hello i need help with recovering data [solved]

I always try and disuade users saying it, theres also a ubottu factoid for the official channel to tell users that telling other users to websearch stuff is fruitless.

foremost will help you dude but theres no garuntee due to the nture of data. When you delete data its never really gone, you simply delete the reference of where the data is held on the drive, the 1s and 0s are still there as bits only have 2 states, there is no 'empty' state or it would give a LOT more data capacity. If you have overwritten the area which stored your file with new data then it is gone (but can be retrieved at high cost using oscilloscopes and stuff). foremost will scan the entire platter to try and form contiguous files. I am not sure if it also scans the allocated areas or not (you'd have to read the man page etc) but you will need a secondary place for the app to dump the files it finds, you can also tell the app to only recover certain file types which can reduce the outputted data.

Once you have the files you wil need to analyse each file as (I believe) the file name is destroyed but you can always rename what is found. If your system has enough RAM to store the liveCD as well as the found data you can simply use the ram drive in the liveCD environment, you could even use a network share to output to.

I suggest you get a backup regime though, I have seen too many users deleting or losing data which they then need. Remember, Linux comes with no SLA and no warranty so backing up is essential. Its also good for if the drive motor dies and you cannot even ue a tool to get the data off and you would then have to send the drive away some place for data retrieval which costs significantly more than a firewire or USB drive.