Wednesday, March 23, 2011

Hardisk/Partition Data Recovery (testdisk)

article ini from ubuntu-indonesia.com:
Bagi kalaian yang tidak sengaja hardisknya terformat. jangan terlalu khawatir. ada beberapa cara untuk mengembalikan data-data di hardisk yang terformat.Salahsatunya adalah dengan menggunakan testdisk.
testdisk.deb bisa anda dapatkan disini (versi 6.11)


Setelah testdisk terinstall, buka program tersebut melalui terminal dan ketik:

$ sudo testdisk

kemudian masukan password root anda ..





===========================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org


TestDisk is a free data recovery software designed to help recover lost
partitions and/or make non-booting disks bootable again when these symptoms
are caused by faulty software, certain types of viruses or human error.
It can also be used to repair some filesystem errors.

Information gathered during TestDisk use can be recorded for later
review. If you choose to create the text file, testdisk.log , it
will contain TestDisk options, technical information and various
outputs; including any folder/file names TestDisk was used to find and
list onscreen.

Use arrow keys to select, then press Enter key:
[ Create ] Create a new log file
[ Append ] Append information to log file
[ No Log ] Don't record anything

=============================================================

pilih create

=============================================================

TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org

TestDisk is free software, and
comes with ABSOLUTELY NO WARRANTY.

Select a media (use Arrow keys, then press Enter):
Disk /dev/sda - 80 GB / 74 GiB - ATA MAXTOR STM380215


[Proceed ] [ Quit ]

Note: Disk capacity must be correctly detected for a successful recovery.
If a disk listed above has incorrect size, check HD jumper settings, BIOS
detection, and install the latest OS patches and disk drivers.
=============================================================

pilih media mana yg ingin di recover, HD, FD atau partisi HD kemudian pilih Proceed

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org


Disk /dev/sda - 80 GB / 74 GiB - ATA MAXTOR STM380215

Please select the partition table type, press Enter when done.
[Intel ] Intel/PC partition
[EFI GPT] EFI GPT partition map (Mac i386, some x86_64...)
[Mac ] Apple partition map
[None ] Non partitioned media
[Sun ] Sun Solaris partition
[XBox ] XBox partition
[Return ] Return to disk selection





Note: Do NOT select 'None' for media with only a single partition. It's very
rare for a drive to be 'Non-partitioned'.
=============================================================

kemudian pilih jenis partisi yg digunakan, umumnya partisi intel/pc partitions atau pilih saja None

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org


Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63

[ Analyse ] Analyse current partition structure and search for lost partitions
[ Advanced ] Filesystem Utils
[ Geometry ] Change disk geometry
[ Options ] Modify options
[ Quit ] Return to disk selection

novalnd@novalnd-desktop:~$ ^C
novalnd@novalnd-desktop:~$





Note: Correct disk geometry is required for a successful recovery. 'Analyse'
process may give some warnings if it thinks the logical geometry is mismatched.
=============================================================

trus pilih analyse

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org

Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
Current partition structure:
Partition Start End Size in sectors

P Unknown 0 0 1 9729 80 63 156301488


[Quick Search]
Try to locate partition
=============================================================

kemudian pilih opsi [Quick Search]

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org

Disk /dev/sda - 80 GB / 74 GiB - CHS 9729 255 63
Partition Start End Size in sectors
P ext4 0 1 1 9326 254 63 149838192
P Linux SWAP 2 9327 1 1 9728 254 44 6458048


Structure: Ok.


Keys T: change type, P: list files,
Enter: to continue
EXT4 Large file Sparse superblock Recover, 76 GB / 71 GiB
=============================================================

hasilnya terlihat ada dua partisi yg bisa di recover, partisi dengan extensi ext4 dan swap. Gunakan pointer untuk memilih partisi mana yg ingin di recover kemudian tekan "P" untuk melihat list File mana yg akan kita recover.

