On 2014-01-30 19:12, Greg Freemyer wrote:
On Thu, Jan 30, 2014 at 11:19 AM, Stephen Berman <> wrote:
Why is that?
A file carver, such as foremost, testdisk, photrec works by scanning all sectors looking for recognizable file headers.
...
The one thing you don't want to do is write to the original. Don't even try to mount it. Tools like ext4magic and foremost are designed to work with the ram filesystem, not with a mounted version of it.
Thanks for all this information in one post :-) I concur with it all. If that does not work, I have seen a commercial recovery program (Restorer Ultimate) work on ntfs an succeed completely where photorec did badly (as you say, just photos, no names, no paths). It did not touch the original, it created a new copy of files elsewhere. It took hours just to find the files. The web page claims to support ext4 (http://www.restorer-ultimate.com/), but it runs from Windows only. You could download and run it, and it tries to find files. After some hours, it presents you with what it found. It is at this moment when you decide if you want to pay or quit. If you pay, you get a code, and the program continues to the end. And you keep it, of course. It is an interesting method of test before you pay (and it was less than 50€, IIRC). I have not tried it with ext4, though. I'm not related in any way to this company. Just presenting alternatives. Try all known free methods first. Actually, I learnt about this commercial software on the photorec web page. -- Cheers / Saludos, Carlos E. R. (from 12.3 x86_64 "Dartmouth" at Telcontar)