Author Topic: Need urgent help with recovering data!!  (Read 1732 times)

0 Members and 1 Guest are viewing this topic.

Offline PsychoRebellious

  • Peasant
  • *
  • Posts: 130
  • Cookies: -6
    • View Profile
    • My Rantings
Need urgent help with recovering data!!
« on: February 28, 2015, 07:38:51 pm »
This is what happened in short. I had a windows8, tried installing UBUNTU and was suppposed to replace the windows with ubuntu but it deleted all partitions and installed ubuntu on some newly created partition! Everything, everything that I had there is gone all the partitions and the data in that hard disk was really really important it was the 320gb harddisk in my laptop with all our family pictures, ebooks i had collected through out the years and projects Ive been working on.
Ive pulled out the harddisk from the laptop and have it plugged in a desktop computer with win 8 installed on it. Currently im trying out TESTDISK and EASEUS data recovery to look for data! the TESTDISK on analyzing only shows me the newly created partitions created by ubuntu installation. The other tool EASUS is showing the data which was in C(windows) drive and it will take 45 minutes for it to list other data but it's a trial version so I'm really hoping it doesn't do someting like
"Purchaces to recover and continue" in the end. I am so urgently in need of help. The partitions are gone and now there's only this linux partition newly created. Anybody, anybody providing assistance or help with recovering my data will be hihgly appreciate. I am so freaked out. I would personally give you a blowjob if you help me with this (jk but Ill realyl be thankful)

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Need urgent help with recovering data!!
« Reply #1 on: February 28, 2015, 07:53:51 pm »
That, kids, is why you do this kinda shit in a VM before doing it for the first time on your actual machine kek. Also I know the feel, been there, done that. Since that faithful day, I keep my stacks of data on external drive, and do regular backups of the files I often use and update, also a clone of the system.

Anyway, you could try summadees tools https://evilzone.org/security-tools/icare-data-recovery/ if you'll use iCare, there is an option to recover a lost partition. However Ubuntu probably also formatted it and merged free space into one partition as well, in which case it'll be hard to recover anything structured, you will most likely get an unstructured heap of files without names, but if the lost partition option won't help, use the Advanced deep scan option, in which case you will get some files, but as I said - without names.
Try other tools in that thread as well, maybe they'll give better results. And ofc don't recover to the same drive :D

Offline PsychoRebellious

  • Peasant
  • *
  • Posts: 130
  • Cookies: -6
    • View Profile
    • My Rantings
Re: Need urgent help with recovering data!!
« Reply #2 on: February 28, 2015, 07:59:40 pm »
That, kids, is why you do this kinda shit in a VM before doing it for the first time on your actual machine kek. Also I know the feel, been there, done that. Since that faithful day, I keep my stacks of data on external drive, and do regular backups of the files I often use and update, also a clone of the system.

Anyway, you could try summadees tools https://evilzone.org/security-tools/icare-data-recovery/ if you'll use iCare, there is an option to recover a lost partition. However Ubuntu probably also formatted it and merged free space into one partition as well, in which case it'll be hard to recover anything structured, you will most likely get an unstructured heap of files without names, but if the lost partition option won't help, use the Advanced deep scan option, in which case you will get some files, but as I said - without names.
Try other tools in that thread as well, maybe they'll give better results. And ofc don't recover to the same drive :D

Named or unnamed. Just some pictures I really want back, of some people very dear to me(deceased). I have saved this stuff for like 3 years and I can't believe I finally fucked up! I have downloaded the icare archive, let me see. I'll report back to u

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Need urgent help with recovering data!!
« Reply #3 on: February 28, 2015, 08:17:15 pm »
Named or unnamed. Just some pictures I really want back, of some people very dear to me(deceased). I have saved this stuff for like 3 years and I can't believe I finally fucked up! I have downloaded the icare archive, let me see. I'll report back to u
Calm your tits and prepare for the worst, be a god damn man and embrace the fact that you shredded your files. With that in mind try the programs and see what comes out.

Offline HTH

  • Official EZ Slut
  • Administrator
  • Knight
  • *
  • Posts: 395
  • Cookies: 158
  • EZ Titan
    • View Profile
Re: Need urgent help with recovering data!!
« Reply #4 on: February 28, 2015, 10:09:03 pm »
Ok so the good news is that your data is almost certainly recoverable. Making a new partition table and even installing ubuntu only writes to a very small amount of that 320  gb harddrive, probably like 1-2%. What you want to do is this, first, get a disk image of this harddrive, a straight up 320 gb file which will contain all yo things. On linux Id use dd for this, not sure about on windows.

Next skip the gimics and go get some real file carving tools, not saying iCare or the others wont work but a dedicated file carving tool will prob be better.  Foremost, scalpel, sleuthkit and smartcarving were all kind of a big deal a few years ago, not sure about now.

Be aware that roughly 15% - 20% of jpeg files are fragmented so only smartcarving out of those will properly restore them.
<ande> HTH is love, HTH is life
<TurboBorland> hth is the only person on this server I can say would successfully spitefuck peoples women

Offline cyberdrifter

  • Knight
  • **
  • Posts: 176
  • Cookies: -90
    • View Profile
Re: Need urgent help with recovering data!!
« Reply #5 on: March 01, 2015, 02:30:49 am »
.- / .-.. .. - - .-.. . / -... . - - . .-. --..-- / . ...- . .-. -.-- / -.. .- -.-- .-.-.-
Go ahead tubby, you clearly want/need those cookies more than me.  :P

Offline 0E 800

  • Not a VIP
  • VIP
  • Baron
  • *
  • Posts: 895
  • Cookies: 131
  • • тнε ιηтεяηεт ιs мү яεcүcℓε-вιη •
    • View Profile
Re: Need urgent help with recovering data!!
« Reply #6 on: March 02, 2015, 07:17:59 pm »
Sounds funny, but recova recovered the same amount of files as all the paid for ones you find here:
http://data-recovery-software-review.toptenreviews.com/

As  Kulverstukas mentioned, the files were unnamed but I was able to recover images.

As HTH mentioned you should create a image of the whole hard drive before you start messing around with it, work with the image to recover files.

Turn this into a challenge if anything, your first forensics mission.

Some helpful links.

http://askubuntu.com/questions/496445/is-it-possible-to-retrieve-the-data-by-using-recuva-software

http://askubuntu.com/questions/3883/how-to-recover-deleted-files

http://askubuntu.com/questions/245987/how-can-i-recover-my-data-after-replacing-windows-with-ubuntu
The invariable mark of wisdom is to see the miraculous in the common.

Offline evil_genius

  • NULL
  • Posts: 1
  • Cookies: 0
    • View Profile
Re: Need urgent help with recovering data!!
« Reply #7 on: March 03, 2015, 07:25:48 pm »
Hi, I've been in a similar situation. I used R-Studio (Network Edition) with almost 90% success rate. Give it a try.

Official website: http://www.r-studio.com/
« Last Edit: March 03, 2015, 07:27:03 pm by evil_genius »