Take the 2-minute tour ×
Ask Ubuntu is a question and answer site for Ubuntu users and developers. It's 100% free, no registration required.

This question already has an answer here:

I've just reinstalled Ubuntu, and I chose a partition full of data as a swap area. I didn't realize that the swap area would overwrite my files.

Can I recover my partition or my data now?

share|improve this question

marked as duplicate by BuZZ-dEE, waltinator, chaos, Eric Carvalho, Sylvain Pineau May 27 at 12:42

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

What you could do, is take a dd image of your swap, bit by bit:

dd if=/your/swap of=/path/to/file.dd

"Your swap" is usually a separate partition. To find out which one do:

fdisk -l

once you obtain the .dd file, install autopsy:

 apt-get install autopsy

run it as root in your terminal, and open a browser as instructed.

Create a case in autopsy, and try recovering data in this way. It may be complicated, but first secure the .dd file, then try forensic techniques recovering files. You may want to read up on autopsy as a forensic tool for data recovery.

share|improve this answer
    
I've searched how can I use autopsy and I get this help.ubuntu.com/community/DataRecovery but the say that this apply for old 7.04 7.10 8.04, so can I use this way since I have 11.10 –  Muhammad Jawabreh Nov 12 '11 at 21:47
    
and I'm totally new to Ubuntu, so could you be more specific about the directory (if=/your/swap) –  Muhammad Jawabreh Nov 12 '11 at 21:59
    
can you show me your output for this command: $ sudo fdisk -l –  den4uk Nov 12 '11 at 22:34
    
I'm now using Windows, because I don't want to lose more data, so tell me what to do please –  Muhammad Jawabreh Nov 12 '11 at 22:47
    
If you're on windows, the download FTK Imager free from accessdata.com, and try recover deleted files. You first need to mount the hard drive, then lookup deleted entries. You still could recoved deleted files. Best luck! –  den4uk Nov 12 '11 at 22:59

Not the answer you're looking for? Browse other questions tagged or ask your own question.