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org
P ext4 0 1 1 9326 254 63 149838192
Directory /

drwxr-xr-x 0 0 4096 20-Dec-2009 23:52 .
drwxr-xr-x 0 0 4096 20-Dec-2009 23:52 ..
drwx------ 0 0 16384 16-Dec-2009 08:41 lost+found
drwxr-xr-x 0 0 4096 16-Dec-2009 12:34 var
drwxr-xr-x 0 0 12288 21-Dec-2009 00:22 etc
drwxr-xr-x 0 0 4096 19-Dec-2009 08:32 media
lrwxrwxrwx 0 0 11 16-Dec-2009 08:41 cdrom
drwxr-xr-x 0 0 4096 16-Dec-2009 10:59 bin
drwxr-xr-x 0 0 4096 17-Dec-2009 15:23 boot
drwxr-xr-x 0 0 4096 16-Dec-2009 08:54 dev
drwxr-xr-x 0 0 4096 16-Dec-2009 08:53 home
drwxr-xr-x 0 0 12288 17-Dec-2009 15:22 lib
lrwxrwxrwx 0 0 4 16-Dec-2009 08:42 lib64
drwxr-xr-x 0 0 4096 20-Oct-2009 09:18 mnt
drwxr-xr-x 0 0 4096 28-Oct-2009 03:05 opt
Next
Use Right arrow to change directory, c to copy,
h to hide deleted files, q to quit
=============================================================

akan telihat list dan direktori file dari partisi yg terhapus/terformat, sorot file/direktori kemudian tekan "c" untuk mengcopy.
apabila anda ingin mengekplorasi folder yg ada, arahkan kursor pada direktori yg dituju kemudian tekan "enter"

pada contoh ini ana ingin merecover file di folder /home/novalnd/video/redtube.flv

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org
P ext4 0 1 1 9326 254 63 149838192
Directory /home/novalnd/Videos

drwxr-xr-x 1000 1000 4096 19-Dec-2009 03:25 .
drwxr-xr-x 1000 1000 4096 21-Dec-2009 02:37 ..
-rw-r--r-- 1000 1000 6967032 18-Dec-2009 08:09 redtube video.flv
-rw-r--r-- 1000 1000 9978386 18-Dec-2009 08:23 pumping.flv
-rw-r--r-- 1000 1000 9196841 18-Dec-2009 08:35 38.127.136.114 video.flv
-rw-r--r-- 1000 1000 6606333 18-Dec-2009 08:40 riding1.flv
-rw-r--r-- 1000 1000 11554540 18-Dec-2009 08:47 pumping2.flv
-rw-r--r-- 1000 1000 6573412 18-Dec-2009 08:52 hot_riding.flv
-rw-r--r-- 1000 1000 15975297 18-Dec-2009 08:58 twin-.flv
-rw-r--r-- 1000 1000 13200625 19-Dec-2009 02:00 bigcock.flv
-rw-r--r-- 1000 1000 15381200 19-Dec-2009 02:20 blowjob.flv
-rw-r--r-- 1000 1000 9550455 18-Dec-2009 23:31 paranormal_activity.flv
-rw-r--r-- 1000 1000 9960726 19-Dec-2009 02:26 lesbian.flv
-rw-r--r-- 1000 1000 15133618 19-Dec-2009 02:35 cum_shot.flv
-rw-r--r-- 1000 1000 6977244 19-Dec-2009 02:38 suster.flv
Next
Use Left arrow to go back, Right arrow to change directory, c to copy,
h to hide deleted files, q to quit
=============================================================

kemudian tekan "c" maka akan muncul pilihan lokasi direktori dimana file tersebut akan di restore

TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org

Are you sure you want to copy /home/novalnd/Videos/redtube video.flv to the
directory /home/novalnd ? [Y/N]

