Page 1 of 1

Missing option: "Unallocated space only"

Posted: 24 May 2018, 17:06
by AlienBeing
Hello!

First of all thanks for this great utility. But yeah, I had this problem regarding PhotoRec that I hope someone can solve.

Situation is I deleted a photo from my 2TB NTFS Hard drive and I would like to recover it. There is nothing wrong with the drive, I just want to undelete the specific file.

So when I go through the steps I don't get the coise to look for "unallocated space only". It will take forever if I include all my photos what aren't deleted :D I tried running it for a while and it "recovered" a lot of photos I already have lol. But I ended up cancelling because it would all take 17 hours.

How can it be that I can't choose to only recover deleted files?


Thanks very much!
Kristoffer

Re: Missing option: "Unallocated space only"

Posted: 25 May 2018, 05:47
by cgrenier
This option is available if you select a FAT12/16/32, exFAT, NTFS, ext2/3/4 filesystem.
Feel free to read https://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step or the chapter "Recovering deleted files using PhotoRec" from https://www.cgsecurity.org/testdisk.pdf

Re: Missing option: "Unallocated space only"

Posted: 26 May 2018, 10:48
by AlienBeing
Thanks a lot. But for some reason it is not. I chose NTFS because that's what my hard drive is. Here you can see the screenshots from the process which I initiated just to show you (I cancelled it). Sorry it is so small I can't make it larger :D

Image

Re: Missing option: "Unallocated space only"

Posted: 27 May 2018, 08:16
by cgrenier
You have select "whole disk", not an NTFS partition. Did you delete your NTFS partition ?

Another possibility is that Photorec identify by mistake the partition table as EFI GPT instead of PC Intel. In this case, you can enable the expert mode in Options, return to the disk selection, force the partition type to PC Intel, Search.
If you see this time an NTFS partition, select it. Start the recovery and use the default options.