I accidentally deleted data from an ntfs partition
I had first tried making an image of the ntfs partition using the gnu version of ddrescue. The drive is an 80GB ide laptop hard drive. The problem is when ddrescue is running it does not find any errors until it gets to 8GB and then it finds around 50 errors. I have never let it keep going because I do not know if it is going to get finshed or just find a lot more errors.
When I had ran test disk on the physical drive it had said that the boot sector is ok but the backup boot sector is bad. But when I go to analyze the drive it finds the ntfs partition but when I go to press p to view the files no data shows up at all. I also looked at trying to rebuild the mft but it says that both the mft and the mft mirror are bad also.
Then I had tried running photorec to recover the documents but on the documents it found nothing would open and the file sizes were to small. Also on mp3 files it found they were to small and they would not play either.
Let ddrescue continue until
Let ddrescue continue until it recovers the whole drive. There are errors. That's what ddrescue is for - you make an error-free image of your data and then get your data back from the image.
When I tried to plug the ide
When I tried to plug the ide laptop hard drive into my laptop using a usb converter it showed up using sudo fdisk -l. Then I had it create an image of the ide laptop drive to the hard drive in my laptop but the copying of the image got to 14464MB copied then the ide laptop drive disappeared from sudo fdisk -l.
Then it says in the log viewer under messages it says Sense Key : No Sense [current] and Add. Sense: No additional sense information. But when I use the ide drive internally in a laptop I do not get those errors messages.
Also I tried a command this command: ddrescue --no-split /dev/hda1 imagefile logfile that I thought it would image the drive and copy all of the good data first and then go back and try the data with bad sectors last. But instead it stops at a part tries to get some data then it logs an error and then it does it again.
"But when I use the ide
"But when I use the ide drive internally in a laptop I do not get those errors messages. "
But have you tried imaging it from a laptop?
Just let it run and read through the errors. It will take time. If the drive dissapears, just plug it back in again. I find running
tail -f /var/log/messages
in another terminal a lot more telling than fdisk.
Make sure your drive's power supply is up to the task, too, That can be a reason why your drive is disappearing.
yes I have tried imaging it
yes I have tried imaging it from a laptop. I have the ide hard drive mounted internally in a laptop. The ide hard drive that is inside the laptop has a lot of bad sectors. When it gets to 15GB imaged then so it has been nothing but bad sectors and a little data. Then I have a sata 500GB drive hooked up through a usb adapter. The 500GB is the drive that is going to hold the image.
I had tried imaging the drive though my main laptop using a usb converter but the errors messages I posted were happening when I was using my laptop.
GNUddrescue is the
GNUddrescue is the best/safest/most efficient way to image a drive. There is no software that I know of that does of better job. If your drive has hardware problems that cause it to power down during the recovery, then that's not a software issue and you will have to face those challenges regardless of what software you use.
I suggest you just keep at it. Reset the drive when you need to. Try using direct drive access (use the -d switch) to see if that helps you get data at a faster rate - this can sometimes help during the rough sport - sometimes not...
There are a lot of things worse than a persnickety drive. A dead drive, for example. At least your drive spits out some data. Just keep with it...
The imaging part of the
The imaging part of the drive got finished. It is trimming the failed blocks on the drive now. Would the best thing to do next after it gets doing trimming the failed blocks is to mount the drive? If so how would I do that?
Well, if you are looking for
Well, if you are looking for deleted files, run photorec on the image. Tell it to search the NTFS partition unallocated space for files.
andrew thank you for your
andrew thank you for your help with my problem I really appreciate it. I was able to recover the data off the drive. I had instead of using photorec I had used testdisk and let it do a deeper scan of the partitions and it found an ntfs partition that contained all the data. Then I was able to copy the data off to another drive.
Ah. I see. You deleted the
Ah. I see. You deleted the partition, not the actual files....
If you deleted/lost a
If you deleted/lost a partition, I highly recommend testdisk.