I was going through my wife's external hard drive and renaming files (important pictures from 11 years ago) using Caja's renaming tool. In one folder I got a message saying there were errors during the rename, and all the pictures except one disappeared (only one survived and got renamed). I'm assuming the missing images are still there. Can you recommend a file recovery tool, and preferably one with a gui?
Urgent recommendation needed!
- Thread starter ron.alan
- Start date
Condobloke
Well-Known Member
Condobloke
Well-Known Member
Leave the external drive alone as much as possible until you hear from someone here with the necessary experience.
The more you use the external drive the less chance you have of recovery.
The more you use the external drive the less chance you have of recovery.
Is the drive 11 years old or just the pictures? 
This could be a number of things, but if it is the drive then the approach is:
1) disconnect from electricity immediately
2) make a plan what to do next
1) you can manage, for 2) - I can not tell if the drive itself is failing, and if the data on it is important then you should not connect the drive back to electricity to find out but instead create what is called a "dd image" of the disk, and then work with said dd image.
Failing drives often still have a view hours of runtime left in them, in which you can read the whole drive and create a copy - said dd image.
For this, tools such as ddrescue are a good idea: https://www.gnu.org/software/ddrescue/ which is a tool specifically written to make copies of drives failing. If the disk gives up half way, you can un-and-re-plug it and continue where you left off.
In order to store the dd image, you will need a second disk with enough space available. I recommend storing said dd image onto a filesystem somewhere, so you can later attempt to loop mount it or so.
If you did not write files to the disk, and if the disk is not breaking but the files were removed by some weird accident or bug in software you used, the data should still be there (unless you keep the drive plugged in, in which case background processes might write to the disk and overwrite the sectors that were previously used by the pictures you are missing now).
So long story short:
1) disconnect from electricity
2) learn about how to use https://www.gnu.org/software/ddrescue/ - ask if you have questions
4) get a drive at least slightly larger than the one you are trying to recover, create a filesystem in it and mount it so you can write the dd image onto it
4) write a small bash script ideally to use dd rescue, so you dont waste time fiddling around when you get to step 5
5) plug in old disk and run recovery script with ddrescue
6) when this is finished, unplug old drive and inspect the dd image - if all works well, you should be able to just loop mount the old partition(s).
Let me know about your skill level and we can go from there with more in depth knowledge.
This could be a number of things, but if it is the drive then the approach is:
1) disconnect from electricity immediately
2) make a plan what to do next
1) you can manage, for 2) - I can not tell if the drive itself is failing, and if the data on it is important then you should not connect the drive back to electricity to find out but instead create what is called a "dd image" of the disk, and then work with said dd image.
Failing drives often still have a view hours of runtime left in them, in which you can read the whole drive and create a copy - said dd image.
For this, tools such as ddrescue are a good idea: https://www.gnu.org/software/ddrescue/ which is a tool specifically written to make copies of drives failing. If the disk gives up half way, you can un-and-re-plug it and continue where you left off.
In order to store the dd image, you will need a second disk with enough space available. I recommend storing said dd image onto a filesystem somewhere, so you can later attempt to loop mount it or so.
If you did not write files to the disk, and if the disk is not breaking but the files were removed by some weird accident or bug in software you used, the data should still be there (unless you keep the drive plugged in, in which case background processes might write to the disk and overwrite the sectors that were previously used by the pictures you are missing now).
So long story short:
1) disconnect from electricity
2) learn about how to use https://www.gnu.org/software/ddrescue/ - ask if you have questions
4) get a drive at least slightly larger than the one you are trying to recover, create a filesystem in it and mount it so you can write the dd image onto it
4) write a small bash script ideally to use dd rescue, so you dont waste time fiddling around when you get to step 5
5) plug in old disk and run recovery script with ddrescue
6) when this is finished, unplug old drive and inspect the dd image - if all works well, you should be able to just loop mount the old partition(s).
Let me know about your skill level and we can go from there with more in depth knowledge.
CaffeineAddict
Well-Known Member
I would try PhotoRec.
The other one I've heard someone else really positive about but it costs a one time purchase is SpinRite.
Digital Picture and File Recovery
PhotoRec is a free and open source file carver data recovery software tool.
www.cgsecurity.org
Similar threads
