Recovering Files from Parallels Image

Using PhotoRec to recover lost data
Forum rules
When asking for technical support:
- Search for posts on the same topic before posting a new question.
- Give clear, specific information in the title of your post.
- Include as many details as you can, MOST POSTS WILL GET ONLY ONE OR TWO ANSWERS.
- Post a follow up with a "Thank you" or "This worked!"
- When you learn something, use that knowledge to HELP ANOTHER USER LATER.
Before posting, please read https://www.cgsecurity.org/testdisk.pdf
Locked
Message
Author
n0t0ri0usj
Posts: 2
Joined: 05 Nov 2013, 02:11

Recovering Files from Parallels Image

#1 Post by n0t0ri0usj »

Hi everyone,

I recently discovered my instance of Windows XP that is virtualized under Parallels Desktop Version 6 is corrupt and will not open. I discovered that photorec may be able to help obtain the files within the Windows XP image. My questions is how do I successfully do this? If I open up the contents of my Windows XP.pvm file, I see a Windows XP-0.hdd. Is this the file I want? Also, I am very new to unix, so what is the proper command that I need to provide photorec? Thanks!

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovering Files from Parallels Image

#2 Post by cgrenier »

Attached the virtual disk with the damaged filesystem as a second disk to a working VM and use PhotoRec inside the VM to recover files from the second disk.

n0t0ri0usj
Posts: 2
Joined: 05 Nov 2013, 02:11

Re: Recovering Files from Parallels Image

#3 Post by n0t0ri0usj »

Thanks for the reply!

When I tried to mount the original image and booted up the new VM, it could not read Hard Drive 2. Correct me if I am wrong, but PhotoRec won't work if it isn't mounted as a hard drive (viewable in Windows Explorer).

User avatar
cgrenier
Site Admin
Posts: 5432
Joined: 18 Feb 2012, 15:08
Location: Le Perreux Sur Marne, France
Contact:

Re: Recovering Files from Parallels Image

#4 Post by cgrenier »

No need for the disk to be listed in Windows File Explorer, it only need to be detected in Windows Disk Manager.

Locked