Page 1 of 1

recover confusion

Posted: 09 Jul 2019, 20:21
by jgw0
I am running with ubuntu 18.04.2 I managed to delete an entire drive with this command: mnt/05b9fa40-ab8f-4bca-a003-e813169d7e41$ sudo rm -r 05b9fa40-ab8f-4bca-a003-e813169d7e41 (I deleted EVERYTHING!)

Since I used the rm command I assumed that I had just deleted the files on the drive. Apparently I did a bit more.

I started testdisk and got to advanced and ran into a problem. I have posted a picture of it. The problem is that it only seems to see my backups from my main drive! (there is no undelete option). There was a lot more stuff on that drive that the backups. IMy options were actually:
[ Type ] >[Superblock] [ List ] [Image Creation] [ Quit ] superblock was highlighted.
I stopped here as I couldn't find any example of this so I am in mysterious territory.

I did have a bunch of backup files on this drive but there was a LOT more than that so, now, I have absolutely no idea of what I actually did.

This is the command I used : mnt/05b9fa40-ab8f-4bca-a003-e813169d7e41$ sudo rm -r 05b9fa40-ab8f-4bca-a003-e813169d7e41 (I deleted EVERYTHING! - I know, not the brightest idea I have had)

What I need to know is what I did and how to get it back.

Thank you..............

Re: recover confusion

Posted: 10 Jul 2019, 06:17
by cgrenier
Try to recover your files using photorec 7.1. Be careful to store the recovered files on another partition than the source.

Re: recover confusion

Posted: 10 Jul 2019, 21:12
by jgw0
Thank you for the reply...

Running with ubuntu 18.04.2

First - you recommended version 7.1 I just tried to update with another installation and still got version 7.0
I downloaded 7.1 but can't figure out what to do with the extracted folder as there are no instructions (no directions. See a makefile but.....).

I tried photorec and failed I recorded the basic sequence in photorec and put it on pastbin at: https://pastebin.com/1YsCkqmt
The problem is that photorec doesn't actually deal with the drive that holds the files /dev/sdc/ but goes to my home directory in /dev/sda/
This happens irregardless of my choices (noted in the pastebin file).

Just to make sure. My problem was caused when I went to the drive and did: sudo rm -r 05b9fa40-ab8f-4bca-a003-e813169d7e41 (I deleted EVERYTHING!)

I am beginning to think I REALLY screwed myself! Perhaps I am running photorec wrong?

Thoughts?

Re: recover confusion

Posted: 10 Jul 2019, 22:30
by recuperation
jgw0 wrote:
10 Jul 2019, 21:12
Thank you for the reply...

Running with ubuntu 18.04.2

First - you recommended version 7.1 I just tried to update with another installation and still got version 7.0
I downloaded 7.1 but can't figure out what to do with the extracted folder as there are no instructions (no directions. See a makefile but.....).
Two ways of installation are covered in the manual (refers to photorec as well):
https://www.cgsecurity.org/testdisk.pdf

I tried photorec and failed I recorded the basic sequence in photorec and put it on pastbin at: https://pastebin.com/1YsCkqmt
The problem is that photorec doesn't actually deal with the drive that holds the files /dev/sdc/ but goes to my home directory in /dev/sda/
This happens irregardless of my choices (noted in the pastebin file).
Please read the manual and/or the multilingual examples:
https://www.cgsecurity.org/wiki/PhotoRec_Step_By_Step

Re: recover confusion

Posted: 10 Jul 2019, 22:33
by recuperation
Is English your native language?

Re: recover confusion

Posted: 13 Jul 2019, 00:58
by jgw0
Yes

Re: recover confusion

Posted: 13 Jul 2019, 15:42
by recuperation
Please select a destination to save the recovered files.
Do not choose to write the files to the same partition they were stored on.
Keys: Arrow keys to select another directory
C when the destination is correct
Q to quit
Directory /home/greg
What is it that you cannot understand when you arrive here?
Please explain!