How to recover Deleted Files and Folders?

Question

How I can restore files and folders. I've deleted my home folder recursively. :(

Answer 1

Trying to restore files and folders may become a hard and difficult task my friend, but you can find useful answers in this question: Formatted and lost 6 years worth of photo memories.. any way to get this back?

This is what I said, and worked for me, placed here for your convenience:

You may wish to take a look at this: Recovering deleted data from deleted partition- solved

It's quite long, my personal experience when I accidentally removed the whole partition on a 500GB HDD.

*The procedure I used is documented at the very bottom, placed here for your convenience:

IMPORTANT: Try not to use forensic recovery procedures and not to use MS based recovery tools in the first instance.**

1. First of all you calm down. Tranquil, if you erased or removed the partition's table, the data is still there. You need to find a way to bring it back, that's it.
2. The most you can keep the drive off new data, the best for your data. If you write new data, the older data will be replaced by the new as this starts using the clusters.
3. If possible, try not using MS based tools, which (in my case) just wrote a few clusters in the disk which made unusable some data. MS Recovery Tools (such as Easy Data Recovery and others) tries to read the partition table but it also writes some clusters which can't be fully read in order to recover the "usable part of the data". This may harm your data replacing the original allocation clusters with blank data which allows the software to gain access to the cluster itself.
4. Follow the instructions shown on the video documented by amzertech, which was embedded in the previous post and that clearly explains exactly what I did in order to recover my data.
5. If you follow these instructions, I am sure you are going to succeed. Even in the worst cases (how can a different case than mine be worst?) you will succeed if you follow this easy instructions. Remember, the data will remain intact if you leave the disk intact. The most things you do to the disk, will be the most risk your data is reaching.

Anyway, this can be useful even if you deleted the whole partition (as I did then), and if you wish to run the risk to use forensic recovery procedures, I suggest you the usage of foremost, which will bring back all the data you had stored in a specific place, but WARNING: This will bring back all the stuff that were saved into these folders since the beginning of the times.

Good luck!

Answer 2

If you are using Ext2, then you can use Midnight-Commander's Undelete function.

But the Debian versions used to have M-C compiled without it; maybe it's different now though. So I used an old copy of Suse-8 [on another drive & which I keep for just that purpose].

So from then on [& forevermore] I shall stick to Ext2 for that reason.

Answer 3

If you have deleted anything on your computer using Linux OS; don't panic because everything is there. You only need a way to get your data back. For this, follow these easy steps:

1. Install scalpel by running this command:

   sudo apt-get install scalpel
   

2. Open the scalpel file and edit scalpel configuration by this command:

   sudo gedit /etc/scalpel/scalpel.conf
   

3. In the file just uncomment some lines, the important one is this line:

4. Mount the hard disk by its name the default is sda1 if you did not change it; other wise replace sda1 by the actual name of your driver partition

   sudo scalpel /dev/sda1 -o donatien_output_folder
   

And you are done with your deleted documents.

Read this for more details.