To select another directory, use the arrow keys.
drwxr-xr-x 1000 1000 4096 21-Dec-2009 02:37 .
drwxr-xr-x 0 0 4096 16-Dec-2009 08:53 ..
drwxr-xr-x 1000 1000 4096 21-Dec-2009 02:37 Desktop
drwxr-xr-x 1000 1000 4096 17-Dec-2009 10:13 Documents
drwxr-xr-x 1000 1000 4096 18-Dec-2009 22:43 Downloads
drwxr-xr-x 1000 1000 4096 18-Dec-2009 22:43 Music
drwxr-xr-x 1000 1000 4096 21-Dec-2009 00:51 Pictures
drwxrwxrwx 1000 1000 4096 19-Dec-2009 01:33 Public
drwxr-xr-x 1000 1000 4096 16-Dec-2009 09:23 Templates
drwxr-xr-x 1000 1000 4096 19-Dec-2009 03:25 Videos
-rw-r--r-- 1000 1000 167 16-Dec-2009 08:53 examples.desktop
-rw-r--r-- 0 0 4050308 17-Nov-2009 05:37 install_flash_player_10_linux
-rwxr-xr-x 1000 1000 10290936 28-Oct-2009 11:26 libflashplayer.so
-rw-r--r-- 1000 1000 4334649344 18-Dec-2009 18:57 pa_av.iso
-rw-r--r-- 1000 1000 11224 21-Dec-2009 02:55 testdisk.log
=============================================================

pada contoh di atas ana akan mengembalikan pada folder /home/novalnd/desktop. kemudian ente akan di tanya apakah yakin, tekan "y" kalau ya

=============================================================
TestDisk 6.11, Data Recovery Utility, April 2009
Christophe GRENIER
http://www.cgsecurity.org
P ext4 0 1 1 9326 254 63 149838192
Directory /home/novalnd/Videos
Copy done!
drwxr-xr-x 1000 1000 4096 19-Dec-2009 03:25 .
drwxr-xr-x 1000 1000 4096 21-Dec-2009 02:37 ..
-rw-r--r-- 1000 1000 6967032 18-Dec-2009 08:09 redtube video.flv
-rw-r--r-- 1000 1000 9978386 18-Dec-2009 08:23 pumping.flv
-rw-r--r-- 1000 1000 9196841 18-Dec-2009 08:35 38.127.136.114 video.flv
-rw-r--r-- 1000 1000 6606333 18-Dec-2009 08:40 riding1.flv
-rw-r--r-- 1000 1000 11554540 18-Dec-2009 08:47 pumping2.flv
-rw-r--r-- 1000 1000 6573412 18-Dec-2009 08:52 hot_riding.flv
-rw-r--r-- 1000 1000 15975297 18-Dec-2009 08:58 twin-.flv
-rw-r--r-- 1000 1000 13200625 19-Dec-2009 02:00 bigcock.flv
-rw-r--r-- 1000 1000 15381200 19-Dec-2009 02:20 blowjob.flv
-rw-r--r-- 1000 1000 9550455 18-Dec-2009 23:31 paranormal_activity.flv
-rw-r--r-- 1000 1000 9960726 19-Dec-2009 02:26 lesbian.flv
-rw-r--r-- 1000 1000 15133618 19-Dec-2009 02:35 cum_shot.flv
-rw-r--r-- 1000 1000 6977244 19-Dec-2009 02:38 suster.flv
Next
Use Left arrow to go back, Right arrow to change directory, c to copy,
h to hide deleted files, q to quit
=============================================================

Silahkan buka file manager anda kemudian lihat apakah file recovery anda sudah berhasil dikembalikan

Ente juga dapat mengembalikan seluruh kontent partisi HD yg terformat dengan pilihan opsi write

Selamat mencoba dan semoga bermanfaat

sumber : http://www.forumbebas.com/topik-Hardisk-Partitions-data-Recovery

1 comment:

  1. selamat siang sebelumya,,
    mas kalau saya ingin mengembalikan data pada Drive D dan E yang Tahapnya sama gak? seperti yang di atas?

    menentukan drive D dan E saya masih bingung mas, solnya di linux tidak ada Drive D dan E
    Mohon bantunya mas,,,

    terima kasih
    by:setyaamanbudi@gmail.com

    ReplyDelete