Re: Recover data from unallocated space

2019-06-05 Thread John Crawley

On 2019-06-06 01:24, Alexander V. Makartsev wrote:

On 05.06.2019 19:52, Vipul wrote:
I had a dual booted PC ( Windows and Debian in HP notebook with 1 TB hard-disk) and from few months Windows cannot starts ( because one day I was in hurry change size of two of partitions using "gparted' and to fix this I had many solutions but failed) so, yestarday I 

>>...

Is there a way to recover data from un-allocated space? I can send any kind of 
log if required.

Any kind of disk\partition manipulations should begin with data backup, 
but I think you've figured that by now.


In order to recover any data you should first stop using this HDD (don't 
mount it as writable) and get yourself another HDD with suitable size, 
that will serve as destination for recovered data.
You'll have to remove HDD from your notebook and connect it to a PC with 
standard SATA cable along with destination HDD.
With that setup, you have to use R-Studio software (They have free 
version for Linux partitions, IFAIK) to scan source HDD for traces of 
partition table and LBA offset of partition that was "sda8".
If R-Studio will manage to find right offset and recognize filesystem 
then you will be able to start automatic scan for files available for 
full or partial recovery.

Success is solely depends on how destructive was HP system recovery process.

Depending on how valuable your data was you probably will have to resort 
to professional data recovery services, which will do roughly the same 
procedures as I described above and charge substantial amounts of money 
for it.
Since you won't write anything to your source HDD and it is not 
mechanically failing, it is safe to try to recover data by yourself first.
This is a slightly different case, but another tool I found quite 
effective in recovering data from a failing hard disk was ddrescue:

https://packages.debian.org/stretch/gddrescue
You might want to have a look at it.

--
John



Re: Recover data from unallocated space

2019-06-05 Thread Hans
Oh, and there is another idea:

If the partition is not overwritten, you can try "testdisk" and recover the 
partition table. If you succeed, maybe all your datas are accessible again.

Best

Hans


signature.asc
Description: This is a digitally signed message part.


Re: Recover data from unallocated space

2019-06-05 Thread Alexander V. Makartsev
On 05.06.2019 19:52, Vipul wrote:
> I had a dual booted PC ( Windows and Debian in HP notebook with 1 TB 
> hard-disk) and from few months Windows cannot starts ( because one day I was 
> in hurry change size of two of partitions using "gparted' and to fix this I 
> had many solutions but failed) so, yestarday I decided to fix it by using HP 
> system recovery option. When I run system recovery whole system was freezed 
> for more than half hour so, I decided to forcefully shutdown machine by 
> pressing power button after that I power on my machine BIOS message shows "No 
> operating system found" ( all EFI files are deleted even which are in HP 
> folder) and I ended up with like this
>
> /dev/sda1  567296  158795775 158228480 75.5G Microsoft basic data
> /dev/sda2   158795776  159942655   1146880  560M Microsoft basic data
> /dev/sda3  1920552960 1953513471  32960512 15.7G Microsoft basic data
> /dev/sda42048 567295565248  276M EFI System
>
>
> And an un-allocated space of 839.4 GB. I mainly concerned about data in Linux 
> partition data (which was in sda8).
>
> Is there a way to recover data from un-allocated space? I can send any kind 
> of log if required.
>
> Any help would be greatly appreciated. Thanks.
Any kind of disk\partition manipulations should begin with data backup,
but I think you've figured that by now.

In order to recover any data you should first stop using this HDD (don't
mount it as writable) and get yourself another HDD with suitable size,
that will serve as destination for recovered data.
You'll have to remove HDD from your notebook and connect it to a PC with
standard SATA cable along with destination HDD.
With that setup, you have to use R-Studio software (They have free
version for Linux partitions, IFAIK) to scan source HDD for traces of
partition table and LBA offset of partition that was "sda8".
If R-Studio will manage to find right offset and recognize filesystem
then you will be able to start automatic scan for files available for
full or partial recovery.
Success is solely depends on how destructive was HP system recovery process.

Depending on how valuable your data was you probably will have to resort
to professional data recovery services, which will do roughly the same
procedures as I described above and charge substantial amounts of money
for it.
Since you won't write anything to your source HDD and it is not
mechanically failing, it is safe to try to recover data by yourself first.


-- 
With kindest regards, Alexander.

⢀⣴⠾⠻⢶⣦⠀ 
⣾⠁⢠⠒⠀⣿⡁ Debian - The universal operating system
⢿⡄⠘⠷⠚⠋⠀ https://www.debian.org
⠈⠳⣄ 



Recover data from unallocated space

2019-06-05 Thread Vipul
I had a dual booted PC ( Windows and Debian in HP notebook with 1 TB hard-disk) 
and from few months Windows cannot starts ( because one day I was in hurry 
change size of two of partitions using "gparted' and to fix this I had many 
solutions but failed) so, yestarday I decided to fix it by using HP system 
recovery option. When I run system recovery whole system was freezed for more 
than half hour so, I decided to forcefully shutdown machine by pressing power 
button after that I power on my machine BIOS message shows "No operating system 
found" ( all EFI files are deleted even which are in HP folder) and I ended up 
with like this

/dev/sda1  567296  158795775 158228480 75.5G Microsoft basic data
/dev/sda2   158795776  159942655   1146880  560M Microsoft basic data
/dev/sda3  1920552960 1953513471  32960512 15.7G Microsoft basic data
/dev/sda42048 567295565248  276M EFI System


And an un-allocated space of 839.4 GB. I mainly concerned about data in Linux 
partition data (which was in sda8).

Is there a way to recover data from un-allocated space? I can send any kind of 
log if required.

Any help would be greatly appreciated. Thanks.

signature.asc
Description: OpenPGP digital signature