and add an entry for that (new) kind of file.

Hello,
thank you.
I am was waiting for blank HDD :)
it is NTFS
when I use "sudo photorec /dev/sda2"
photorec made folder by 500 files in each.
And whit names like - recup_dir.46/f231491776.mp3

For mp3 dosnt mather ( but for others is it problem > any other solutiuons?