Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Generic User Avatar

where to even begin


  • Please log in to reply
5 replies to this topic

#1 not_a_bleepin_clue

not_a_bleepin_clue

  •  Avatar image
  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:05:02 AM

Posted 21 February 2024 - 06:53 AM

I store all my files on external storage drives.

 

I have been working on a Lenovo L440 repurposed (Covid) Thinkpad notebook which has Linux Lite installed.  At home I’m working on Word Home and Office 2007 on a Windows 8.1 Novatech 64 bit PC. I also have to work at the library on their Lenovo PCs which use Windows 2010.  It’s all been a bit difficult working like this but I haven’t had any choice. My specs are below.

 

The problem:-

 

while I was working on the Linux Lite Lenovo L440, I deleted a folder from my 1 TB WD external drive.The folder contained loads of sub and sub sub etc folders and files. Because of the mix of computers and software involved I don’t know where to start trying to recover the deleted stuff.

 

I know absolutely nothing about Linux Lite, such as how to install anything, how to update files, how to use the ‘terminal’ etc and currently don’t have the time to start learning.

 

I’ve got a version of Ubuntu on a disc and have used that to recover files from a ‘dead’ pc, could I use this on a ‘live’ pc?

 

I’ve got Macrium Reflect installed on my Windows 8.1 pc and was hoping that I could do an ‘image’ of the external storage drive so that at least I have a copy taken of the driver immediately after the deletion but it will only let me do a drive image of the PC.

 

Can you offer any help as to where I should start?

 

.

LENOVO

 

Model – 20ASS0CF00

Computer Type – notebook

host name -  linuxlite – ThinkPad-L440

architecture – x86_64

number of monitors - 1

 

Linux Lite 6.0

 

Kernel Release 5.15.0-33-generic

 

File manager for the Xfce desktop environment is Thunar 4.16.10

 

GUI

 

Desktop Environment - XFCE (4.16.3)

Windowing System- X11

Window Manager - xfwm4

Display Manager – lightdm

 

Packages

 

system 2116 (APT)

flatpak -

Python -86

Python Version 3.10.4

 

My home PC spec is as follows:-

 

Windows 8.1 64-bit

Intel Core i5 4460 @ 3.20GHz           

8.00GB Dual-Channel DDR3 @ 798MHz (11-11-11-28)

Gigabyte Technology Co., Ltd. H81M-DS2V (SOCKET 0)       

HP w2207 (1680x1050@59Hz)

Intel HD Graphics 4600 (Gigabyte)

465GB TOSHIBA DT01ACA050 (SATA)           

14GB hp USB FLASH DRIVE USB Device (USB)

ATAPI iHAS124 E

 

 



BC AdBot (Login to Remove)

 


#2 xrobwx71

xrobwx71

    REN LLC


  •  Avatar image
  • Members
  • 1,254 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Panama City Beach, FL USA
  • Local time:11:02 PM

Posted 21 February 2024 - 07:18 AM

Can you plug the drive into a Windows machine? If so, try https://www.ccleaner.com/recuva


Edited by xrobwx71, 21 February 2024 - 07:18 AM.

The very first thing you should always do after setting up a system? Have a valid backup image of your drives.

Hasleo Backup Suite Free

Aomei Backupper

Acronis True Image (not free but very good)

 

 


#3 JohnC_21

JohnC_21

  •  Avatar image
  • Members
  • 34,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 21 February 2024 - 09:46 AM

When on Windows look at the root of the external drive. Is there a folder named ".Trash-1000"? If yes, then open that folder to see if you files are there. If on linux you will need to enable viewing hidden files/folders.



#4 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 33,826 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:02 AM

Posted 21 February 2024 - 11:04 AM

When on Windows look at the root of the external drive. Is there a folder named ".Trash-1000"? If yes, then open that folder to see if you files are there. If on linux you will need to enable viewing hidden files/folders.


Just to note if done via command with the rm command the .Trash folder will not be present.

Tools to try

Testdisk
Photorec
Recuva

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra


#5 JohnC_21

JohnC_21

  •  Avatar image
  • Members
  • 34,651 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:12:02 AM

Posted 21 February 2024 - 11:17 AM

Thanks for pointing that out. I didn't realize that.



#6 cryptodan

cryptodan

    Bleepin Madman


  •  Avatar image
  • Members
  • 33,826 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:05:02 AM

Posted 21 February 2024 - 11:26 AM

No problem the rm command is a more permanent way to delete.

US Navy Veteran from 2002 to 2006

Masters in Computer and Digital Forensics Expert - Stevenson University Alumni 2015

Arch Desktop - https://termbin.com/epij

Arch Laptop - https://www.termbin.com/dnwk

Ubuntu Server - https://termbin.com/zvra





1 user(s) are reading this topic

0 members, 1 guests, 0 anonymous users