Read Ntfs Drive on Ubuntu Live Disc

Accidentally deleting a file is a terrible feeling. Not being able to kicking into Windows and undelete that file makes that fifty-fifty worse. Fortunately, yous can recover deleted files on NTFS hard drives from an Ubuntu Live CD.

To show this process, nosotros created four files on the desktop of a Windows XP car, and then deleted them. Nosotros so booted upward the same car with the bootable Ubuntu nine.ten USB Flash Drive that we created last calendar week.

One time Ubuntu ix.10 boots upwardly, open a terminal by clicking Applications in the top left of the screen, and and then selecting Accessories > Terminal.

To undelete our files, nosotros start need to identify the difficult drive that we want to undelete from. In the terminal window, type in:

sudo fdisk –l

and press enter.

What yous're looking for is a line that ends with HPSF/NTFS (nether the heading System). In our case, the device is "/dev/sda1". This may be slightly different for you lot, simply information technology will still begin with /dev/. Notation this device name.

If y'all have more than than one hard drive partition formatted equally NTFS, then you lot may exist able to identify the correct partitioning by the size. If you look at the 2d line of text in the screenshot higher up, information technology reads "Disk /dev/sda: 136.4 GB, …" This ways that the difficult drive that Ubuntu has named /dev/sda is 136.4 GB large. If your hard drives are of different size, and then this information can help y'all track down the correct device proper name to employ. Alternatively, you tin can only try them all, though this tin can be fourth dimension consuming for big hard drives.

At present that you know the name Ubuntu has assigned to your hard bulldoze, we'll scan it to encounter what files we tin uncover.

In the last window, blazon:

sudo ntfsundelete <HD proper name>

and hitting enter. In our instance, the command is:

sudo ntfsundelete /dev/sda1

The names of files that tin can recovered show upwardly in the far right column. The percentage in the third column tells us how much of that file tin be recovered. 3 of the four files that nosotros originally deleted are showing up in this list, even though nosotros shut down the figurer right subsequently deleting the four files – and so fifty-fifty in ideal cases, your files may not be recoverable.

Notwithstanding, nosotros have three files that nosotros can recover – ii JPGs and an MPG.

Note: ntfsundelete is immediately available in the Ubuntu 9.x Live CD. If you are in a unlike version of Ubuntu, or for another reason get an error when trying to use ntfsundelete, you tin can install it past entering "sudo apt-become install ntfsprogs" in a terminal window.

To quickly recover the two JPGs, we volition employ the * wildcard to recover all of the files that end with .jpg.

In the terminal window, enter

sudo ntfsundelete <Hard disk drive name> –u –m *.jpg

which is, in our case,

sudo ntfsundelete /dev/sda1 –u –m *.jpg

The two files are recovered from the NTFS hard drive and saved in the current working directory of the concluding. By default, this is the home directory of the current user, though we are working in the Desktop binder.

Note that the ntfsundelete program does not make whatsoever changes to the original NTFS hard drive. If yous want to have those files and put them back in the NTFS hard drive, you volition accept to move them there after they are undeleted with ntfsundelete. Of course, you lot can also put them on your wink drive or open Firefox and electronic mail them to yourself – the sky's the limit!

We have one more than file to undelete – our MPG.

Note the first cavalcade on the far left. It contains a number, its Inode. Think of this every bit the file's unique identifier. Note this number.

To undelete a file by its Inode, enter the following in the terminal:

sudo ntfsundelete <Hard disk name> –u –i <Inode>

In our instance, this is:

sudo ntfsundelete /dev/sda1 –u –i 14159

This recovers the file, forth with an identifier that we don't really care about. All 3 of our recoverable files are at present recovered.

However, Ubuntu lets usa know visually that nosotros can't use these files yet. That's because the ntfsundelete program saves the files as the "root" user, not the "ubuntu" user.

We can verify this past typing the post-obit in our terminal window:

ls –l

We want these three files to exist owned by ubuntu, not root. To do this, enter the post-obit in the terminal window:

sudo chown ubuntu <Files>

If the current folder has other files in it, you may not want to alter their possessor to ubuntu. Yet, in our example, nosotros just have these iii files in this binder, and then nosotros volition apply the * wildcard to change the possessor of all three files.

sudo chown ubuntu *

The files now look normal, and we tin can do whatsoever we want with them.

Hopefully you lot won't need to use this tip, but if you do, ntfsundelete is a nice command-line utility. It doesn't accept a fancy GUI similar many of the similar Windows programs, but it is a powerful tool that tin recover your files apace.

See ntfsundelete'southward manual page for more than detailed usage information

hughesjustong.blogspot.com

Source: https://www.howtogeek.com/howto/13706/recover-deleted-files-on-an-ntfs-hard-drive-from-a-ubuntu-live-cd/

Share this post